Edit tour

Windows Analysis Report
http://v9.www-ytmp4.com

Overview

General Information

Sample URL:	http://v9.www-ytmp4.com
Analysis ID:	1372702
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Creates files inside the system directory

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://v9.www-ytmp4.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2000,i,3970602246001736003,3530793097058034200,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://v9.www-ytmp4.com

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://v9.www-ytmp4.com/de/	Avira URL Cloud: Label: malware
Source: https://v9.www-ytmp4.com/js/custome.js?ver=985289062	Avira URL Cloud: Label: malware
Source: https://cameesse.net/27/7ba4c9bd2293ad818049e8eac1f6be0a	Avira URL Cloud: Label: malware
Source: https://track.routes.name/favicon.ico	Avira URL Cloud: Label: malware
Source: https://opmetapodor.com/pfe/current/sw.perm.check.min.js?r=sw	Avira URL Cloud: Label: malware
Source: https://dl--master--cdn.ytapis.com/vendor/livewire/livewire.js?id=90730a3b0e7144480175	Avira URL Cloud: Label: malware
Source: https://opmetapodor.com/zone?&pub=0&zone_id=4662709&is_mobile=false&domain=opmetapodor.com&var=5596087&ymid=769067736944087664&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest	Avira URL Cloud: Label: malware
Source: https://dl--master--cdn.ytapis.com/js/app.js?id=7e9a5e6e05feb93e0bdc472bbf7dc998	Avira URL Cloud: Label: malware
Source: https://cameesse.net/15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A3%2C%22totalLength%22%3A244%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A1%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A36.389%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D	Avira URL Cloud: Label: malware
Source: https://v9.www-ytmp4.com/js/jquery-3.4.1.min.js	Avira URL Cloud: Label: malware
Source: https://v9.www-ytmp4.com/images/globe.png	Avira URL Cloud: Label: malware
Source: https://opmetapodor.com/key?pub=0&id=opmetapodor.com	Avira URL Cloud: Label: malware
Source: https://opmetapodor.com/pfe/current/micro.tag.min.js?z=4662709&ymid=769067736944087664&var=5596087&sw=/sw-check-permissions/4662709&uhd=1	Avira URL Cloud: Label: malware
Source: https://v9.www-ytmp4.com/my/	Avira URL Cloud: Label: malware
Source: https://cameesse.net/15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A1%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A3.379%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D	Avira URL Cloud: Label: malware
Source: https://v9.www-ytmp4.com/sw.js	Avira URL Cloud: Label: malware
Source: https://dl--master--cdn.ytapis.com/css/app.css?id=16b4de5946e570f8f024b4c7108e70c9	Avira URL Cloud: Label: malware
Source: https://v9.www-ytmp4.com/vi/	Avira URL Cloud: Label: malware
Source: https://opmetapodor.com/favicon.ico	Avira URL Cloud: Label: malware
Source: https://v9.www-ytmp4.com/ja/	Avira URL Cloud: Label: malware
Source: https://v9.www-ytmp4.com/images/circles-loader.png	Avira URL Cloud: Label: malware
Source: https://dl--master--cdn.ytapis.com/livewire/message/api.button	Avira URL Cloud: Label: malware
Source: https://cameesse.net/15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A2%2C%22totalLength%22%3A69%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A5.403%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D	Avira URL Cloud: Label: malware

Source: https://ak.deephicy.net/afu.php?zoneid=6118780&var=6118780&rid=33-IJ2mCiw9DGbmF2LWarg%3D%3D&rhd=false&os=windows&os_version=10.0.0	HTTP Parser: No favicon
Source: https://t-y-p.site/goto/?utm_source=wrtzr&utm_medium=video_downloader&utm_campaign=test2&clickID=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subID1=347207	HTTP Parser: No favicon
Source: https://t-y-p.site/ty/video_downloader	HTTP Parser: No favicon
Source: https://v9.www-ytmp4.com/convert/	HTTP Parser: No favicon
Source: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}	HTTP Parser: No favicon
Source: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}	HTTP Parser: No favicon
Source: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0	HTTP Parser: No favicon
Source: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0	HTTP Parser: No favicon
Source: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26b...	HTTP Parser: No favicon
Source: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26b...	HTTP Parser: No favicon
Source: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26b...	HTTP Parser: No favicon
Source: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26b...	HTTP Parser: No favicon
Source: https://understandingerrors.com/landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages.	HTTP Parser: No favicon
Source: https://understandingerrors.com/landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages.	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49767 version: TLS 1.0

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49924 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49767 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.58.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.58.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.58.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.58.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.58.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.58.93
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/custome.css HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/globe.png HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.4.1.min.js HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/custome.js?ver=985289062 HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/globe.png HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/YTMP3.svg HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.0.1704923498.0.0.0; _ga=GA1.1.20077430.1704923498
Source: global traffic	HTTP traffic detected: GET /images/YTMP3.svg HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.0.1704923498.0.0.0; _ga=GA1.1.20077430.1704923498
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=h&_=1704923497000 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497001&q=ht&_=1704923497002 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497003&q=htt&_=1704923497004 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=http&_=1704923497006 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https&_=1704923497008 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497003&q=https%3A&_=1704923497009 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497001&q=https%3A&_=1704923497010 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=https%3A%2F&_=1704923497011 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F&_=1704923497012 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2F&_=1704923497013 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2F&_=1704923497015 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=https%3A%2F%2Fy&_=1704923497016 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2Fyo&_=1704923497017 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2Fyou&_=1704923497018 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F%2Fyout&_=1704923497019 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2Fyoutu&_=1704923497020 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2Fyoutub&_=1704923497021 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F%2Fyoutube&_=1704923497022 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2Fyoutube.&_=1704923497023 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2Fyoutube.c&_=1704923497024 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=79NlTh1+hhOO4dP&MD=9n5xSzmn HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F%2Fyoutube.com&_=1704923497025 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=https%3A%2F%2Fyoutube.com&_=1704923497026 HTTP/1.1Host: suggestqueries.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /images/circles-loader.png HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/search/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga=GA1.1.20077430.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923512.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/custome.js HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/search/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga=GA1.1.20077430.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923512.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/circles-loader.png HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923512.0.0.0; _ga=GA1.1.20077430.1704923498
Source: global traffic	HTTP traffic detected: GET /4/5596087 HTTP/1.1Host: vaikijie.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/custome.js HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/search/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923512.0.0.0; _ga=GA1.1.20077430.1704923498
Source: global traffic	HTTP traffic detected: GET /@api/search/YouTube/http://youtube.com/shorts/whu7qn8ungc?feature=share HTTP/1.1Host: app.www-y2mate.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img.gif?f=merge&userId=efe83b1130104efea0d475e2cb75464f&z=6118780&p_rid=3c4d337a-df6e-44ea-a68b-8262067700eb&p_src=sf HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ak.deephicy.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img.gif?f=merge&userId=efe83b1130104efea0d475e2cb75464f&z=6118780&p_rid=3c4d337a-df6e-44ea-a68b-8262067700eb&p_src=sf HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=9d090693-cfc0-4150-a229-3957785207d8 HTTP/1.1Host: datatechone.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /go/79441144-fdef-4871-8aba-b2793f4c1a03?cost=0.000115&visitor_id=769067572518986295&zoneid=6118780&campaignid=7743636&bannerid=19837134&language=en&os=windows&osversion=win10&browser=chrome&browserversion=117&connection.type=broadband&region=dc HTTP/1.1Host: v2e81.bemobtrcks.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@api/search/YouTube/http://youtube.com/shorts/whu7qn8ungc?feature=share HTTP/1.1Host: app.www-y2mate.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/0nBZLHxmUd0/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/pTLtzDe0_9E/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/C5kIQ9zpjRI/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5hrxy6b9f367ae6479fe12d4b544354b57c05f9629e66?s1=e5315b22&s3=G5kCG9zjtQT6ZZXpnCAPtY&s2=61ff2ce2-4168-4ac1-8076-a3ebe1255ce0&s3=G5kCG9zjtQT6ZZXpnCAPtY HTTP/1.1Host: statuelikeazimuthsghostless.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/vwopEAGNrWI/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/DLrpcxxGahI/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/uZFbRMRtJj0/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/0nBZLHxmUd0/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/pTLtzDe0_9E/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/C5kIQ9zpjRI/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/hEm9hUw5I7E/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/-1iNwmT2RVg/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/aoRJmnTyrtM/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/DLrpcxxGahI/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/uZFbRMRtJj0/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/vwopEAGNrWI/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /goto/?utm_source=wrtzr&utm_medium=video_downloader&utm_campaign=test2&clickID=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subID1=347207 HTTP/1.1Host: t-y-p.siteConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/DEzbbbVsNi4/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/TCUuPHQEM_w/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/-1iNwmT2RVg/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/4ev_Arx-tZU/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/hEm9hUw5I7E/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/aoRJmnTyrtM/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/rUrNqJhIp_g/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/XIm6YA4O6Xw/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/DEzbbbVsNi4/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/Z-LvPIt1qm4/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/TCUuPHQEM_w/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/4ev_Arx-tZU/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/Ts9OpnZDo2Y/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/vlCCdHvzQiM/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/AJTcpNBXAL8/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/-CweIttZ6Sc/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/DNwvbf0kZBE/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/rUrNqJhIp_g/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/XIm6YA4O6Xw/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/Z-LvPIt1qm4/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/Ts9OpnZDo2Y/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/AJTcpNBXAL8/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/DNwvbf0kZBE/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/vlCCdHvzQiM/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/v?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207 HTTP/1.1Host: trck.t-y-p.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t-y-p.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/-CweIttZ6Sc/mqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/v?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207 HTTP/1.1Host: trck.t-y-p.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kJmHNz9SMV9mA7haNYe-gObnCz_344f7lrABB4xrSRDHBx_N01lEC1vMGl7J5qkdBBYqQ1pTc7pbROnbzbp6vZwF=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5iqSydGWCwZl180kxxi8cYBGJrxCQtwj4qCWGTRfQ_3LX_W3qCiA1pS47bT-sMA4aC7QiBjZwHvq21u9vgo_8znj7Qo=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjWZquHmjVP-Z8z4VuSw8GFcDixrYN9Cf8lSEZqtHWXKig=s48-w48-h48 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjVALLA0UFG505w94odPuKiSx0lMN9-g3gh2_ykUwU6oXQ=s48-w48-h48 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjVSDHkImE4olo4yAK6fOhp4cmKcFAo0e8m5hdL8BW1y_w=s48-w48-h48 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /03vIBKzhpPXUL7H1n02AqMiIUKUoitg9NOm4elO82eazDr4DZWjcYZetCI3wyIk8yamt69XHopC_6zZUrgKcS8mA-ws=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sJloPKX06Y6OBg_AEBt5kXaXEp36d6M27Pj1pcUmxJTTrXeQxLOAmupGl0sqmoModna2xEsXFXJU0o3_t37J64xhww=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-AR2DrDB0h9ElGhjXxb_MW7148DtRaiypdfNq7Tho_kRFS2WwproRfAnsZwRuJXcHDqTQcnYpF1uL4cCW16VMONz9Q=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xCyFHoc8SX7ZhIR6-2qPnWc1PMInoh_k9hIdClmdr3VOLiXQsE1cE_yQEkUIPPUJzpzyfGCd-AYgwIsQ4NQnJZP1=s1280-w1280-h800 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.GsbA68hXs80.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo899t-H8Lxb3OqzMDuPn6TV_i36ag/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.GsbA68hXs80.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo899t-H8Lxb3OqzMDuPn6TV_i36ag/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /5iqSydGWCwZl180kxxi8cYBGJrxCQtwj4qCWGTRfQ_3LX_W3qCiA1pS47bT-sMA4aC7QiBjZwHvq21u9vgo_8znj7Qo HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://scone-pa.clients6.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.GsbA68hXs80.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/rs=AHpOoo899t-H8Lxb3OqzMDuPn6TV_i36ag/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://scone-pa.clients6.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AeKPYwz3Uq7kdc_f1tM_Y4vlxAWOgyfKCFU0QHKOEEHcz-R65zVooGKb9Oed2m5yw2xQKclqVBWGEeOZxjRI2-xHwCNjTk4VvZmvaBsR0ijNqjNqFGrkXADGUprl8qHqsf1ASzTVBsA98LSFEztFows/AFHDHDLLPDMAJOOPKOGFDMDFDGMPJIPP_1_0_0_11.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: emptyReferer: https://chromewebstore.google.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ty/video_downloader HTTP/1.1Host: t-y-p.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP; subid_1=347207
Source: global traffic	HTTP traffic detected: GET /static/style.css HTTP/1.1Host: t-y-p.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://t-y-p.site/ty/video_downloaderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP; subid_1=347207
Source: global traffic	HTTP traffic detected: GET /static/scripts.js HTTP/1.1Host: t-y-p.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t-y-p.site/ty/video_downloaderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP; subid_1=347207
Source: global traffic	HTTP traffic detected: GET /pixel/i?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207 HTTP/1.1Host: trck.t-y-p.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t-y-p.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /matomo.php?idsite=205&rec=1&url=https%3A%2F%2Ft-y-p.site%2Fty%2Fvideo_downloader&cvar={%22click_id%22:%22AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP%22,%22product%22:%22video_downloader%22,%22subID1%22:%22347207%22} HTTP/1.1Host: metrika.traff.spaceConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t-y-p.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/i?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207 HTTP/1.1Host: trck.t-y-p.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: t-y-p.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t-y-p.site/ty/video_downloaderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP; subid_1=347207
Source: global traffic	HTTP traffic detected: GET /matomo.php?idsite=205&rec=1&url=https%3A%2F%2Ft-y-p.site%2Fty%2Fvideo_downloader&cvar={%22click_id%22:%22AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP%22,%22product%22:%22video_downloader%22,%22subID1%22:%22347207%22} HTTP/1.1Host: metrika.traff.spaceConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video_d/1.0.0.11/dnl_settings.json HTTP/1.1Host: videodown.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=79NlTh1+hhOO4dP&MD=9n5xSzmn HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /4/5596087 HTTP/1.1Host: vaikijie.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=a12b2079a0554715ad9689b20b20a045; oaidts=1704923514
Source: global traffic	HTTP traffic detected: GET /css/custome.css?ver=233 HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://v9.www-ytmp4.com/convert/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga=GA1.1.20077430.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923555.0.0.0
Source: global traffic	HTTP traffic detected: GET /?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} HTTP/1.1Host: opmetapodor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spinning-wheel.png HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://v9.www-ytmp4.com/convert/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga=GA1.1.20077430.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923555.0.0.0
Source: global traffic	HTTP traffic detected: GET /ajax/libs/iframe-resizer/4.3.6/iframeResizer.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pfe/current/micro.tag.min.js?z=4662709&ymid=769067736944087664&var=5596087&sw=/sw-check-permissions/4662709&uhd=1 HTTP/1.1Host: opmetapodor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
Source: global traffic	HTTP traffic detected: GET /19/4662728/?abt_opts=1&var=5596087&var3=769067736944087664&ymid=&rhd=1&os=windows&os_version=10.0.0 HTTP/1.1Host: opmetapodor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
Source: global traffic	HTTP traffic detected: GET /images/spinning-wheel.png HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga=GA1.1.20077430.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923555.0.0.0
Source: global traffic	HTTP traffic detected: GET /zone?&pub=0&zone_id=4662709&is_mobile=false&domain=opmetapodor.com&var=5596087&ymid=769067736944087664&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=settings HTTP/1.1Host: opmetapodor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: opmetapodor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
Source: global traffic	HTTP traffic detected: GET /rhd?rb=Rdb6wZEO29zI5JtWbTgBMBMFK3Hq-MEScKP8etoUXWt3mdWS3wWsTsP3kSqAWpbNFN1dCn6CYruMdsHiPsHpNrvwnbvh96tHmYdBiU46RODeWhjXYxRc2nUDsCdCO1IYpgc-WdiFaZIQvADzoLdt660KFd3CQnSV0JefYCmIdQr3HkdyWUMcr7ixUZ0NA9T5k9PWd5QcPzHYyXX2KLUOww4E_aWbWCgrAxXAEpEN3forRgNuyof1bfhSMQleRGuBYG9QLY077R8fAu5eYgIHtOdcquR56sK3EVT5-79aIbw45uwbCLeC9OPBGoLFc7dcFsFGfPSX-l0xCXzweCDoLtxwODIyvjKVg6ztukTV4SYUIofL7Xx9BMyq2xl1YV7lnzjZrZ3jgq9uvQfg1ULmn2inVBeIy67aLeUagmvLmFdPH-JezSdIdJxPCMU_42FgBx9QhjpzIuYLBYhZ8Fn3f8HOl-Mmu5qPTg6zZrwo0y5baW7oPL4LK0aNsO2_TIRPp7Wn509MXkVkVw-zDyYc_TaJpReHMOigk7vDrg%3D%3D&request_ab2=0&zoneid=4662728&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1280&wih=907&wiw=1280&wfc=0&pl=https%3A%2F%2Fopmetapodor.com%2F%3Fs%3D769067736944087664%26ssk%3D98629cd0d428ca851e6b1debdd905e13%26svar%3D1704923555%26z%3D5596087%26pz%3D4662709%26tb%3D4662728%26l%3DWGYVPKNMPvY53zb%26btz%3D%7Bbtz%7D%26bto%3D%7Bbto%7D&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&var=5596087&var3=769067736944087664&ymid=&rhd=1&os=windows&os_version=10.0.0&m=link HTTP/1.1Host: opmetapodor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556; prefetchAd_4662728=true
Source: global traffic	HTTP traffic detected: GET /gid.js?userId=d36449c3fc5d2c86d4a195aa43f059a6 HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://opmetapodor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://opmetapodor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: arvigorothan.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0 HTTP/1.1Host: dl--master--cdn.ytapis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /19/4662728/?abt_opts=1&var=5596087&var3=769067736944087664&ymid=&rhd=1&os=windows&os_version=10.0.0 HTTP/1.1Host: opmetapodor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556; prefetchAd_4662728=true
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=&zoneId=4662709&checkDuplicate=true&ymid=769067736944087664&var=5596087 HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://opmetapodor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://opmetapodor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /zone?&pub=0&zone_id=4662709&is_mobile=false&domain=opmetapodor.com&var=5596087&ymid=769067736944087664&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=settings HTTP/1.1Host: opmetapodor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556; prefetchAd_4662728=true
Source: global traffic	HTTP traffic detected: GET /?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}&mprtr=1&os_version=10.0.0 HTTP/1.1Host: opmetapodor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556; prefetchAd_4662728=true
Source: global traffic	HTTP traffic detected: GET /rhd?rb=Rdb6wZEO29zI5JtWbTgBMBMFK3Hq-MEScKP8etoUXWt3mdWS3wWsTsP3kSqAWpbNFN1dCn6CYruMdsHiPsHpNrvwnbvh96tHmYdBiU46RODeWhjXYxRc2nUDsCdCO1IYpgc-WdiFaZIQvADzoLdt660KFd3CQnSV0JefYCmIdQr3HkdyWUMcr7ixUZ0NA9T5k9PWd5QcPzHYyXX2KLUOww4E_aWbWCgrAxXAEpEN3forRgNuyof1bfhSMQleRGuBYG9QLY077R8fAu5eYgIHtOdcquR56sK3EVT5-79aIbw45uwbCLeC9OPBGoLFc7dcFsFGfPSX-l0xCXzweCDoLtxwODIyvjKVg6ztukTV4SYUIofL7Xx9BMyq2xl1YV7lnzjZrZ3jgq9uvQfg1ULmn2inVBeIy67aLeUagmvLmFdPH-JezSdIdJxPCMU_42FgBx9QhjpzIuYLBYhZ8Fn3f8HOl-Mmu5qPTg6zZrwo0y5baW7oPL4LK0aNsO2_TIRPp7Wn509MXkVkVw-zDyYc_TaJpReHMOigk7vDrg%3D%3D&request_ab2=0&zoneid=4662728&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1280&wih=907&wiw=1280&wfc=0&pl=https%3A%2F%2Fopmetapodor.com%2F%3Fs%3D769067736944087664%26ssk%3D98629cd0d428ca851e6b1debdd905e13%26svar%3D1704923555%26z%3D5596087%26pz%3D4662709%26tb%3D4662728%26l%3DWGYVPKNMPvY53zb%26btz%3D%7Bbtz%7D%26bto%3D%7Bbto%7D&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&var=5596087&var3=769067736944087664&ymid=&rhd=1&os=windows&os_version=10.0.0&m=link HTTP/1.1Host: opmetapodor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; oaidts=1704923556; prefetchAd_4662728=true; syncedCookie=true; OAID=d36449c3fc5d2c86d4a195aa43f059a6
Source: global traffic	HTTP traffic detected: GET /5/6026557/?oo=1&aab=1 HTTP/1.1Host: doruffleton.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: doruffleton.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /convert/ HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923556.0.0.0; _ga=GA1.1.20077430.1704923498
Source: global traffic	HTTP traffic detected: GET /sw-check-permissions/4662709?var=5596087&ymid=769067736944087664&uhd=1 HTTP/1.1Host: opmetapodor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
Source: global traffic	HTTP traffic detected: GET /gid.js?userId=d36449c3fc5d2c86d4a195aa43f059a6 HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /css/app.css?id=16b4de5946e570f8f024b4c7108e70c9 HTTP/1.1Host: dl--master--cdn.ytapis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=&zoneId=4662709&checkDuplicate=true&ymid=769067736944087664&var=5596087 HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /vendor/livewire/livewire.js?id=90730a3b0e7144480175 HTTP/1.1Host: dl--master--cdn.ytapis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/5588625/?oo=1&js_build=iclick-v1.653.0&os=windows&os_version=10.0.0 HTTP/1.1Host: piteevoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/iframe-resizer/4.3.2/iframeResizer.contentWindow.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dl--master--cdn.ytapis.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video_d/1.0.0.11/dnl_settings.json HTTP/1.1Host: videodown.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gid.js?userId=9261040a4f7248eba3a37ed35ddc868c HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /5/6026557/?oo=1&aab=1 HTTP/1.1Host: doruffleton.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=9261040a4f7248eba3a37ed35ddc868c; oaidts=1704923557
Source: global traffic	HTTP traffic detected: GET /js/app.js?id=7e9a5e6e05feb93e0bdc472bbf7dc998 HTTP/1.1Host: dl--master--cdn.ytapis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/5588625/?oo=1&js_build=iclick-v1.653.0&os=windows&os_version=10.0.0 HTTP/1.1Host: piteevoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=e3413ec454e843729f4692724efd3be8; oaidts=1704923558
Source: global traffic	HTTP traffic detected: GET /1?z=5588623 HTTP/1.1Host: cameesse.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pfe/current/tag.min.js?z=5588624 HTTP/1.1Host: ibrapush.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /400/5588622 HTTP/1.1Host: gishejuy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?rb=RxSc_BYHKVkqq2EFgyjbXF6hnD2VBfAQGK3m1W-bb1eot6idL92b4ZjYD7rJy4xfY3bJchqKw1qOJzJxhf5onp4WiKiYezkfT0f3YFvjH88DZyJokkZetrrZjgWRwTywC2DqoPkXGka4EVJcv4SMkPa5YrjNdGqH3QWrJRHB2BHgW5-ilaR6U5s0nEXrzO4Otv-znuPo1s4YZvTpKlkgrC9OVJAnXIluuX2N7OJaY-9Un9qX-vDa8mamgka97nu-fWQIjVR0rkymEy0XSUb7L9F-7uBdsrB-Bcqfr9h_E0T8mEKqaB-gMI9NnXR_Ht0H&request_ab2=0&zoneid=6026557&js_build=iclick-v1.653.0&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wih=907&wiw=1280&wfc=3&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-60&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.653.0&bs=459f3be2-a70c-4e5b-9bd2-36a6bf45bba1&userId=efe83b1130104efea0d475e2cb75464f&os=windows&os_version=10.0.0&m=link HTTP/1.1Host: doruffleton.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=9261040a4f7248eba3a37ed35ddc868c; oaidts=1704923557
Source: global traffic	HTTP traffic detected: GET /?rb=XD0ydgTzyCsx6UuGkwmzrcftdoCy8YazmdsnpUtkWadUMVI7Gfa2ICj7iUE7KiXH-3cvQNaROvgabJKO9i1b3-Sgr7-664HhN1n-FKHtkcdHGafQw4dzfGHHXxoJO3SB_tHMNNK0i4EpOXmYNZjulvAk2Qb8AiVKz7Aevsp_KhAo4P8tLi6fwL7wCi1dIqmu8wRe0z2SvUk_bDOx8S6JQQDG0--WxnmfWbVEMQ7mbvt0HxrFIKVjb9oh_QVb3wOV7rTGzRRHLvgqnaXx03XazakJhGJt7A_dy2kUXTAMZj2-tjwMFAaOSpy7ODoAYAlj&request_ab2=0&zoneid=5588625&js_build=iclick-v1.653.0&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wih=907&wiw=1280&wfc=3&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-60&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.653.0&bs=cf0da73a-caa5-4196-91bd-362bb660da52&userId=efe83b1130104efea0d475e2cb75464f&os=windows&os_version=10.0.0&m=link HTTP/1.1Host: piteevoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=e3413ec454e843729f4692724efd3be8; oaidts=1704923558
Source: global traffic	HTTP traffic detected: GET /gid.js?userId=9261040a4f7248eba3a37ed35ddc868c HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /pfe/current/universal.min.js?v=3.1.471 HTTP/1.1Host: ibrapush.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dl--master--cdn.ytapis.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://dl--master--cdn.ytapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=5588624&is_mobile=false&domain=v9.www-ytmp4.com&var=&ymid=&var_3=&tg=0&sw=3.1.471 HTTP/1.1Host: ibrapush.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /27/7ba4c9bd2293ad818049e8eac1f6be0a HTTP/1.1Host: cameesse.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scm=1; OAID=f14a167a07f14324b06d3d8ad631d7ef; oaidts=1704923559
Source: global traffic	HTTP traffic detected: GET /stattag.js HTTP/1.1Host: tzegilo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?rb=RxSc_BYHKVkqq2EFgyjbXF6hnD2VBfAQGK3m1W-bb1eot6idL92b4ZjYD7rJy4xfY3bJchqKw1qOJzJxhf5onp4WiKiYezkfT0f3YFvjH88DZyJokkZetrrZjgWRwTywC2DqoPkXGka4EVJcv4SMkPa5YrjNdGqH3QWrJRHB2BHgW5-ilaR6U5s0nEXrzO4Otv-znuPo1s4YZvTpKlkgrC9OVJAnXIluuX2N7OJaY-9Un9qX-vDa8mamgka97nu-fWQIjVR0rkymEy0XSUb7L9F-7uBdsrB-Bcqfr9h_E0T8mEKqaB-gMI9NnXR_Ht0H&request_ab2=0&zoneid=6026557&js_build=iclick-v1.653.0&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wih=907&wiw=1280&wfc=3&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-60&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.653.0&bs=459f3be2-a70c-4e5b-9bd2-36a6bf45bba1&userId=efe83b1130104efea0d475e2cb75464f&os=windows&os_version=10.0.0&m=link HTTP/1.1Host: doruffleton.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=efe83b1130104efea0d475e2cb75464f; oaidts=1704923559; syncedCookie=true
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=5588624&is_mobile=false&domain=v9.www-ytmp4.com&var=&ymid=&var_3=&tg=0&sw=3.1.471 HTTP/1.1Host: ibrapush.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?rb=XD0ydgTzyCsx6UuGkwmzrcftdoCy8YazmdsnpUtkWadUMVI7Gfa2ICj7iUE7KiXH-3cvQNaROvgabJKO9i1b3-Sgr7-664HhN1n-FKHtkcdHGafQw4dzfGHHXxoJO3SB_tHMNNK0i4EpOXmYNZjulvAk2Qb8AiVKz7Aevsp_KhAo4P8tLi6fwL7wCi1dIqmu8wRe0z2SvUk_bDOx8S6JQQDG0--WxnmfWbVEMQ7mbvt0HxrFIKVjb9oh_QVb3wOV7rTGzRRHLvgqnaXx03XazakJhGJt7A_dy2kUXTAMZj2-tjwMFAaOSpy7ODoAYAlj&request_ab2=0&zoneid=5588625&js_build=iclick-v1.653.0&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wih=907&wiw=1280&wfc=3&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-60&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.653.0&bs=cf0da73a-caa5-4196-91bd-362bb660da52&userId=efe83b1130104efea0d475e2cb75464f&os=windows&os_version=10.0.0&m=link HTTP/1.1Host: piteevoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=efe83b1130104efea0d475e2cb75464f; oaidts=1704923559; syncedCookie=true
Source: global traffic	HTTP traffic detected: GET /pfe/current/universal.min.js?v=3.1.471 HTTP/1.1Host: ibrapush.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/convert/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923556.0.0.0; _ga=GA1.1.20077430.1704923498; prefetchAd_6026557=true; prefetchAd_5588625=true
Source: global traffic	HTTP traffic detected: GET /500/5588622?excludes=&oaid=efe83b1130104efea0d475e2cb75464f&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=60&os=windows&os_version=10.0.0&js_build=8&sw_version=v1.313.0 HTTP/1.1Host: gishejuy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=d702eb01742942d5aa7158f20d32cec1
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1593360693.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923556.0.0.0; _ga=GA1.1.20077430.1704923498; prefetchAd_6026557=true; prefetchAd_5588625=true
Source: global traffic	HTTP traffic detected: GET /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1Host: fleraprt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /livewire/message/api.button HTTP/1.1Host: dl--master--cdn.ytapis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /custom HTTP/1.1Host: ibrapush.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=e2a7bc1998804a45b0975f679663174b&zoneId=5588624&checkDuplicate=true&ymid=&var= HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: ibrapush.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /11?rnd=3665909097&z=5588623&b=5362695&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&os=windows&os_version=10.0.0&ot=1583 HTTP/1.1Host: cameesse.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /custom HTTP/1.1Host: ibrapush.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9?z=5588623&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&oaid=efe83b1130104efea0d475e2cb75464f HTTP/1.1Host: cameesse.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26bag%3DydU9kaAfa6I%3D%26ruid%3Dab37d699-010f-450d-8692-ddfdc6930388%26os%3Dwindows%26os_version%3D10.0.0%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fconvert%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D984%26cw%3D1263%26wiw%3D1280%26wih%3D907%26wfc%3D3%26sah%3D984%26drf%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fsearch%252F%26hil%3D1%26ist%3D0%26os%3Dwindows%26os_version%3D10.0.0%26tbc%3D1 HTTP/1.1Host: interstitial-08.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=e2a7bc1998804a45b0975f679663174b&zoneId=5588624&checkDuplicate=true&ymid=&var= HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /pfe/current/defaultSkin.min.js HTTP/1.1Host: ibrapush.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /11?rnd=3665909097&z=5588623&b=5362695&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&os=windows&os_version=10.0.0&ot=1583 HTTP/1.1Host: cameesse.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /interstital/templates/inapp/Players/_gen-carousel-3d/css/style.css?v=1518177503492 HTTP/1.1Host: littlecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interstitial-08.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /interstital/templates/inapp/Players/_gen-carousel-3d/images/audible.png HTTP/1.1Host: littlecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interstitial-08.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contents/s/2d/3f/7f/35d1f144fa688a67ba834d0931/0100657458245.jpeg HTTP/1.1Host: interstitial-08.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26bag%3DydU9kaAfa6I%3D%26ruid%3Dab37d699-010f-450d-8692-ddfdc6930388%26os%3Dwindows%26os_version%3D10.0.0%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fconvert%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D984%26cw%3D1263%26wiw%3D1280%26wih%3D907%26wfc%3D3%26sah%3D984%26drf%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fsearch%252F%26hil%3D1%26ist%3D0%26os%3Dwindows%26os_version%3D10.0.0%26tbc%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pfe/current/defaultSkin.min.js HTTP/1.1Host: ibrapush.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A1%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A3.379%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1Host: cameesse.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /interstital/templates/inapp/Players/_gen-carousel-3d/images/audible.png HTTP/1.1Host: littlecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contents/s/54/58/11/b0a815692a6ca16dd9a46924ab/0933414948049.jpeg HTTP/1.1Host: interstitial-08.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26bag%3DydU9kaAfa6I%3D%26ruid%3Dab37d699-010f-450d-8692-ddfdc6930388%26os%3Dwindows%26os_version%3D10.0.0%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fconvert%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D984%26cw%3D1263%26wiw%3D1280%26wih%3D907%26wfc%3D3%26sah%3D984%26drf%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fsearch%252F%26hil%3D1%26ist%3D0%26os%3Dwindows%26os_version%3D10.0.0%26tbc%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /interstital/templates/inapp/Players/_gen-carousel-3d/js/script.js?v=1518177503494 HTTP/1.1Host: littlecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interstitial-08.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /custom HTTP/1.1Host: ibrapush.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contents/s/4e/61/84/4a7532ee6d30450abd6bb2a1da/0350025199145.jpeg HTTP/1.1Host: interstitial-08.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26bag%3DydU9kaAfa6I%3D%26ruid%3Dab37d699-010f-450d-8692-ddfdc6930388%26os%3Dwindows%26os_version%3D10.0.0%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fconvert%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D984%26cw%3D1263%26wiw%3D1280%26wih%3D907%26wfc%3D3%26sah%3D984%26drf%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fsearch%252F%26hil%3D1%26ist%3D0%26os%3Dwindows%26os_version%3D10.0.0%26tbc%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /interstital/templates/inapp/Players/_gen-carousel-3d/images/player.png HTTP/1.1Host: littlecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interstitial-08.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contents/s/2d/3f/7f/35d1f144fa688a67ba834d0931/0100657458245.jpeg HTTP/1.1Host: interstitial-08.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contents/s/aa/5b/71/730bd1c1e09e51bf17160def9a/01289039865190.jpeg HTTP/1.1Host: interstitial-08.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26bag%3DydU9kaAfa6I%3D%26ruid%3Dab37d699-010f-450d-8692-ddfdc6930388%26os%3Dwindows%26os_version%3D10.0.0%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fconvert%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D984%26cw%3D1263%26wiw%3D1280%26wih%3D907%26wfc%3D3%26sah%3D984%26drf%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fsearch%252F%26hil%3D1%26ist%3D0%26os%3Dwindows%26os_version%3D10.0.0%26tbc%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contents/s/54/58/11/b0a815692a6ca16dd9a46924ab/0933414948049.jpeg HTTP/1.1Host: interstitial-08.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /interstital/templates/inapp/Players/_gen-carousel-3d/images/player.png HTTP/1.1Host: littlecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contents/s/4e/61/84/4a7532ee6d30450abd6bb2a1da/0350025199145.jpeg HTTP/1.1Host: interstitial-08.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contents/s/aa/5b/71/730bd1c1e09e51bf17160def9a/01289039865190.jpeg HTTP/1.1Host: interstitial-08.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A2%2C%22totalLength%22%3A69%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A5.403%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1Host: cameesse.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A3%2C%22totalLength%22%3A244%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A1%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A10.379%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1Host: cameesse.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /500/5588622?excludes=&oaid=efe83b1130104efea0d475e2cb75464f&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=5&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=60&os=windows&os_version=10.0.0&js_build=8&sw_version=v1.313.0 HTTP/1.1Host: gishejuy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A3%2C%22totalLength%22%3A244%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A1%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A19.385%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1Host: cameesse.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /11?rnd=3665909097&z=5588623&b=5362695&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&os=windows&os_version=10.0.0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1Host: cameesse.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /11?rnd=3665909097&z=5588623&b=5362695&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&os=windows&os_version=10.0.0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1Host: cameesse.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f; oaidvc=1; CNT=1_v1_B9RRAAEAAAAUTQAA
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000005E364CF593 HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /500/5588622?excludes=&oaid=efe83b1130104efea0d475e2cb75464f&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1280&wiw=1280&wih=907&wfc=5&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=60&os=windows&os_version=10.0.0&js_build=8&sw_version=v1.313.0 HTTP/1.1Host: gishejuy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A3%2C%22totalLength%22%3A244%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A1%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A36.389%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D HTTP/1.1Host: cameesse.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f; oaidvc=2; CNT=1_v1_B9RRAAIAAAAUTQAA
Source: global traffic	HTTP traffic detected: GET /pfe/current/sw.perm.check.min.js?r=sw HTTP/1.1Host: opmetapodor.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://opmetapodor.com/sw-check-permissions/4662709?var=5596087&ymid=769067736944087664&uhd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: oaidts=1704923556; prefetchAd_4662728=true; OAID=d36449c3fc5d2c86d4a195aa43f059a6; reverse=GmjEjTX2IJ3kqkkF8yYr35GL72Kg6Q6dCVhloRYlPnM
Source: global traffic	HTTP traffic detected: GET /500/5588622?excludes=&oaid=efe83b1130104efea0d475e2cb75464f&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1280&wiw=1280&wih=907&wfc=5&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=60&os=windows&os_version=10.0.0&js_build=8&sw_version=v1.313.0 HTTP/1.1Host: gishejuy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Origin: https://v9.www-ytmp4.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://v9.www-ytmp4.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=&zoneId=4662709&checkDuplicate=true&ymid=769067736944087664&var=5596087 HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://opmetapodor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://opmetapodor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=efe83b1130104efea0d475e2cb75464f
Source: global traffic	HTTP traffic detected: GET /key?pub=0&id=opmetapodor.com HTTP/1.1Host: opmetapodor.comConnection: keep-aliveX-Oaid: efe83b1130104efea0d475e2cb75464fUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://opmetapodor.com/sw-check-permissions/4662709?var=5596087&ymid=769067736944087664&uhd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: oaidts=1704923556; prefetchAd_4662728=true; OAID=d36449c3fc5d2c86d4a195aa43f059a6; reverse=GmjEjTX2IJ3kqkkF8yYr35GL72Kg6Q6dCVhloRYlPnM
Source: global traffic	HTTP traffic detected: GET /6517545af1a71e0001de416a?sub1=4662728&sub2=7481977&sub3=broadband&sub4=chrome&sub5=windows&sub6=US&sub7=19120475&sub8=det%20africa%20pty%20ltd&sub9=desktop&ref_id=769067744317682211&cost=0.000250&os_version=10.0.0&oaid=efe83b1130104efea0d475e2cb75464f HTTP/1.1Host: track.routes.nameConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: track.routes.nameConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: redcmps=W3siaWQiOiI2NTE3NTQ1YWYxYTcxZTAwMDFkZTQxNmEiLCJ0IjoiMjAyNC0wMS0xMFQyMTo1MzoyOS4wNDk1Nzc5ODVaIn1d; redhash=NjU5ZjExZDk5OWZjMGEwMDAxNTVhMjlkfDB8NjUxNzU0NWFmMWE3MWUwMDAxZGU0MTZhfHxjMDY4MjdjNC00MmUxLTQwNjktYjIzMi0zZjVkZjYyOWFiZmN8MTcwNDkyMzYwOQ==
Source: global traffic	HTTP traffic detected: GET /landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&subid=master&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages. HTTP/1.1Host: understandingerrors.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages. HTTP/1.1Host: understandingerrors.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 2=b; vcid=659f11d999fc0a000155a29d
Source: global traffic	HTTP traffic detected: GET /ajax/libs/UAParser.js/0.7.20/ua-parser.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://understandingerrors.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://understandingerrors.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://understandingerrors.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://understandingerrors.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://understandingerrors.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://understandingerrors.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/browser-logos/72.0.0/chrome/chrome_48x48.png HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://understandingerrors.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: understandingerrors.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://understandingerrors.com/landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vcid=659f11d999fc0a000155a29d
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: understandingerrors.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vcid=659f11d999fc0a000155a29d
Source: global traffic	HTTP traffic detected: GET /ajax/libs/browser-logos/72.0.0/chrome/chrome_48x48.png HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?a=godynamic&utm_source=3&utm_campaign=659f11d999fc0a000155a29d HTTP/1.1Host: understandingerrors.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://understandingerrors.com/landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vcid=659f11d999fc0a000155a29d
Source: global traffic	HTTP traffic detected: GET /webstore/detail/dgcoeljmbmjppdaiiimcepjijfeleain HTTP/1.1Host: chrome.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://understandingerrors.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT
Source: global traffic	HTTP traffic detected: GET /webstore/detail/understanding-errors/dgcoeljmbmjppdaiiimcepjijfeleain HTTP/1.1Host: chrome.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://understandingerrors.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT
Source: global traffic	HTTP traffic detected: GET /detail/dgcoeljmbmjppdaiiimcepjijfeleain HTTP/1.1Host: chromewebstore.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Referer: https://understandingerrors.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.147237783.1704923525; NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT; OTZ=7376992_52_52_123900_48_436380; _ga_KHZNC1Q6K0=GS1.1.1704923525.1.0.1704923534.0.0.0; _ga_C16XQ1V2Q6=GS1.1.1704923526.1.0.1704923534.0.0.0
Source: global traffic	HTTP traffic detected: GET /detail/understanding-errors/dgcoeljmbmjppdaiiimcepjijfeleain HTTP/1.1Host: chromewebstore.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Referer: https://understandingerrors.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.147237783.1704923525; NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT; OTZ=7376992_52_52_123900_48_436380; _ga_KHZNC1Q6K0=GS1.1.1704923525.1.0.1704923534.0.0.0; _ga_C16XQ1V2Q6=GS1.1.1704923526.1.0.1704923534.0.0.0
Source: global traffic	HTTP traffic detected: GET /RO8kwprBOCyMFHLH9_Homa6MCSiATjhOtTsrAW7Xk3fLJyByz1VCgMRGeGdp6gZ226c-Sde_UUqd7NzLFR-B8NXb1PE=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9l-v5C9T1MXzSVCMjgDN7WLsq6NMpOJ3HfroWTF16sePly4Ny8U1W1xu_1khwxf85UA1sARCJRHgr-82jwBbF_A7=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gksbC7LokfjgIneFOwrRYDLHJxl0mxEZnKB2vdMOv7wAVD3wk2Ptz-6CWEglD2sQq28E7JsJL1JeQqydEVuSjlgEjQ=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z2onVi12x9yGQDR6s9E9hvrnKTmC1pE2g0WhujiRmGNc_nzkCgZqg8WrkLD7mzBNq-Ui8OO37ynwyXzTUjQ1Nbk1=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mRHctZMLZqLPl11SMBN0Y3cGFGM4ds67Tm4kzPiBVO6Yvb49Y60hO1JofKy763ldPfBIvkyPljIbfMQLVXo4dzB9UA=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /C0BtY0x_z7Eep4f3UCL5LhEuyJWJUzeCAUWmoQDEepusEw7sIpkJquQSaMaz2Ph15q3eBMf1HZcGhwc-6-Y-tSEEjA=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gz_4B15N8aCWMFgpJ-2kogJNQcHl4wbQXaPqF_8GLbfWMsXB33VM9gqdP-UDspgJ9qBGC4YYM3X-KBjeXyu60oaESQ=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JgDWUoaBVZQLAAOFzr-8oFR1NLzk_v0xNiU4j5PV1SR6wX9oRbbwwLakLq36_OIar4q2w-URdQmBpiZ9NzzxDblAcBo=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W85xdZQw4VH3z-PZlGmkTNuV6i-SyGTNXbW5vGoVCNRN-NfKxcYECo6l2xokV3x61BioYk6MUvdl7eddgZP4nHtG640=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ACY89rl_lE-nZHWSoD9Xtn61ko4l9tjsTYay5fWpB0xoGP1WgX3N2UxlTNTHV7M16MuG5DNM8OS1mNusb6n1VK7RugI=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ph7wxKH-KKNpd8fXIyNKLCw95lVGo8aWr44cFp4iMIN4RIscymkvpEpOMhS31qA2c1Wol-Udx-mx6lTY_BOXLPb8Ag=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /N-ARCU2I6pBUERWEIen0-o1K2SH5MqzsjhGlGDv0O0cFFqOiha-aZ5h5mh3RyX9Xka8U97H2tdaEfgXZ1IEejc5f=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-C7flJ57r0PMepz2AcyBtpYnlUWtd8i7kkZBK91-Fq5t4dOrZ89spfb0OzbYQdJ4TPrOlXmNlRsLLhOydz1S6dOSD8E=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /k9bpnYj8SdiJQJQBe4UjjCLnPAKDhUek4Sh2OVUDTJnS3Iq75oVQPeRjtl5XmuUmQcPZu8stcv8HLVn-0IOKMDHiag=s1280-w1280-h800 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: v9.www-ytmp4.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_424.1.dr	String found in binary or memory: <div class="shareButtons"><a id="share_facebook" class="facebook" href="https://www.facebook.com/sharer/sharer.php?u=https://v9.www-ytmp4.com/" target="_blank"><svg height="24" width="24" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 320 512"><path d="M279.14 288l14.22-92.66h-88.91v-60.13c0-25.35 12.42-50.06 52.24-50.06h40.42V6.26S260.43 0 225.36 0c-73.22 0-121.08 44.38-121.08 124.72v70.62H22.89V288h81.39v224h100.17V288z" fill="white" /></svg><span>Facebook</span></a> equals www.facebook.com (Facebook)
Source: chromecache_447.1.dr, chromecache_336.1.dr, chromecache_295.1.dr, chromecache_317.1.dr	String found in binary or memory: <div class="shareButtons"><a id="share_facebook" class="facebook" href="https://www.facebook.com/sharer/sharer.php?u=https://www-ytmp4.com/" target="_blank"><svg height="24" width="24" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 320 512"><path d="M279.14 288l14.22-92.66h-88.91v-60.13c0-25.35 12.42-50.06 52.24-50.06h40.42V6.26S260.43 0 225.36 0c-73.22 0-121.08 44.38-121.08 124.72v70.62H22.89V288h81.39v224h100.17V288z" fill="white" /></svg><span>Facebook</span></a> equals www.facebook.com (Facebook)
Source: chromecache_424.1.dr	String found in binary or memory: <div class="shareButtons"><a id="share_twitter" class="twitter" href="https://twitter.com/intent/tweet?text=https://v9.www-ytmp4.com/" target="_blank"><svg height="24" width="24" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.112-72.772 6.498.974 12.995 1.624 19.818 1.624 9.421 0 18.843-1.3 27.614-3.573-48.081-9.747-84.143-51.98-84.143-102.985v-1.299c13.969 7.797 30.214 12.67 47.431 13.319-28.264-18.843-46.781-51.005-46.781-87.391 0-19.492 5.197-37.36 14.294-52.954 51.655 63.675 129.3 105.258 216.365 109.807-1.624-7.797-2.599-15.918-2.599-24.04 0-57.828 46.782-104.934 104.934-104.934 30.213 0 57.502 12.67 76.67 33.137 23.715-4.548 46.456-13.32 66.599-25.34-7.798 24.366-24.366 44.833-46.132 57.827 21.117-2.273 41.584-8.122 60.426-16.243-14.292 20.791-32.161 39.308-52.628 54.253z" fill="white" /></svg><span>Twitter</span></a> equals www.twitter.com (Twitter)
Source: chromecache_447.1.dr, chromecache_336.1.dr, chromecache_295.1.dr, chromecache_317.1.dr	String found in binary or memory: <div class="shareButtons"><a id="share_twitter" class="twitter" href="https://twitter.com/intent/tweet?text=https://www-ytmp4.com/" target="_blank"><svg height="24" width="24" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.112-72.772 6.498.974 12.995 1.624 19.818 1.624 9.421 0 18.843-1.3 27.614-3.573-48.081-9.747-84.143-51.98-84.143-102.985v-1.299c13.969 7.797 30.214 12.67 47.431 13.319-28.264-18.843-46.781-51.005-46.781-87.391 0-19.492 5.197-37.36 14.294-52.954 51.655 63.675 129.3 105.258 216.365 109.807-1.624-7.797-2.599-15.918-2.599-24.04 0-57.828 46.782-104.934 104.934-104.934 30.213 0 57.502 12.67 76.67 33.137 23.715-4.548 46.456-13.32 66.599-25.34-7.798 24.366-24.366 44.833-46.132 57.827 21.117-2.273 41.584-8.122 60.426-16.243-14.292 20.791-32.161 39.308-52.628 54.253z" fill="white" /></svg><span>Twitter</span></a> equals www.twitter.com (Twitter)
Source: chromecache_295.1.dr	String found in binary or memory: <iframe id="buttonApi" src="https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=" width="100%" height="100%" allowtransparency="true" scrolling="no" style="border:none"></iframe> equals www.youtube.com (Youtube)
Source: chromecache_447.1.dr	String found in binary or memory: <iframe id="buttonApi" src="https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0" width="100%" height="100%" allowtransparency="true" scrolling="no" style="border:none"></iframe> equals www.youtube.com (Youtube)
Source: chromecache_392.1.dr	String found in binary or memory: Ve=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),We=u(["https://support.google.com/inapp/"]),Xe=u(["https://sandbox.google.com/inapp/"]),Ye=u(["https://sandbox.google.com/tools/feedback/"]),Ze=u(["https://www.google.cn/tools/feedback/"]),$e=u(["https://help.youtube.com/tools/feedback/"]),af=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),bf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),cf=u(["https://localhost.corp.google.com/inapp/"]),df=u(["https://localhost.proxy.googlers.com/inapp/"]), equals www.youtube.com (Youtube)
Source: chromecache_304.1.dr, chromecache_378.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=BA(a,c,e);L(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return L(122),!0;if(d&&f){for(var m=cb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},EA=function(){var a=[],b=function(c){return Ia(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_293.1.dr	String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)
Source: chromecache_304.1.dr, chromecache_378.1.dr	String found in binary or memory: f\|\|g.length\|\|h.length))return;var n={ah:d,Yg:e,Zg:f,Nh:g,Oh:h,xe:m,qb:b},p=z.YT,q=function(){LC(n)};if(p)return p.ready&&p.ready(q),b;var r=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){r&&r();q()};F(function(){for(var t=C.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(OC(w,"iframe_api")\|\|OC(w,"player_api"))return b}for(var x=C.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!FC&&MC(x[A],n.xe))return Kc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_265.1.dr	String found in binary or memory: jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["https:/",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}]) equals www.youtube.com (Youtube)
Source: chromecache_375.1.dr	String found in binary or memory: jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["https://youtube",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["https://youtube.com",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/shorts/pklrs8iuzqq?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}]) equals www.youtube.com (Youtube)
Source: chromecache_398.1.dr	String found in binary or memory: jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["https://youtube.com",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["http://youtube.com/socialepfo",0,[512,10]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["http://youtube.com/tdjakesofficial",0,[512,10]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}]) equals www.youtube.com (Youtube)
Source: chromecache_339.1.dr	String found in binary or memory: jQuery34109376985483024884_1704923497005 && jQuery34109376985483024884_1704923497005(["https:/",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}]) equals www.youtube.com (Youtube)
Source: chromecache_311.1.dr	String found in binary or memory: jQuery34109376985483024884_1704923497005 && jQuery34109376985483024884_1704923497005(["https://youtube.com",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["http://youtube.com/socialepfo",0,[512,10]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["http://youtube.com/tdjakesofficial",0,[512,10]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}]) equals www.youtube.com (Youtube)
Source: chromecache_352.1.dr	String found in binary or memory: jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https",[["https.//www.youtube.com/watch v\u003d",0,[512,433]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}]) equals www.youtube.com (Youtube)
Source: chromecache_333.1.dr	String found in binary or memory: jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https://",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}]) equals www.youtube.com (Youtube)
Source: chromecache_312.1.dr	String found in binary or memory: jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https://youtub",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["https://youtube.com",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/shorts/pklrs8iuzqq?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}]) equals www.youtube.com (Youtube)
Source: chromecache_432.1.dr	String found in binary or memory: jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https://youtube.c",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["http://youtube.com/socialepfo",0,[512,10]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["http://youtube.com/tdjakesofficial",0,[512,10]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}]) equals www.youtube.com (Youtube)
Source: chromecache_308.1.dr	String found in binary or memory: jQuery34109376985483024884_1704923497014 && jQuery34109376985483024884_1704923497014(["https://",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}]) equals www.youtube.com (Youtube)
Source: chromecache_332.1.dr	String found in binary or memory: jQuery34109376985483024884_1704923497014 && jQuery34109376985483024884_1704923497014(["https://youtube.",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["http://youtube.com/socialepfo",0,[512,10]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["http://youtube.com/tdjakesofficial",0,[512,10]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}]) equals www.youtube.com (Youtube)
Source: chromecache_392.1.dr	String found in binary or memory: nd4cSettingsIsEnabled:!1,onOpenHelpPanelCallback:d,serverData:b})};Je(k,h);f.body.appendChild(k)};var Ne=u(["https://www.google.com/tools/feedback/"]),Oe=u(["http://localhost.corp.google.com/inapp/"]),Pe=u(["http://localhost.proxy.googlers.com/inapp/"]),Qe=u(["https://asx-frontend-autopush.corp.google.com/inapp/"]),Re=u(["https://asx-frontend-autopush.corp.google.com/tools/feedback/"]),Se=u(["https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/"]),Te=u(["https://asx-help-frontend-autopush.corp.youtube.com/tools/inapp/"]),Ue=u(["https://asx-frontend-staging.corp.google.com/inapp/"]), equals www.youtube.com (Youtube)
Source: chromecache_292.1.dr, chromecache_266.1.dr, chromecache_304.1.dr, chromecache_378.1.dr, chromecache_360.1.dr, chromecache_283.1.dr	String found in binary or memory: return b}CC.D="internal.enableAutoEventOnTimer";var xc=ca(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_304.1.dr, chromecache_378.1.dr	String found in binary or memory: var RB=function(a,b,c,d,e){var f=My("fsl",c?"nv.mwt":"mwt",0),g;g=c?My("fsl","nv.ids",[]):My("fsl","ids",[]);if(!g.length)return!0;var h=Iy(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);L(121);if("https://www.facebook.com/tr/"===m)return L(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Ux(h,Vx(b, equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: v9.www-ytmp4.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 10 Jan 2024 21:52:18 GMTContent-Type: text/htmlContent-Length: 564Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.20.2Date: Wed, 10 Jan 2024 21:53:29 GMTContent-Type: text/htmlContent-Length: 555Connection: close

Source: chromecache_405.1.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_392.1.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_392.1.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_469.1.dr	String found in binary or memory: http://ww2.suggestive.com
Source: chromecache_396.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: http://www.youtube.com/WATCH
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: http://www.youtube.com/shows
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: http://www.youtube.com/sports
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: http://youtube.com
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: http://youtube.com/
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: http://youtube.com/live
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: http://youtube.com/ncertofficial
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: http://youtube.com/shorts/whu7qn8ungc?feature
Source: chromecache_317.1.dr	String found in binary or memory: http://youtube.com/shorts/whu7qn8ungc?feature=share
Source: chromecache_332.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr	String found in binary or memory: http://youtube.com/socialepfo
Source: chromecache_332.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr	String found in binary or memory: http://youtube.com/tdjakesofficial
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: http://youtube.com/wifidisplayreceiveranycast
Source: chromecache_405.1.dr, chromecache_263.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_405.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_434.1.dr, chromecache_293.1.dr, chromecache_263.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_458.1.dr, chromecache_391.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_293.1.dr, chromecache_396.1.dr, chromecache_263.1.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_322.1.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_392.1.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_293.1.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js
Source: chromecache_368.1.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js?onload=startup
Source: chromecache_336.1.dr, chromecache_317.1.dr	String found in binary or memory: https://app.www-y2mate.com/
Source: chromecache_447.1.dr, chromecache_295.1.dr	String found in binary or memory: https://arvigorothan.com/tag.min.js
Source: chromecache_392.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_392.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_392.1.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_392.1.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_392.1.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_392.1.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/inapp/
Source: chromecache_388.1.dr	String found in binary or memory: https://cameesse.net/12?rnd=476053203&z=5588623&b=5362695&c=2755022&var=&varid=0&d=https%3A%2F%2Foov
Source: chromecache_292.1.dr, chromecache_266.1.dr, chromecache_304.1.dr, chromecache_378.1.dr, chromecache_360.1.dr, chromecache_283.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_469.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_469.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap-icons
Source: chromecache_469.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/UAParser.js/0.7.20/ua-parser.min.js
Source: chromecache_469.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/browser-logos/72.0.0/
Source: chromecache_447.1.dr, chromecache_295.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/iframe-resizer/4.3.6/iframeResizer.min.js
Source: chromecache_350.1.dr	String found in binary or memory: https://chrome.google.com/webstore/detail/
Source: chromecache_442.1.dr	String found in binary or memory: https://chrome.google.com/webstore/detail/dgcoeljmbmjppdaiiimcepjijfeleain
Source: chromecache_325.1.dr	String found in binary or memory: https://chromewebstore.google.com/detail/video-downloader/afhdhdllpdmajoopkogfdmdfdgmpjipp?utm_sourc
Source: chromecache_293.1.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_293.1.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_434.1.dr, chromecache_293.1.dr, chromecache_405.1.dr, chromecache_263.1.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_405.1.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_434.1.dr, chromecache_293.1.dr, chromecache_405.1.dr, chromecache_263.1.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_405.1.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_434.1.dr, chromecache_263.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_293.1.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_350.1.dr	String found in binary or memory: https://developer.chrome.com/docs/webstore/program-policies/limited-use/
Source: chromecache_405.1.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_405.1.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_405.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_405.1.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_295.1.dr	String found in binary or memory: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=
Source: chromecache_447.1.dr	String found in binary or memory: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0
Source: chromecache_434.1.dr, chromecache_263.1.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_293.1.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_294.1.dr, chromecache_371.1.dr	String found in binary or memory: https://dummy.com
Source: chromecache_293.1.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_392.1.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_392.1.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_392.1.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_392.1.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_392.1.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_452.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:100
Source: chromecache_396.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_396.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_396.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_396.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_279.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIMeaBXso.woff2)
Source: chromecache_279.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2)
Source: chromecache_279.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIO-aBXso.woff2)
Source: chromecache_279.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIOOaBXso.woff2)
Source: chromecache_279.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIOuaBXso.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_341.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_361.1.dr, chromecache_346.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_380.1.dr	String found in binary or memory: https://github.com/jonschlinkert/get-value
Source: chromecache_380.1.dr	String found in binary or memory: https://github.com/jonschlinkert/isobject
Source: chromecache_361.1.dr, chromecache_346.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_346.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_392.1.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_392.1.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_350.1.dr	String found in binary or memory: https://img.youtube.com/vi/
Source: chromecache_264.1.dr, chromecache_347.1.dr, chromecache_359.1.dr, chromecache_321.1.dr	String found in binary or memory: https://jouteetu.net
Source: chromecache_388.1.dr	String found in binary or memory: https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/css/style.css?v=151817750
Source: chromecache_388.1.dr	String found in binary or memory: https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/images/audible.png
Source: chromecache_388.1.dr	String found in binary or memory: https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/images/player.png
Source: chromecache_388.1.dr	String found in binary or memory: https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/js/script.js?v=1518177503
Source: chromecache_392.1.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_392.1.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_373.1.dr	String found in binary or memory: https://metrika.traff.space/matomo.php?idsite=205&rec=1&url=$
Source: chromecache_294.1.dr, chromecache_371.1.dr	String found in binary or memory: https://my.rtmark.net/gid.js
Source: chromecache_309.1.dr	String found in binary or memory: https://opmetapodor.com/pfe/current/sw.perm.check.min.js?r=sw
Source: chromecache_292.1.dr, chromecache_266.1.dr, chromecache_304.1.dr, chromecache_378.1.dr, chromecache_360.1.dr, chromecache_283.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_293.1.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_424.1.dr	String found in binary or memory: https://pinterest.com/pin/create/link/?url=https://v9.www-ytmp4.com/
Source: chromecache_447.1.dr, chromecache_336.1.dr, chromecache_295.1.dr, chromecache_317.1.dr	String found in binary or memory: https://pinterest.com/pin/create/link/?url=https://www-ytmp4.com/
Source: chromecache_350.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_293.1.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_263.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_434.1.dr, chromecache_293.1.dr, chromecache_263.1.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_392.1.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_392.1.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_392.1.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_392.1.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_336.1.dr, chromecache_424.1.dr, chromecache_317.1.dr	String found in binary or memory: https://schema.org/
Source: chromecache_392.1.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_350.1.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/chrome_logo_96.png
Source: chromecache_350.1.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/chrome_web_store_v2_1200x630.png
Source: chromecache_443.1.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_logo.png
Source: chromecache_350.1.dr, chromecache_443.1.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_logo_2x.png
Source: chromecache_443.1.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_promo_tile.png
Source: chromecache_350.1.dr, chromecache_443.1.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_promo_tile_2x.png
Source: chromecache_405.1.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_293.1.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_392.1.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_281.1.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
Source: chromecache_304.1.dr, chromecache_378.1.dr, chromecache_360.1.dr, chromecache_283.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_304.1.dr, chromecache_378.1.dr, chromecache_360.1.dr, chromecache_283.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_391.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_290.1.dr, chromecache_474.1.dr	String found in binary or memory: https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1
Source: chromecache_392.1.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_350.1.dr	String found in binary or memory: https://support.google.com/chrome/answer/95414
Source: chromecache_350.1.dr	String found in binary or memory: https://support.google.com/chrome_webstore/?hl=
Source: chromecache_350.1.dr	String found in binary or memory: https://support.google.com/chrome_webstore/answer/12225786?p=cws_reviews_results
Source: chromecache_350.1.dr	String found in binary or memory: https://support.google.com/chrome_webstore/answer/12225786?p=cws_reviews_results&hl=
Source: chromecache_350.1.dr	String found in binary or memory: https://support.google.com/chrome_webstore/answer/1698338
Source: chromecache_392.1.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_392.1.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_458.1.dr, chromecache_391.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_293.1.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_292.1.dr, chromecache_266.1.dr, chromecache_304.1.dr, chromecache_378.1.dr, chromecache_360.1.dr, chromecache_283.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_424.1.dr	String found in binary or memory: https://telegram.me/share/url?url=https://v9.www-ytmp4.com/&text=https://v9.www-ytmp4.com/
Source: chromecache_447.1.dr, chromecache_336.1.dr, chromecache_295.1.dr, chromecache_317.1.dr	String found in binary or memory: https://telegram.me/share/url?url=https://www-ytmp4.com/&text=https://www-ytmp4.com/
Source: chromecache_392.1.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_325.1.dr	String found in binary or memory: https://trck.t-y-p.site/pixel/v?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&s
Source: chromecache_424.1.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=https://v9.www-ytmp4.com/
Source: chromecache_447.1.dr, chromecache_336.1.dr, chromecache_295.1.dr, chromecache_317.1.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=https://www-ytmp4.com/
Source: chromecache_322.1.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_330.1.dr	String found in binary or memory: https://understandingerrors.com/landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a
Source: chromecache_424.1.dr, chromecache_317.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/ar/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/bn/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/de/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/es/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/fr/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/id/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/it/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/ja/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/ko/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/ms/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/my/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/ph/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/pt/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/ru/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/th/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/tr/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/vi/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/zh-cn/
Source: chromecache_424.1.dr	String found in binary or memory: https://v9.www-ytmp4.com/zh-tw/
Source: chromecache_424.1.dr	String found in binary or memory: https://wa.me/?text=https://v9.www-ytmp4.com/
Source: chromecache_447.1.dr, chromecache_336.1.dr, chromecache_295.1.dr, chromecache_317.1.dr	String found in binary or memory: https://wa.me/?text=https://www-ytmp4.com/
Source: chromecache_434.1.dr, chromecache_293.1.dr, chromecache_263.1.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_447.1.dr, chromecache_336.1.dr, chromecache_424.1.dr, chromecache_295.1.dr, chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/
Source: chromecache_336.1.dr, chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/ar/
Source: chromecache_336.1.dr, chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/bn/
Source: chromecache_447.1.dr, chromecache_295.1.dr	String found in binary or memory: https://www-ytmp4.com/convert/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/de/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/es/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/fr/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/id/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/images/logo.png
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/it/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/ja/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/ko/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/ms/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/my/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/ph/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/pt/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/ru/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/th/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/tr/
Source: chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/vi/
Source: chromecache_336.1.dr, chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/zh-cn/
Source: chromecache_336.1.dr, chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/zh-tw/
Source: chromecache_336.1.dr, chromecache_317.1.dr	String found in binary or memory: https://www-ytmp4.com/zn-cn/
Source: chromecache_292.1.dr, chromecache_266.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_458.1.dr, chromecache_391.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_458.1.dr, chromecache_391.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_458.1.dr, chromecache_391.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_392.1.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_392.1.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_458.1.dr, chromecache_391.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_350.1.dr	String found in binary or memory: https://www.google.com/chrome/?brand=GGRF&utm_source=google.com&utm_medium=material-callout&utm_camp
Source: chromecache_396.1.dr, chromecache_350.1.dr, chromecache_322.1.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_293.1.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_293.1.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_392.1.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_392.1.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_392.1.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_392.1.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_405.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_263.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_263.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_292.1.dr, chromecache_266.1.dr, chromecache_304.1.dr, chromecache_378.1.dr, chromecache_360.1.dr, chromecache_283.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_458.1.dr, chromecache_350.1.dr, chromecache_391.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_447.1.dr, chromecache_336.1.dr, chromecache_424.1.dr, chromecache_295.1.dr, chromecache_317.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-225406547-1
Source: chromecache_350.1.dr	String found in binary or memory: https://www.gstatic.com/chrome/webstore/images/item_not_available.png
Source: chromecache_350.1.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_396.1.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_396.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_396.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_396.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_396.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/search_black_24dp.png
Source: chromecache_396.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_293.1.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_392.1.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_392.1.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_304.1.dr, chromecache_378.1.dr, chromecache_360.1.dr, chromecache_283.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_304.1.dr, chromecache_378.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_293.1.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_339.1.dr	String found in binary or memory: https://www.youtube.com/watch?v
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/1i25fwyizec
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/9ha2s_m10zs
Source: chromecache_408.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/byuzdnchuy4
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/dhicvn_jiwc
Source: chromecache_460.1.dr	String found in binary or memory: https://youtu.be/efo9fgvnyn8
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/exeixdkq4ks
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/fgyajd9-fhu
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/iqenllwa7yg
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/rpubyorltxm
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/tfoispqzbzq
Source: chromecache_460.1.dr	String found in binary or memory: https://youtu.be/tksxiobgax0
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/tt-xo_7rqt4
Source: chromecache_408.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/ucv-2x5bxkw
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/vcdbxh0egtc
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/vlv16prlkfs
Source: chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	String found in binary or memory: https://youtu.be/zoewp3f47ws
Source: chromecache_432.1.dr	String found in binary or memory: https://youtube.c
Source: chromecache_375.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: https://youtube.com
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: https://youtube.com/channel/ucexafolalzvzem7hkiaocsw
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: https://youtube.com/shorts/64hiumzfpxc?feature
Source: chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	String found in binary or memory: https://youtube.com/shorts/ebmlojxh2fg?si
Source: chromecache_375.1.dr, chromecache_312.1.dr	String found in binary or memory: https://youtube.com/shorts/pklrs8iuzqq?feature

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49924 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_6508_2006438609

Jump to behavior

Source: classification engine

Classification label: mal56.win@42/213@175/50

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://v9.www-ytmp4.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2000,i,3970602246001736003,3530793097058034200,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2000,i,3970602246001736003,3530793097058034200,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	13 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://v9.www-ytmp4.com	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label
https://www-ytmp4.com/tr/	0%	Avira URL Cloud	safe
https://v9.www-ytmp4.com/de/	100%	Avira URL Cloud	malware
http://localhost.proxy.googlers.com/inapp/	0%	Avira URL Cloud	safe
https://v9.www-ytmp4.com/js/custome.js?ver=985289062	100%	Avira URL Cloud	malware
https://cameesse.net/27/7ba4c9bd2293ad818049e8eac1f6be0a	100%	Avira URL Cloud	malware
about:blank	0%	Avira URL Cloud	safe
https://track.routes.name/favicon.ico	100%	Avira URL Cloud	malware
https://opmetapodor.com/pfe/current/sw.perm.check.min.js?r=sw	100%	Avira URL Cloud	malware
https://dl--master--cdn.ytapis.com/vendor/livewire/livewire.js?id=90730a3b0e7144480175	100%	Avira URL Cloud	malware
https://opmetapodor.com/zone?&pub=0&zone_id=4662709&is_mobile=false&domain=opmetapodor.com&var=5596087&ymid=769067736944087664&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest	100%	Avira URL Cloud	malware
https://dl--master--cdn.ytapis.com/js/app.js?id=7e9a5e6e05feb93e0bdc472bbf7dc998	100%	Avira URL Cloud	malware
https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/css/style.css?v=151817750	0%	Avira URL Cloud	safe
https://cameesse.net/15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A3%2C%22totalLength%22%3A244%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A1%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A36.389%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D	100%	Avira URL Cloud	malware
https://v9.www-ytmp4.com/js/jquery-3.4.1.min.js	100%	Avira URL Cloud	malware
https://gishejuy.com/400/5588622	0%	Avira URL Cloud	safe
https://v9.www-ytmp4.com/images/globe.png	100%	Avira URL Cloud	malware
https://understandingerrors.com/favicon.ico	0%	Avira URL Cloud	safe
https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/js/script.js?v=1518177503494	0%	Avira URL Cloud	safe
https://www-ytmp4.com/es/	0%	Avira URL Cloud	safe
https://opmetapodor.com/key?pub=0&id=opmetapodor.com	100%	Avira URL Cloud	malware
https://opmetapodor.com/pfe/current/micro.tag.min.js?z=4662709&ymid=769067736944087664&var=5596087&sw=/sw-check-permissions/4662709&uhd=1	100%	Avira URL Cloud	malware
https://v9.www-ytmp4.com/my/	100%	Avira URL Cloud	malware
https://t-y-p.site/favicon.ico	0%	Avira URL Cloud	safe
https://www-ytmp4.com/ms/	0%	Avira URL Cloud	safe
https://www-ytmp4.com/zh-cn/	0%	Avira URL Cloud	safe
https://cameesse.net/15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A1%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A3.379%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D	100%	Avira URL Cloud	malware
https://v9.www-ytmp4.com/sw.js	100%	Avira URL Cloud	malware
https://dl--master--cdn.ytapis.com/css/app.css?id=16b4de5946e570f8f024b4c7108e70c9	100%	Avira URL Cloud	malware
https://v9.www-ytmp4.com/vi/	100%	Avira URL Cloud	malware
https://www-ytmp4.com/ph/	0%	Avira URL Cloud	safe
https://opmetapodor.com/favicon.ico	100%	Avira URL Cloud	malware
https://v9.www-ytmp4.com/ja/	100%	Avira URL Cloud	malware
https://v9.www-ytmp4.com/images/circles-loader.png	100%	Avira URL Cloud	malware
https://dl--master--cdn.ytapis.com/livewire/message/api.button	100%	Avira URL Cloud	malware
https://www-ytmp4.com/bn/	0%	Avira URL Cloud	safe
https://www-ytmp4.com/	0%	Avira URL Cloud	safe
https://doruffleton.com/tag.min.js	0%	Avira URL Cloud	safe
https://www-ytmp4.com/ko/	0%	Avira URL Cloud	safe
https://cameesse.net/15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A2%2C%22totalLength%22%3A69%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A5.403%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
t-y-p.site	35.84.115.54	true	false	unknown
scone-pa.clients6.google.com	172.253.62.95	true	false	high
jsdelivr.map.fastly.net	151.101.1.229	true	false	unknown
static.cloudflareinsights.com	104.16.56.101	true	false	unknown
understandingerrors.com	172.67.152.171	true	false	unknown
i.ytimg.com	172.253.63.119	true	false	high
mobile-gtalk.l.google.com	142.251.111.188	true	false	high
arvigorothan.com	104.21.30.34	true	false	unknown
statuelikeazimuthsghostless.com	104.21.65.185	true	false	unknown
propeller-tracking.com	139.45.197.240	true	false	unknown
suggestqueries.l.google.com	142.251.16.102	true	false	high
piteevoo.com	139.45.197.244	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
www.google.com	172.253.62.104	true	false	high
littlecdn.com	172.67.10.98	true	false	unknown
opmetapodor.com	172.64.167.17	true	false	unknown
doruffleton.com	139.45.197.244	true	false	unknown
datatechone.com	37.48.68.71	true	false	unknown
trck.t-y-p.site	54.190.82.3	true	false	unknown
ibrapush.com	139.45.197.250	true	false	unknown
android.l.google.com	142.250.31.100	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
cameesse.net	139.45.197.242	true	false	unknown
accounts.google.com	142.251.16.84	true	false	high
chromewebstore.google.com	172.253.115.113	true	false	high
plus.l.google.com	142.251.179.139	true	false	high
dl--master--cdn.ytapis.com	104.26.3.120	true	false	unknown
n.opmetapodor.com	172.64.166.17	true	false	unknown
v2e81.bemobtrcks.com	52.204.19.219	true	false	unknown
my.rtmark.net	139.45.195.8	true	false	high
gishejuy.com	139.45.197.242	true	false	unknown
flerap.com	139.45.195.254	true	false	unknown
tzegilo.com	172.67.193.52	true	false	unknown
app.www-y2mate.com	104.21.12.237	true	false	unknown
play.google.com	172.253.122.139	true	false	high
fleraprt.com	139.45.195.254	true	false	unknown
www3.l.google.com	172.253.62.113	true	false	high
v9.www-ytmp4.com	172.67.187.174	true	false	unknown
wdc.rdtk.io	108.62.123.181	true	false	unknown
clients.l.google.com	142.251.167.138	true	false	high
sr7pv7n5x.com	212.117.190.201	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.31.132	true	false	high
videodown.site	3.10.43.234	true	false	unknown
vaikijie.net	139.45.197.244	true	false	unknown
metrika.traff.space	157.230.107.172	true	false	high
interstitial-08.com	139.45.197.151	true	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	high
lh3.googleusercontent.com	unknown	unknown	false	high
clients2.googleusercontent.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
ak.deephicy.net	unknown	unknown	false	unknown
track.routes.name	unknown	unknown	false	unknown
clients1.google.com	unknown	unknown	false	high
suggestqueries.google.com	unknown	unknown	false	high
chrome.google.com	unknown	unknown	false	high
ak.phumpauk.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false		high
https://v9.www-ytmp4.com/js/custome.js?ver=985289062	false	Avira URL Cloud: malware	unknown
https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F%2Fyoutube.com&_=1704923497025	false		high
https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497003&q=https%3A&_=1704923497009	false		high
https://dl--master--cdn.ytapis.com/vendor/livewire/livewire.js?id=90730a3b0e7144480175	false	Avira URL Cloud: malware	unknown
https://i.ytimg.com/vi/0nBZLHxmUd0/mqdefault.jpg	false		high
https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2Fyoutub&_=1704923497021	false		high
https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F&_=1704923497012	false		high
https://i.ytimg.com/vi/4ev_Arx-tZU/mqdefault.jpg	false		high
https://track.routes.name/favicon.ico	false	Avira URL Cloud: malware	unknown
about:blank	false	Avira URL Cloud: safe	low
https://opmetapodor.com/zone?&pub=0&zone_id=4662709&is_mobile=false&domain=opmetapodor.com&var=5596087&ymid=769067736944087664&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest	false	Avira URL Cloud: malware	unknown
https://opmetapodor.com/pfe/current/sw.perm.check.min.js?r=sw	false	Avira URL Cloud: malware	unknown
https://a.nel.cloudflare.com/report/v3?s=TKMkcVjR9BrBkEG47TNUwPQDQbxhvXuIo%2BRVMWf9F75Y8ixbGNC5op1yV9myEfF035xh07TPR8BvBtHA4cNMoY9xB%2BWu6qNubsdcQDnfrByoNLroyRHWUxQbvAF6IAgC5RO0TZ89unn8XDs5	false		high
https://cameesse.net/27/7ba4c9bd2293ad818049e8eac1f6be0a	false	Avira URL Cloud: malware	unknown
https://dl--master--cdn.ytapis.com/js/app.js?id=7e9a5e6e05feb93e0bdc472bbf7dc998	false	Avira URL Cloud: malware	unknown
https://cameesse.net/15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A3%2C%22totalLength%22%3A244%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A1%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A36.389%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D	false	Avira URL Cloud: malware	unknown
https://i.ytimg.com/vi/pTLtzDe0_9E/mqdefault.jpg	false		high
https://i.ytimg.com/vi/rUrNqJhIp_g/mqdefault.jpg	false		high
https://gishejuy.com/400/5588622	false	Avira URL Cloud: safe	unknown
https://v9.www-ytmp4.com/images/globe.png	false	Avira URL Cloud: malware	unknown
https://lh3.googleusercontent.com/Ph7wxKH-KKNpd8fXIyNKLCw95lVGo8aWr44cFp4iMIN4RIscymkvpEpOMhS31qA2c1Wol-Udx-mx6lTY_BOXLPb8Ag=s275-w275-h175	false		high
https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=https%3A%2F%2Fyoutube.com&_=1704923497026	false		high
https://cdnjs.cloudflare.com/ajax/libs/iframe-resizer/4.3.6/iframeResizer.min.js	false		high
https://chrome.google.com/webstore/detail/understanding-errors/dgcoeljmbmjppdaiiimcepjijfeleain	false		high
https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497003&q=htt&_=1704923497004	false		high
https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2Fyoutu&_=1704923497020	false		high
https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=https%3A%2F%2Fy&_=1704923497016	false		high
https://v9.www-ytmp4.com/js/jquery-3.4.1.min.js	false	Avira URL Cloud: malware	unknown
https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/js/script.js?v=1518177503494	false	Avira URL Cloud: safe	unknown
https://understandingerrors.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/-1iNwmT2RVg/mqdefault.jpg	false		high
https://opmetapodor.com/key?pub=0&id=opmetapodor.com	false	Avira URL Cloud: malware	unknown
https://t-y-p.site/favicon.ico	false	Avira URL Cloud: safe	unknown
https://chrome.google.com/webstore/detail/dgcoeljmbmjppdaiiimcepjijfeleain	false		high
https://opmetapodor.com/pfe/current/micro.tag.min.js?z=4662709&ymid=769067736944087664&var=5596087&sw=/sw-check-permissions/4662709&uhd=1	false	Avira URL Cloud: malware	unknown
https://a.nel.cloudflare.com/report/v3?s=d1SmonGeLVKW2lHJdEtvhYzllR2aVVlUgqcS6Oi4BPefDXHucuOB%2FIsaOcGSGe17nBrJhfppumxIUDRo1sLO2aUIMpXrNvoG2Nppgb0TnavCUH90OkcdoFUiSq8CTG%2BIyNTg	false		high
https://cameesse.net/15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A1%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A3.379%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D	false	Avira URL Cloud: malware	unknown
https://v9.www-ytmp4.com/search/	false		unknown
https://i.ytimg.com/vi/XIm6YA4O6Xw/mqdefault.jpg	false		high
https://v9.www-ytmp4.com/convert/	false		unknown
https://dl--master--cdn.ytapis.com/css/app.css?id=16b4de5946e570f8f024b4c7108e70c9	false	Avira URL Cloud: malware	unknown
https://i.ytimg.com/vi/DEzbbbVsNi4/mqdefault.jpg	false		high
https://v9.www-ytmp4.com/sw.js	false	Avira URL Cloud: malware	unknown
https://opmetapodor.com/favicon.ico	false	Avira URL Cloud: malware	unknown
https://v9.www-ytmp4.com/images/circles-loader.png	false	Avira URL Cloud: malware	unknown
https://i.ytimg.com/vi/uZFbRMRtJj0/mqdefault.jpg	false		high
https://dl--master--cdn.ytapis.com/livewire/message/api.button	false	Avira URL Cloud: malware	unknown
https://i.ytimg.com/vi/vwopEAGNrWI/mqdefault.jpg	false		high
https://cameesse.net/15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A2%2C%22totalLength%22%3A69%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A5.403%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D	false	Avira URL Cloud: malware	unknown
https://doruffleton.com/tag.min.js	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/C0BtY0x_z7Eep4f3UCL5LhEuyJWJUzeCAUWmoQDEepusEw7sIpkJquQSaMaz2Ph15q3eBMf1HZcGhwc-6-Y-tSEEjA=s60	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_304.1.dr, chromecache_378.1.dr, chromecache_360.1.dr, chromecache_283.1.dr	false		high
https://apis.google.com/js/client.js	chromecache_392.1.dr	false		high
https://twitter.com/intent/tweet?text=https://v9.www-ytmp4.com/	chromecache_424.1.dr	false		high
https://apis.google.com/js/googleapis.proxy.js	chromecache_293.1.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_392.1.dr	false	Avira URL Cloud: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_392.1.dr	false		high
https://v9.www-ytmp4.com/de/	chromecache_424.1.dr	false	Avira URL Cloud: malware	unknown
https://www-ytmp4.com/tr/	chromecache_317.1.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_458.1.dr, chromecache_391.1.dr	false		high
http://youtube.com/socialepfo	chromecache_332.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr	false		high
https://chromewebstore.google.com/detail/video-downloader/afhdhdllpdmajoopkogfdmdfdgmpjipp?utm_sourc	chromecache_325.1.dr	false		high
https://youtube.com/shorts/64hiumzfpxc?feature	chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	false		high
https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1	chromecache_290.1.dr, chromecache_474.1.dr	false		high
https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/css/style.css?v=151817750	chromecache_388.1.dr	false	Avira URL Cloud: safe	unknown
https://telegram.me/share/url?url=https://www-ytmp4.com/&text=https://www-ytmp4.com/	chromecache_447.1.dr, chromecache_336.1.dr, chromecache_295.1.dr, chromecache_317.1.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_346.1.dr	false		high
https://pay.google.com/gp/v/widget/save	chromecache_293.1.dr	false		high
https://youtube.com/shorts/ebmlojxh2fg?si	chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_293.1.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_391.1.dr	false		high
https://developers.google.com/	chromecache_405.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_405.1.dr	false		high
https://www.google.com/tools/feedback	chromecache_392.1.dr	false		high
https://www-ytmp4.com/es/	chromecache_317.1.dr	false	Avira URL Cloud: safe	unknown
https://developer.chrome.com/docs/webstore/program-policies/limited-use/	chromecache_350.1.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_392.1.dr	false		high
https://www-ytmp4.com/ms/	chromecache_317.1.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_322.1.dr	false		high
https://v9.www-ytmp4.com/my/	chromecache_424.1.dr	false	Avira URL Cloud: malware	unknown
https://www.google.com/tools/feedback/	chromecache_392.1.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_293.1.dr	false		high
https://www-ytmp4.com/ph/	chromecache_317.1.dr	false	Avira URL Cloud: safe	unknown
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_392.1.dr	false		high
https://plus.google.com	chromecache_263.1.dr	false		high
https://telegram.me/share/url?url=https://v9.www-ytmp4.com/&text=https://v9.www-ytmp4.com/	chromecache_424.1.dr	false		high
https://www-ytmp4.com/zh-cn/	chromecache_336.1.dr, chromecache_317.1.dr	false	Avira URL Cloud: safe	unknown
https://v9.www-ytmp4.com/vi/	chromecache_424.1.dr	false	Avira URL Cloud: malware	unknown
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_392.1.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_392.1.dr	false		high
http://www.youtube.com/sports	chromecache_332.1.dr, chromecache_375.1.dr, chromecache_432.1.dr, chromecache_398.1.dr, chromecache_311.1.dr, chromecache_312.1.dr	false		high
https://v9.www-ytmp4.com/ja/	chromecache_424.1.dr	false	Avira URL Cloud: malware	unknown
https://www-ytmp4.com/bn/	chromecache_336.1.dr, chromecache_317.1.dr	false	Avira URL Cloud: safe	unknown
https://www-ytmp4.com/	chromecache_317.1.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_304.1.dr, chromecache_378.1.dr, chromecache_360.1.dr, chromecache_283.1.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_293.1.dr	false		high
https://youtu.be/rpubyorltxm	chromecache_265.1.dr, chromecache_333.1.dr, chromecache_408.1.dr, chromecache_308.1.dr, chromecache_460.1.dr, chromecache_367.1.dr, chromecache_339.1.dr, chromecache_409.1.dr, chromecache_444.1.dr	false		high
https://youtu.be/efo9fgvnyn8	chromecache_460.1.dr	false		high
https://www-ytmp4.com/ko/	chromecache_317.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.251.111.188	mobile-gtalk.l.google.com	United States	15169	GOOGLEUS	false
108.62.123.181	wdc.rdtk.io	United States	30633	LEASEWEB-USA-WDCUS	false
212.117.190.201	sr7pv7n5x.com	Luxembourg	5577	ROOTLU	false
172.253.63.119	i.ytimg.com	United States	15169	GOOGLEUS	false
139.45.197.151	interstitial-08.com	Netherlands	9002	RETN-ASEU	false
104.21.82.40	unknown	United States	13335	CLOUDFLARENETUS	false
142.251.16.139	unknown	United States	15169	GOOGLEUS	false
104.21.65.185	statuelikeazimuthsghostless.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.22.24.116	unknown	United States	13335	CLOUDFLARENETUS	false
172.253.62.104	www.google.com	United States	15169	GOOGLEUS	false
104.21.76.46	unknown	United States	13335	CLOUDFLARENETUS	false
142.251.163.119	unknown	United States	15169	GOOGLEUS	false
54.190.82.3	trck.t-y-p.site	United States	16509	AMAZON-02US	false
142.250.31.132	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.26.3.120	dl--master--cdn.ytapis.com	United States	13335	CLOUDFLARENETUS	false
172.64.167.17	opmetapodor.com	United States	13335	CLOUDFLARENETUS	false
37.48.68.71	datatechone.com	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
172.67.193.52	tzegilo.com	United States	13335	CLOUDFLARENETUS	false
142.251.16.102	suggestqueries.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.204.19.219	v2e81.bemobtrcks.com	United States	14618	AMAZON-AESUS	false
157.230.107.172	metrika.traff.space	United States	14061	DIGITALOCEAN-ASNUS	false
142.251.179.139	plus.l.google.com	United States	15169	GOOGLEUS	false
172.253.62.113	www3.l.google.com	United States	15169	GOOGLEUS	false
172.67.152.171	understandingerrors.com	United States	13335	CLOUDFLARENETUS	false
142.250.31.100	android.l.google.com	United States	15169	GOOGLEUS	false
172.67.10.98	littlecdn.com	United States	13335	CLOUDFLARENETUS	false
172.64.166.17	n.opmetapodor.com	United States	13335	CLOUDFLARENETUS	false
139.45.195.8	my.rtmark.net	Netherlands	9002	RETN-ASEU	false
3.10.43.234	videodown.site	United States	16509	AMAZON-02US	false
139.45.197.250	ibrapush.com	Netherlands	9002	RETN-ASEU	false
172.67.187.174	v9.www-ytmp4.com	United States	13335	CLOUDFLARENETUS	false
104.21.12.237	app.www-y2mate.com	United States	13335	CLOUDFLARENETUS	false
35.84.115.54	t-y-p.site	United States	237	MERIT-AS-14US	false
104.16.56.101	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
142.251.16.84	accounts.google.com	United States	15169	GOOGLEUS	false
104.26.2.120	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
142.251.111.113	unknown	United States	15169	GOOGLEUS	false
139.45.197.242	cameesse.net	Netherlands	9002	RETN-ASEU	false
139.45.197.240	propeller-tracking.com	Netherlands	9002	RETN-ASEU	false
139.45.195.253	unknown	Netherlands	9002	RETN-ASEU	false
139.45.197.244	piteevoo.com	Netherlands	9002	RETN-ASEU	false
139.45.195.254	flerap.com	Netherlands	9002	RETN-ASEU	false
172.253.63.132	unknown	United States	15169	GOOGLEUS	false
104.21.30.34	arvigorothan.com	United States	13335	CLOUDFLARENETUS	false
172.253.115.132	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1372702
Start date and time:	2024-01-10 22:51:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://v9.www-ytmp4.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@42/213@175/50
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 142.251.16.94, 34.104.35.123, 142.251.163.97, 172.253.122.138, 172.253.122.100, 172.253.122.139, 172.253.122.113, 172.253.122.102, 172.253.122.101, 172.253.115.138, 172.253.115.113, 172.253.115.101, 172.253.115.102, 172.253.115.100, 172.253.115.139, 23.62.230.21, 192.229.211.108, 23.215.0.142, 23.215.0.137, 184.25.127.143, 184.25.127.148, 142.250.31.94, 142.251.167.94, 172.253.115.94, 172.253.63.95, 142.251.163.95, 172.253.115.95, 142.251.16.95, 172.253.62.95, 142.251.167.95, 172.253.122.95, 142.251.167.97, 172.253.63.138, 172.253.63.113, 172.253.63.100, 172.253.63.102, 172.253.63.101, 172.253.63.139, 142.251.111.95, 142.250.31.95, 172.253.122.94, 172.253.62.94, 172.253.63.97, 23.215.0.143, 23.215.0.141, 142.251.167.102, 142.251.167.138, 142.251.167.101, 142.251.167.113, 142.251.167.139, 142.251.167.100, 142.251.163.113, 142.251.163.138, 142.251.163.139, 142.251.163.100, 142.251.163.101, 142.251.163.102
Excluded domains from analysis (whitelisted): android.clients.google.com, ssl.gstatic.com, fonts.googleapis.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ak.phumpauk.com.edgesuite.net, clientservices.googleapis.com, ctldl.windowsupdate.com, www.googleapis.com, a466.b.akamai.net, fe3cr.delivery.mp.microsoft.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, a314.b.akamai.net, www.gstatic.com, ak.deephicy.net.edgesuite.net, www.google-analytics.com, mtalk.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: http://v9.www-ytmp4.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 10 20:51:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9826299018460185
Encrypted:	false
SSDEEP:	48:8Bd9TlJsBHWidAKZdA1FehwiZUklqehuy+3:8pTZZy
MD5:	6A8470823FEB6FACF6A87FF2A30D9CF8
SHA1:	AD7DE232828661D88A246CAEF459927C1B4C5D03
SHA-256:	1B59AA89285CDCD88C0B8752A23EA5B2E18AAEC21C61657FED77B029446E1549
SHA-512:	7F76F65E61AF9386A2D215E630F3932C7004FC03B7830058B0B1FC327E925288E58010FEDF4F6BFF7A23C5585132EEE12B7BA42ABF83344D386FED60A31BFF91
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......w/.D..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXs............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L6^.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 10 20:51:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9968096061470586
Encrypted:	false
SSDEEP:	48:87d9TlJsBHWidAKZdA1seh/iZUkAQkqehJy+2:8XTv9Q8y
MD5:	5D5481E1A110FABE056785B13A035993
SHA1:	00112AE76093D295AA948F46226D98F0F227DD43
SHA-256:	272F3D7DB226524644774B4FA8C8E85D4DF873A11FB4D1915B7FF006B4DC41CA
SHA-512:	713E6AFE47FB54F2691D297CE3AB972B2E9935950440F199402A90376731D06580C9F02DDC6AEE6FE22AD3B8E2849923AB4A4331DEBCFFF61E870DC254D5C2E1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....%.l/.D..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXs............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L6^.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.006971546206157
Encrypted:	false
SSDEEP:	48:8Id9TlJAHWidAKZdA14meh7sFiZUkmgqeh7svy+BX:8+T/nVy
MD5:	DB1A197397EEFBED9E0221A3B85F038B
SHA1:	2364245DC746B736060EBB78D0D5CF542AD46BE1
SHA-256:	65B7CD1BF88CD88251E239BECD1C149A51923086C80550D08DF3DDFCBDEDFF10
SHA-512:	7AAF64159DDE963C964C71CBA340E4C328EC9E0EFF54EBD73AF17DCC06D9B109B121AC4F252F64553E86598ACE2A53E40FC6F90B27F66134319AC587DFFB7A8C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L6^.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 10 20:51:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9944504829963656
Encrypted:	false
SSDEEP:	48:89d9TlJsBHWidAKZdA1TehDiZUkwqehty+R:8tTcny
MD5:	29631CDD5801B3EA989B92559C2CF97F
SHA1:	43163409E8A0694CE5D7526A59D92BF3A9F9E113
SHA-256:	71C437B54C12EB5081FAA88A175B095CFA51D5969D219E6BB7AB142A57AD0103
SHA-512:	4F265959868900E73110001B2A1E68A7CD737943FFF143037C243BC77F981E5128853C4ABE3998596B906C49234D926BF6BB9912276F21C00EC7707FF928E8A5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....E.h/.D..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXs............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L6^.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 10 20:51:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9869283772323523
Encrypted:	false
SSDEEP:	48:8Kd9TlJsBHWidAKZdA1dehBiZUk1W1qehLy+C:88TM9ry
MD5:	A097514194D9DF490FAC3A057D5D62C3
SHA1:	4B231024CBB8171F33B2D711185AC4A50742CFA8
SHA-256:	362F87F2B13B0C052ABE5A5B86D93FE3F51D8070C3B4B1118779069406F94713
SHA-512:	C1611E66FCBD926FBF79C5971BB00A8A8AE1A27640D2CFFF4A4AE76D5F5802A4AFC388E885E82FCEE6629DE12EC55F726FF71E59608A62383FEBA356493C83DB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....vq/.D..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXs............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L6^.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 10 20:51:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.991931936499062
Encrypted:	false
SSDEEP:	48:84d9TlJsBHWidAKZdA1duTeehOuTbbiZUk5OjqehOuTbVy+yT+:8uT+TfTbxWOvTbVy7T
MD5:	FC82909034E51A2061728EE6E92B8A1F
SHA1:	BAF238B010A339C40DA32749DC8B88CC920F1F19
SHA-256:	C9AA3C00B1CA0561E4D36868F4347B16951B5F87203BC94F59AFC77DD8CD44F5
SHA-512:	B921BB96D55BC874A912629851C3C5F0E1FA77A4F043778A2C09493A65EB38D121FE758764C952E94F8C8F82AEF0F84A5A51F30D2DDEC815F72C14D8E60EF9B0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....hIa/.D..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXl.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXs............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L6^.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 355x355, components 3
Category:	downloaded
Size (bytes):	14651
Entropy (8bit):	7.9336328685322135
Encrypted:	false
SSDEEP:	384:sBMP/KZfR03MhJqT0z81HHQ7Kx1UU9u2ndxb:WMKFR0chkwzaIKx2RKb
MD5:	545811B0A815692A6CA16DD9A46924AB
SHA1:	0AD596F3F23312B129A505CED277AF9FF83CA7FC
SHA-256:	F710C2B11DF9CADCB3A6D25A9DC8306172C04FF1D2FA8D96D4019D70833F695D
SHA-512:	1E2E1335F299032FA3AC31D03016D8595E328D7C8BD4269DEF375B58BE54A82D6AD8C7A3EE412177DA1D266F9254D2189D665C30EB82A264738D8C7DCCD35961
Malicious:	false
Reputation:	low
URL:	https://interstitial-08.com/contents/s/54/58/11/b0a815692a6ca16dd9a46924ab/0933414948049.jpeg
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333......c.c..................................................................................E"@8....C...`...... .....)$H....1......1....B$ ...."..@.c"D.."e4..d...D!......."D@..!... ^........@.......`"B...."......k".@.b......$ ..@0....b.. .....P....@H`D..D..!.... ......c6.D@......"$.0...`.....@1..!...HE`X..HC"HD..0...1..C 0..C.....RL..!.C..1...@."H@..D.0..........2@!....D........@....09....."DI.... ......@..@.+"H..@a7...`..b..8C.Db....b L.Vd7..00...@...Dc..\|....+;...._.u..jv..v.......^.)......`..9{.......C.....!.@L`!...%....__....OO....G...n^..C\}v..8..>.....x.._K.9e....i...Q.8.."#.1.@..,........\|.o....<.}...\.]...N.\...=..rq.....k.r.w7.....:..B....<.d@...... H.....I.N?`@..>.\|\|.=>.^O..O.;x...>....;.{..,.[S........ .....#9.."......$...~..Q....=.s:.4..?+>...u.zq..W.E..~. ."f,"VRtJ.uI!.&"#$...W...b.."#$.=Je.L...

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1505)
Category:	downloaded
Size (bytes):	121630
Entropy (8bit):	5.496341822184716
Encrypted:	false
SSDEEP:	3072:Blqyv+KyDRr0AQHNvaN53HytLNTIG99sdo0v0W:yyqr0RPtzOS0v0W
MD5:	EC9A3858B2C06B17C4811845C37209C4
SHA1:	2DF320AD9DAF33DD31E6381906F7FDCB598EF312
SHA-256:	421319127DE46E1AB3F62CCC60459A5C53A5AD462E5BD62051CF5E346AE26231
SHA-512:	A8AC445F151E4A56D1870E7D0A0B3940672A4B6A2B4A1426E6764F8B2DDBB61427B275FD2797373834D10076B50E06E50F509E2B8EE1FB02CF4A936B7E611B49
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.GsbA68hXs80.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo899t-H8Lxb3OqzMDuPn6TV_i36ag/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ea,fa,na,pa,sa,va,wa,Ca;_.da=function(a){return function(){return _.ba[a].apply(this,arguments)}};_.ba=[];ea=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.na=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.oa=na(this);pa=function(a,b){if(b)a:{var c=_.oa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&fa(c,a,

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	881
Entropy (8bit):	5.2222687499219544
Encrypted:	false
SSDEEP:	24:Yt5KPu2vsRpIphtv5v2jMMnzUkuMmd8CEp:YtYPu2NpT5v2b495/Ep
MD5:	EB3485DF0752610EBC42604782BD1392
SHA1:	32F5064C9E13F038FBBAEDF287469B1E9F8E03FA
SHA-256:	B46AB19FC3DD4B08D054604C16CF2B67A6EFF8D22C7875F129C306E8A4BE1D21
SHA-512:	72741824727A1422B39BD6CFCB91755EBFACB8113B3B28ACEE7FB04CBFCFA0C16DFE6099851AEE280408687EEFA26A8B9B74FA06DFB3595F01BE730123E471D6
Malicious:	false
Reputation:	low
Preview:	{"status":true,"code":"jsTagParameters","message":"","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"102.165.48.42","disableSwSanity":false,"domain":"https://jouteetu.net","gidratorTimeout":0,"injections":null,"install_ctx":{"country_code":"us"},"resources":{},"mobileSupport":true,"openInTab":false,"popupHeight":310,"popupShow":true,"popupWidth":510,"pubZoneId":5588624,"showBackground":false,"key":{"id":782675794,"key":"BCHsyXz3lPKVfb_pf3YRz060h_LdE1BDG3uxIQcFgZ71ppTn5a0zkd49lhpCw5yIM76pP3vLLGZfNSz918qM7Xs"},"swName":"sw.js","swSanity404only":false,"swTimeout":0,"useRtMarkUser":false,"wildcardDomain":"boustahe.com","zoneId":5588624,"skinUrl":"/pfe/current/defaultSkin.min.js","popupUrl":"/pfe/current/popup.html","flags":{"appLockDisabled":false,"quieterNotificationPermissionWorkaround":false},"extra":null}.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (755), with no line terminators
Category:	downloaded
Size (bytes):	755
Entropy (8bit):	5.284182123857499
Encrypted:	false
SSDEEP:	12:4WjWqE8jGE+ztMjGE+uJtMusBtMuscKLtMustxtMusRtMus/iRZtMusOtMusMtMt:4WjW1NE+fE+uFsdscKsttsNs/y1sysgk
MD5:	C20322B0CA69943309898CE32A96A8F0
SHA1:	01CB735FAC417C50F671AFB253E14BC0D3C71B0A
SHA-256:	EDED37040D67DF23EE03F56BB19689A5716BEE2365E3C4E5AFB1EB3182EC175B
SHA-512:	A9E2DAC2D21C2517DB04E8159C95EB576B9DF4855950E35EA2C951CCFAF1FEE4CAA5CAD42CEAE271C3BCCB1BA08D7B4D774909A69029E4A72A28BB7DE48BBA26
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F&_=1704923497012
Preview:	jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["https:/",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	193010
Entropy (8bit):	5.539435622113596
Encrypted:	false
SSDEEP:	3072:obOeE/RrC8AS2tvrclUUMF3Ob/A/6LAEloLWtIJn24Y113D:Mirvx2i2XOAYAEloLienzGZ
MD5:	55B0DE67E8DD6A66C8D634D1BB75587A
SHA1:	1E4215B9C888509CD3919B12CFA92562F69080D2
SHA-256:	396775962DA94A5045B386EC640D2F29F403156EE57EDAF3126AC02364978157
SHA-512:	046DCD76731F72B5FC6B78A29722461AD5E777AF1FA41ACEFE836C370FFD60B1CC4446FAD42EE11A3DD4BAC357979E065B9167AB822F30FC03A5A60E44BA4690
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-74657038-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnable

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.6042015135302385
Encrypted:	false
SSDEEP:	3:YCMxvOUmVR0oQA3E/WjVxXMcYU:YCM5OUiR0N7eHcXU
MD5:	71059E9DD759864825E3ED6700DEA741
SHA1:	15D405FB6AB488C1DE764808CB88FEFFA95AF66B
SHA-256:	FF1B5EA96EA9A4D300E12BA7C27919DCFD376112786442E5D8861EE454DEADF2
SHA-512:	981F046883D68D1DE01A23677224EFD4532C808B7F9C910FABA0B3FD30255022FFFA698B6376B8527A8407068B4742603F13B06B61A7BDE4D303106578CA1583
Malicious:	false
Reputation:	low
Preview:	{"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	35607
Entropy (8bit):	7.9689908798053
Encrypted:	false
SSDEEP:	768:C9idSsCQbQ/Ecy8OwUDitxhYT4mVnh/Jbw7jgF0h51NWvAEz3NTrHq5N:CObQMcytCeT4g/tw7z5Ofz3JOr
MD5:	4E61844A7532EE6D30450ABD6BB2A1DA
SHA1:	E11BAD4F8BA1F610713318FEDDCBFE6A0FAF50A0
SHA-256:	01A91CEF52F9849703FB84A945F9FB51B9DEBF7AC36730043D097C3865550E8C
SHA-512:	E165FCB54AB8320112048F1FA6F9CA5E029A4765F1347C9862D05DCBE770D68981153C7FEF5429E4E6527FB846CCC5593696AC444A30943164A74664DB88E76B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=...C...........=)#)==================================================..........."...........................................................................................Z..,../..(W..8c6..)Hv..\G[..........uy.P6..<.....9.`........"z. .................5.4...N.z....-m.s.n.....c"o..e_U.Wn.@.`...... L...']....}.....X..."j\|d0'....._. ...........5+l'6......9.\|E...J..RE.......?/f.9.p..@.....@..0}9.....p.u.n"...L3..i.....v.%$\.H..............Rh0V.....R..M....g....}.a....6.B.}k..l.i.....,.8d.L...".B.K.r....u..(.c..>u5z...]..%@.R...6...H............R.O...M..y3.Z...`f.0.<.r.7.....~...~`...3x]\|0..\.V.d"~q....7..\|0i}..W......@.,..../.5.s... ..............,L..........0..5[..........g..k............y..\|..L.....4...W..g:<..$...........y...gX.......p......-......z..R..}.$..\|...gfg.....@......=.....{.1.}f>&..[.0rD..pG.#.e.. ........lj<...Yq...9H,z_'%O..h:.w..hG.).L.6.v.K...E.y

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 48x48, components 3
Category:	downloaded
Size (bytes):	1966
Entropy (8bit):	7.704896898637657
Encrypted:	false
SSDEEP:	48:UPqz01WWy2dD+lsW8CgbZS1jDXWBtJdyC01HfXB6/L:EnWWxV+RywjDmDw1HfML
MD5:	1B683FA3A40CAB02826804EB10A0564C
SHA1:	2FE1B28D851A5CAEFA57A72A37A017FFD5E393D1
SHA-256:	A95117B055B9A97A28E2471F2AABF4BEFEF6FBE89BA98450972AE9BA261043B0
SHA-512:	7CD35A9FD17BD724DE6543E279D62E949DAC0DF38C72482E8BBAC4311DB2656A8E9B4EE911D7E52A089D1F211638C70DA23DB231C85205587978F1A97FD61DD3
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/a-/ALV-UjVSDHkImE4olo4yAK6fOhp4cmKcFAo0e8m5hdL8BW1y_w=s48-w48-h48
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................0.0..........................................2............................!."1A.2Qa.#q...3b...................................-......................1..!A.Qaq....."2................?...z.Vk.....45..Au.A.b2.......^.PH..c.1G.ZX5.r.k....T..nJ..w..W.u{...Y_=#P.&.c..'V..Wqm..X.......J................C...6...\..g....N.S<..f...c..6..!n.bp...@./.V.R\|..Uy.}..k..GUN.z.X..b.4.7\|&...n%..F.Ac.O-0._....&J.i.\|.V.S..F....M<.D...-.q;6.VI7....j........h.P.V.M%...z.=Qa...\|V[.U..\|J.),2S...N..C9U.yr..;57..O(....r......P.].M...Iv,.G]M....D.....,{dV...$..8..l..Li.....1........SCM%....,.u...T.<.v<h.K......NA.#......VA......A....>.....@...f.....b......S5..\|JVXb..h.......}{........zwE..n&.A.}.Q.Kg).-d..R]5..A...h..#.."p$...7z.p...s.]Z.l..i}..r.0.Zdf.:.o}...Wn..y.....Q.[+M.R

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1684), with no line terminators
Category:	downloaded
Size (bytes):	1684
Entropy (8bit):	5.2011760106018325
Encrypted:	false
SSDEEP:	48:0ZUJVKL8MJEcoh8KFRwCZUvGCUvGUzHgrOW:PJYIcoZqKgrOW
MD5:	8A6CE0C367047FE2F601CFA494FC2335
SHA1:	27569FBB2AFA3CA3298EC4CE0617D22978AF37C5
SHA-256:	B1F2BFB6BA2D81C4EACBBF4E3D9AC735A2A052739C508ADB08AF9423C944F64E
SHA-512:	41EF888DEEA8AF44BD6A4AAF0CD648D68995EDAE0C68E7EB64DA6663DC9A05ECC4DD3772A7771A3FCB4DD53ECB320E2C43EF85360BE67B86D9DE819761BC632E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.kysnSxzxlBw.L.W.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTtlVLEaWgxCNsOcfXhalF5hI1DANA"
Preview:	.gb_1e{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Dc{text-align:left}.gb_Dc>*{color:#bdc1c6;line-height:16px}.gb_Dc div:first-child{color:white}.gb_na{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_na:hover{background-color:rgba(68,71,70,.08)}.gb_na:focus,.gb_na:active{background-color:rgba(68,71,70,.12)}.gb_na:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_j .gb_na:hover,.gb_j .gb_na:focus,.gb_j .gb_na:active{background-color:rgba(227,227,227,.08)}.gb_j .gb_na:focus-visible{border-color:#a8c7fa}.gb_oa{-webkit-box

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1419), with no line terminators
Category:	downloaded
Size (bytes):	1419
Entropy (8bit):	4.985250072362492
Encrypted:	false
SSDEEP:	24:T29+y4gIWidpf82IBLtu1XNoMa0S4Bo1OaK7SB0rgUSX3/X3u+:T29+y4D7UtFtuM0GZK7eH/Hu+
MD5:	349618C5DD09CD62E293A16103AD8F26
SHA1:	D6965711D613048F3458C0C4C839C1F37351FC8F
SHA-256:	55C72F42FC6EE2C502A5F86FE215690719CE746F383EC8551AF1F1FB66252B2E
SHA-512:	60266D56FCA28DB0A78AA860BC53B319ED59D9C573FBCD0EA3BF1AC2C970BBF4854447C202E048EAC7F3E3446DB4DBA4E7ACA23F4ABDC11834109E555542EF2D
Malicious:	false
Reputation:	low
URL:	https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/js/script.js?v=1518177503494
Preview:	"use strict";!function(e,t){function l(e,t){Array.prototype.slice.call(e.querySelectorAll(".item")).forEach(function(e){e.classList.removeMany("left","center","right","visible")}),e.querySelector(".item:nth-child("+(t<=1?e.querySelectorAll(".item").length:t-1)+")").classList.addMany("left","visible"),e.querySelector(".item:nth-child("+t+")").classList.addMany("center","visible"),e.querySelector(".item:nth-child("+(t>=e.querySelectorAll(".item").length?1:t+1)+")").classList.addMany("right","visible")}t.addEventListener("DOMContentLoaded",function(){var e={l:1,p:1};r.portrait&&(r.portrait.classList.contains("loading")&&(r.portrait.classList.remove("loading"),l(r.portrait,e.p)),e.p++,setInterval(function(){e.p>r.portrait.querySelectorAll(".item").length&&(e.p=1),l(r.portrait,e.p),e.p++},3e3)),r.landscape&&(r.landscape.classList.contains("loading")&&(r.landscape.classList.remove("loading"),l(r.landscape,e.l)),e.l++,setInterval(function(){e.p>r.landscape.querySelectorAll(".item").length&&(e

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	5548
Entropy (8bit):	7.914640815653405
Encrypted:	false
SSDEEP:	96:p/A/MWgLVxKVnWfWW9X08qTw/+udx4KDCRN9Xy6cruMcDj:p/A/MWgLVx8n9W9X0VtudxJo9XU0
MD5:	F7E7EE9C177634322D1424E7F89F8231
SHA1:	BA2733EEEC563670AFF8AF2CF6385C608B4B0488
SHA-256:	25B08BE766A06F61D916C3DA10C4063C319146EEFCB03ACE7215B1BA94A51335
SHA-512:	84BA009C898FDF363AEBDF27BFFC2F7E0EF9BC27AB4FF447ADAA604289B89BB9D293593849BB22E6757C53F8A053D1C82CBEBEBD1320A2B1368BBFF66AEE6D46
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5&(-/222."8=70=+12/.........../...//////////////////////////////////////////////////........@..".......................................C........................!1.A.."Qaq#2.....B...$%34Rrs.....5bc....................................%......................1.!2A."Qq.#Ba............?...$.B+R..H....y.G...%.].....Os...B,........q..r.$.a.....6.#.....m0.....(...h^.zC4...D3.....y.2.F...G......L.'QqzC..}.DzJ....s.....cdR=.8a.`..5.=.....\|.W.V;....h..G.G.t.......2...V.n[....P...Gy...1...u.5.j6.......[s.,.>.^......k1.Hq...T#Prk.'..W....=.......a.!fmi...e..2W..DY.s.v..x23).....X....................?.F..^....*...%7.4....%.L.=;...FpB...XB,"...2..0m=M..F.\...-.=1.....~.....:D......$.I.....b.Ox.}D....N$..0Q.m..VjN..j.N....#....W.j.Dn...W6....-.;M.q.M...........jv..9..#..K.8u.B..k...{...x...JKL.....o}.....X.A~@.%C.=..{....VT.VQr.W........s..66....Z.}Of.y.:....HQ..0e_Vg.;........1..X...jL.f....1.--.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	4835
Entropy (8bit):	7.9142564381656655
Encrypted:	false
SSDEEP:	96:wYBDsE6cxqsKSh28BCVBZ/kzy8roTAv6CHSkevLCJ+hJ2yPxtTk:/bHjCiy8DSCHmvWJ+iypy
MD5:	A72E3AC9CAFDB4AB8D5808EA2B2D093E
SHA1:	18FDDACB047A2BA6CAEB93D0D3489BD1EAA6266F
SHA-256:	FDF81F703CD5B001F78D27FFB9DAFA2055064E3953317CD4EA3D3751E4DDD9BA
SHA-512:	ED2155DE697917F653308542D72A989167843ACF53ACC82D99783005BD7EE12E980A88D1F82309A1F5B991507DC891A804CC761A964FA5731C551503A0E326CC
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<-12/.........../...///////;/////////////5////////////////////////////........@..".......................................F......................!..1.AQa.q....."....#$2..34BCrs.......RSbc%T................................#.....................1.!2..Aq.a.Q............?....JR....vH..Qd...@....R.PS....Sd.b...B.Or..!<..K\.S....?...\.4[{.J.w..R.3.x.....i..z...b..+.j.ac..Kv.......i..emT.,......(2W..'5z`.....k.KA0.q....fZ..YU.73..r..<....t......7........9.0.1y..#./iW....8w..Q..2Z............P..9.+...Nc.:.s..N.k.K......}..ia..d.."8.Yk.O&.x.4.U.eq.......}.Mn-..z..^..~..w.B.`[[L.+....+..s./=u......7.Re.5SF..Sn.U.@U)HKU.eSB.JPI7U.....H$.f...B.)..PPyH.I. >l.6.3.)....Rp.79Ir...'..4..s.D."P...... ).._.....Q..."...;.$...O .}.s..YX.<W!. IVj....V......s......[(.]K..o...j4=..........^G%....=...v%.k.8...5..>..z............C..d.m.qq. [..j..+..8'.j.\.mog..U..1UI.....Y.......

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	476
Entropy (8bit):	5.242767585383418
Encrypted:	false
SSDEEP:	12:ky5UFOSnTMoxBzVMuhq99ixqMyXyH3uxIXLM0dkbRNced0:knESnTMozzJqHayXyXdfercn
MD5:	010464896769DB19806FFE61A4F0ADBA
SHA1:	561B654F5472934246059C499D7AB49B4C0A33B8
SHA-256:	A87EE0C87A0A598472525DCC09727C33924C9D9E86F6B5205A069E10ABF860D4
SHA-512:	A219EB10525561D7CF49C55D1AA75B5D75BA3B5F62F1D8A1C1F1C202FD95591E2A244E2559D9C96F8C8B0A348E42AD04941DD97E90E1A1A762D1CE0359DFEE42
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.dJPrtZvRqDw.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.Z4IE48QAiHc.L.B1.O/am=6AYGyQI/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,COQbmf,CfLNpd,DNlSjf,ECBKud,EEDORb,EFQ78c,FdMhB,HsQQib,IZT63,JNoxi,KG2eXe,KUM7Z,KfQkxf,L1AAkb,LBaJxb,LEikZe,LcrBLd,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,OmgaI,PIVayb,PrPYRd,QIhFr,QVysJe,QjUiqc,QvLWAb,Qy2cOb,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,VwDzFe,XVMNvd,Xi0ENb,YA1iG,Z5uLle,ZfAoz,ZvHseb,ZwDk9d,_b,_tp,aW3pY,aurFic,bZ0mod,bm51tf,byfTOb,cephkf,dsBBae,duFQFc,e5qFLc,fKUV3e,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,ovKuLd,p8L0ob,pjICDe,pw70Gc,q0xTif,qv5bsb,ri2s0b,rm99Nc,s39S4,sOXFj,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zKiH5d,zXfYdc,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720LDE8ISk-83wVQHVDoQdYmvmJiiEA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=db7dHd"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.n("db7dHd");.var l6=function(a){_.qA.call(this,a.ua)};_.C(l6,_.qA);l6.na=_.qA.na;l6.prototype.Kf=function(){return"db7dHd"};l6.prototype.Ef=function(){return!0};l6.prototype.Lf=function(){return _.j6};_.oA(_.fE,l6);_.Az.db7dHd=_.jE;.._.q();.}catch(e){_._DumpException(e)}.}).call(this,this.default_ChromeWebStoreConsumerFeUi);.// Google Inc..

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	527
Entropy (8bit):	7.38773512635068
Encrypted:	false
SSDEEP:	12:6v/7ia+WMhXjnsQlEZGfPmJdRR2LVwgVse18pSiyl:ieoQeZEmJ/R2f8pCl
MD5:	DDAEE99B7C41CBDC9484B4F659C3BDDF
SHA1:	81DFB70BAA2269DDD399C57E815EAFE56BB11E75
SHA-256:	4CB12540B815E53CB71624A265C267F8FE481E438BF66AEBA3CD528777766126
SHA-512:	24ABA19D4E5A515DD8AF205CE5DA1A4341C6F4AE7BD14E80A5C9494BBD6B960FB4CFEC1AA7F787752373A6DCEC3C6B3D5703E9BB423B0B228B3A00CCC119E232
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/03vIBKzhpPXUL7H1n02AqMiIUKUoitg9NOm4elO82eazDr4DZWjcYZetCI3wyIk8yamt69XHopC_6zZUrgKcS8mA-ws=s60
Preview:	.PNG........IHDR...<...<......")@....sBIT.....O....EPLTEGpL.......-(.,(.1,.,(.-).1+.1-.......$......JG.............jh..zx..F.....tRNS.....v..G........`IDATH..... ..P.6..,^...Z..k`0<....t...)..<.Z..8JUW.1%.L....j...!W.....+.E..+...O.^WE..5;..;.6..,...7.3....?c.X)...n.....V.....e...'0@....$..[f.f...>D..4.'3.Ad {...[.b.@.0..o......s7\.......y./6.g..oa8....cg.ll%;v......$.7..?...-O...p....';..a...S.<........6.n.$.V.F:......X.$..x..u>..G..D...L.Y......Y....c..5..uX.&..(9...]......JO?e\......IEND.B`.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 310 x 310, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3429
Entropy (8bit):	7.877293417729411
Encrypted:	false
SSDEEP:	96:QgkvQ9ULXKxBAejIo3YzEHYEnyelLahxvL9YEJu1JUB:QgZWLKxB7oE4EnKxhJuMB
MD5:	FA7659C35B21A530A21E39AFD7FAAC93
SHA1:	DE6A35506A3B227EFEE27BCC509C3525776761EE
SHA-256:	871975B8040629C7B43DE81B1A0878F40991EC2F49CADDD6441B5D1F8322AEED
SHA-512:	527A7F5AC47C2F15348C42543915E8D74E564727CE22A88B687ACB5E7EA14CC7F2CC6A0E4453BC20237E546315DD06FB59F0D12871F0D18FA282F2950E904FEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...6......bN.....PLTE.....................O..#......../........Z....4..'..x..o..........`..8..I............@.........D.!...........<..U..i................e............s.........xIDATx.....1..AAE....vn....`......{./...lKW...9C7!.....G}.ms.......[G..u..[.[G..u..[.[G..u..[.[G..u..[.[G..u..[.[G..u..[.[G.}.C.....A.[?...D i..M[..A....6mI..m....%m..iK.>h..}.-i.;v.. ..p.....kA.X.l.+..Q......&.A.E)....Og>..^.^.J.?. ..C.al..qX......uFw..)......rA.7.\|...e\|.Cmv~<.../=.Fd=^C.J.....G.......xJP-}.6.b..@1i.c.l*.a..<.<t...F....&.....-.%h.63.J..M..."......X(A...@......!..].3..4x..>B.D.v..}~t.N.l..........Cx....,...i.).#T6..p.^OV..Pkk..c.a...".5.n.L.....jW..V..z..:.p.@s..{............m.s..i.."J6.`..6#...H.....S.I.l...i..@.....P.<...P.t=....,g.$.....<........q..<1....6.k.7..'..y.Q.v...9.g.?.<r.-.Nu..\;..l.l...U].V.....lwl...`;...tw.u\.m....7bw.BcM...........J..N.[.[...B..@e.a.c.M...]B3..zp.}.%A.`.Ih.^=....\..#dJN..

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.6042015135302385
Encrypted:	false
SSDEEP:	3:YCMxvOUmVR0oQA3E/WjVxXMcYU:YCM5OUiR0N7eHcXU
MD5:	71059E9DD759864825E3ED6700DEA741
SHA1:	15D405FB6AB488C1DE764808CB88FEFFA95AF66B
SHA-256:	FF1B5EA96EA9A4D300E12BA7C27919DCFD376112786442E5D8861EE454DEADF2
SHA-512:	981F046883D68D1DE01A23677224EFD4532C808B7F9C910FABA0B3FD30255022FFFA698B6376B8527A8407068B4742603F13B06B61A7BDE4D303106578CA1583
Malicious:	false
Reputation:	low
URL:	https://my.rtmark.net/gid.js?userId=9261040a4f7248eba3a37ed35ddc868c
Preview:	{"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	9123
Entropy (8bit):	7.946132975922535
Encrypted:	false
SSDEEP:	192:bpnIGfrQnwrTdZnqTt+rHB8zC3i2Cipzd3ctz8s/gXxGSWO35WNqrMc:bCQlrXqZ+rHt3i4pzd3cysAGSWOpWNER
MD5:	E036C9B8B4B7EE74C1121989E6A8DA45
SHA1:	01FEE7B3BEC9DB687A40E98D0E2FB77536F92992
SHA-256:	FE2F65587A8909A13569F0A615DE10EB7C91D41A7A48C8720D46D0B3600593A5
SHA-512:	F216313F3C96E5FB96D2ABF8A94977CE6E928968E3331791AA2DBEB402159CEF53F8B76FA8DBB9345765440F46716E7EA6D828A1BF5BB753C1FEF2FAD19FDB49
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/vlCCdHvzQiM/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5%(-/222."8?70=+12/.........../...//////////////////////////////////////////////////........@..".......................................H........................!.1A"Q..a..q..2BR...#3..b...CTrt....Dcds.....$..............................#.....................!1..A2Q...".............?..H.U....\|..R2.c...\|k...M...o....Q....A.:Y..W..$....1.<.25K.d..76p....9$`k. ..)[...\..K.E..>pw..3...q.h.......q.=/.f.]+......s....F.e.W2..b..g.......7\..G.:.+..GA.R........._...4.....@.......qt.......Dn...b..O.y.H.L.\....G...r.Y.yG....t..........Q.^;...X^.).\.Q\|B.{X.4x.........3^....DQ.Q...u..i....~..7....\|...... ...o.j...,h(..D..Z.<Q......oI...'...V3f.K..d.....2.n>%.``~................+]....#..:l..'...GY..e..aY..?..X..o.A.@O.:-8.sXT.SUg. ...:P.........PZ...9..p.y............^8.'.....l......}.q....8.].9{dtQ...l..,A.XP....+.....l...C^.......S......_.f.X..j.h.+..O.5.C<..5E.=.....m....G(.Tp..`..C...

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5292
Entropy (8bit):	5.365542354174142
Encrypted:	false
SSDEEP:	96:BOEaWixOEaOFZOOOEanOEaNVc+oaOEaDNBOxMaWixOxMaOFZOOOxManOxMaNVc+D:Oh+7pgZumh07XqZkFhb7wZZLB
MD5:	6458E711614C3D7783445BB201E7650E
SHA1:	90D6EE436EA0AE91EF94A1F0DCC7E2799B8C9035
SHA-256:	3D6A1250B131483BF690875FCDB40533A394FFF0880F007F48F9B8F2A1CCD8FB
SHA-512:	25BB2563EF7B2FA56F8EE4BA76351640F2621D6F04986E0D8FF9BF8F88DE25BD7486F9AC6A25B1860B9C236F6C3F2FE7E0747170EB2CF302043BC72F6A2C4270
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Nunito:wght@400;600;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Nunito';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIOOaBXso.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Nunito';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIMeaBXso.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Nunito';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIOuaBXso.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-e

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	11875
Entropy (8bit):	7.961662992789172
Encrypted:	false
SSDEEP:	192:wEozIN5lc4BxPcw7E4dYhnGNqPnC2OKf28wP4ZTfE1T312yuLf6guLLRQG:wENlcU+we5G4nCrL9PSTfcBEL4vR7
MD5:	A14D8D139AB8776B92B9A0924B21CC56
SHA1:	26075A8E119CAA5A96F00DE36F5881DADD184FDC
SHA-256:	A64FE2104D4CCDAAF64D1358D6FF125EC9180C1D32AB92F37476DE14903EE781
SHA-512:	F7E61B95778A02422094585E5ACC3C74648F3AB0BF908D6EAF5EA30F5572AE75C347C0D385C505913E075B6B87D1DFAFDFC7CCFC947A6CDF929C6ABA60ED9AE1
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/z2onVi12x9yGQDR6s9E9hvrnKTmC1pE2g0WhujiRmGNc_nzkCgZqg8WrkLD7mzBNq-Ui8OO37ynwyXzTUjQ1Nbk1=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O... .IDATx..w.e.}...u..7...3;......&.4E..E..(.hQt..-..K..lW9T..K.?._.Q....i.H.I.LI.)1.A.$...E..b.qr.s...?.qn.....v6.....{.=.t.>.o..3.r....b#.%C)..~.T.VS.a1.M.5Sf.....Ef..!.......C.....B....WO>..{>:7...p~....J...i.-........y...=.h4n;x.^o..y.....h.G.&\..u.H.1.D..I...:..t.6.......IK.$...N.\j5.Q......^p..\..cg....7Xz.Yy...S+.dqv.+..kk.V{ld.Y.AP.I....c..)..>.3?........m;.G.....Z..s?..F.V].....Zk..\..m<t..c'e.S...[.((....J.GP...F.....6^...2.\|..?........M........Cg..S.7..+....._0#_....W...h..z........z*...O...&>z..l;..PEQ....$)..T^.S,...........<....f.P(...O?.8.=......g.....p.....+//,.l..o..c..!hzzfnn.........+.J~..Y......-P.s.`8.j......{%....&''...3.n0.......Ry..!..B!W.5....].h.....b.......Vc..}.X.q..P(..A..i.... .d.Vk..qqh .S....K.`!....R6...!A422"..@.$N.o...1....S....c.fet$n...c!...C .....0df0+.(%o?x .\|)D.W..&1z.QF..w..c...1.D.M.<7.yRJ.....s.P.B.9...n;x ....442:........NL._...4V.....+..b.}..$IB..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (377)
Category:	dropped
Size (bytes):	1213
Entropy (8bit):	5.464118822749191
Encrypted:	false
SSDEEP:	24:hY29yh1BrdsXwfllZKGlYQVQaBLSB8xq8BkdFRGb14T:9Qd+SnvkILJx3qF4OT
MD5:	47CB577789A8792BFD730472A014AB7F
SHA1:	DA485D0B1AF729D513AD47DB01D4FCDC1F245583
SHA-256:	242DB6DBE403235AE421CF707F07B8904D23A4CCD7CF477D9F6E6C71756103AC
SHA-512:	6D5E5426DC6B01529E109D1D7EEAD0A5297F96D637D4155E5E360883321D68CFB9DBC505B8FC3C692094FC050219D865CBD10D620A86933A3B7165BCBCE92637
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8" />. <meta name="robots" content="noindex,nofollow,noarchive" />. <title>An Error Occurred: Method Not Allowed</title>. <style>body { background-color: #fff; color: #222; font: 16px/1.5 -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; margin: 0; }..container { margin: 30px; max-width: 600px; }.h1 { color: #dc3545; font-size: 24px; }.h2 { font-size: 18px; }</style>.</head>.<body>.<div class="container">. <h1>Oops! An Error Occurred</h1>. <h2>The server returned a "405 Method Not Allowed".</h2>.. <p>. Something is broken. Please let us know what you were doing when this error occurred.. We will fix it as soon as possible. Sorry for any inconvenience caused.. </p>.</div>.<script defer src="https://static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317" integrity="sha512-euoFGowhlaLqXsPWQ48qSkBSCFs3DPRyiwVu3FjR96c

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 61, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4208
Entropy (8bit):	7.936046947741653
Encrypted:	false
SSDEEP:	96:4kUR8b3pUvtFGCR4euhobhVd3xcU5P7p1/s:eWb3p8DGCR48bhVd3xP5s
MD5:	13FDB4D026B34DF026DBE36146A0EDAF
SHA1:	2D2E8D859254FEC64365C0C616865347A0F3DE5F
SHA-256:	D53B532DE44C4B83FD6899BA8AF1AFFF1853B070D9229D4EE547867CE636BECF
SHA-512:	969CB193969FACC2ECF424976406C4A7EA6AC9501C40C7C1F041354F6AC1C4B715CFDB1ABC9517F353A137D916D99AE9C4D0FBC05B3870F9C98D770F2A87D0CB
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/images/logo.png
Preview:	.PNG........IHDR.......=......%.....7IDATx..mp\.y....j%.+..9B~!.cK.i.r!..K$z....~.....2....L0.-..$....fl.f.L:.n&.,/.\.4mC...G& C...X~k...O?.]s.Z..w............{..?.y;G."D..!B.(....l...5.G..O...xp...M_\|..}.x...&....v..A^.j...l^.....3.X...g..u1..../u.w..V%..s2..r2w..\|k..r]}.@.2......p".L..4($Bb...!......Y.EW..#B]...e......D..Q..........l....[.jkk..i..:+.H.".!........=.......e.........9.id.j0D...4.M.........=9.3s.Z.Vo.."r...F}.z..K+i..R8.y.w..C"...k.."..Z.m.>r. .........W......h..<\...w.~K._...g...~..n...tH...[.@.-...A_..6..u.:..Z.k..K{G;.a\|.#..oe..._..D...B.7C"\Q.;A.bf.@U.......!.z>.0t\|.....xH......l-3%..l..za.92.z~.....4....O...3..!...(..2+........)b...^...8>be.s......<....[../.Q."..L.s....B....6.Cy.q..^..7....3.45qu..w.{...U...D2a...........l.q....G....`.....\|........h\|...jr.M/....ev.x.".*>?_..i.$k...\|..XW"?...9...<.<..cd.7.7'...V.z.K..m[!.0.../V..t.#..!.p.Fb+.id.p'....&^....Y.p.N.....~..f...D".5.5...C+c...[...Kf.].a=.a.H$(.W..D.....D2Q.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	223464
Entropy (8bit):	5.566362667606742
Encrypted:	false
SSDEEP:	6144:Dwirvdks1UQXkA+HEloLielnENVB+//uQ8a0:ZVks1UUNVB+//Eb
MD5:	3236E4B94C069270EFAD2A0965B8D864
SHA1:	8CFE8AC947A3AEAB7481D279AFC4AF3EA64E6B71
SHA-256:	A4CA9032604EBEEBA4C9BD16AC3ADCC8CD132D698626166B554FCC3763391795
SHA-512:	87418FC5937AF1F081CB995E67D9B6A9EEE67C6FEB532B3C80BA5C63A3F057DADB070706E07454AEC8F9B54064FA6978679C8FCC07C419CADD154C73E7532DCF
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=G-C16XQ1V2Q6&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":6,"vtp_instanceDestinationId":"G-C16XQ1V2Q6","tag_id":18},{"function":"__set_product_settings","priority":5,"vtp_instanceDestinationId":"G-C16XQ1V2Q6","vtp_foreignTldMacroResult":["macro",5],"vtp_isChinaVipRegionMacroResult":["macro",6],"tag_id":17},{"function":"__

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	6826
Entropy (8bit):	7.917421487942241
Encrypted:	false
SSDEEP:	192:zwdNCt3IcQeePQUxClY2ZOTTtrOtNiPUhmQ:zwdABXBuQ0F3t6tNiP67
MD5:	E39992AC13478511FDB6D50345AF8BD9
SHA1:	403F9BB746E29510C3D5F4B9BD9BEE924E410282
SHA-256:	C81CC6F073692CD5333109BBE08288B64752D0A188562B4DF755723178FBF551
SHA-512:	338E777F528FE34D82E6000888770C4266F535ECDFB28DCABDA2336B726E35855C8C30B0DAA976DF72D7D0283B47B92E5402F003A724E3528B391CD3A6634854
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/0nBZLHxmUd0/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70=+12/.........../%..//////////////////////////////////////////////////........@..".......................................A......................!..1A.Qa."2q.......R....#Bb....3CScrs..................................(.....................1.!A..aQq.."2..3r............?....Y.. H.R.^..IQqe..NqY.n..Z....Q4+.1.B.[.c...Z...d:...]3.^j..v.D....7:..'...3...c.T..Q........`,\|F.._$...;...3..u:.fm.7m{..%p.$..O%.....O.:...~.n.>..w.w.\|_J.f..6wq.....2.Z.\n..yoep!...&\|..\.o........oR..L{;wr{....M..h......l-9.;i'...x...^....7a.%Z.y...y..\|a.......r]..AxLw..].=.>v....:JTi>..y(......b)....6. yN.-\|eJ.5G9.&%.}.5.N.....]&j>...i.Z...m.$s...BOz9..k.$.>..9@...]4j....2......0[..r...S.p.<.*d.>/.>.o....a.O.Q..h.....H&w3>..........#M9.{mr..O.D..$sF]#D...:2.....Dn..0n.......(...P...R.Ls).&...."%.s@y5..,.-.4T..........uJD..).@0".Z.........D.`kA0L+.\.-:s@...S6..TMm.E....G..)..........}..6E].$.K....+L2..2.3.nh.I....qc...

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	7078
Entropy (8bit):	7.94043159770435
Encrypted:	false
SSDEEP:	192:ARUIaiDTwgsOM/XCk3iknbwy06+OZgtGfQ2EdC1w:SULiDhsGcnSOZtaw1w
MD5:	8B19113CD0954B21CC89C1B54AF49E19
SHA1:	756F9FC10122C4CA84AD751B7407D324445FAD49
SHA-256:	D03AC8769C7712A089C30C37D1E37010E286FF0D30005F58CCB1119FB550FA55
SHA-512:	A30521F35BB0C38D5AADEA0D41D905A1AE0464CABFC77CBC7BEB700F7A7633294E38C4D54D1F5B9E61278F165441C47BA86690542451F8B25D122AED3EE7DB43
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../..%//////////////////////////////////////////////////........@.."........................................B........................!.1A.."Qq2a....#B..3Rb..r....s......c..C...............................+......................!.1A.".2Qaq#3..................?.....KX........m.3..B...-...0...@G.J..2&#.B."1F0...).p.2Np>.Q5{2......>.[5kvV....'>l.^..$.c.....&U).......?C.u\nUO.6G.3=..8.....R...5B....S..[.;.+....G.....Q.f..iO.EZj..;..A.e..92...d'...D`~_3...={'^k..w..06..........v.8....G...@.peO.ZO..x.S]..l."~.%.A.r...pcK..Ze...o.EL.u...76.uB.s.)..6 ._..+.."t...=.=....\6.....}..q.%....i~.s.g....-..w.o].?..D.p%.,N.......3..$.UJ.......!e.-.....+..B(.B....0..0.De..+..../......M..K.dA.W.k....@..(..H.....O1..CbC;.."#.bcG.BAH.3 d.#7;...Q../..m1...`..\.....a#.KG.....V....NJ..:`{Lu.Wl.}.'.)..nY.MFu0.....UA...}.....L."...`..%..>T.G.X.............-u........&q...#..\|s.~*p.,.+:..U

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58
Entropy (8bit):	4.047468393563874
Encrypted:	false
SSDEEP:	3:YWR4brEJRA7WzHyXQO8R4v:YWybrCR4v
MD5:	289BE6DB62B320BC4B1E1FD86E0F0B7E
SHA1:	32F85540B56D5971B3696D38E60E4947B862505B
SHA-256:	E4030A66EFD0BF72B0BAF66848A3C5F6CFF5D24E24EBC58464F1A41968583D66
SHA-512:	735F2C85243FFED7DB58FB74F7E5549F4D90136F73E4962F2E643E919BB96B4BCC76F5CEBCFBD425A00BD491F256E61A2F8BBE6775A2E9629F35EBDCB10196E8
Malicious:	false
Reputation:	low
Preview:	{"status":false,"code":"error","message":"wrong request"}.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	9070
Entropy (8bit):	7.928071377011921
Encrypted:	false
SSDEEP:	192:bE+et5nr175EGPeK1RK1/MRJlSwDj4BUZoRUQrJ1yFIO:g5tt1dEp+o1/NUQNEFB
MD5:	FCC573BA63E7F0968E887BB979373694
SHA1:	E457E2350E2ABA12231AA48DC4E2C409C6172EB3
SHA-256:	9895AB198384BF9FD22E3772C5CA06E7A241C5F83876459398DE4E0E44D064BC
SHA-512:	33F90A5C1D22F5EDAEF9C803E27ECF7AA4DCA93F56C15582DECD25F7F84D00F375EEE9051BAB0D7BD2AC24EECEC6686E5623A9A3ABDFA1F1BA421E9172F87ACA
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/DEzbbbVsNi4/mqdefault.jpg
Preview:	......JFIF...................................................+#..)...%5&)-/222."8=70<+120...........2&#)///0///////5////////12///2///2////6//;////0/5;/2//........@.."........................................H........................!..1."AQ5aqt...#2....Bbrs..$R...34C....ST...c.........................................................!1AQa.."q.2......#$.............?..h.....(...&z6..-.BUM.e....K.....x....x..f..,...L.$.P.?..58..u.?.I..ef....... m...^v._.3X..d......y......NF...uq.ea.$...W..$r.AI.......o..n..&B.....=~85...7.c..>\|.z.KK.....5.Q^...QE...s......T.AGxt#qP...s..g..'.e...rja...F].....!P,s.`...RD....XQ..`......Z`?....Q...3.o.h.N{..e.=.u...........O/.......3.....Q...!..V.NA...=8W........K.q.?....`.....4...Q.E..s.-.7..=..K&.?..s....<M2..[.97w..4..-R.......~.0.6?..P..8>..]...t.u.F..#...H..'".qK..........%.......M...Q.._H...h....9..V\|rg....?.....I...<r...s?.i?.R........t~.~..O..[...QR.eZhp..3r....A...e..... ....U...m.......Q"..(..h.QE...^...K...Sj.s..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31568, version 1.0
Category:	downloaded
Size (bytes):	31568
Entropy (8bit):	7.99179193151151
Encrypted:	true
SSDEEP:	768:nV/PrFLvj4faRm0uZd9N56pGyOPRA3Y8NyjZ:pPrFbjU0m0Qd56pYA3YUa
MD5:	EB11BFB369775FF0739DABB3A5F379CC
SHA1:	2EEBAEA2F7080C0B256FBFC70AB91473243AF0F8
SHA-256:	2E0BDC192134BB3950A1BA4C1148901E39EBD8D2D01F64EF23106E90A9F771B0
SHA-512:	59E89752E932AADE54D5B2B940E09F3C8B12A836F1C5EB515E82036A97492F42E12A4FB3DC156CB8D969D6CB4E8FD8F18B358715F972E12D4596AD390430CB21
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2
Preview:	wOF2......{P......H...z...........................X..j.`....l..a.....P.._..8....h.6.$..l. ..8..{...[.3.@..o1.........(..vD.D^r.;..(..7%....?/i.a.t.kKa...fi(T.DE.....P.b..-n.i..=.q-1QR.$...1..3C.....A..v...y:.n....&M.}.p)...r...p.l...5t...I..N.....>G..Of.f...N.H"y.{9....d......u/..f.&=...:..@...A.e3.a2.e.R f.L..E..nN...mO...+.....f..`._..G....O...s].q..).m"k..a...U..........SDRR........^J..g.J......Mcic......u.f".\|.:...J8./...zv.....?1.........<...[.-<.I........k<.M.kp]j.?...l.....d..Y ........k.(..M.S....E.(...~..#.........}..91 ...d...k...6....m.XA........p.X.`.6...u.l...o..._....S._.G.....%SZ...K.~..1.Z.....vu..2...T.+E...Ob...\..D&...KdrR9..T"......Hr.T".. ..e........B0...._.O.\.33w.........-...2....u..K.+.J....R....G.TX....nI....@.."l.%t..-$z<....1:.F.9.......5...f.4..%Y2.P.@.t.....S..e.1..z...o<....O.ECp....z.....g. (.......];...7...r..w....Z8W.$.z$.z.y{...6.........F.....'..y\|...R.ss...[.UM.".}.d....d..f.%.l.A..N+\....H..Y..*t

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	555
Entropy (8bit):	4.737489872325589
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5rrQ1INGlTF5TF5TF5TF5TF5TFK:neRH68eQ17TPTPTPTPTPTc
MD5:	17D0B76D6CE3D1E73DD73B6C1FF86097
SHA1:	D91C212B541E0277833373B1A2505F392195FF8E
SHA-256:	680A11E8D8D61E7731D3F814DBED1503792180638F22EF3E79D958194152C8E9
SHA-512:	470C296D5D2ACEB3F61414F13DBF88873573E3957B222E9D88627EE3B91440F1F350224408C6EC9D6099B12B128CD59518AE30F5DF2E476FA5514B7613537B2F
Malicious:	false
Reputation:	low
URL:	https://track.routes.name/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.20.2</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1334)
Category:	downloaded
Size (bytes):	1674
Entropy (8bit):	5.217114400170501
Encrypted:	false
SSDEEP:	48:kMMcgG4fHyYOXmiuGiuq95M99SmWaHBb98VJcfKjvjxJ:Scg3fHyfuOq95M98mpHBEJqKjLxJ
MD5:	9232E9585C97C7997CA4D8A49C1E09B1
SHA1:	E62BD6E0A357CC25CB34240D361AF1CD98B007DB
SHA-256:	F2DEB673BC54384FF9D25BBD70804DEEDDE3C77E7ECBBEA170D83B299AD75D3B
SHA-512:	5F2037F367370BC9EF03A1F39315007510CC8E8CE18A71DF77942B5BC349D95D9D6089BB413D1F381C0B4EFC8D6C5A4DFFBCCCBCDF5E4B93DDA2A54CB513B12C
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/js/custome.js
Preview:	jQuery(document).ready(function(){$('.formate').click(function(){$('.formate').removeClass("active");$(this).addClass("active");var format=$(this).text();$('#formate').val(format);});$("#input").keyup(function(e){var code=(e.keyCode\|\|e.which);if(code==37\|\|code==38\|\|code==39\|\|code==40){var index=$('.selected').index();if(!index){index=0;}.$('#suggestion_list li').removeClass('selected');switch(code){case 38:var new_index=index-1;$('#suggestion_list li').eq(new_index).addClass('selected');var new_query=$('#suggestion_list li.selected').text();$('#input').val(new_query);break;case 40:var new_index=index+1;$('#suggestion_list li').eq(new_index).addClass('selected');var new_query=$('#suggestion_list li.selected').text();$('#input').val(new_query);break;}}else if(code==13){$("#suggesstion-box").hide();}else{var search_txt='';jQuery.ajax({type:"POST",url:"https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1",dataType:'jsonp',data:$.extend({q:$(this).val(),

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	867
Entropy (8bit):	6.407903068329912
Encrypted:	false
SSDEEP:	12:6v/7uUktAXtzt+7ykGf4Wz8snCfb+OrG/vqBXG/fga+93uh2zS4+gEMwuWZc:CkARw75GJ1CT3NG3P+93zIgEMwNq
MD5:	EFFFD4CF797656C83E0B8D912841DB81
SHA1:	5DE68E536B0721848FA604E9964ECA5EB25EA9C7
SHA-256:	1A793EBC365A5E8F218D6D27C0E85C9C7DF2040F245E37E8319549706A17D036
SHA-512:	B5325CDC4B2AFF74EB5B433DB495B60644CC19F08F2D0293A20C9DB8C8EA9710538609DCBCAB487F6E24CF0F61AC7168C08991F4840F0A2BA6FE2215B2162785
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/images/globe.png
Preview:	.PNG........IHDR.............(-.S....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE.....................................................................................................................................................................................................................................................PG...OtRNS.&x2..1z(...m......PN.RH_gk..^FQ-..S.N.T.,.O..IJ..2p3..JH.PO.+i.mM.....y.v$..df....bKGD....H....pHYs..........+......tIME.........@ ....IDAT..5..V.P.....\-`...(...T.,..(n.....T.G.9....U8:.N..3.U<7..%..z..J.B..c.Q.7........D...(..$M...C..pc...0.(.z.e..1...r".t*.qNs.'e.c..<.....e...!..4M.8.z._..N.]y....6.:.A..k...ux.s-6.....o.G..f.[.;+.'!.. >...%tEXtdate:create.2020-10-09T12:05:10+00:00cP....%tEXtdate:modify.2020-10-09T12:05:10+00:00..t1....tEXtSoftware.www.inkscape.org..<.....IEND.B`.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	192799
Entropy (8bit):	5.539696790913918
Encrypted:	false
SSDEEP:	3072:FbOeE/RrC8AS3tkrclHUMF3Ob/A/ILAEloLWtIJn24Y1T3D:Zirvx3vVXOAKAEloLienzG/
MD5:	C30A47D6C2431789C14AB63DA9E2F4FA
SHA1:	8056E88BA6187DA422B8A8E858E8DF2C16B666D2
SHA-256:	9A40BE9BCB5CE53CA9E30C0A731B39470A10ECE893A4777073F86C41AEB6691C
SHA-512:	96691865F632AFCBEDC20B167E0A774C794388B9A30D7C91247B2E7675E2BA042A9CFAAEBAE114011915757DFEA89588C0C4791ED805AFC9F0C4BE0FE963A531
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-225406547-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2056)
Category:	downloaded
Size (bytes):	18394
Entropy (8bit):	5.452049975824564
Encrypted:	false
SSDEEP:	384:hcXfX9yALAULgMEcqdeydhPN+A+F6+5SYOelHO91kIuW:hcXfXtLAUL405ddOG8
MD5:	24FA0FEE289E957EBCEEC612BE21BF31
SHA1:	86C85ACB810FD4EA1056BF440329E4D51D3A7F74
SHA-256:	54F949B9360203008385FD828748B0FE2AC0B98D1912C8A00AA9AEEC168A7FC8
SHA-512:	E83A53FD07AFDF6C64E2D44EF495EE91F34CA7CD0D5FB1E320D83B031A74416A0B3EA6C18145E7CCBA737A52B1C6DE185488E619102A5B77011CD8AF7519F15F
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/googleapis.proxy.js?onload=startup
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},g="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ea=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},fa=ea(this),h=function(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&g(c,a,{configurable:!0,writable:!0,value:b})}};.h("Symbol",function(a){if(a)return a;var b=function(f,k){this.B=f;g(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toString=function(){return this.B};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10669), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	40672
Entropy (8bit):	5.607771700099351
Encrypted:	false
SSDEEP:	768:B2HMcKDEkFOKbjjVTaCeicsv5ydymNZ01BwJugGvXbc7ZwWkZy9AriKV:B2HrKAkkKbjjVTaocsRydyq21BUugGvt
MD5:	3FFF1D6957BFF04109C62411B8641EAE
SHA1:	12A4BDBD8F9925B834E4582AA502A077CEA1C260
SHA-256:	E18FD7982F3D967EBE173FA16E6584EAEBA22D20EE0339E06C98673E2FF6664E
SHA-512:	7EC6A635A26DF0A9FE6C9279084B9A2A0694513D4C27E4DF739FAA79554ECE33238F5279874834769903DCE73ACDB4921D2AB0E9D64CF0409DA4B351124E6D95
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html>.<html>.<head>.<meta charset="UTF-8">.<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no">.<meta http-equiv="X-UA-Compatible" content="ie=edge">.<meta name="google" content="notranslate">.<script>. function getCookie(name) {. let cookie = {};.. document.cookie.split(';').forEach((e) => {. let [key, value] = e.split('=');. cookie[key.trim()] = value;. }).. return cookie[name];. }.</script>.<script>. function rtrDebugLog() { }. </script>.<script>. . . let originalOaidValue = 'd36449c3fc5d2c86d4a195aa43f059a6';. const cookieOAID = getCookie('OAID');. let syncedOaidValue = cookieOAID ? cookieOAID :'d36449c3fc5d2c86d4a195aa43f059a6';. let isOaidSyncFinished = false;. let isMarkerUpdatedOaid = false;.. function getGid() {. rtrDebugLog('[getGID] Start...');.. return new Promise((resolve, reject) => {. try {. const oaidRegexp = /^([0-9a-z]{3

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54234)
Category:	dropped
Size (bytes):	70716
Entropy (8bit):	5.678547149035386
Encrypted:	false
SSDEEP:	1536:m4eQ8xCKDGp5E9IJ3fj5lLoYZycwu6wQZhcDlWcLsUH:veqp5E9IJ3r5touycwuxwhcrLsUH
MD5:	D62DCDBFB5C62243FD199F305BA765A7
SHA1:	2E5A3DF3D40917898169994300729E23D50BE837
SHA-256:	769B6A02093E421B2621A10E1BAFA7BE0BD56920C91A4A7688EA95628B24AA38
SHA-512:	7D6A700AD427D84252054F118F5F92924A6E135327627407A56024F998FEAA1AB11934F8216A1695694EFB6984DB167BFDA31AD53B889F82CE306DFD41A5806A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<meta name="robots" content="index,follow" />.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title>YTMP4 - Youtube to Mp4 converter Online Tool [100% Working]</title>.<meta name="description" content="Our YTMP4 is a free Youtube to mp4 converter or YT to mp4 online tool. you can convert and download youtube videos to mp4. It's totally free and 100% working.">.<meta content="width=device-width, initial-scale=1" name="viewport" />.<link rel="icon" href="/images/YTMP3.svg" sizes="any" type="image/svg+xml" />.<link rel="stylesheet" type="text/css" href="/css/custome.css?ver=233">.<link rel="canonical" href="https://www-ytmp4.com/convert/">.<link rel="alternate" hreflang="en" href="https://www-ytmp4.com">.<link rel="alternate" hreflang="fr" href="https://www-ytmp4.com/fr/">.<link rel="alternate" hreflang="th" href="https://www-ytmp4.com/th/">.<link rel="alternate" hreflang="id" href="http

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
Reputation:	low
Preview:	ok

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5209), with no line terminators
Category:	dropped
Size (bytes):	5209
Entropy (8bit):	5.30248116665556
Encrypted:	false
SSDEEP:	96:FlElBE3+aeTMHSebhDK+KC8rZoUFlN7b2PJTdW8BZDzBYk:FKlBE3+VAHL78rZoUF3uNdvBZ/Gk
MD5:	440115B3FC72BDB40AEA57F71CA1132A
SHA1:	74DB7C687B5D462D6CD523C1179B4D05275926DC
SHA-256:	DA7C08E2A8FE0E150964FD932C63CABF41222CCBF0E028EC921EC5AFBDD5939C
SHA-512:	0A14866A8291F1EA6169044DFDCBD575302B648A950C164A50729C27312A5432023C4EF30FAC046D6C98577546076AB05A10CAE99207CDD32DC2D0132501ED5A
Malicious:	false
Reputation:	low
Preview:	(function(O){!function(e){var t=O.Z();function n(r){if(t[r])return t[r][O.i];var i=t[r]=O.Z(O.B,r,O.w,!O.X,O.i,O.Z());return e[r][O.z](i[O.i],i,i[O.i],n),i[O.w]=!O.N,i[O.i]}n[O.y]=e,n[O.g]=t,n[O.K]=function(e,t,r){n[O.h](e,t)\|\|Object[O.b](e,t,O.Z(O.GO,!O.N,O.RO,r))},n[O.G]=function(e){O.HO!=typeof Symbol&&Symbol[O.hO]&&Object[O.b](e,Symbol[O.hO],O.Z(O.p,O.cO)),Object[O.b](e,O.U,O.Z(O.p,!O.N))},n[O.R]=function(e,t){if(O.X&t&&(e=n(e)),O.v&t)return e;if(O.P&t&&O.t==typeof e&&e&&e[O.U])return e;var r=Object[O.r](O.q);if(n[O.G](r),Object[O.b](r,O.C,O.Z(O.GO,!O.N,O.p,e)),O.d&t&&O.oO!=typeof e)for(var i in e)n[O.K](r,i,function(t){return e[t]}[O.fO](O.q,i));return r},n[O.H]=function(e){var t=e&&e[O.U]?function(){return e[O.C]}:function(){return e};return n[O.K](t,O.OO,t),t},n[O.h]=function(e,t){return Object[O.FO][O.a][O.z](e,t)},n[O.e]=O.F,n(n[O.m]=O.o)}(O.Z(O.o,function(module,exports,__webpack_require__){O.f;var _antiadblock=__webpack_require__(O.O);self[O.c]=O.Z(O.S,6847935,O.V,"saipsoan.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65475)
Category:	downloaded
Size (bytes):	248245
Entropy (8bit):	5.540983619704911
Encrypted:	false
SSDEEP:	3072:PHPAiXi4vGNNq2T/9X6LOyBcGVlsN7UZF0evJjp8ELAraNv7Kc3XU:giiFCcGnqUZFTxL7Kc3XU
MD5:	7E9A5E6E05FEB93E0BDC472BBF7DC998
SHA1:	3679D711333E36C132B8617570B4F0A1BA23A8A4
SHA-256:	3EE199BCB42DC73DA69D556323BFA5565777EF815EB7B29344E67F07BA2DEB90
SHA-512:	2C31B8E65992CF689262DC70D2D65DA2DD14F6A412F1635C3BCF01D73C4E9BA2DCC4459B6F9B8E598C8A2539DCEB61DABBCA05AD7EF9390F9116F7EFA3032BBF
Malicious:	false
Reputation:	low
URL:	https://dl--master--cdn.ytapis.com/js/app.js?id=7e9a5e6e05feb93e0bdc472bbf7dc998
Preview:	/! For license information please see app.js.LICENSE.txt /.(()=>{var e,t={9669:(e,t,n)=>{e.exports=n(51609)},55448:(e,t,n)=>{"use strict";var r=n(64867),a=n(36026),i=n(4372),s=n(15327),c=n(94097),o=n(84109),f=n(67985),u=n(85061);e.exports=function(e){return new Promise((function(t,n){var l=e.data,g=e.headers,d=e.responseType;r.isFormData(l)&&delete g["Content-Type"];var b=new XMLHttpRequest;if(e.auth){var v=e.auth.username\|\|"",m=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";g.Authorization="Basic "+btoa(v+":"+m)}var p=c(e.baseURL,e.url);function h(){if(b){var r="getAllResponseHeaders"in b?o(b.getAllResponseHeaders()):null,i={data:d&&"text"!==d&&"json"!==d?b.response:b.responseText,status:b.status,statusText:b.statusText,headers:r,config:e,request:b};a(t,n,i),b=null}}if(b.open(e.method.toUpperCase(),s(p,e.params,e.paramsSerializer),!0),b.timeout=e.timeout,"onloadend"in b?b.onloadend=h:b.onreadystatechange=function(){b&&4===b.readyState&&(0!==b.status\|\|b.responseURL&

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3114
Entropy (8bit):	5.551705750114455
Encrypted:	false
SSDEEP:	48:cyKfo0zM4QvC28vsuBJxOHdc/GkAoflsfq8hRPUIgfwfSLuoVElZJY:1KfZCcs4Jx4K1sfbuwfhflZe
MD5:	730AB9619EDDAFDC9D4E1B59F04BBF24
SHA1:	9C011E03A1F5054DEA92A37B5C4AFAB59BCA37FF
SHA-256:	8FE609AC2D45C1DE19BCCCFE4C604716D4F336827AB3CAAABFD0912943DCF608
SHA-512:	744D43592C034A5CB2BF744C0BC1A79DBDC0B661AD56E92C6924D3DA91C94B333DDA33ECBB74579B556F351D0A72FF942253064E256188874260514325007753
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="64px" height="64px" viewBox="0 0 64 64" enable-background="new 0 0 64 64" xml:space="preserve"> <image id="image0" width="64" height="64" x="0" y="0". xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAMAAACdt4HsAAAABGdBTUEAALGPC/xhBQAAACBjSFJN.AAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAACNFBMVEX///8Ah88Ah88Ah88A.h88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88A.h88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88A.h88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88A.h88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88A.h88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah8

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	87852
Entropy (8bit):	5.479617425066329
Encrypted:	false
SSDEEP:	1536:AtGiLDt83ZoniA34gXzFoY/T44V8zOr63UJ7lrVJszwISnKb2ZaIa51WgMP4Sd:c83A9pU4l2EISn/+78
MD5:	D46D2997AB218D1DBA1AB614422ED53F
SHA1:	3F1F6B9847C8AD209835DB366C62FCB209B83A67
SHA-256:	09E8CE2DFEAC0AD09CD24788931B38EA7E7592F2C28EECC324B2DD1CD69D1B42
SHA-512:	8042F4465F1D14C765B2E7BE775AB6970BC0A5515552F5784B55BEDA45D192CCDC0D67BE5389112BE1B3728F78010C00BE43010F6E8C940DA9B8039C42820855
Malicious:	false
Reputation:	low
Preview:	(function(W){(()=>{W.W;var __webpack_modules__=W.Lk(W.k,(e,t)=>{Object[W.gx](t,W.md,W.Lk(W.eC,!W.nk)),t[W.zd]=t[W.wd]=void W.nk;const n=W.Bk,o=[];function r(e){const t=window[W.PC][W.mO][W.Vt][W.to]\|\|n;[window[t]\|\|[],o][W.jt](t=>{const n=t[W.wo](e);n>-W.tx&&t[W.Oy](n,W.tx)})}t[W.zd]=function(e,t,r,i,a){let s;try{i instanceof HTMLScriptElement&&(s=i[W.yG][W.Oo](W.Kf)[W.zC])}catch(e){}const c=window[W.PC][W.mO][W.Vt][W.to]\|\|n;window[c]?window[c][W.jt](e=>{e[W.hC]===r&&e[W.GR]&&(r=e[W.GR],s=e[W.iO])}):window[c]=[];const l=W.Lk(W.af,e,W.Xr,t,W.hC,r,W.iO,s);a&&(l[W.Cf]=W.Lk(W.Fg,a)),o[W.WZ](l),window[c][W.WZ](l)},t[W.wd]=function(){o[W.jt](r)}},W.x,(e,t,n)=>{Object[W.gx](t,W.md,W.Lk(W.eC,!W.nk)),t[W.Nd]=t[W.Td]=t[W.Ad]=void W.nk;const o=n(W.t),r=e=>W.pteW.pt*W.cd,i=(W.nk,o[W.ud])(W.Dd);t[W.Ad]=function(e,t){t<W.tx&&t>W.nk&&(e/=t,t=W.tx);const n=i[W.od](),o=Date[W.CO]()-r(e);return n[W.wr](e=>e>o)[W.Ar]<t},t[W.Td]=function(){i[W.zO]()},t[W.Nd]=function(e){const t=i[W.od](),n=Date[W.CO]()-r

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	93471
Entropy (8bit):	5.495822685282166
Encrypted:	false
SSDEEP:	1536:Tu0YDdWFLDvEvTo/YVuuHVguWapz5Z7dptYJzW2quizjqoWYmQhHY3:1WUFjEvh7pzbbCzJqHEWa3
MD5:	429904AB1A47B6E9218752EB948D22A9
SHA1:	4D7CD2BF7A8B870C99DA1EAECA2ACAE2B04687F7
SHA-256:	B4641E5043C072AA60D3F5F57F3409ACE91B48E61AE0BB68CE8025CF09DA67EC
SHA-512:	F21EBCC30C47BAE200F834C3CB934B204151CC0FF0686E610D98FF7B01C8F2E8E1C8058CDDBD95B91FE36F2607EBF640BF705F6FEA195E9E967D5FD2DA997740
Malicious:	false
Reputation:	low
URL:	https://opmetapodor.com/pfe/current/sw.perm.check.min.js?r=sw
Preview:	(function(W){(()=>{W.W;var __webpack_modules__=W.uk(W.k,(e,t)=>{Object[W.Hx](t,W.hx,W.uk(W.IP,!W.Lk)),t[W.Od]=void W.Lk,t[W.Od]=function(e,t,n,r){let o=r.split('/')[2];const a=window.document.documentElement.dataset.fp\|\|'zfgformats';window[a]?window[a].forEach(e=>{e.zoneId===n&&e.sourceZoneId&&(n=e.sourceZoneId,o=e.domain)}):window[a]=[];const i={format:e,version:t,zoneId:n,domain:o};window[a].push(i)}},W.x,(e,t,n)=>{Object[W.Hx](t,W.hx,W.uk(W.IP,!W.Lk)),t[W.Fd]=t[W.fd]=void W.Lk;const r=n(W.u),o=n(W.A);async function a(e){var t;if(!e)return!W.lk;const n=await(W.Lk,r[W.dx])()[W.lx](W.ao);let a;try{a=e[W.bO]()}catch(e){}if(n&&n[W.fC]===(W.bk===(t=W.bk==a?void W.Lk:a[W.to])\|\|void W.Lk===t?void W.Lk:t[W.fC]))return!W.Lk;try{const t=await(W.Lk,o[W.kx])()[W.lx](e);return Boolean(t)}catch(e){return console[W.hZ](W.eZ,e),!W.lk}}t[W.fd]=a,t[W.Fd]=async function(e=W.HP){const t=navigator[W.mf];if(t){const n=await t[W.PG](e);if(n)try{const e=await n[W.qg][W.Ag]();return!!e&&await a(e)}catch(e){r

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1624
Entropy (8bit):	7.388022511794596
Encrypted:	false
SSDEEP:	24:f+cqjH29f6Xcd+Ojq1zsbBbIw6Qbfg6wYFUnFcC2vkR8rBzrNjlsNk2Ge1ZZ5:fN+cd7yzstIOfdwYER6VXsNjV15
MD5:	C359ABCAAE952EFAA02E06C6D8F133F1
SHA1:	E86A84E2FBB186E87F0E5DD17C2478BD5C7D96F4
SHA-256:	9F86C073E6343718A76A431C6B2305662F61F679C5133241484484750A397A5B
SHA-512:	D928112C6D09B467ACF251C4CE5A3A8DB4CF98E59239832308BD230C6C4175ACD2E25887C139D54C30936AC88A0206119E3817FBB9E5CD9EC6CBCAA2DE49B8CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....G<ef....PLTE....................................................................................................................................................................................R{Q....;tRNS.......!...-......`G)....fB8%.....kV.t[..y=3...}.pRKP........IDATh..Z..0.M........b.^..._. ......{...Cf2gJ.....).bK38P........U.E..1.5..I.OB....I>.~..6}.p./....8Us%..\|..\I.>..a......n.j0...&.....\|2&...Y...k{..g..Br..0Z.C:.F~...zr=...0.vr...\...{..~s.z.:TRH:O7N..Ij,:..B.... .d.....,``........d.....(... 1E.G...I...85..\|......B.5..Y.$B.R...&x....O>w_..H..~..f...N..O`.. s-".....[D...Ze...$..I..OVU....S...U/I.6...Zs...K)....be...`.IV..zgw...n.W...^...z..X./...@).&.l...V.s,P.:..\.7r.............E.dC.[...^.x}.........uc.{._.G.........4.:<(.e}..k.v..@.`..j.Y.3.....G...<.$...I....J.H...&..s....'....#....Qs.\..`. R8...0.`IqV..%./[.yT B....O.p.....\|z..$..K._c..3(..o."c..p..0...S...U.D.RS.XMio~...%.{lRv.....\|b3E..:...q2e...6.w.....

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (632), with no line terminators
Category:	downloaded
Size (bytes):	632
Entropy (8bit):	4.853427906858226
Encrypted:	false
SSDEEP:	12:4Ws3fWs9woER+b9RO92R+cZxc2tZc+NC8jnt4qAHsCpi:4WsPWs9x3CcXcHsr
MD5:	194FC3DFB67E5432881C6C660433C7A9
SHA1:	151E9F5E78087062A98EF82E574AEB6B57463EFB
SHA-256:	26783387CBDDA5D56D4F22C193DC40407FA13DF624358E1BD977FA8CA0E910A0
SHA-512:	2F59E999EA61B72F24B16FD8F65CCCAD8BD13A5989310A2FD17B7A4D175AE4747ED23AC3EE682807546F37EBD467E7EF55F681B8746625B31BCF4219707E176E
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497003&q=htt&_=1704923497004
Preview:	jQuery34109376985483024884_1704923497003 && jQuery34109376985483024884_1704923497003(["htt",[["httyd reacts to hiccup",0,[512,433,131]],["httyd reacts to the future",0,[512,433,131]],["httyd",0,[512,433]],["httyd reacts to hiccup runaway au",0,[512,433,131]],["httyd soundtrack",0,[512,433]],["http custom free internet",0,[512]],["httyd recap",0,[512,650,433,131]],["httyd react",0,[512,433,131]],["httyd 2",0,[512,433,131]],["httyd amv",0,[512,650,433,131]],["httyd theme",0,[512,433]],["httyd 3",0,[512,433,131]],["httyd test drive",0,[512,433]],["httyd 3 ending",0,[512,650,433,131]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	296665
Entropy (8bit):	5.558646051989005
Encrypted:	false
SSDEEP:	6144:I4TirvdksHUoXWAcH4IoLi+lnV5NVB+//uQWWda:xuVksHUENVB+//+9
MD5:	DD6AACEC5F30E15B323DB6E03E725E8B
SHA1:	C4DD1C8E8C9833C00E695A9E4DE8145983B2250B
SHA-256:	DAF0E6181218B7D7DBC56C30F915AE3B1B4E57A8AAC56A67EC01530BC671DEA0
SHA-512:	4A5D9A733B5B05230AD6A792A55F1E1023285060C7321DE858F675846E75F4959922664AC7F3410EBDF84E7527C747E9B4E83E8E01B68E78FEB93AA88319198B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-KHZNC1Q6K0
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":21,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":20,"vtp_instanceDestinationId":"G-KHZNC1Q6K0","tag_id":32},{"function":"__set_product_settings","priority":19,"vtp_instanceDestinationId":"G-KHZNC1Q6K0","vtp_foreignTldMacroResult":["macro",5],"vtp_isChinaVipRegionMacroResult":["macro",6],"tag_id":31},{"function":

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	5734
Entropy (8bit):	7.9044449668280325
Encrypted:	false
SSDEEP:	96:8IIDMEJtJubJI0ZkLoOKDAZzPyDC8w47IXpfwT96QI9PJsgpYKpzn:8vMMTJoRuuOf48Xp4PqP7O4zn
MD5:	BF5A0F4E6EC9C42C3719AAA1CBD73972
SHA1:	D0501B3682AFF760DCD889002997058452F89739
SHA-256:	654388399FC2C1FEA1EAC55C4962648E1BE128706A3F67CC73CBEA2E0FFA847D
SHA-512:	FF31124056069DA632EB0A969B3AA45B69B5AF6B7A3A24A4825756F4E6F756E726D7F44F1DD2FC63FA1FDBCC96E5E20F27A4F15F0F6FC11BE39640A8E7DBB1F4
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/aoRJmnTyrtM/mqdefault.jpg
Preview:	......JFIF...................................................+%..(...%5%(-/222."8=70<+12/.........../..%//////////////////////////////////////////////////........@..".......................................?......................!..1Q.Aa.."q..2...B...#C...3Rb..4Srs..$..............................#.....................!1..AQaq2.."............?...M(..,6!0J....HD.. Z.P9H..j7d....#.B.l.)-.^..U).Z)R.9]........{.K.0....?j..B.C.#G...B...l.b....s.f.2..+S7..;lJ...D.9.ui.........~\|-SI....c.....b........^...`...6w.....b0A....u.....s@..}=p.O0.oJv9.......86M9...>&...Q.d\.gT..... .u...u...4.Ya....u...X..b..R.7.!l.N.O.5..Y.I.o&~^...0.k..0...L.Q.e:_.../.....R.a-..u./../..D.a..&Q\.W.}>.S*c.EG....L.WX...<.W\l..z....D.e..@.U4h.OQ.."V.(J....(.&%T.P!..R....~....kK;.j...W.R....%(..!0..e....S5H.B...hE.P..l.......=#.G..p..._...3..sq..X_...r.....O.Mh.W.mY1...Q.C..EW.[1V...G.S...^dR...W3M4 ....;/..}=.j.R.}7E`$......k.\K...B.6/..:'..7Rx}.....`..)....8.q..Q.............:4..\|..H.^j.-

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6152
Entropy (8bit):	7.9545136838093775
Encrypted:	false
SSDEEP:	96:OvdGEIWTY3EQ6AZIWsyqUTMlfCKgDFjDTm7GIKq6e3mkxxg521r98:OnBY8AZIWszqMlaJVsnmkwUL8
MD5:	2F050717D71B230A006B9F61B88A6FC9
SHA1:	8F7284CB45897000F2BD5AFC50E562D6AF2AEE2F
SHA-256:	388185198D7EE58A8661D0B0A1BBCCCD960E0E5B2B4F8D99CCDF4D555D9A89CB
SHA-512:	ADD49CE683AF75F48A2F42F7F9EDBF0683486257EF33F6BDFB6159AEE7993DBC8259D7A38653F6FBCC80F0A8B33ED310EC768B7A6F50617102E1E8DB417EF3F0
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/chrome/webstore/images/chrome_logo_96.png
Preview:	.PNG........IHDR...`...`......w8....IDATx...t.W.....".,.e..p.....2.cfff.....y7.!`..ic[.EC....O...Hrk.q...S...g...[.=..[.q.c.......n....8.&..X8..+..y.-.7.(X+9.c\ P.j.......d....k..`u....D..(/.6n...\|...P.Y...3s... ..QU.$.&....8c..w7.}O../.Z..........#7./....fB..Up6-l....../.).q~~.h.y.4..l.yD.x..mr^{....w...0\..P.,..6..%.).....~....P.^..QF.......Qm.h...@...Q]..F6!.......#........V...O@.....lZ.....+...u..{...jmZ...............O.(..`i1..yMkk\|1. ~....4..P".E..}.b$.C......I`.-D.z....\|X.=..k...jE..D...l.....J.W......u......u...J{.VW..Ty1.`.c.b.C.*...3....cN...........@.I.\@...7;.Pf.she.$.o.+..S...C\|.Xd.Xq.W..O.....?.U....$%....)Y..........(s.(..k.-.Em_.z.j.. ......de.e.P.Y {.J-..#..'.}l...Y"[.>.Y.dI.}~.Z.^.ZD."`.D$..F.bD............E.h.F..^;.....9D&j.. ( (....9td.z...3.=...@p..'Wm.N......E.@..Q...`D.........(.}\|.'...@.....U.~....EA...#...$..D...f\|.........M O..:f...{..K...A....o...#.B20./..L.@..a..7..a.."....\.O.A..........P...2>.7HV.G.....V.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (756), with no line terminators
Category:	downloaded
Size (bytes):	756
Entropy (8bit):	5.275696209646288
Encrypted:	false
SSDEEP:	12:4WszWsaL8jGE+ztMjGE+uJtMusBtMuscKLtMustxtMusRtMus/iRZtMusOtMusM4:4WszWsANE+fE+uFsdscKsttsNs/y1sy0
MD5:	1C770A7ED215BCCB062C046411B43BD4
SHA1:	D68DE7B32DF2BEFA2F441E3BC926019D433ACCDB
SHA-256:	6CFA10891AD3B676554B06552A35061559D7B84E60B879E21E6C75945AFCD67D
SHA-512:	6DC2206661829303DBCF5E2E3CE2BB2106E0B678BA0EA22309F81CE4604D294301FEC299E8855536F4DCFC2F410D696DC35DDD1856AC382F2EC55DC168347120
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2F&_=1704923497015
Preview:	jQuery34109376985483024884_1704923497014 && jQuery34109376985483024884_1704923497014(["https://",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	936
Entropy (8bit):	4.7395896422235975
Encrypted:	false
SSDEEP:	24:Ndb/LRQKbVCd7LRQKbvx1FbiE1pcz7bA64GZtMSE:fbTRQKbIPRQKbvPFbiSpE7dt4
MD5:	76FCEC96C626BBA2D77556F89168A72C
SHA1:	BD9FDB6D50CC635F7A605EBD2DBD6A98619A88FD
SHA-256:	F824E2F93C4926EDE554E032545CB806C1F9FF5CFF0E1AD2E2FCC789F2E73F1A
SHA-512:	7196304E879BB56534FFF0A309EB72007C56545497BB35DA179136D1A6ABD27CFB23B960F243ED0DBC6D540CD7005966AAD90A46BFDEEBC06968CB3E47701A9F
Malicious:	false
Reputation:	low
URL:	https://opmetapodor.com/sw-check-permissions/4662709?var=5596087&ymid=769067736944087664&uhd=1
Preview:	function getYmid() {. try {. return new URL(location.href).searchParams.get('ymid');. } catch (e) {. console.warn(e);. }. return null;.}.function getVar() {. try {. return new URL(location.href).searchParams.get('var');. } catch (e) {. console.warn(e);. }. return null;.}.function getVar3() {. try {. return new URL(location.href).searchParams.get('var_3');. } catch (e) {. console.warn(e);. }. return null;.}.function getVar4() {. try {. return new URL(location.href).searchParams.get('var_4');. } catch (e) {. console.warn(e);. }. return null;.}.self.options = {. "domain": "opmetapodor.com",. "resubscribeOnInstall": true,. "zoneId": 4662709,. "ymid": getYmid(),. "var": getVar(),. "var_3": getVar3(),. "var_4": getVar4().}.self.lary = "";.importScripts('https://opmetapodor.com/pfe/current/sw.perm.check.min.js?r=sw');.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13224)
Category:	downloaded
Size (bytes):	13615
Entropy (8bit):	5.231844667528997
Encrypted:	false
SSDEEP:	192:/KSxBhJ0UIoNxhYtNPcXixWJRH3KF4kEDBqJCSl3nLpuMak0b63x+WEz:rB70UtNbYtN0XXH65ECL+b63xJe
MD5:	F250F3E32BB2419D6CD8AA0F29DE6276
SHA1:	B050D3FB467540D2BB3005188570DC28D1E41DF6
SHA-256:	ADB0B68A61C32480585085EF7FE5E2618FB67179A24A572D947808FABADECD0A
SHA-512:	D78498EAD793CE1ACB59E2F9E50E2E0B2C6BE8640EC45DE9128331A36981C57C0F46291D32DCCA3185B2D81E4BAA3AFA3C71E818EC5980F6B1518290AD29AED0
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/iframe-resizer/4.3.2/iframeResizer.contentWindow.min.js
Preview:	/! iFrame Resizer (iframeSizer.contentWindow.min.js) - v4.3.2 - 2021-04-26. Desc: Include this file in any page being loaded into an iframe. * to force the iframe to resize to the content size.. * Requires: iframeResizer.min.js on host page.. * Copyright: (c) 2021 David J. Bradshaw - dave@bradshaw.net. * License: MIT. /..!function(c){if("undefined"!=typeof window){var i=!0,o=10,r="",a=0,u="",s=null,d="",l=!1,f={resize:1,click:1},m=128,h=!0,g=1,n="bodyOffset",p=n,v=!0,y="",w={},b=32,T=null,E=!1,O=!1,S="[iFrameSizer]",M=S.length,I="",N={max:1,min:1,bodyScroll:1,documentElementScroll:1},A="child",C=!0,z=window.parent,k="",R=0,x=!1,e=null,L=16,F=1,t="scroll",P=t,D=window,j=function(){re("onMessage function not defined")},q=function(){},H=function(){},W={height:function(){return re("Custom height calculation function not defined"),document.documentElement.offsetHeight},width:function(){return re("Custom width calculation function not defined"),document.body.scrollWidth}},B={

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (896), with no line terminators
Category:	downloaded
Size (bytes):	896
Entropy (8bit):	5.290280059015072
Encrypted:	false
SSDEEP:	24:4WstWsFAF7YHLe9F5OMy0/AAGxupV50AyziAzzuHsr:UdqF7YroF5G0nGxupDzOFOg
MD5:	7FB10EBAEFEDE030CA1DAD59157D0F04
SHA1:	E9519CD918A574C9715661BE4E40539E459FD8B3
SHA-256:	611C77982B62727C7F1D89C7B364992C4D5D5CCE814ED905C15CA7082DD26A69
SHA-512:	E58F5AB63D1878BF41ECFB5B5C5A2BE9214930D3C68B964EB9CDF0DEA2DBF853A4B53AA9926710530B098D8C1871E5F0B24CD2C3EF537018BF29411E55CF8BC0
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=https%3A%2F%2Fyoutube.com&_=1704923497026
Preview:	jQuery34109376985483024884_1704923497005 && jQuery34109376985483024884_1704923497005(["https://youtube.com",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["http://youtube.com/socialepfo",0,[512,10]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["http://youtube.com/tdjakesofficial",0,[512,10]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (901), with no line terminators
Category:	downloaded
Size (bytes):	901
Entropy (8bit):	5.302199429206896
Encrypted:	false
SSDEEP:	24:4Ws+CWsfC7YHLe/A2F5OMaAGx/cuzAyRAz0V50ACfozuHsr:U3q7YrT2F5pGxEuMBYDzCfng
MD5:	1A810FC047CA7CD9C35343F0E8D733E3
SHA1:	DC46D48F8C12FDDD78B39FA18C55A972A9B68E32
SHA-256:	21748A36E082F6972CDE9DB65D2887A44C5E8D426CC66DD249DD2616C4458630
SHA-512:	2FCF982F28AE0CE2B3D3DDDF87D01FFEA8DB028931AA4E99F86A6A0FA584A3CD7EEBE537FF465450415E4BD46CA0B98856D876394E5654275D3600DBF3E87BDC
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2Fyoutub&_=1704923497021
Preview:	jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https://youtub",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["https://youtube.com",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/shorts/pklrs8iuzqq?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	8497
Entropy (8bit):	7.932978937288018
Encrypted:	false
SSDEEP:	192:QMxPuuocYtb2vCRC4wOFahGi8SDSMGowOz/:QsPuY3RoBodz/
MD5:	4A0F0AC0E170F7F96D7DAA3CCF4482EB
SHA1:	039246E1C3E275B7DE69BECE9CFCAAA106AB0692
SHA-256:	E9D69F5EDDD04AA5B50EC4390D171A051FBC529C5E890E8CBF99B6812DD12E09
SHA-512:	1328EF7DDBD56BA350F119DA139E7799576FAC92F78D0AD50C9A19A9F091C4B8EFD8FAE828E698EDA4E11ADC03CEB1B98C3C5B9EC624D957FCDAE3AEE811B83A
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/rUrNqJhIp_g/mqdefault.jpg
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;........@.."........................................F........................!.1..."AQ.#Raq...2BS.3....6b...'Ccs....$7Tr................................0.......................!1..AQaq...."#2B....3..............?...U.o.....9R._gv.>..,j.,(....7jFs..d.:....?j.tv..Pf.H..v..Q..[FkD./l..G...%.%...+...Z,..3.n..L~....,=i...q..^V...........t..M.......Y.....6..v...=..tn.....Eg8.Io..7\|:.Gt,.Y.....'....?.Pa...3...T.$f7..;i..>4.]...L...F....)........../..b 7./3..L..%n5.x.....%.P...Ebs.....r.x..~^.,.n..(..P(...(....N....C...Z..YR.:....E....%e.1.iA..Z...JA.69...U/..[J....\g.'.V9E.b.\.h........ bO..8...+c(..~%..\.. ...j_.K...7....u...%...zD......I.T.H...Q....J40..EA.}..../...C..G.....T....i..Q\.0),.FI.(.ScFI.N.>..,.A.>......[=.......y..`.}.s.M.B.h....cjiF.`..9...B.;.F*F....Rr+[.;u.....o.=d. .Q..u..L.......

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27007), with no line terminators
Category:	downloaded
Size (bytes):	27007
Entropy (8bit):	5.476181191055506
Encrypted:	false
SSDEEP:	768:EbCTuXSpS9v04L37efBm+Zv2bN3H1CXQR0wZWbIJh1UMmvjCeZskk4Nci0:nML37efBbvkZDaOocJ
MD5:	5CCD2D5882A06F293D07510AC91C92E6
SHA1:	B44DC0EAA03981ADB70D3313E728F9359C1D21C1
SHA-256:	9FC2AA21F3A7BFE66783D35FDBB48147F73E72A41F87AEA848F64A8CB4518EBA
SHA-512:	FDDC1B3DBD07FF0FC03156101D5DB8B8F3DD5F61C44E1A6C48BA6C50132DBFD32F9DDA05F4AAAB1BF2791DE55A019F5F991A93282AD6CAC1F89DE5F5B7D8C535
Malicious:	false
Reputation:	low
URL:	https://opmetapodor.com/pfe/current/micro.tag.min.js?z=4662709&ymid=769067736944087664&var=5596087&sw=/sw-check-permissions/4662709&uhd=1
Preview:	(function(W){(()=>{W.W;var e=W.A(W.k,(e,t)=>{Object[W.ik](t,W.mk,W.A(W.Od,!W.T)),t[W.zk]=t[W.wk]=void W.T;const r=W.n,n=[];function o(e){const t=window[W.bP][W.iP][W.WP][W.Td]\|\|r;[window[t]\|\|[],n][W.ix](t=>{const r=t[W.Rr](e);r>-W.mx&&t[W.Pr](r,W.mx)})}t[W.zk]=function(e,t,o,i,a){let s;try{i instanceof HTMLScriptElement&&(s=i[W.at][W.ot](W.Xr)[W.Hr])}catch(e){}const c=window[W.bP][W.iP][W.WP][W.Td]\|\|r;window[c]?window[c][W.ix](e=>{e[W.GP]===o&&e[W.rC]&&(o=e[W.rC],s=e[W.jd])}):window[c]=[];const d=W.A(W.tt,e,W.qx,t,W.GP,o,W.jd,s);a&&(d[W.tr]=W.A(W.hr,a)),n[W.rt](d),window[c][W.rt](d)},t[W.wk]=function(){n[W.ix](o)}},W.x,(e,t)=>{Object[W.ik](t,W.mk,W.A(W.Od,!W.T)),t[W.E]=void W.T;t[W.E]=()=>{const e=navigator[W.kP];return new RegExp(new RegExp(W.Ct,W.lx))[W.ud](e)}},W.d,(e,t)=>{Object[W.ik](t,W.mk,W.A(W.Od,!W.T)),t[W.q]=void W.T;t[W.q]=e=>{const t=e[W.Sr][W.yP](W.mx)[W.ot](W.sx)[W.Md]((e,t)=>{const [r,n]=t[W.ot](W.CC);return e[r]=n,e},W.A());return[[W.KP,W.KP,Boolean],[W.jd,W.jd,String],

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1377
Entropy (8bit):	7.815419035171063
Encrypted:	false
SSDEEP:	24:ryfGMmVmbkjAHQoVfpo8yV3ayVfWMM06uk43htrPfWDoQz039cAL4ep30qibB:ymswjAhvo8CpllMbuThPODoQz031mLB
MD5:	F4C87C87252640CA4FCDE011BE688A2A
SHA1:	65C35B665F5C70CF6B632513376A875FF012F52B
SHA-256:	A95786BC3D8324B82DC8CFA5201F2DF7050307F4090CD846DE44920C399C956C
SHA-512:	8CD485ED6D90A73663044463E2AF27E5925FF13D95E71E4C29BFD94ED10C892CE4775A6748AB0B81F4A7E91F64F76384DB3CF0E0A8FE0B9497136554A1198E69
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/5iqSydGWCwZl180kxxi8cYBGJrxCQtwj4qCWGTRfQ_3LX_W3qCiA1pS47bT-sMA4aC7QiBjZwHvq21u9vgo_8znj7Qo=s60
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....IDATh...k.G.........c...AX....$'5..Cbh.._`P.`l..,M GAN.)..0....I.oM.--.......q.H$M...G"K;....>.b..<.>...;o.j........../..............Av....e@..U.{@T........@._...F...j...b.6..j.b..~.W..m..3Z....N.....l..vP.m..4..~.8..=tEv.....F.....@!........a..f..\|.D/.d...9....d...^...n...{....5...Y\\duu5.7........7.a..E.Z.^Q..i.".......n.$.d2.m.".C.T..tZ....r.....}...KKK:.....A...ua........%.,+0..,..!.-~IL..\..M3..xiiI....M1??/..#677...r....N....B....}...Y%.L&s.K....7n...~....m....R..l...!...B.]..a%.x<.a...m.J..7ou..333J...R)FGG.:...a..t;i.SSSG..,.......p8...\|.......O.>....twws...L....i.,,,...G............./...r.b...V..P(.{ddD..u...R)..t$.0=...P../_zzvxx.....oe/......aH.P.R.>7..BS.H$".y#.[.TN...E4..T*.....O"...W.....+.....e.8<....\cccJ.r..\|h..R....h4.K..B..Ei...R>.W.+.Y.[[[..a.=......&.Fz.[.%......-.`}}].M.{..+..$.=k..ooo...#vvv....!.}}}.u....c....\.tI).+..Ze%.\...29b./^l...\|#.0.u.Z....Z3.........

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	141
Entropy (8bit):	5.0584721127833765
Encrypted:	false
SSDEEP:	3:RAXRUKsQRW5/rGpVyD++WRUKsQRW5/rGpVnnWR+E7qAHsCJKiQTc84M:VKsEWlioD+cKsEWliFWR+E7qAHsCJVpi
MD5:	612843403C06D98B5009EB71E80FFED3
SHA1:	0404A9F5F5602B70AB62F15EE83D6CCAFE67F98C
SHA-256:	8D712EA5268B21EA6EE1C75CFF3C1BD955A7C0100EEF69AF1532F5E5E1F6B9C1
SHA-512:	75533E204EEF3620A88AFCD2738207385725036B885DF88CFBE72FEE4046701AD429E58FED4DAA96FBDFEEA88FDB480911992237D408BFAA6CEB57E7EE2AD444
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497001&q=https%3A&_=1704923497010
Preview:	jQuery34109376985483024884_1704923497001 && jQuery34109376985483024884_1704923497001(["https:",[],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1193)
Category:	downloaded
Size (bytes):	17315
Entropy (8bit):	5.526747012046132
Encrypted:	false
SSDEEP:	384:89xB5plEPuTs9F6joOxCQ/ZF0V5SSPE9/bfx:8lXOPuTs9MvxCQ/ZFG/PE9/N
MD5:	DF482A8B398F4899A59CA24611D7E1E2
SHA1:	8B1200299F4E45BE26B02DC74001774ED202212B
SHA-256:	05A254B43CFF14EFB9BC4A185EA009C282B54553B9563A5470EB1096D6F14FDC
SHA-512:	F2EA9A538B467A5CBC4E5CBD2F6E4A8BC7B213413BFDFFE8DC3B43AD636A266B30D9441D06DE1F0802ECC9F902821B7021D8805833FBBAEAB896509F996E2C04
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/search/
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<meta name="robots" content="noindex,nofollow" />.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title>YTmp4 Converter Youtube to Mp4 Video Downloader </title>.<meta name="description" content="YTmp4 is Free Online Youtube to Mp4 Downloader which Allows you to Convert and Download Youtube video files Easily. it's fast and safe">.<meta itemprop="name" content="YTmp4 Converter Youtube to Mp4 Video Downloader" />.<meta itemprop="description" content="YTmp4 is Free Online Youtube to Mp4 Downloader which Allows you to Convert and Download Youtube video files Easily. it's fast and safe" />.<meta itemprop="image" content="https://www-ytmp4.com/images/logo.png" />.<meta property="og:type" content="website" />.<meta property="og:title" content="YTmp4 Converter Youtube to Mp4 Video Downloader" />.<meta property="og:description" content="YTmp4 is Free Online Youtube to Mp4 Downloader which Allo

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58
Entropy (8bit):	4.047468393563874
Encrypted:	false
SSDEEP:	3:YWR4brEJRA7WzHyXQO8R4v:YWybrCR4v
MD5:	289BE6DB62B320BC4B1E1FD86E0F0B7E
SHA1:	32F85540B56D5971B3696D38E60E4947B862505B
SHA-256:	E4030A66EFD0BF72B0BAF66848A3C5F6CFF5D24E24EBC58464F1A41968583D66
SHA-512:	735F2C85243FFED7DB58FB74F7E5549F4D90136F73E4962F2E643E919BB96B4BCC76F5CEBCFBD425A00BD491F256E61A2F8BBE6775A2E9629F35EBDCB10196E8
Malicious:	false
Reputation:	low
Preview:	{"status":false,"code":"error","message":"wrong request"}.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.6234651896016468
Encrypted:	false
SSDEEP:	3:YWR4brk7VBn:YWybrm
MD5:	D3D22A2C483EA5BF5E1B887D19B710E9
SHA1:	31E5F0A94EAC2CCFF4801AA97255701460C3C078
SHA-256:	4C7BF259CF71E49AA671EA413172DA39DCD72C8B7E34948C01E21F5585370602
SHA-512:	85EF64BF19C397B0F34DDF055AA27F732078C8DACE8DAAA3AE3BC9D50B81453C3621EA936FAC49BF9F194CA9905717DD8BDEF9FCBDDE972FD099FB3C022714BE
Malicious:	false
Reputation:	low
Preview:	{"status":0,"error":1001}

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	796
Entropy (8bit):	4.931026061087846
Encrypted:	false
SSDEEP:	24:Yt5KPu2vsRwX2Jyphtv5vCZnzWkuMmd8CEp:YtYPu2H/pT5vea95/Ep
MD5:	8C0855FFA6EC3FD1822E7E6127DC0B11
SHA1:	3CD05D35E2C69E42CFF458213E74038E0239AE9F
SHA-256:	65A6AE24E0C31BDD891A4E652B84DC9DF4A5A22BB4E4D0AD2C9A3D2192A8B19A
SHA-512:	651836394C5EC69AA5D6CD995E63598FD397F07F838DCDF43856BE02EB2BFB2D3F56012C74B39ABE25D1D3D66057C871C21D0D3159AA652241C7DC2A932E6DE6
Malicious:	false
Reputation:	low
URL:	https://opmetapodor.com/zone?&pub=0&zone_id=4662709&is_mobile=false&domain=opmetapodor.com&var=5596087&ymid=769067736944087664&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=settings
Preview:	{"status":true,"code":"jsTagParameters","message":"","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"102.165.48.42","disableSwSanity":false,"domain":"https://jouteetu.net","forceStandalone":true,"gidratorTimeout":0,"injections":null,"install_ctx":{"country_code":"us"},"resources":{},"mobileSupport":true,"openInTab":false,"popupHeight":310,"popupShow":true,"popupWidth":510,"pubZoneId":4662709,"showBackground":false,"key":null,"swName":"sw.js","swSanity404only":false,"swTimeout":0,"useRtMarkUser":false,"wildcardDomain":"boustahe.com","zoneId":4662709,"skinUrl":"/pfe/current/defaultSkin.min.js","popupUrl":"/pfe/current/popup.html","flags":{"appLockDisabled":false,"quieterNotificationPermissionWorkaround":false},"extra":null}.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2602)
Category:	downloaded
Size (bytes):	211384
Entropy (8bit):	5.6085099319701035
Encrypted:	false
SSDEEP:	3072:NpD6DNLVdPTv00PTA4mT0pmuZmOHs0jUj:fDYVTvVzzmemn0wj
MD5:	7DB145351AA50DD3BEF97D23E5E6362D
SHA1:	CDD9CCEF25BFC3DBB389E2CFB41674C99CF7F45D
SHA-256:	45658FF20321BAAE211D1A947D9EB6306A368810B81A7215E461235100F00DE7
SHA-512:	6AA493BF83C2B4CADAF86AD12C1B695402EAB9C17F1B7D83D239A025E3294C0512675F8BDBFDEEB4D31AFF69566ADDF33C282A378860A0A9A7B9471A82C15C1D
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.dJPrtZvRqDw.es5.O/am=6AYGyQI/d=1/excm=_b,_tp,itemdetailview/ed=1/dg=0/wt=2/ujg=1/rs=AEP720IMxDJPK8I51WUd7Am6qMnr1KJFCA/m=_b,_tp"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x90606e8, 0xb, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0 /./.. Copyright 2013 Google LLC.. SPDX-License-Identifier: Apache-2.0./.var ia,aaa,Na,caa,Wa,Xa,Ya,Za,$a,ab,bb,cb,fb,daa,eaa,hb,jb,faa,yb,zb,Db,haa,Kb,Pb,Qb,Sb,jaa,Vb,bc,cc,ec,nc,pc,ic,tc,wc,Fc,maa,Pc,naa,Tc,Vc,dd,gd,hd,fd,Uc,Cd,Qd,Od,Rd,Sd,Wd,Zd,taa,uaa,vaa,waa,xaa,yaa,zaa,Aaa,Me,Daa,Ve,Kaa,Iaa,gf,kf,Maa,Naa,mf,Af,Raa,Saa,Gf,Hf,Taa,Uaa,Vaa,Waa,Xaa,Yaa,Wf,Zaa,$aa,cg,dg,bba,cba,dba,eba,aa,xg,yg,fba,Ag,Bg,Eg,gba,Jg,Kg,Lg,jba,kba,Ng,Og,lba,mba;_.ba=function(a){return function(){return aa[a].apply(this,arguments

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	5680
Entropy (8bit):	7.926043460421807
Encrypted:	false
SSDEEP:	96:28rR7QpJ1p4/W1F0rMvjowSYqZIfRcSBnMAm/vq7kGLdcel6kdL/om/n2j:28rR7QpJ17F0w7SvZxAm/S7kMx6mLZU
MD5:	74B365A4B4205FA8A219330F550F8FDD
SHA1:	A532EC568D5BB5E06B9039614B8FBCF12710C205
SHA-256:	951F469405CEEC12530776C3F300DAA5480E166F5DCFBB66593D4E8888367246
SHA-512:	6E29C37B848E4C608B5D74D4C02819464AEE6A185E0B19E59118D28671B4312C869BC2B4E0759E0689DE3BFBAB81964DBFB3B66D33B70C081401D6CA99FA4E4C
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../.../////////////////;///////5////////////////;///////........@.."........................................G......................!..1..AQ."aq..#2......5Rr..$B.4Cbs.......%3Sc................................$.....................!1..A.."qBQa2............?..TA?Fy&..V(...+7.o<...@QNP...pU7..B.5T....J#{"..Q....+p.j...r.Tlfk.4..7 ......R.?.VE@b.m.a......%\S....+TZ..SSj..4(6Z....N[k....&=kv...Di.JG.Q.T...LJ..,CZ.\,..8..F.Vvd.....d.Q.......1r..e.......1a.........T0....r..@#B..f.....H4@.n..1..(.. F.. ...V.... ...9;.&Rr Bt.:...;BB..<.?.."..S...Jz...]....[....@....W..N.N.....n{......j.\..l....n,.r..-.`......J...;]..X....0}r.....[.......&.o......z.\|.^.>.D+U+..lE....e.....w.O.{.AJ.!..h.&....`e...<=l.-p....p..4..rQ9....j..)DPsa.V..5..T}..EbSJ..6..m....6.7......X..7..1....G..LX.c..k~.;B...LXB.....I......I2!=.F...N.@T.P.Q..\..F.@......C.H..S`....R. ..OY_.E@.pT.;...4.F..%.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.6042015135302385
Encrypted:	false
SSDEEP:	3:YCMxvOUmVR0oQA3E/WjVxXMcYU:YCM5OUiR0N7eHcXU
MD5:	71059E9DD759864825E3ED6700DEA741
SHA1:	15D405FB6AB488C1DE764808CB88FEFFA95AF66B
SHA-256:	FF1B5EA96EA9A4D300E12BA7C27919DCFD376112786442E5D8861EE454DEADF2
SHA-512:	981F046883D68D1DE01A23677224EFD4532C808B7F9C910FABA0B3FD30255022FFFA698B6376B8527A8407068B4742603F13B06B61A7BDE4D303106578CA1583
Malicious:	false
Reputation:	low
Preview:	{"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	738
Entropy (8bit):	5.277990065674533
Encrypted:	false
SSDEEP:	12:2QtO3cHO51DRRGmPPcznRGNIyKcmkBvsrHDSvLcznRGNIyKcmk5/ndcQL:6W6RRLEn73OB4jpn73O5/ndH
MD5:	DB8E37211E372148764E5BEDF7BE2E27
SHA1:	5031629CB3671B2B1330AF9334A5BEC406405F86
SHA-256:	437CBDAA086BFD8149A0016CE52E065738CD03CCBBF2E8562BF6BBAADCF168F9
SHA-512:	17F1CA8E91EF892A2EBBFE2C2EA087A260126E134245E3F25A40AA8170DFD0B82721DEDDB79836E79B83B55CAC1CE395C271E054938F82966DFEB3BA4A9BD88E
Malicious:	false
Reputation:	low
URL:	https://t-y-p.site/goto/?utm_source=wrtzr&utm_medium=video_downloader&utm_campaign=test2&clickID=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subID1=347207
Preview:	.<html>..<head>......<img src="https://trck.t-y-p.site/pixel/v?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207" id="track_img" style="visibility:hidden">....<script>.....document.getElementById('track_img').onload = function() {......window.location.href="https://chromewebstore.google.com/detail/video-downloader/afhdhdllpdmajoopkogfdmdfdgmpjipp?utm_source=wrtzr&utm_medium=video_downloader&utm_campaign=test2";.....}....</script>....</head>..<body>...<script>....setTimeout(() => {.....window.location="https://chromewebstore.google.com/detail/video-downloader/afhdhdllpdmajoopkogfdmdfdgmpjipp?utm_source=wrtzr&utm_medium=video_downloader&utm_campaign=test2";....}, 5000);...</script>..</body>.</html>.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	7078
Entropy (8bit):	7.94043159770435
Encrypted:	false
SSDEEP:	192:ARUIaiDTwgsOM/XCk3iknbwy06+OZgtGfQ2EdC1w:SULiDhsGcnSOZtaw1w
MD5:	8B19113CD0954B21CC89C1B54AF49E19
SHA1:	756F9FC10122C4CA84AD751B7407D324445FAD49
SHA-256:	D03AC8769C7712A089C30C37D1E37010E286FF0D30005F58CCB1119FB550FA55
SHA-512:	A30521F35BB0C38D5AADEA0D41D905A1AE0464CABFC77CBC7BEB700F7A7633294E38C4D54D1F5B9E61278F165441C47BA86690542451F8B25D122AED3EE7DB43
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/DNwvbf0kZBE/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../..%//////////////////////////////////////////////////........@.."........................................B........................!.1A.."Qq2a....#B..3Rb..r....s......c..C...............................+......................!.1A.".2Qaq#3..................?.....KX........m.3..B...-...0...@G.J..2&#.B."1F0...).p.2Np>.Q5{2......>.[5kvV....'>l.^..$.c.....&U).......?C.u\nUO.6G.3=..8.....R...5B....S..[.;.+....G.....Q.f..iO.EZj..;..A.e..92...d'...D`~_3...={'^k..w..06..........v.8....G...@.peO.ZO..x.S]..l."~.%.A.r...pcK..Ze...o.EL.u...76.uB.s.)..6 ._..+.."t...=.=....\6.....}..q.%....i~.s.g....-..w.o].?..D.p%.,N.......3..$.UJ.......!e.-.....+..B(.B....0..0.De..+..../......M..K.dA.W.k....@..(..H.....O1..CbC;.."#.bcG.BAH.3 d.#7;...Q../..m1...`..\.....a#.KG.....V....NJ..:`{Lu.Wl.}.'.)..nY.MFu0.....UA...}.....L."...`..%..>T.G.X.............-u........&q...#..\|s.~*p.,.+:..U

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	6281
Entropy (8bit):	7.937750195207032
Encrypted:	false
SSDEEP:	192:1sJlbHHJCce06dvIzlOz0uYcCCCFlUGYMuj8PZ:OJVHpCn06dwpOzzYfzlZYMuK
MD5:	C82360344CF47A555C06B790F88E817E
SHA1:	E539894D5E8D1B66B17B1C9570D9830177B01AC4
SHA-256:	3EED3CB4EDA8434AE92D16E2A63F09F097D0C79207CF4C0CCB67E4E3BA47A56A
SHA-512:	F20BDF55EB5285FC6A5BF783AAB8C198E987D201A739F1EEBC83FBFD80B127924FCED8E985BD492671A1CB1F058BA1F1AA532AFE3888F54827A080514774CB73
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/DLrpcxxGahI/mqdefault.jpg
Preview:	......JFIF........................................................................................................................................................@.."........................................?.........................!1.AQ."2aq.......#BRr...$3b....t..................................&......................!.1..A.23Qa.."............?......C.uW#j...@.4.,...iI.Z....(w....mh).U`.:'....D..c].>...m.]q\..BW]-.Y.&e.Ke.A.).R.<#..rG9)Bx.....W..<...SN.kq..s.&...@......k.$.<.qbM../T...6g~.#3.....*........97Q.....nJ..n/}.i..)ksZ...C..`csr...k.8...d"Z.l\m.....5..K.O=k.=... }..d.Dv.a.apn.~..h.5...F.......8l..X......S....M2...'..:[.......v{F..kK...8......).F.My.m..a5..K..v.....cIqk.IN...U.c.R.....P.(..2.....N..R94.....E)Q..m.)...,;nX.m.E\.i.E7C...........rO....B..=6.....`.:..aj....B.%..-..P..BR..M. e.'.....c..2@.)V...8......S....kOKm.Z.5......F...,uC...Qc.......2...;..i.'Mz...C.w!m...B/......z:ry..3....z-...4n....h..[......4.gZ.}V...@F.....M.x...v....V`.E...

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	4835
Entropy (8bit):	7.9142564381656655
Encrypted:	false
SSDEEP:	96:wYBDsE6cxqsKSh28BCVBZ/kzy8roTAv6CHSkevLCJ+hJ2yPxtTk:/bHjCiy8DSCHmvWJ+iypy
MD5:	A72E3AC9CAFDB4AB8D5808EA2B2D093E
SHA1:	18FDDACB047A2BA6CAEB93D0D3489BD1EAA6266F
SHA-256:	FDF81F703CD5B001F78D27FFB9DAFA2055064E3953317CD4EA3D3751E4DDD9BA
SHA-512:	ED2155DE697917F653308542D72A989167843ACF53ACC82D99783005BD7EE12E980A88D1F82309A1F5B991507DC891A804CC761A964FA5731C551503A0E326CC
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/C5kIQ9zpjRI/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<-12/.........../...///////;/////////////5////////////////////////////........@..".......................................F......................!..1.AQa.q....."....#$2..34BCrs.......RSbc%T................................#.....................1.!2..Aq.a.Q............?....JR....vH..Qd...@....R.PS....Sd.b...B.Or..!<..K\.S....?...\.4[{.J.w..R.3.x.....i..z...b..+.j.ac..Kv.......i..emT.,......(2W..'5z`.....k.KA0.q....fZ..YU.73..r..<....t......7........9.0.1y..#./iW....8w..Q..2Z............P..9.+...Nc.:.s..N.k.K......}..ia..d.."8.Yk.O&.x.4.U.eq.......}.Mn-..z..^..~..w.B.`[[L.+....+..s./=u......7.Re.5SF..Sn.U.@U)HKU.eSB.JPI7U.....H$.f...B.)..PPyH.I. >l.6.3.)....Rp.79Ir...'..4..s.D."P...... ).._.....Q..."...;.$...O .}.s..YX.<W!. IVj....V......s......[(.]K..o...j4=..........^G%....=...v%.k.8...5..>..z............C..d.m.qq. [..j..+..8'.j.\.mog..U..1UI.....Y.......

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12489), with no line terminators
Category:	downloaded
Size (bytes):	12489
Entropy (8bit):	5.105988389855555
Encrypted:	false
SSDEEP:	384:enpEdFOUblyXcvHtqlviDxNGyDcYvzc6BCvkSIO2PYj9LNircv1zbvsjvyW91IQ8:+v
MD5:	7A711755B88161E075BCBD96983F4675
SHA1:	8F912309A48363165B02BE73DD73A6397623A855
SHA-256:	D12EC824A66B6AD652E1CF0952853B6BA3053DD76A84BBCF4BDB3C055E411C78
SHA-512:	7BC18B54EB7074A56D337DD400ACC6D8033D7376EC7DC75809B86620FB280EFEB348A558F3D00440054EB796750BF6D93D5A599C6F27D5800B8DD9952DCD9771
Malicious:	false
Reputation:	low
URL:	https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/css/style.css?v=1518177503492
Preview:	*,:after,:before{-moz-box-sizing:border-box;box-sizing:border-box}.clearfix:after,.clearfix:before{content:"";display:table}.clearfix:after{clear:both}.pull-left{float:left!important}.pull-right{float:right!important}.pagelink,.wrap,body,html{width:100%;height:100%}body,html{margin:0;padding:0;font-size:10px}body{font-family:-apple-system,Roboto,Helvetica Neue,Trebuchet MS,sans-serif;font-size:1em;background-color:#fff}a,img{text-decoration:none;border:0;outline:0}img{vertical-align:top}.pagelink,.wrap{display:block}.pagelink{position:absolute;top:0;left:0;right:0;bottom:0;z-index:4}.hidden{opacity:0}.visible{opacity:1}.f-buttons,.f-buttons .btn{display:-moz-box;display:flex;box-orient:horizontal;box-pack:center;box-direction:normal;box-align:stretch;-moz-box-pack:center;justify-content:center}.f-buttons{flex-wrap:nowrap}.f-buttons .btn{-moz-box-flex:0;flex:0 auto;margin:0 1%;-moz-box-align:center;align-items:center;align-content:center;width:auto;-webkit-user-select:none;-moz-user-sel

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (848)
Category:	downloaded
Size (bytes):	949
Entropy (8bit):	4.906050969670542
Encrypted:	false
SSDEEP:	12:mGQthX+AanLRcm1aAKTBbrq0t0YTXlu0HKuoTRxUnY4ruA9FRvKeWph:mGyX+pLaqU1+RiY46ArWD
MD5:	E61FBDEBF4CC2CEB061C7981BEAFB54E
SHA1:	18A79ECA71017C31D0D7032AD15E698BEA042F2C
SHA-256:	AC1308FCE1F315FA93CF8E2B7E72D11AE75B675D419619DBE9AD129634C3BA6F
SHA-512:	79341A9766490689CA35D4AA561BA0BF1A18164F9D2992EEADF6AD9571CA75603C7C9FE5C030570835322A034DB6B7CE63F4541101F78A3F5771F44E57BE001F
Malicious:	false
Reputation:	low
URL:	https://track.routes.name/6517545af1a71e0001de416a?sub1=4662728&sub2=7481977&sub3=broadband&sub4=chrome&sub5=windows&sub6=US&sub7=19120475&sub8=det%20africa%20pty%20ltd&sub9=desktop&ref_id=769067744317682211&cost=0.000250&os_version=10.0.0&oaid=efe83b1130104efea0d475e2cb75464f
Preview:	...<html>....<head>.....<meta name='referrer' content='never'>.....<meta http-equiv='refresh' content='0;https://understandingerrors.com/landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&subid=master&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages.'>....</head>....<body></body>...</html>

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	50434
Entropy (8bit):	7.968946667127506
Encrypted:	false
SSDEEP:	1536:p6fvEsEokg/LriPAsL2uhvt6FHfoZHb/JdD:p6HERor/yP1LZvYFHgZHbj
MD5:	C34FD1B2C76B7A71B5B5784AB60B6368
SHA1:	9CB4E8986542D42CAFE0BFC1377BFC928929CFC5
SHA-256:	89D93E12A15F6A5D57B5F8ACA8BD1E6984DC4C8C5DEC7840A8C8E8C8274C1568
SHA-512:	E11B7DEB3B23E03FCAC414AA76BBF809FA657869080CB92511D5C5757804B4D6D3B0F09F8E91D73F651D4531FCB9735C3DFD78699719C65EC96D06794055AC9E
Malicious:	false
Reputation:	low
URL:	https://interstitial-08.com/contents/s/aa/5b/71/730bd1c1e09e51bf17160def9a/01289039865190.jpeg
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................E.........................!1A..Qa"q....2.BR...#br.$3.C...Sc....%4s................................./......................!..1A.."Qa.2q#....B..R.............?..d..vz.....V.l-o..G..rk.qX...J...V....+..4.D[k6...@J.9.@.<...Pz...$B3.......B..A......u.J..p.'.@.......r..lB..hAv..X.. .r.dp.U.....h^..FM..,....q.....1.)M...$....N..1q.X...a.PN....B.{.."...~b...!.. .......!N......kx.1....9M.I ....>u.Z.H....k....BWH...2 #...D.dDA....^.<...}(.YVV .r..=>.0.1%~.M6....Y..&jm..6...&.f:.i.CQ4uD-...E..[(.p6..Fb......?5.-..Q.....+X...[..).."[...K.0+...6.'.h...pt$..:&.%X[ t..&.5.ZG..F...t.I.We. .3V.U0.q9S.W..s..H...V....+\....Z!.Y...Y...G..T.k6.PHv.m.v......X...Y..C.-...v.m.h$X..I.....".ew...8..-j.Q\.......+.1...s@'8.,...f..l....=s.M@rx.$...RB...`zR...D%.J...'%W.=.jx..........{

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (893), with no line terminators
Category:	downloaded
Size (bytes):	893
Entropy (8bit):	5.2929330166142785
Encrypted:	false
SSDEEP:	24:4WszWsvT7YHLe9F5OMy0/AAGxupV50AyziAzzuHsr:UHb7YroF5G0nGxupDzOFOg
MD5:	FF1B6DF7F2D7AA6931FB25FBE9A3E56C
SHA1:	1C6E7BFB47680AB65AEEDDD5C3C4A149F909094C
SHA-256:	72C3A5BBDA60F000EFEAC4FC17DAE692AF0AEF2EA96F2DE11C45AC58597E712F
SHA-512:	2535ADEFA8704B51EF093D45D04F90A3C49925E1EFA1B70E86F66C5542F73BB06D02A835D375319849D1B9A2F19661AFE6960956D06FCAA87AD1C51B24142892
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2Fyoutube.&_=1704923497023
Preview:	jQuery34109376985483024884_1704923497014 && jQuery34109376985483024884_1704923497014(["https://youtube.",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["http://youtube.com/socialepfo",0,[512,10]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["http://youtube.com/tdjakesofficial",0,[512,10]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (756), with no line terminators
Category:	downloaded
Size (bytes):	756
Entropy (8bit):	5.276479350147732
Encrypted:	false
SSDEEP:	12:4Ws+CWsqL8jGE+ztMjGE+uJtMusBtMuscKLtMustxtMusRtMus/iRZtMusOtMusX:4Ws+CWsQNE+fE+uFsdscKsttsNs/y1s3
MD5:	35599B2F1B65BEDD3D2716FB74648546
SHA1:	B16897C84CF740676F698F6871744B212672EEB4
SHA-256:	A203EB0C43D6E39F79CCAFF1F315C7D0EC68C1038434DCD51FDCD3F594ED7012
SHA-512:	A1B150DC99E36525C92AB58EF76A5EDEFE433B55D72B330828FC54C9DEF55BECF927555D37914370463491D9BB6AD9A8F3A0FB4C1A9203B97E567D1393236D57
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2F&_=1704923497013
Preview:	jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https://",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (589), with no line terminators
Category:	downloaded
Size (bytes):	589
Entropy (8bit):	4.98957099054356
Encrypted:	false
SSDEEP:	12:4WjWcLtZQ7BRHpRRu5toeHWqR9zdIXBg+BQz77qO8Klw4qAHsCpi:4WjWcj2HprxC7zdUt8KpKNHsr
MD5:	08C0D34CC8599ACC165E9694E782DA26
SHA1:	951791A430C40AE0BEA62FD0CCA58C46AE92CF42
SHA-256:	A1251DB2786F4B393D94B172453C1CD1A098E9038C1B9A6A12F7D68173563A37
SHA-512:	588AB634B2ABDA6E075823C1F3E667A02ED5D79F666825B78752AF9F27019451650B61A57B23C82AAE6CA7EC12E97694D7476E3FF82A932BB052BF32C0368890
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=h&_=1704923497000
Preview:	jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["h",[["hindi song",0,[512]],["hanuman chalisa",0,[512,433]],["hindi movie",0,[512,433]],["happy birthday song",0,[512,433]],["happy birthday",0,[512]],["helluva boss",0,[512,433]],["how to tie a tie",0,[512,433]],["hey bear baby sensory",0,[512,433,131]],["how to draw",0,[512,433,131]],["head shoulders knees and toes",0,[512,433,131]],["hot ones",0,[512,433]],["hazbin hotel",0,[512,433,131]],["hunter biden",0,[512,650,433,131]],["hunxho",0,[512,433,131]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (13300), with no line terminators
Category:	downloaded
Size (bytes):	13300
Entropy (8bit):	5.483368564670699
Encrypted:	false
SSDEEP:	384:kyZo1BF22ITo2HQfPeyteI56QGQXluwi8I2xDnk:kycI2Io2wbHjXlfiok
MD5:	258578AF3C107CCB907F73C3A2F4C25F
SHA1:	7A192EDEA829968FB7F57F2A2FC4CB5B612598BE
SHA-256:	1F945C9C46C47A2B0E867B0D09C3E4559CD768A2D3747ABF28D1D65667733B75
SHA-512:	EE2DC2552469614B43681A54CF733FA490668F95A607241562BD1DE07997CA5FA80E36286DCFECF255D71BA6777E7FFFE0CF071F712B16DC7C08FA4F6FCCBA5C
Malicious:	false
Reputation:	low
URL:	https://ibrapush.com/pfe/current/tag.min.js?z=5588624
Preview:	(function(W){(()=>{W.W;var __webpack_modules__=W.F(W.k,(e,t)=>{Object[W.E](t,W.q,W.F(W.Jk,!W.f)),t[W.b]=t[W.U]=void W.f;const n=W.y,r=[];function o(e){const t=window[W.Pd][W.jx][W.bk][W.Wx]\|\|n;[window[t]\|\|[],r][W.Rk](t=>{const n=t[W.jd](e);n>-W.mk&&t[W.Sd](n,W.mk)})}t[W.b]=function(e,t,o,a,s){let i;try{a instanceof HTMLScriptElement&&(i=a[W.qk][W.Zd](W.dP)[W.tx])}catch(e){}const c=window[W.Pd][W.jx][W.bk][W.Wx]\|\|n;window[c]?window[c][W.Rk](e=>{e[W.Kk]===o&&e[W.oP]&&(o=e[W.oP],i=e[W.Qk])}):window[c]=[];const d=W.F(W.Od,e,W.ik,t,W.Kk,o,W.Qk,i);s&&(d[W.Vd]=W.F(W.pd,s)),r[W.Fd](d),window[c][W.Fd](d)},t[W.U]=function(){r[W.Rk](o)}},W.x,(e,t)=>{Object[W.E](t,W.q,W.F(W.Jk,!W.f)),t[W.g]=void W.f;t[W.g]=()=>{const e=navigator[W.Vk];return new RegExp(new RegExp(W.fd,W.Mk))[W.Ek](e)}},W.d,(e,t)=>{Object[W.E](t,W.q,W.F(W.Jk,!W.f)),t[W.K]=void W.f;t[W.K]=e=>{const t=e[W.xP][W.Px](W.mk)[W.Zd](W.yd)[W.kx]((e,t)=>{const [n,r]=t[W.Zd](W.OP);return e[n]=r,e},W.F());return[[W.Bx,W.Bx,Boolean],[W.Qk,W.Qk,

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1193)
Category:	downloaded
Size (bytes):	17315
Entropy (8bit):	5.526747012046132
Encrypted:	false
SSDEEP:	384:89xB5plEPuTs9F6joOxCQ/ZF0V5SSPE9/bfx:8lXOPuTs9MvxCQ/ZFG/PE9/N
MD5:	DF482A8B398F4899A59CA24611D7E1E2
SHA1:	8B1200299F4E45BE26B02DC74001774ED202212B
SHA-256:	05A254B43CFF14EFB9BC4A185EA009C282B54553B9563A5470EB1096D6F14FDC
SHA-512:	F2EA9A538B467A5CBC4E5CBD2F6E4A8BC7B213413BFDFFE8DC3B43AD636A266B30D9441D06DE1F0802ECC9F902821B7021D8805833FBBAEAB896509F996E2C04
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/search/
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<meta name="robots" content="noindex,nofollow" />.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title>YTmp4 Converter Youtube to Mp4 Video Downloader </title>.<meta name="description" content="YTmp4 is Free Online Youtube to Mp4 Downloader which Allows you to Convert and Download Youtube video files Easily. it's fast and safe">.<meta itemprop="name" content="YTmp4 Converter Youtube to Mp4 Video Downloader" />.<meta itemprop="description" content="YTmp4 is Free Online Youtube to Mp4 Downloader which Allows you to Convert and Download Youtube video files Easily. it's fast and safe" />.<meta itemprop="image" content="https://www-ytmp4.com/images/logo.png" />.<meta property="og:type" content="website" />.<meta property="og:title" content="YTmp4 Converter Youtube to Mp4 Video Downloader" />.<meta property="og:description" content="YTmp4 is Free Online Youtube to Mp4 Downloader which Allo

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HPI1vDiCkY:gbhR
MD5:	3C871EDCF56CCB035FACFA5A033D19FF
SHA1:	D0E72955FD48136D10CF3D9B9159884B96D21A70
SHA-256:	EC1D5ED0106994908C8C75E4722358896724DE55E62B9654C3A4EE133CD9C854
SHA-512:	92FE4D7038A3484DFF0A2BF92ADA386C2A6E1F51554215FF738B16EB2AA954820262734F0C1B94ED3D0F32C96AF26CF52BAF02B1E648688A745765C57C40F413
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnWOp-AMn8G0BIFDZyY8l8=?alt=proto
Preview:	CgkKBw2cmPJfGgA=

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 310 x 310, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3429
Entropy (8bit):	7.877293417729411
Encrypted:	false
SSDEEP:	96:QgkvQ9ULXKxBAejIo3YzEHYEnyelLahxvL9YEJu1JUB:QgZWLKxB7oE4EnKxhJuMB
MD5:	FA7659C35B21A530A21E39AFD7FAAC93
SHA1:	DE6A35506A3B227EFEE27BCC509C3525776761EE
SHA-256:	871975B8040629C7B43DE81B1A0878F40991EC2F49CADDD6441B5D1F8322AEED
SHA-512:	527A7F5AC47C2F15348C42543915E8D74E564727CE22A88B687ACB5E7EA14CC7F2CC6A0E4453BC20237E546315DD06FB59F0D12871F0D18FA282F2950E904FEB
Malicious:	false
Reputation:	low
URL:	https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/images/audible.png
Preview:	.PNG........IHDR...6...6......bN.....PLTE.....................O..#......../........Z....4..'..x..o..........`..8..I............@.........D.!...........<..U..i................e............s.........xIDATx.....1..AAE....vn....`......{./...lKW...9C7!.....G}.ms.......[G..u..[.[G..u..[.[G..u..[.[G..u..[.[G..u..[.[G..u..[.[G.}.C.....A.[?...D i..M[..A....6mI..m....%m..iK.>h..}.-i.;v.. ..p.....kA.X.l.+..Q......&.A.E)....Og>..^.^.J.?. ..C.al..qX......uFw..)......rA.7.\|...e\|.Cmv~<.../=.Fd=^C.J.....G.......xJP-}.6.b..@1i.c.l*.a..<.<t...F....&.....-.%h.63.J..M..."......X(A...@......!..].3..4x..>B.D.v..}~t.N.l..........Cx....,...i.).#T6..p.^OV..Pkk..c.a...".5.n.L.....jW..V..z..:.p.@s..{............m.s..i.."J6.`..6#...H.....S.I.l...i..@.....P.<...P.t=....,g.$.....<........q..<1....6.k.7..'..y.Q.v...9.g.?.<r.-.Nu..\;..l.l...U].V.....lwl...`;...tw.u\.m....7bw.BcM...........J..N.[.[...B..@e.a.c.M...]B3..zp.}.%A.`.Ih.^=....\..#dJN..

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (755), with no line terminators
Category:	downloaded
Size (bytes):	755
Entropy (8bit):	5.275555660290121
Encrypted:	false
SSDEEP:	12:4WsYAWsYE8jGE+ztMjGE+uJtMusBtMuscKLtMustxtMusRtMus/iRZtMusOtMusX:4WstWs7NE+fE+uFsdscKsttsNs/y1sy0
MD5:	126A48B7B5DB283B5C6960EC3030F6D4
SHA1:	4A9BB49B7AEB3D34ABFFCADA5749194E03EA7B88
SHA-256:	F353503D587D28C40F3D3DB6DD946AE5456C25A395AAAFF82AABC602EBC29EBB
SHA-512:	E401D807B114362B09824176833FCF45C3267529D2D0DD25A95FCD98BBD4BEEB90912981F2843F414D1B5427579A5F6DCA1A0E0EE421CFC8E9E0AD4651A6C2AB
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=https%3A%2F&_=1704923497011
Preview:	jQuery34109376985483024884_1704923497005 && jQuery34109376985483024884_1704923497005(["https:/",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (688)
Category:	downloaded
Size (bytes):	19269
Entropy (8bit):	5.638404388886961
Encrypted:	false
SSDEEP:	384:4ACxJky1+JiJTHFvSxgIaBa9vAIZNq0N/qHZebtpoq6xb/fEO4WuEUD0:4rv1eiJLhSxuA9vAIZNtN/qHZebbFBtm
MD5:	99D50CE6AE266D531E46FFA672A80F6F
SHA1:	3DABFF4D24F991F0EDA399F8FBB84D4828AFB755
SHA-256:	14AAAA4D31163DC51A244B30868F0B23FE671C1F8FDDACA9C49943A71919CF7A
SHA-512:	D7CE4A937463E1C6D9D1107B8F781A860BFBE10FD29A754AAEE7619B2DC8446D9408CB33365D4FB3DF04F509C5FBA19AE50CB80E937A1A984CA93BE237ECCA4C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.dJPrtZvRqDw.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.Z4IE48QAiHc.L.B1.O/am=6AYGyQI/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,COQbmf,CfLNpd,DNlSjf,ECBKud,EEDORb,EFQ78c,FdMhB,HsQQib,IZT63,JNoxi,KG2eXe,KUM7Z,KfQkxf,L1AAkb,LBaJxb,LEikZe,LcrBLd,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,OmgaI,PIVayb,PrPYRd,QIhFr,QVysJe,QjUiqc,QvLWAb,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,VwDzFe,XVMNvd,Xi0ENb,YA1iG,Z5uLle,ZfAoz,ZvHseb,ZwDk9d,_b,_tp,aW3pY,aurFic,bZ0mod,bm51tf,byfTOb,cephkf,dsBBae,duFQFc,e5qFLc,fKUV3e,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,ovKuLd,p8L0ob,pjICDe,pw70Gc,qv5bsb,ri2s0b,rm99Nc,s39S4,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zKiH5d,zXfYdc,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720LDE8ISk-83wVQHVDoQdYmvmJiiEA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=sOXFj,q0xTif,Qy2cOb"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.pg(_.lt);._.n("sOXFj");.var pz=function(a){_.P.call(this,a.ua)};_.C(pz,_.P);pz.Ba=_.P.Ba;pz.na=_.P.na;pz.prototype.j=function(a){return a()};_.kz(_.kt,pz);._.q();._.n("oGtAuc");._.Oga=new _.fn(_.lt);._.q();._.nA=function(a){_.gq.call(this,a.ua);this.soy=this.dom=null;if(this.Ce()){var b=_.hn(this.hd(),[_.bo,_.ao]);b=_.Df([b[_.bo],b[_.ao]]).then(function(c){this.soy=c[0];this.dom=c[1]},null,this);_.hq(this,b)}this.ha=a.Ld.WK};_.C(_.nA,_.gq);_.nA.na=function(){return{Ld:{WK:function(){return _.Yf(this)}}}};_.nA.prototype.getContext=function(a){return this.ha.getContext(a)};_.nA.prototype.getData=function(a){return this.ha.getData(a)};_.nA.prototype.Hr=function(){};._.oA=function(a,b){_.iq(b);a&&_.lg.Qa().register(a,b)};._.n("q0xTif");.var hha=function(a){var b=function(d){_.Iq(d)&&(_.Iq(d).lb=null,_.Nz(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelect

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10615
Entropy (8bit):	5.405077758128286
Encrypted:	false
SSDEEP:	192:D7NGz7Nf7NA7Nue7Nu7NJj7NkNa5N4NXNRqNWNIJNENFQNDN8NJXNtNGgN+rNU75:DBGzBfBABueBuBNBiafWdRQciCFe5KJD
MD5:	DBDC7EE435C6A7F4277BFC7FEDF28368
SHA1:	8194A5D7E0108BED7ABB001D8BF2B8985A5AA2CA
SHA-256:	91B113CBF5AEDC9B93CEEBE313863344B1EAD775A618A7E9F31F9E98DBBDF227
SHA-512:	3A76C3CCE0B9184B80AE6C5AA3B9DA358E7CE5B939DAB4A666327B91C04DBBEAA903278AD08852CDEBEDF48875FAD222D6A28F52737571DAEE8BD5532A4FDB19
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2) format('woff2');. unicode-range:

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	6314
Entropy (8bit):	7.922045926635082
Encrypted:	false
SSDEEP:	96:BNVxWzM5yXEfsC/Uolsst4PGPADpH2bhYpZASIo8akKLCgz2m0liCftPQqtB3B:BNVg4yXEq4Ou4DpH2dmZAxo8akg6btBR
MD5:	330F845346D98EDEA40F122B119908ED
SHA1:	B4BC159C395B745454489ED842891645092DADFD
SHA-256:	3F8E992AB2BFD24BC5CD500816583B105EA2547F01C63541DC5AE3F08FB35C4F
SHA-512:	5337EAB71B00AF71B3ADDD11F2B57A510E6142749DC4CB9E9D253E24114D4E673D48F1C57EFE11E4452A932F73C58459977C6A77E0065B4C029D2998CAE7E3DF
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/-CweIttZ6Sc/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../%.%/1////////////////////////////////////////////////........@.."........................................C......................!..1A.Qa.."q.2....#B....3Rr...$%b....4CScs................................).......................!1.2Aq."3Q.#a...............?..F.=.c.d%..Y.;'...s&G.......>.7![..AN.RRu.H...'4n./E.@..C........YC.8G.....3.a.h..qQp..5....?GO......!\'g....+L....dE..M%2....2)JP.%0$.....'At.uZ.d.....Mg..#.s..S\.&......$.s..!.">...,.......6...4G.Q..Xd..c.D.JN..@..D.....d.<.=V..5..U...... ...?U..p.8X.i..$=.g.....;...?%_.O.....t..5.$..\.....D...`2.9..F...#+I...)..H'&.....R.@#...U........L.J...]..{.6]..]Gbq}.../.......s.6.0.Z\|..f......V8~+.i..^.S.R..t..M...L..82..9...u...{@0.@.."\|...(....M.........m........c..7.aL.\.<..,...M.(sC...<F.-.9..uW.c....!...R.3......}Q\ ..'0k.o...r...-Q......#K[R.<..;..A..c}...uU.b.0_..ar...it..&I$.&......I$H".nG.>J9../e1.t..B=..

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	6314
Entropy (8bit):	7.922045926635082
Encrypted:	false
SSDEEP:	96:BNVxWzM5yXEfsC/Uolsst4PGPADpH2bhYpZASIo8akKLCgz2m0liCftPQqtB3B:BNVg4yXEq4Ou4DpH2dmZAxo8akg6btBR
MD5:	330F845346D98EDEA40F122B119908ED
SHA1:	B4BC159C395B745454489ED842891645092DADFD
SHA-256:	3F8E992AB2BFD24BC5CD500816583B105EA2547F01C63541DC5AE3F08FB35C4F
SHA-512:	5337EAB71B00AF71B3ADDD11F2B57A510E6142749DC4CB9E9D253E24114D4E673D48F1C57EFE11E4452A932F73C58459977C6A77E0065B4C029D2998CAE7E3DF
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../%.%/1////////////////////////////////////////////////........@.."........................................C......................!..1A.Qa.."q.2....#B....3Rr...$%b....4CScs................................).......................!1.2Aq."3Q.#a...............?..F.=.c.d%..Y.;'...s&G.......>.7![..AN.RRu.H...'4n./E.@..C........YC.8G.....3.a.h..qQp..5....?GO......!\'g....+L....dE..M%2....2)JP.%0$.....'At.uZ.d.....Mg..#.s..S\.&......$.s..!.">...,.......6...4G.Q..Xd..c.D.JN..@..D.....d.<.=V..5..U...... ...?U..p.8X.i..$=.g.....;...?%_.O.....t..5.$..\.....D...`2.9..F...#+I...)..H'&.....R.@#...U........L.J...]..{.6]..]Gbq}.../.......s.6.0.Z\|..f......V8~+.i..^.S.R..t..M...L..82..9...u...{@0.@.."\|...(....M.........m........c..7.aL.\.<..,...M.(sC...<F.-.9..uW.c....!...R.3......}Q\ ..'0k.o...r...-Q......#K[R.<..;..A..c}...uU.b.0_..ar...it..&I$.&......I$H".nG.>J9../e1.t..B=..

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88144
Entropy (8bit):	5.290986223370378
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:ygZm0H5HO5+gCKWZyPmHQ47GKc
MD5:	F832E36068AB203A3F89B1795480D0D7
SHA1:	2115753CA5FB7032AEC498DB7BB5DCA624DBE6BE
SHA-256:	4C24DFD28784AD2BEFB3DAFAAC6BF1ED4E7CD58CCE713D9A0B228D426E812BAF
SHA-512:	B9DBC08C984AE3C7FD44822EC2E9A22CB8CF7DA55FA3975DBBDC3F18FD7E7A7793E8D93604826574E3DD6A4F982D7AF4F96C1AF5E10D847B8394A34A82C398BA
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/js/jquery-3.4.1.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5209), with no line terminators
Category:	downloaded
Size (bytes):	5209
Entropy (8bit):	5.30248116665556
Encrypted:	false
SSDEEP:	96:FlElBE3+aeTMHSebhDK+KC8rZoUFlN7b2PJTdW8BZDzBYk:FKlBE3+VAHL78rZoUF3uNdvBZ/Gk
MD5:	440115B3FC72BDB40AEA57F71CA1132A
SHA1:	74DB7C687B5D462D6CD523C1179B4D05275926DC
SHA-256:	DA7C08E2A8FE0E150964FD932C63CABF41222CCBF0E028EC921EC5AFBDD5939C
SHA-512:	0A14866A8291F1EA6169044DFDCBD575302B648A950C164A50729C27312A5432023C4EF30FAC046D6C98577546076AB05A10CAE99207CDD32DC2D0132501ED5A
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/sw.js
Preview:	(function(O){!function(e){var t=O.Z();function n(r){if(t[r])return t[r][O.i];var i=t[r]=O.Z(O.B,r,O.w,!O.X,O.i,O.Z());return e[r][O.z](i[O.i],i,i[O.i],n),i[O.w]=!O.N,i[O.i]}n[O.y]=e,n[O.g]=t,n[O.K]=function(e,t,r){n[O.h](e,t)\|\|Object[O.b](e,t,O.Z(O.GO,!O.N,O.RO,r))},n[O.G]=function(e){O.HO!=typeof Symbol&&Symbol[O.hO]&&Object[O.b](e,Symbol[O.hO],O.Z(O.p,O.cO)),Object[O.b](e,O.U,O.Z(O.p,!O.N))},n[O.R]=function(e,t){if(O.X&t&&(e=n(e)),O.v&t)return e;if(O.P&t&&O.t==typeof e&&e&&e[O.U])return e;var r=Object[O.r](O.q);if(n[O.G](r),Object[O.b](r,O.C,O.Z(O.GO,!O.N,O.p,e)),O.d&t&&O.oO!=typeof e)for(var i in e)n[O.K](r,i,function(t){return e[t]}[O.fO](O.q,i));return r},n[O.H]=function(e){var t=e&&e[O.U]?function(){return e[O.C]}:function(){return e};return n[O.K](t,O.OO,t),t},n[O.h]=function(e,t){return Object[O.FO][O.a][O.z](e,t)},n[O.e]=O.F,n(n[O.m]=O.o)}(O.Z(O.o,function(module,exports,__webpack_require__){O.f;var _antiadblock=__webpack_require__(O.O);self[O.c]=O.Z(O.S,6847935,O.V,"saipsoan.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	78743
Entropy (8bit):	5.178440533196338
Encrypted:	false
SSDEEP:	1536:tp+1ZTPR2t4tXbih05ve8/pwgrEpc9t0vSAIAxCs:MFRIpk0vSAV
MD5:	0AA8D64E726C4A57ADB5C88F9115996B
SHA1:	901169527507FF9E662CF64D8E361F359308970D
SHA-256:	7E1F1503DF765CCA5E099891B94E318A2EF95081BA2AF1EB6D417CC884BFDBFE
SHA-512:	EF6583F7684BB3B4F91405E7DEF90D65F9561BAA609540C3A66F3B4DE4267D283C2A7AF298BD86DF447B6ACE05993C2182EF47EDE4B30C25F79A38AD49E70A9F
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v5.0.2 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t={find:(t,e=document.documentElement)=>[].concat(...Element.prototype.querySelectorAll.call(e,t)),findOne:(t,e=document.documentElement)=>Element.prototype.querySelector.call(e,t),children:(t,e)=>[].concat(...t.children).filter(t=>t.matches(e)),parents(t,e){const i=[];let n=t.parentNode;for(;n&&n.nodeType===Node.ELEMENT_NODE&&3!==n.nodeType;)n.matches(e)&&i.push(n),n=n.parentNode;return i},prev(t,e){let i=t.previousElementSibling;for(;i;){if(i.matches(e))return[i];i=i.previousElementSibling}return[]},next(t,e){let i=

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	881
Entropy (8bit):	5.2222687499219544
Encrypted:	false
SSDEEP:	24:Yt5KPu2vsRpIphtv5v2jMMnzUkuMmd8CEp:YtYPu2NpT5v2b495/Ep
MD5:	EB3485DF0752610EBC42604782BD1392
SHA1:	32F5064C9E13F038FBBAEDF287469B1E9F8E03FA
SHA-256:	B46AB19FC3DD4B08D054604C16CF2B67A6EFF8D22C7875F129C306E8A4BE1D21
SHA-512:	72741824727A1422B39BD6CFCB91755EBFACB8113B3B28ACEE7FB04CBFCFA0C16DFE6099851AEE280408687EEFA26A8B9B74FA06DFB3595F01BE730123E471D6
Malicious:	false
Reputation:	low
URL:	https://ibrapush.com/zone?pub=0&zone_id=5588624&is_mobile=false&domain=v9.www-ytmp4.com&var=&ymid=&var_3=&tg=0&sw=3.1.471
Preview:	{"status":true,"code":"jsTagParameters","message":"","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"102.165.48.42","disableSwSanity":false,"domain":"https://jouteetu.net","gidratorTimeout":0,"injections":null,"install_ctx":{"country_code":"us"},"resources":{},"mobileSupport":true,"openInTab":false,"popupHeight":310,"popupShow":true,"popupWidth":510,"pubZoneId":5588624,"showBackground":false,"key":{"id":782675794,"key":"BCHsyXz3lPKVfb_pf3YRz060h_LdE1BDG3uxIQcFgZ71ppTn5a0zkd49lhpCw5yIM76pP3vLLGZfNSz918qM7Xs"},"swName":"sw.js","swSanity404only":false,"swTimeout":0,"useRtMarkUser":false,"wildcardDomain":"boustahe.com","zoneId":5588624,"skinUrl":"/pfe/current/defaultSkin.min.js","popupUrl":"/pfe/current/popup.html","flags":{"appLockDisabled":false,"quieterNotificationPermissionWorkaround":false},"extra":null}.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2017
Entropy (8bit):	7.868965264257016
Encrypted:	false
SSDEEP:	48:UasxWcXr5llBIrDJO0WjN6uU47sbX0oGZBqwEg4N1o8ANj:UaskUr5rBcc2T03BqwE9NO8At
MD5:	E130933C2EFCA085795CA0056387163E
SHA1:	EE6DE6AD7C434696E3B792DB17DFBEA16C8F4C95
SHA-256:	9209FD69529672ADA0A5F35D141E30505FEA8B53334E661CB672398B2DD4BD53
SHA-512:	2DEF1B0FA2EF1FBD1F3885728CE369A2D574EE5B46FCB2702FF37F501CF136B2C3E5B1D177DFBCFFE2D035F5ACE9315BA10A147FF9E20F7C77F2716E5D0A5639
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/C0BtY0x_z7Eep4f3UCL5LhEuyJWJUzeCAUWmoQDEepusEw7sIpkJquQSaMaz2Ph15q3eBMf1HZcGhwc-6-Y-tSEEjA=s60
Preview:	.PNG........IHDR...<...<.......N%....sBIT.....O.....IDATh..ilT.....m3c{<....KbB.c...).P.V..UJ.4J(K(.M..H(H.T.w..U....R..%..i.4iHE.MT."..`...k.,...f}o.}...`{f<.[..H.K....s...y...3...\o.....S...?H....l{.ww.:wx...........C....\..:...vAZ.....[3sRfh7......"..#....x)+t...9.P%.(!....wf...N.~.....!~....w..A'N.)..r..9......L.,R.#;H+l'.b.Z..L.....SPB.7.P..+..c..V.h........5.?..[.....3.r..-..k.!...8..}hv.G..]4.@.a.\|t......dW.!.:.p..'..e...t.0_.....}.7o.V..j...<(D..P..Y..q\+...q.........>.`...@...6.U0.e_T...f7..`..R....~C......j.j.f...V1ChvRC.~.z.s.m.....J.T.U.E.M.....R....L....c.i....'!%3 ...P.V}.h.T...x5uz?."..U..;?..M\.}..H...../I..}.C.k:{79.{.w.w.H..S.`.e..y.P..K./......`.i..B.Uu./.6.R.....h )\|.?.%N..5..OR\|....woV...-. J....w...j7....j.^.gS0.r\...>..1.S...@......p.........W....+..,.......n.x..Z...d...mF}s........R*.k..`1.........&.. pGKt...+.....2.4...\|..3E.q....@D.........!..)...@^zPv.f../..Z..{.c...x..m...E..W.y. .&~.F.IGt}.V. ...q1....v.....S.5....i..

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	564
Entropy (8bit):	4.775290370533887
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5rRCNGlTF5TF5TF5TF5TF5TFK:neRH688lTPTPTPTPTPTc
MD5:	5DA4C1420F84EC727D1B6BDD0D46E62E
SHA1:	280D08D142F7386283F420444EC48E1CDBFD61BB
SHA-256:	3C8CC37A98346BD0123B35E5CCD87BD07D69914DAE04F8B49F61C150D96E9D1F
SHA-512:	7C51A628831D0236E8D314C71732B8A62E06334431D10F7C293C49B23665B2A6A1DDBC4772009010955B5228EA4A5CD97FB93581CE391EE1792E8A198B76111A
Malicious:	false
Reputation:	low
URL:	https://t-y-p.site/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.18.0 (Ubuntu)</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26034)
Category:	downloaded
Size (bytes):	573990
Entropy (8bit):	5.657131258422223
Encrypted:	false
SSDEEP:	6144:MuwmwFNebPgRnDemYMvva5dccak3EWQROv6NdfSkcW/:WmwFN0m69KaFcXdfgW/
MD5:	B96B900433A396656398E6CCBA4D907D
SHA1:	775B8A7B7B8870095EB7E9ECA963D29908B701F7
SHA-256:	1E927997E28C590A0BE107F42D6D7662FBD192EE67E34791CE7F3CA41A014367
SHA-512:	F345C09C00E0E4A6140DA836A5B4C9007FE791A2072DBFFA74EA9082F85E9D7704FCF39513A4E30FD02ADBFD008D5596620F27C87F49DC184EB1274F64534DBE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.dJPrtZvRqDw.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.Z4IE48QAiHc.L.B1.O/am=6AYGyQI/d=1/exm=_b,_tp/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720LDE8ISk-83wVQHVDoQdYmvmJiiEA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=ws9Tlc,n73qwf,UUJqVe,IZT63,e5qFLc,O1Gjze,mI3LFb,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,p8L0ob,MT4Hub,h4ilFc,M0x0ie,o2G9me,mUxuKd,ri2s0b,kBpGk,qv5bsb,UkbOSe,DNlSjf,Xi0ENb,O6y8ed,MpJwZc,PrPYRd,lazG7b,LEikZe,NwH0H,OmgaI,XVMNvd,L1AAkb,KUM7Z,Mlhmy,s39S4,duFQFc,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,CfLNpd,SdcwHb,aW3pY,pw70Gc,mdR7q,EFQ78c,Ulmmrd,ZfAoz,xQtZb,FdMhB,MI6k7c,kjKdXe,JNoxi,kWgXee,BVgquf,QIhFr,YA1iG,V9amgb,hKSk3e,ovKuLd,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,QvLWAb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 61, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4208
Entropy (8bit):	7.936046947741653
Encrypted:	false
SSDEEP:	96:4kUR8b3pUvtFGCR4euhobhVd3xcU5P7p1/s:eWb3p8DGCR48bhVd3xP5s
MD5:	13FDB4D026B34DF026DBE36146A0EDAF
SHA1:	2D2E8D859254FEC64365C0C616865347A0F3DE5F
SHA-256:	D53B532DE44C4B83FD6899BA8AF1AFFF1853B070D9229D4EE547867CE636BECF
SHA-512:	969CB193969FACC2ECF424976406C4A7EA6AC9501C40C7C1F041354F6AC1C4B715CFDB1ABC9517F353A137D916D99AE9C4D0FBC05B3870F9C98D770F2A87D0CB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......=......%.....7IDATx..mp\.y....j%.+..9B~!.cK.i.r!..K$z....~.....2....L0.-..$....fl.f.L:.n&.,/.\.4mC...G& C...X~k...O?.]s.Z..w............{..?.y;G."D..!B.(....l...5.G..O...xp...M_\|..}.x...&....v..A^.j...l^.....3.X...g..u1..../u.w..V%..s2..r2w..\|k..r]}.@.2......p".L..4($Bb...!......Y.EW..#B]...e......D..Q..........l....[.jkk..i..:+.H.".!........=.......e.........9.id.j0D...4.M.........=9.3s.Z.Vo.."r...F}.z..K+i..R8.y.w..C"...k.."..Z.m.>r. .........W......h..<\...w.~K._...g...~..n...tH...[.@.-...A_..6..u.:..Z.k..K{G;.a\|.#..oe..._..D...B.7C"\Q.;A.bf.@U.......!.z>.0t\|.....xH......l-3%..l..za.92.z~.....4....O...3..!...(..2+........)b...^...8>be.s......<....[../.Q."..L.s....B....6.Cy.q..^..7....3.45qu..w.{...U...D2a...........l.q....G....`.....\|........h\|...jr.M/....ev.x.".*>?_..i.$k...\|..XW"?...9...<.<..cd.7.7'...V.z.K..m[!.0.../V..t.#..!.p.Fb+.id.p'....&^....Y.p.N.....~..f...D".5.5...C+c...[...Kf.].a=.a.H$(.W..D.....D2Q.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	5.300101249931867
Encrypted:	false
SSDEEP:	6:VKsEWli+DjKsEWlijWB38aLUxGF5wQNrJYoqAHsCJVpi:4Ws+CWsqB38vGc2d7qAHsCpi
MD5:	C3EA278D882634CB7F4A4BC413995928
SHA1:	73C972396AD7AE49FDA125687C6BD9466434A01B
SHA-256:	AE6CFBE5D58216DBED6703062DBB89CFEF29FF3861E408129D9D83CF154E9F1D
SHA-512:	A24D63AB131B3CEE189ED6D1C8959CDD27AAC9B04A642E4B2275849DD90E576C9A7B3BBA1BE9431CFBB1941F971B77AC6EEF02D9F44F8ACAEDFC572B34FE3E53
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https&_=1704923497008
Preview:	jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https",[["https.//www.youtube.com/watch v\u003d",0,[512,433]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	5874
Entropy (8bit):	7.912988229722189
Encrypted:	false
SSDEEP:	96:UuJqjwfcOqtjMq0IvZnMIfR8dI1svvtgQHYzGGlI0VaMeSNAM5xJMrml2MuAHRId:vJRZKjvvZnMwCI14FlHY57VayBqrml2h
MD5:	E55811438F65BEE46850B45B03768507
SHA1:	C763FD14A746EC728CBF914F356CB094CA9981CA
SHA-256:	1A8D922D0318A7A46DED2ED14FE9AD4340EDCC5845FCD240E209734A13704361
SHA-512:	715749EDED210E4FB56024D341C3FEBEF8EA2A88EA11EC4AE2E0B93ADC48E2E3D9C063FCCA58BA82BABA0E5D642A0FDE09F91C752EA7ABB8ACBF70A0E5CB8A08
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/uZFbRMRtJj0/mqdefault.jpg
Preview:	......JFIF...................................................+%..(...%5%(-/222."8=70<+12/...........5...//////////////////////////////////////////////////........@..".......................................F......................!..1..AQa."q..2....#BR....%4..35bcrs...d................................... .....................1.!.AQ2a.............?....T...wU .8...T....+......K..ql../.3..}.%4.....tq..#B..v.m.p.f..'.P8H.5]......,.u..?.......w,.>...'..$..>d.BJY..%.M.fK2...D.$\.).A.z..3&..C....@.....mV...M..}..D..s.........1a-.........V21LPZ.PZ.w+T..g+,6.. =S..8=SOU.LOR.=Jrz.....\|.z.>)z.C.IDy. .8........L2.S..q.}Vb....6.T......vSZP....B.F...!,.....M..vC..\|V.m.N..<.vZ.E...p.Jp..Z..P..I..v...%jn.....~../.u..S.{.q.....A...5..P.....N;.;...(.g}..S..}T..&...P....+.-.=.R.dz .jb..".Ar.(d(..Pp{...O..mYkOy?z.....-u.y.H....&...Yi.U..4.x$J.)...S.i......T...'.i.S.T.....L.T.0)....U.E.6.KB_2{.a....Id....T-q...p..tR-e6.).D(Lv..........U.&...am..V>...y.Z...y.....S'..Z.....A.Iwm.

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	8497
Entropy (8bit):	7.932978937288018
Encrypted:	false
SSDEEP:	192:QMxPuuocYtb2vCRC4wOFahGi8SDSMGowOz/:QsPuY3RoBodz/
MD5:	4A0F0AC0E170F7F96D7DAA3CCF4482EB
SHA1:	039246E1C3E275B7DE69BECE9CFCAAA106AB0692
SHA-256:	E9D69F5EDDD04AA5B50EC4390D171A051FBC529C5E890E8CBF99B6812DD12E09
SHA-512:	1328EF7DDBD56BA350F119DA139E7799576FAC92F78D0AD50C9A19A9F091C4B8EFD8FAE828E698EDA4E11ADC03CEB1B98C3C5B9EC624D957FCDAE3AEE811B83A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;........@.."........................................F........................!.1..."AQ.#Raq...2BS.3....6b...'Ccs....$7Tr................................0.......................!1..AQaq...."#2B....3..............?...U.o.....9R._gv.>..,j.,(....7jFs..d.:....?j.tv..Pf.H..v..Q..[FkD./l..G...%.%...+...Z,..3.n..L~....,=i...q..^V...........t..M.......Y.....6..v...=..tn.....Eg8.Io..7\|:.Gt,.Y.....'....?.Pa...3...T.$f7..;i..>4.]...L...F....)........../..b 7./3..L..%n5.x.....%.P...Ebs.....r.x..~^.,.n..(..P(...(....N....C...Z..YR.:....E....%e.1.iA..Z...JA.69...U/..[J....\g.'.V9E.b.\.h........ bO..8...+c(..~%..\.. ...j_.K...7....u...%...zD......I.T.H...Q....J40..EA.}..../...C..G.....T....i..Q\.0),.FI.(.ScFI.N.>..,.A.>......[=.......y..`.}.s.M.B.h....cjiF.`..9...B.;.F*F....Rr+[.;u.....o.=d. .Q..u..L.......

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	87852
Entropy (8bit):	5.479617425066329
Encrypted:	false
SSDEEP:	1536:AtGiLDt83ZoniA34gXzFoY/T44V8zOr63UJ7lrVJszwISnKb2ZaIa51WgMP4Sd:c83A9pU4l2EISn/+78
MD5:	D46D2997AB218D1DBA1AB614422ED53F
SHA1:	3F1F6B9847C8AD209835DB366C62FCB209B83A67
SHA-256:	09E8CE2DFEAC0AD09CD24788931B38EA7E7592F2C28EECC324B2DD1CD69D1B42
SHA-512:	8042F4465F1D14C765B2E7BE775AB6970BC0A5515552F5784B55BEDA45D192CCDC0D67BE5389112BE1B3728F78010C00BE43010F6E8C940DA9B8039C42820855
Malicious:	false
Reputation:	low
URL:	https://ibrapush.com/pfe/current/universal.min.js?v=3.1.471
Preview:	(function(W){(()=>{W.W;var __webpack_modules__=W.Lk(W.k,(e,t)=>{Object[W.gx](t,W.md,W.Lk(W.eC,!W.nk)),t[W.zd]=t[W.wd]=void W.nk;const n=W.Bk,o=[];function r(e){const t=window[W.PC][W.mO][W.Vt][W.to]\|\|n;[window[t]\|\|[],o][W.jt](t=>{const n=t[W.wo](e);n>-W.tx&&t[W.Oy](n,W.tx)})}t[W.zd]=function(e,t,r,i,a){let s;try{i instanceof HTMLScriptElement&&(s=i[W.yG][W.Oo](W.Kf)[W.zC])}catch(e){}const c=window[W.PC][W.mO][W.Vt][W.to]\|\|n;window[c]?window[c][W.jt](e=>{e[W.hC]===r&&e[W.GR]&&(r=e[W.GR],s=e[W.iO])}):window[c]=[];const l=W.Lk(W.af,e,W.Xr,t,W.hC,r,W.iO,s);a&&(l[W.Cf]=W.Lk(W.Fg,a)),o[W.WZ](l),window[c][W.WZ](l)},t[W.wd]=function(){o[W.jt](r)}},W.x,(e,t,n)=>{Object[W.gx](t,W.md,W.Lk(W.eC,!W.nk)),t[W.Nd]=t[W.Td]=t[W.Ad]=void W.nk;const o=n(W.t),r=e=>W.pteW.pt*W.cd,i=(W.nk,o[W.ud])(W.Dd);t[W.Ad]=function(e,t){t<W.tx&&t>W.nk&&(e/=t,t=W.tx);const n=i[W.od](),o=Date[W.CO]()-r(e);return n[W.wr](e=>e>o)[W.Ar]<t},t[W.Td]=function(){i[W.zO]()},t[W.Nd]=function(e){const t=i[W.od](),n=Date[W.CO]()-r

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.6042015135302385
Encrypted:	false
SSDEEP:	3:YCMxvOUmVR0oQA3E/WjVxXMcYU:YCM5OUiR0N7eHcXU
MD5:	71059E9DD759864825E3ED6700DEA741
SHA1:	15D405FB6AB488C1DE764808CB88FEFFA95AF66B
SHA-256:	FF1B5EA96EA9A4D300E12BA7C27919DCFD376112786442E5D8861EE454DEADF2
SHA-512:	981F046883D68D1DE01A23677224EFD4532C808B7F9C910FABA0B3FD30255022FFFA698B6376B8527A8407068B4742603F13B06B61A7BDE4D303106578CA1583
Malicious:	false
Reputation:	low
URL:	https://my.rtmark.net/gid.js?userId=d36449c3fc5d2c86d4a195aa43f059a6
Preview:	{"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}.

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2673
Entropy (8bit):	7.890766781471285
Encrypted:	false
SSDEEP:	48:BJwZKuxp/3Ju5/ML8ziYWfH2WkkJviXgfbaSkywuux9fl//egwV34nc:3cp/345A8ziYWfH2loawbaSkduux9fJY
MD5:	3351A3753EFBC7307FFF08769BF94C47
SHA1:	C7627B026551672D65E5EBFBE1AD956ED0D0D297
SHA-256:	41489FAC39A54F03B517A19A207352A05139BBE4F814848A9DF7AB248B4D93FC
SHA-512:	C8C48DCE1409D010787574301F8578495B36E7725D23AA4A85E31E9AAB4C90AA933683F7A7C4CF09D0F94D020FCD9B53836F316A465F932DBE0A983B99DF8DF3
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/gksbC7LokfjgIneFOwrRYDLHJxl0mxEZnKB2vdMOv7wAVD3wk2Ptz-6CWEglD2sQq28E7JsJL1JeQqydEVuSjlgEjQ=s60
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d....(IDATh..Zkl\...f.k..<l'..H}@".i.?Z.....b....D.(......@..@C[.B4.(@..!.UM. .FH(...J.N.8.J...s..53.?.....8..?y.g....3..`...<.........;.P.....#.p....8..\......w;;_...B.40.}a.@D.R....g.._..x<.....Y.5I.....@V.u=..u....~..`J.N..J..i:..n..u....s..94M....u....2X$.9f..gM...wz...q......M..@.arE.o....+...........l...;+..u......1...&z{Ov.......dSJ.D../...2.L......%..w.F...m.}dxh...Ng...0<2.8......B7..#"@JU....55e.s<..NgR.T.E@$...c...m.......C.#C..).R)....2..X..W}.{2....6...%RPJ....Lf."...508.t.{U.......0tX....'.>....E...@&.m..._OJa<...S..A).0..!Uw..! .@$....R...>..m.....Z..j.....XG..Y.....8..n ....jf...$......c..Wt6-m.5..!..CCo.S..".X.."...y.X........@.$.....G..Z...cll..eA.=..c@1h!.'...E(.s.k&.P.s..s-.._A...%...4)!...y.\....I.....U.N..}.qw.x...b..GE....!......&...j..0r.z..G]G.s..h4z...R..\.u..{.^}=.\X.ZbS..hw.q...........DN......^..5..\|.=.....?.".8. s..QT.8...[n..p.U.&..D....R.J.j..p]..l..cc...C6...:

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	9070
Entropy (8bit):	7.928071377011921
Encrypted:	false
SSDEEP:	192:bE+et5nr175EGPeK1RK1/MRJlSwDj4BUZoRUQrJ1yFIO:g5tt1dEp+o1/NUQNEFB
MD5:	FCC573BA63E7F0968E887BB979373694
SHA1:	E457E2350E2ABA12231AA48DC4E2C409C6172EB3
SHA-256:	9895AB198384BF9FD22E3772C5CA06E7A241C5F83876459398DE4E0E44D064BC
SHA-512:	33F90A5C1D22F5EDAEF9C803E27ECF7AA4DCA93F56C15582DECD25F7F84D00F375EEE9051BAB0D7BD2AC24EECEC6686E5623A9A3ABDFA1F1BA421E9172F87ACA
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..)...%5&)-/222."8=70<+120...........2&#)///0///////5////////12///2///2////6//;////0/5;/2//........@.."........................................H........................!..1."AQ5aqt...#2....Bbrs..$R...34C....ST...c.........................................................!1AQa.."q.2......#$.............?..h.....(...&z6..-.BUM.e....K.....x....x..f..,...L.$.P.?..58..u.?.I..ef....... m...^v._.3X..d......y......NF...uq.ea.$...W..$r.AI.......o..n..&B.....=~85...7.c..>\|.z.KK.....5.Q^...QE...s......T.AGxt#qP...s..g..'.e...rja...F].....!P,s.`...RD....XQ..`......Z`?....Q...3.o.h.N{..e.=.u...........O/.......3.....Q...!..V.NA...=8W........K.q.?....`.....4...Q.E..s.-.7..=..K&.?..s....<M2..[.97w..4..-R.......~.0.6?..P..8>..]...t.u.F..#...H..'".qK..........%.......M...Q.._H...h....9..V\|rg....?.....I...<r...s?.i?.R........t~.~..O..[...QR.eZhp..3r....A...e..... ....U...m.......Q"..(..h.QE...^...K...Sj.s..

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	796
Entropy (8bit):	4.931026061087846
Encrypted:	false
SSDEEP:	24:Yt5KPu2vsRwX2Jyphtv5vCZnzWkuMmd8CEp:YtYPu2H/pT5vea95/Ep
MD5:	8C0855FFA6EC3FD1822E7E6127DC0B11
SHA1:	3CD05D35E2C69E42CFF458213E74038E0239AE9F
SHA-256:	65A6AE24E0C31BDD891A4E652B84DC9DF4A5A22BB4E4D0AD2C9A3D2192A8B19A
SHA-512:	651836394C5EC69AA5D6CD995E63598FD397F07F838DCDF43856BE02EB2BFB2D3F56012C74B39ABE25D1D3D66057C871C21D0D3159AA652241C7DC2A932E6DE6
Malicious:	false
Reputation:	low
Preview:	{"status":true,"code":"jsTagParameters","message":"","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"102.165.48.42","disableSwSanity":false,"domain":"https://jouteetu.net","forceStandalone":true,"gidratorTimeout":0,"injections":null,"install_ctx":{"country_code":"us"},"resources":{},"mobileSupport":true,"openInTab":false,"popupHeight":310,"popupShow":true,"popupWidth":510,"pubZoneId":4662709,"showBackground":false,"key":null,"swName":"sw.js","swSanity404only":false,"swTimeout":0,"useRtMarkUser":false,"wildcardDomain":"boustahe.com","zoneId":4662709,"skinUrl":"/pfe/current/defaultSkin.min.js","popupUrl":"/pfe/current/popup.html","flags":{"appLockDisabled":false,"quieterNotificationPermissionWorkaround":false},"extra":null}.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	224319
Entropy (8bit):	5.560556883770899
Encrypted:	false
SSDEEP:	6144:dirvdKsDMSXkA+HEloLiDlnxNVB+//uO/0:kVKsDM0NVB+//H8
MD5:	ABAB7EE82FDAABDE8547E67FB32FEE26
SHA1:	19E7C29C0A986E82ADB57BB794EAA7D47049D7A9
SHA-256:	51DCA5748D8245BA33E4E090A55EBE5A7CA0DC3ADB27A1DA62E75D539BC1DB77
SHA-512:	F0B2BD9DA226F6F0F644B58FA9EF042031B5A32A9900BFEA7C11346A10EDE21332230CA1B4ACA6ED28976E61E5BA9E1BEC518249E9ECFDDCD94AF97C1BFD1951
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-EY1ZDY2CV0&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","www\\-ytmp4\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":6,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SE

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65306)
Category:	downloaded
Size (bytes):	155845
Entropy (8bit):	5.0596333050371385
Encrypted:	false
SSDEEP:	1536:d0bwW83RipVVsEBpy0cuJcf22RWb5CyVUpz600I4fM:d0bwlyVUpz600I4fM
MD5:	ABE91756D18B7CD60871A2F47C1E8192
SHA1:	7C1C9E0573E5CEA8BAD3733BE2FC63AA8C68EA8D
SHA-256:	7633B7C0C97D19E682FEEE8AFA2738523FCB2A14544A550572CAEECD2EEFE66B
SHA-512:	BAC54101DEBAFCDA5535F0607B5F60C2CDA3E896629E771AD76AC07B697E77E4242D4F5F886D363B55FC43A85EA48A6BFC460A66F2B1FC8F56B27BA326E3A604
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.0.2 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-font-sans-serif:system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255,

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	5962
Entropy (8bit):	7.921735014218206
Encrypted:	false
SSDEEP:	96:tgrjwF+gQvlc6tpcAN4wm48/+Hxjmp7J627sNKGwSJ7RfBskufP:GQFlMc6t2AwWHKgNzhbBskCP
MD5:	43CD5098EB8EB12BC4375AAD152FA324
SHA1:	17FCA55FC145F881108C6233952710AC6D41E305
SHA-256:	4E9A14AECE369131FC37649F85C5E6CA2FED33FC44AD8A3FE000BAC9F2ED16CA
SHA-512:	778E434137926DD19C5D906E9ECEE517FB1AC1653FF39D997CEC901F802F2A7350B13325C64C9394EEE36879EFA52968BA8B341944CB947490A2265952B377EF
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/Ts9OpnZDo2Y/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////........@.."........................................D.........................!1..AQq"a.#2.......3Br.....4CR..5Sbs..$%c............................. .....................1.!.2A..Q............?..qB#1@.Qq.c..Zc.......DCX1....G.4.<........._.....~....3..B.5.....8......,l.V...8[.......?U.}{..J..\|&d...a...d.r.yg..O[W..fv...rc..........0.s.d.w...-K.z..x..R.<...K....f.an.....fxf..Y..l. .71...I+R......O.p$..;U^..E.nb....zf/_...\.csZ.;v.....-~..P..._'.........e..........k....Q.Z....Yq.Ic.u...{]..(....5..jMb..Gi.H`......1....m..p.vgpo...5..[......@S..)J.....h.lp...`.H.v.<...-...r9Z.....r${....w.;........Ei..Q....N...~\)$.........D.u..E..>m.RwN<Cx..L.HQ....,...\|.xE..}A..H..........%OM.......M~~.I&..:......H..I...>.....f".N.X..>.i.."R.(."q9....8RT).U.%H...#....#1@....8#o..-(........@@.`@..:.!.v.P.A...foT....Q.....

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	50434
Entropy (8bit):	7.968946667127506
Encrypted:	false
SSDEEP:	1536:p6fvEsEokg/LriPAsL2uhvt6FHfoZHb/JdD:p6HERor/yP1LZvYFHgZHbj
MD5:	C34FD1B2C76B7A71B5B5784AB60B6368
SHA1:	9CB4E8986542D42CAFE0BFC1377BFC928929CFC5
SHA-256:	89D93E12A15F6A5D57B5F8ACA8BD1E6984DC4C8C5DEC7840A8C8E8C8274C1568
SHA-512:	E11B7DEB3B23E03FCAC414AA76BBF809FA657869080CB92511D5C5757804B4D6D3B0F09F8E91D73F651D4531FCB9735C3DFD78699719C65EC96D06794055AC9E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................E.........................!1A..Qa"q....2.BR...#br.$3.C...Sc....%4s................................./......................!..1A.."Qa.2q#....B..R.............?..d..vz.....V.l-o..G..rk.qX...J...V....+..4.D[k6...@J.9.@.<...Pz...$B3.......B..A......u.J..p.'.@.......r..lB..hAv..X.. .r.dp.U.....h^..FM..,....q.....1.)M...$....N..1q.X...a.PN....B.{.."...~b...!.. .......!N......kx.1....9M.I ....>u.Z.H....k....BWH...2 #...D.dDA....^.<...}(.YVV .r..=>.0.1%~.M6....Y..&jm..6...&.f:.i.CQ4uD-...E..[(.p6..Fb......?5.-..Q.....+X...[..).."[...K.0+...6.'.h...pt$..:&.%X[ t..&.5.ZG..F...t.I.We. .3V.U0.q9S.W..s..H...V....+\....Z!.Y...Y...G..T.k6.PHv.m.v......X...Y..C.-...v.m.h$X..I.....".ew...8..-j.Q\.......+.1...s@'8.,...f..l....=s.M@rx.$...RB...`zR...D%.J...'%W.=.jx..........{

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1624
Entropy (8bit):	7.388022511794596
Encrypted:	false
SSDEEP:	24:f+cqjH29f6Xcd+Ojq1zsbBbIw6Qbfg6wYFUnFcC2vkR8rBzrNjlsNk2Ge1ZZ5:fN+cd7yzstIOfdwYER6VXsNjV15
MD5:	C359ABCAAE952EFAA02E06C6D8F133F1
SHA1:	E86A84E2FBB186E87F0E5DD17C2478BD5C7D96F4
SHA-256:	9F86C073E6343718A76A431C6B2305662F61F679C5133241484484750A397A5B
SHA-512:	D928112C6D09B467ACF251C4CE5A3A8DB4CF98E59239832308BD230C6C4175ACD2E25887C139D54C30936AC88A0206119E3817FBB9E5CD9EC6CBCAA2DE49B8CD
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/images/circles-loader.png
Preview:	.PNG........IHDR...d...d.....G<ef....PLTE....................................................................................................................................................................................R{Q....;tRNS.......!...-......`G)....fB8%.....kV.t[..y=3...}.pRKP........IDATh..Z..0.M........b.^..._. ......{...Cf2gJ.....).bK38P........U.E..1.5..I.OB....I>.~..6}.p./....8Us%..\|..\I.>..a......n.j0...&.....\|2&...Y...k{..g..Br..0Z.C:.F~...zr=...0.vr...\...{..~s.z.:TRH:O7N..Ij,:..B.... .d.....,``........d.....(... 1E.G...I...85..\|......B.5..Y.$B.R...&x....O>w_..H..~..f...N..O`.. s-".....[D...Ze...$..I..OVU....S...U/I.6...Zs...K)....be...`.IV..zgw...n.W...^...z..X./...@).&.l...V.s,P.:..\.7r.............E.dC.[...^.x}.........uc.{._.G.........4.:<(.e}..k.v..@.`..j.Y.3.....G...<.$...I....J.H...&..s....'....#....Qs.\..`. R8...0.`IqV..%./[.yT B....O.p.....\|z..$..K._c..3(..o."c..p..0...S...U.D.RS.XMio~...%.{lRv.....\|b3E..:...q2e...6.w.....

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2968)
Category:	downloaded
Size (bytes):	18935
Entropy (8bit):	5.4099953504028635
Encrypted:	false
SSDEEP:	384:RhBa3tUGVSB+l2jViFHY0SQZ0m9aUD/oc73XDydmWcvH9MHvDaYMXzoEmmrwBotv:RiLVSB+lv4zobH2dmbQDAXdrwCB
MD5:	DECF43ED72124E4733772CB48BA1D846
SHA1:	FBD2C1C0B96B2E6A195F33FABC07E709EEC5F68C
SHA-256:	93E1E4661B0FA1A6F98F8B4A9E1E15D322F97E9C6F03351DE4D9FA8D0EA69C3B
SHA-512:	083512E47BA97C070C5FE619F7FD306E1352F19D11B98A4E9F76F54023159619B0C47B3A801BB606DCBC3C1ED441DA0775400E2110F542C6D348C8DB2C5CD409
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.dJPrtZvRqDw.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.Z4IE48QAiHc.L.B1.O/am=6AYGyQI/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,COQbmf,CfLNpd,DNlSjf,ECBKud,EEDORb,EFQ78c,FdMhB,HsQQib,IZT63,JNoxi,KG2eXe,KUM7Z,KfQkxf,L1AAkb,LBaJxb,LEikZe,LcrBLd,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,OmgaI,PIVayb,PrPYRd,QIhFr,QVysJe,QjUiqc,QvLWAb,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,VwDzFe,XVMNvd,Xi0ENb,YA1iG,Z5uLle,ZfAoz,ZvHseb,ZwDk9d,_b,_tp,aW3pY,aurFic,bZ0mod,byfTOb,cephkf,dsBBae,duFQFc,e5qFLc,fKUV3e,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,ovKuLd,p8L0ob,pjICDe,pw70Gc,qv5bsb,ri2s0b,rm99Nc,s39S4,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zKiH5d,zXfYdc,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720LDE8ISk-83wVQHVDoQdYmvmJiiEA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=RqjULd"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.n("RqjULd");.var via=function(a){if(_.da&&_.da.performance&&_.da.performance.memory){var b=_.da.performance.memory;if(b){var c=new SG;isNaN(b.jsHeapSizeLimit)\|\|_.dG(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.dG(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.dG(c,3,Math.round(b.usedJSHeapSize).toString());_.Bk(a,SG,1,c)}}},wia=function(a){if(TG()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new UG;if(b=b[0]){switch(b.type){case "navigate":c.xe(1);.break;case "reload":c.xe(2);break;case "back_forward":c.xe(3);break;case "prerender":c.xe(4);break;default:c.xe(0)}var d=_.Qk(c,2,Math.round(b.startTime));d=_.Qk(d,3,Math.round(b.fetchStart));d=_.Qk(d,4,Math.round(b.domainLookupStart));d=_.Qk(d,5,Math.round(b.domainLookupEnd));d=_.Qk(d,6,Math.round(b.connectStart));d=_.Qk(d,7,Mat

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (718), with no line terminators
Category:	downloaded
Size (bytes):	718
Entropy (8bit):	5.2182357961163985
Encrypted:	false
SSDEEP:	12:4Ws+CWsq78usBtMuscKLtMustxtMusRtMus/iRZtMusOtMusMtMusWtMusYZtMuj:4Ws+CWsI5sdscKsttsNs/y1sysgsasYh
MD5:	0F44BC0AD2DDE9C03E7740E4B3889F21
SHA1:	B8BE455CEC4523FAB6FF1BB5985680D26EEAACBD
SHA-256:	772EA64CDBC8C3D26C70EDC3FB9CF0FCFE2A2A06487D0023E57BBDC1692D41AA
SHA-512:	90A0C21C459B9DC20A044010366248E097EE87BD892F16838FBCDD820E9D57B90430C7C2EFC21CD0E817776BE706C63FFB1468A8D16F5D820D62F1663D60F9DF
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2Fyo&_=1704923497017
Preview:	jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https://yo",[["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]],["https://youtu.be/ucv-2x5bxkw",0,[512]],["https://youtu.be/byuzdnchuy4",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	432
Entropy (8bit):	5.312640495114246
Encrypted:	false
SSDEEP:	12:hYA0HqJmqGYYr79hLFBkAAqJmPm/esHbEYoV4Nbx4IQL:hYPcBoBvPz72V4NW
MD5:	039CF32417C24964068BBE58066D78BA
SHA1:	36B61C4B7F8D7A952C3DFE627481DBF4BDA09251
SHA-256:	3E559665E142252C945FFE219ECD3F6F5A13BF7882807D01DAED7D6DF2D43BF4
SHA-512:	DA2CC5494B20A5E5EDCA59DA8A62BC5D0A27DF51F36E93D59C0630FFA0DF137CBC3BC746DA374BB967CF34E2F8A2026443A8AE5D4B684616839D8FE4B85A1A6D
Malicious:	false
Reputation:	low
URL:	https://scone-pa.clients6.google.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.GsbA68hXs80.O%2Fd%3D1%2Frs%3DAHpOoo899t-H8Lxb3OqzMDuPn6TV_i36ag%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>.<title></title>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<script type="text/javascript" nonce="SGQ_zUjbI3dLmSiCvjb4uA">. window['startup'] = function() {. googleapis.server.init();. };.</script>.<script type="text/javascript". src="https://apis.google.com/js/googleapis.proxy.js?onload=startup" async. defer nonce="SGQ_zUjbI3dLmSiCvjb4uA"></script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	57187
Entropy (8bit):	5.868253734115879
Encrypted:	false
SSDEEP:	768:tUDeGwmUh69By1+mJDE3iLyWYkr7XMGB/nt0H:iDeGA6sJDE+/g
MD5:	76BCE54DA368115005674F3C2C435CFE
SHA1:	BF72BA3454016AA42665188C0F746998C0C33A93
SHA-256:	7B23E3A7155161323573E58616FF1BFDAFFD0560483DB31315D181F6B394DDD5
SHA-512:	88BA86EBC64350A326E73E1DBCC418A396949A0E4E6F0CB4C17850558A1282FB0217E757DE6BFB100E343E6F72545E8105335F57694384A6808CAA4360AC9E8A
Malicious:	false
Reputation:	low
URL:	https://ibrapush.com/pfe/current/defaultSkin.min.js
Preview:	{"iframe":{.."defaults":{"icon":""},.."html":"<html lang=\"en\"><head><meta charset=\"UTF-8\"><meta name=\"robots\" content=\"noindex\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><meta http-equiv=\"X-UA-Compatible\" content=\"ie=edge\"></head><body><main class=\"sc\"><div class=\"sc__wrp\"><div class=\"sc__sw\"><div class=\"sc__sw__close\"></div><div class=\"sc__sw__icon\"></div><div class=\"sc__sw__heading\">{notificationHeading}</div><div class=\"sc__sw__text sc__sw__text-desktop\">{notificationText}</div><div class=\"sc__sw__text sc__sw__text-mobile\">{notificationTextMobile}</div><div class=\"sc__sw__btn-c\"><button id=\"B2\" class=\"sc__sw__btn sc__sw__btn--allow\">{allowBtn}</button><button id=\"B1\" class=\"sc__sw__btn sc__sw__btn--block\">{denyBtn}</button></div></div></div></main><style>html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:content-box;height:0;overflow:v

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3114
Entropy (8bit):	5.551705750114455
Encrypted:	false
SSDEEP:	48:cyKfo0zM4QvC28vsuBJxOHdc/GkAoflsfq8hRPUIgfwfSLuoVElZJY:1KfZCcs4Jx4K1sfbuwfhflZe
MD5:	730AB9619EDDAFDC9D4E1B59F04BBF24
SHA1:	9C011E03A1F5054DEA92A37B5C4AFAB59BCA37FF
SHA-256:	8FE609AC2D45C1DE19BCCCFE4C604716D4F336827AB3CAAABFD0912943DCF608
SHA-512:	744D43592C034A5CB2BF744C0BC1A79DBDC0B661AD56E92C6924D3DA91C94B333DDA33ECBB74579B556F351D0A72FF942253064E256188874260514325007753
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/images/YTMP3.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="64px" height="64px" viewBox="0 0 64 64" enable-background="new 0 0 64 64" xml:space="preserve"> <image id="image0" width="64" height="64" x="0" y="0". xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAMAAACdt4HsAAAABGdBTUEAALGPC/xhBQAAACBjSFJN.AAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAACNFBMVEX///8Ah88Ah88Ah88A.h88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88A.h88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88A.h88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88A.h88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88A.h88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah8

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10669), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	40672
Entropy (8bit):	5.607771700099351
Encrypted:	false
SSDEEP:	768:B2HMcKDEkFOKbjjVTaCeicsv5ydymNZ01BwJugGvXbc7ZwWkZy9AriKV:B2HrKAkkKbjjVTaocsRydyq21BUugGvt
MD5:	3FFF1D6957BFF04109C62411B8641EAE
SHA1:	12A4BDBD8F9925B834E4582AA502A077CEA1C260
SHA-256:	E18FD7982F3D967EBE173FA16E6584EAEBA22D20EE0339E06C98673E2FF6664E
SHA-512:	7EC6A635A26DF0A9FE6C9279084B9A2A0694513D4C27E4DF739FAA79554ECE33238F5279874834769903DCE73ACDB4921D2AB0E9D64CF0409DA4B351124E6D95
Malicious:	false
Reputation:	low
URL:	https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}
Preview:	..<!DOCTYPE html>.<html>.<head>.<meta charset="UTF-8">.<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no">.<meta http-equiv="X-UA-Compatible" content="ie=edge">.<meta name="google" content="notranslate">.<script>. function getCookie(name) {. let cookie = {};.. document.cookie.split(';').forEach((e) => {. let [key, value] = e.split('=');. cookie[key.trim()] = value;. }).. return cookie[name];. }.</script>.<script>. function rtrDebugLog() { }. </script>.<script>. . . let originalOaidValue = 'd36449c3fc5d2c86d4a195aa43f059a6';. const cookieOAID = getCookie('OAID');. let syncedOaidValue = cookieOAID ? cookieOAID :'d36449c3fc5d2c86d4a195aa43f059a6';. let isOaidSyncFinished = false;. let isMarkerUpdatedOaid = false;.. function getGid() {. rtrDebugLog('[getGID] Start...');.. return new Promise((resolve, reject) => {. try {. const oaidRegexp = /^([0-9a-z]{3

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14574), with no line terminators
Category:	downloaded
Size (bytes):	14574
Entropy (8bit):	5.3831677835266
Encrypted:	false
SSDEEP:	384:Ae+VHKPM+wyIOsDflq5emAujD3BlOKAIBosQxuaCOhNAP:Azlq5emAunRMKrBolua3hM
MD5:	B063ADEB91E912A8E98B1830808D5265
SHA1:	AE85E95523B2859F888D5B71F8954B4CBEC9318D
SHA-256:	4A7547ED8CE1CF622BBA41C6CC4D1745861C85A51943A81CCADC2C7B04BC8FAB
SHA-512:	EF4399FA252EB9D32677B8A491459C128808C3FF8C204D7BCF5EDB6E81E18F9EAFA31BB2F8E3C1EF519679FE3BC4312DE7E33115DAE2802D6D4439AEBC856B08
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/UAParser.js/0.7.20/ua-parser.min.js
Preview:	!function(r,u){"use strict";var c="function",i="undefined",m="object",s="model",e="name",o="type",n="vendor",a="version",d="architecture",t="console",l="mobile",w="tablet",b="smarttv",p="wearable",f={extend:function(i,s){var e={};for(var o in i)s[o]&&s[o].length%2==0?e[o]=s[o].concat(i[o]):e[o]=i[o];return e},has:function(i,s){return"string"==typeof i&&-1!==s.toLowerCase().indexOf(i.toLowerCase())},lowerize:function(i){return i.toLowerCase()},major:function(i){return"string"==typeof i?i.replace(/[^\d\.]/g,"").split(".")[0]:u},trim:function(i){return i.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}},g={rgx:function(i,s){for(var e,o,r,n,a,d,t=0;t<s.length&&!a;){var l=s[t],w=s[t+1];for(e=o=0;e<l.length&&!a;)if(a=l[e++].exec(i))for(r=0;r<w.length;r++)d=a[++o],typeof(n=w[r])==m&&0<n.length?2==n.length?typeof n[1]==c?this[n[0]]=n[1].call(this,d):this[n[0]]=n[1]:3==n.length?typeof n[1]!=c\|\|n[1].exec&&n[1].test?this[n[0]]=d?d.replace(n[1],n[2]):u:this[n[0]]=d?n[1].call(this,d,n[2]):u:4==n.l

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1378
Entropy (8bit):	5.045317766927242
Encrypted:	false
SSDEEP:	24:+FBPfu55vHUoXwY3CJ0WKR5AeJ74EeQl4Eiq9uHIClC+7c:CPY5JbVlLAwnsHIsBI
MD5:	EFED2054AD8764B8E242A955D6460C60
SHA1:	7E637A2C9E3C672355403065F59CE26EF5538DC9
SHA-256:	A89033C7D1CBEDBF8F1823E5AE438FED3AE57C177D8425B096A5B798EACDA7BE
SHA-512:	A0ACB297532067EE56C33DB0AC9DBEA6BF86853E55D8F6749FBE294E73570CAF1F678F40FAD9FC7D98A6234DC62538882456CF257A49B375FD818F3021600280
Malicious:	false
Reputation:	low
URL:	https://t-y-p.site/static/scripts.js
Preview:	const allCookies = Object.fromEntries(document.cookie.split("; ").map(el => el.split('=')));....function appendPixel(url) {.. let img = document.createElement('img');.. img.style='visibility:hidden';.. img.src=url;.. document.head.appendChild(img);..}....if (allCookies.hasOwnProperty('click_id')) {.. const click_id = allCookies['click_id'];.. if (click_id) {.. let matomo_url = `https://metrika.traff.space/matomo.php?idsite=205&rec=1&url=${encodeURIComponent(location.href)}`;.. .. const product = window.hasOwnProperty('product') ? window.product : 'video_downloader';.... const hostname = location.hostname;.... let subdomain = 'trck';.. switch (hostname) {.. case 'ty-page.pro':.. subdomain = 'c';.. break;.. case 'thank-you-page.site':.. subdomain = 't';.. break;.. }.... let matomo_cvar = {'click_id': click_id, 'product': product};.. let our_pixel = `https://${subdomain}.${hostname}/pixel/i?product=${product}&click_id=

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://trck.t-y-p.site/pixel/i?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (902), with no line terminators
Category:	downloaded
Size (bytes):	902
Entropy (8bit):	5.310295172641773
Encrypted:	false
SSDEEP:	24:4WjWf9h37YHLe/A2F5OMaAGx/cuzAyRAz0V50ACfozuHsr:E37YrT2F5pGxEuMBYDzCfng
MD5:	9F4DB67A8D720626F5D5290B762C1567
SHA1:	EAA996612552EADA767FD0BA1CD5AC8FD4788856
SHA-256:	3944D13FD1E5FF5D50CCD04E8FFDE210DC0A7C380B530189E1A09D45E0C46892
SHA-512:	EEAE37DC500215AB1C3275BEA6C91F7BA7D91FEA07A729C88C71AA92C949E578B96D173A072F99A933C3BAB1BC50463F478CD3885F4A0E838A8C9C59578CD99C
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F%2Fyoutube&_=1704923497022
Preview:	jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["https://youtube",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["https://youtube.com",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/shorts/pklrs8iuzqq?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	867
Entropy (8bit):	6.407903068329912
Encrypted:	false
SSDEEP:	12:6v/7uUktAXtzt+7ykGf4Wz8snCfb+OrG/vqBXG/fga+93uh2zS4+gEMwuWZc:CkARw75GJ1CT3NG3P+93zIgEMwNq
MD5:	EFFFD4CF797656C83E0B8D912841DB81
SHA1:	5DE68E536B0721848FA604E9964ECA5EB25EA9C7
SHA-256:	1A793EBC365A5E8F218D6D27C0E85C9C7DF2040F245E37E8319549706A17D036
SHA-512:	B5325CDC4B2AFF74EB5B433DB495B60644CC19F08F2D0293A20C9DB8C8EA9710538609DCBCAB487F6E24CF0F61AC7168C08991F4840F0A2BA6FE2215B2162785
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE.....................................................................................................................................................................................................................................................PG...OtRNS.&x2..1z(...m......PN.RH_gk..^FQ-..S.N.T.,.O..IJ..2p3..JH.PO.+i.mM.....y.v$..df....bKGD....H....pHYs..........+......tIME.........@ ....IDAT..5..V.P.....\-`...(...T.,..(n.....T.G.9....U8:.N..3.U<7..%..z..J.B..c.Q.7........D...(..$M...C..pc...0.(.z.e..1...r".t*.qNs.'e.c..<.....e...!..4M.8.z._..N.]y....6.:.A..k...ux.s-6.....o.G..f.[.;+.'!.. >...%tEXtdate:create.2020-10-09T12:05:10+00:00cP....%tEXtdate:modify.2020-10-09T12:05:10+00:00..t1....tEXtSoftware.www.inkscape.org..<.....IEND.B`.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13839)
Category:	downloaded
Size (bytes):	14166
Entropy (8bit):	5.327359719793018
Encrypted:	false
SSDEEP:	384:r5iXbxCKVnVY9wA1m9b2U5/4ZFvhpaf1wbSNO9:gLorJmZ2rF5pc16Z
MD5:	EA9128DD465470C0A0C638549046B55B
SHA1:	9FFC5F00A9E2454928A4B5064FFF742049711CC6
SHA-256:	F3A17DBEB1279DDD9AA45595A39B0DC40ADA6FA4FC2F4E3C7CF3E460E3410C76
SHA-512:	7F4C1DE9422F65BB233CD79B1B1FAE3331E683A297AF58D6BEE9890D84840E6C182583A9B59D1D4E46BFC0126EED38FCD2D9C260C2A82A272ABD988873D18983
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/iframe-resizer/4.3.6/iframeResizer.min.js
Preview:	/! iFrame Resizer (iframeSizer.min.js ) - v4.3.5 - 2023-03-08. Desc: Force cross domain iframes to size to content.. * Requires: iframeResizer.contentWindow.min.js to be loaded into the target frame.. * Copyright: (c) 2023 David J. Bradshaw - dave@bradshaw.net. * License: MIT. */.!function(d){var c,u,a,v,x,I,M,r,f,k,i,l,z;function m(){return window.MutationObserver\|\|window.WebKitMutationObserver\|\|window.MozMutationObserver}function F(e,n,i){e.addEventListener(n,i,!1)}function B(e,n,i){e.removeEventListener(n,i,!1)}function p(e){return x+"["+(n="Host page: "+(e=e),n=window.top!==window.self?window.parentIFrame&&window.parentIFrame.getId?window.parentIFrame.getId()+": "+e:"Nested host page: "+e:n)+"]";var n}function t(e){return k[e]?k[e].log:u}function O(e,n){o("log",e,n,t(e))}function E(e,n){o("info",e,n,t(e))}function R(e,n){o("warn",e,n,!0)}function o(e,n,i,t){!0===t&&"object"==typeof window.console&&console[e](p(n),i)}function w(e){function i(){t("Height"),t("Width"),P(functio

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	276436
Entropy (8bit):	5.557658846305376
Encrypted:	false
SSDEEP:	6144:ojirvdKsQUUXWAcH4IoLivtnVDNVB+//uQF1dY:oeVKsQU7NVB+//NU
MD5:	44566949EAC8231A247A832F96A75CA2
SHA1:	EA0DACB0E96BE51AA826966BF735079C5F55D025
SHA-256:	A2FC90B6006D2AE9E6E0831115891A4E3A8AD036CE8455E329A4C83BBF4DB8BC
SHA-512:	70AD33DA48DB7A3E384014DC279FBB92D2DA5346AA589473B9EB47582862266D0D41F56DA55020BE2FE733DFCAB95F78A5B268D4BB4C0CEE3A764594D6C72FDB
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-YVBQNXF74R&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNa

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	220
Entropy (8bit):	5.192490177417034
Encrypted:	false
SSDEEP:	6:VKsEWliY9KsEWliJQoe5oNkLGb1HoqAHsCJVpi:4WsYAWseoe2XbVoqAHsCpi
MD5:	E7BD9F8E6880DDCCA1E033941BF91748
SHA1:	8DE29B3C1BF483F9BBCAEA15B167FBA2CF01C7F5
SHA-256:	29306D347CEA3090375926283E004BCADE0EF73E76A67FBDBFB661E18082547A
SHA-512:	9ABB548786659BB67AF9AC9EC6CBBA1636130A8BB3E8E3F8AB5D26D80F7F7B97AB3EE0E31C259966931D555B5FA3BFD34285FF6658A3634483533D4AC7E39AA9
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=http&_=1704923497006
Preview:	jQuery34109376985483024884_1704923497005 && jQuery34109376985483024884_1704923497005(["http",[["http custom free internet",0,[512,433]],["http injector free internet",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, Unicode text, UTF-8 text, with very long lines (53585)
Category:	downloaded
Size (bytes):	174819
Entropy (8bit):	5.282434081828794
Encrypted:	false
SSDEEP:	3072:VKWLfncHETio2zqDpPZZG2uIHIYKvt64EOxuA:VKWzsncDNDCvt65A
MD5:	0E377E741F7D57DA94C0D5AED41693CD
SHA1:	F2619196A61C34B00491F62774A84F778134B974
SHA-256:	38A4DC885F9D1267BBFAF361E24FBF51994BD7F6743784EC3E4A267BBE74A0BE
SHA-512:	0EC135C5F1E0A57CFD9EB5F946AAB9798B2DFB52E042EF6DBFBFCE0F6F72EBD2211AC9B44E56E3FA8BD97F38EECEA66EA01011F8091CC2C6C6FEF6748A898013
Malicious:	false
Reputation:	low
URL:	https://dl--master--cdn.ytapis.com/vendor/livewire/livewire.js?id=90730a3b0e7144480175
Preview:	!function(global,factory){"object"==typeof exports&&"undefined"!=typeof module?module.exports=factory():"function"==typeof define&&define.amd?define(factory):(global="undefined"!=typeof globalThis?globalThis:global\|\|self).Livewire=factory()}(this,(function(){"use strict";function _iterableToArrayLimit(arr,i){var _i=null==arr?null:"undefined"!=typeof Symbol&&arr[Symbol.iterator]\|\|arr["@@iterator"];if(null!=_i){var _s,_e,_x,_r,_arr=[],_n=!0,_d=!1;try{if(_x=(_i=_i.call(arr)).next,0===i){if(Object(_i)!==_i)return;_n=!1}else for(;!(_n=(_s=_x.call(_i)).done)&&(_arr.push(_s.value),_arr.length!==i);_n=!0);}catch(err){_d=!0,_e=err}finally{try{if(!_n&&null!=_i.return&&(_r=_i.return(),Object(_r)!==_r))return}finally{if(_d)throw _e}}return _arr}}function ownKeys$1(object,enumerableOnly){var keys=Object.keys(object);if(Object.getOwnPropertySymbols){var symbols=Object.getOwnPropertySymbols(object);enumerableOnly&&(symbols=symbols.filter((function(sym){return Object.getOwnPropertyDescriptor(object,sy

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	6178
Entropy (8bit):	7.920885848746889
Encrypted:	false
SSDEEP:	192:9lHXvIq2E2U1lP5A6rou1l1wr1G3Poox05EklMCJR:9l8RULP5A6rdlirAgsBklMQR
MD5:	63244F7264BE5E529A0E14EB9036B62C
SHA1:	CB3F8E9AF4CA648CDA2C468C17757728693FA215
SHA-256:	9CFE0844BF476C68BEB9FC6E6DAE1F77722647C58C2AFCA981F71CF5553051F3
SHA-512:	51F960C8636EC01147B677AE112C266CD15C90EEBF1E8A83CA7E8FBE13AFB8ABE7F275A4477FDE5CA7E0029D82CE4B121ED3D091401C24246012B2B744802238
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/hEm9hUw5I7E/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...///////////////1//////////////////5///////////////........@.."........................................H........................!1..AQa.."q..#2Rb.....3....%5BSrs......$C.D..4..............................%........................!12A"Q.q.#.............?...E..$.I.I$.`.I$.$.H1...@..:.....~....z.Vt...\|..{,.5.H.HJ..f..N....J.t.CH..YY..&LL.1.#g..sS..-.)v.....`.v. ....iZ).....`A.A...R.X.6..P..4j(.J.G.....P.{/..J....G..LXK....}@%F.2.5Z.}...... .VXQZ...P.J@....)0)..@.#.w51.Z.i. ...+."....". .)BH..) .)".H..k.AH+V.....r.{o...Z....S.N....=..5..&.R..B.@....x.N4..V.0`.9.6CI...\|....,..N..-c*W......3.\..j:.lfT....l..B..-2.-.SP.....h..OQ.8...t.g.[g...x.`..;"aa.h.EMY.........]...<Txn{..us....K.{..WR...M..q.k..........."...!.]J..^...6.e..nt..m...1s.B.vc..\...JE....Be...J....A..{Z...I.. q)...`.....8.3.%(...m .).)0....#.J(-2..I).I$.. .H..I..E(Q.........R.T....mL...0...s.

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1022
Entropy (8bit):	6.452382930560113
Encrypted:	false
SSDEEP:	12:6v/7uUIYvzN1Kjml/Kq9ZkI/vwBqiISw3tEBap0dhSESlwcx/23/YPTviEW+d++V:CIekISGS6iiPESqr/KzSqvz02EMwhvq
MD5:	C46069D3E0067FA173CFB1E81E551ED7
SHA1:	F7A7329FB41E2C94D0D678EF6D4FF84CD21F444E
SHA-256:	50F8B93011116F6D6FE49FEFE5C16DAAF80C862DF9D4E616D2792133D4BF6883
SHA-512:	CB1A2EA2B87735518F1B34626BEDCC38995EF9BA8AE55BC03CDC252CE5094A24C66661A1109C942774A65930D4F40211DF7BB16848BDB4A3557FD4AE37517045
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/images/spinning-wheel.png
Preview:	.PNG........IHDR.............(-.S....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...VPLTE.............................................................................................................................................................................................................................................................................................................................................................ptRNS./.?(....yZ<......q.MBEP.zr\|3U.\...}&.....~%.A..9.........e..............^....I2....]0.;G....:.=T=S`._vuJj@x..{!R.w+....bKGD....H....pHYs..........+......tIME.......;.......IDAT..-..B.@.D.&X.....bP.Jt........W.^....I.\|..w{@...~....$....G...J....!mt,.!..f\|BW'...h\|.H....L....\..5.......rl%.m8.k.[.m..]j...7.+.Q .[6.wv.T..(!.q.J......4...3.#.........X5Y.jy...o....G<Y./...iy.d.h....f7...W4...4...h5..yzK.?X.*/z.G...%tEXtdate:create.2020-10-09T12:16:08+00:00......%tEXtdate:modify.2020-10-09T12:16:08+00:00..^.....tEXtSoftware.www.inksca

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	937
Entropy (8bit):	4.984536625914744
Encrypted:	false
SSDEEP:	24:Ur++73wbReC5HHZ/Qoa5aXauITICUJZCwMh:US+Du154fwKuqUJ6
MD5:	7E055AE4DBACC794B9D6159EB7D4DB7B
SHA1:	82C78919B8EE292BBB9169F903988000831FC9E9
SHA-256:	E7E838A1248BE84FF6E9B2CFC86F24CAAFEA6857B2BBE3735C0C3586683AEDB5
SHA-512:	8CB9CE2FE163A8183E5E787447B132D49278BBF90281F9E9B8D262C3693621187206C9346FA4BEE4A01F7D17579320E0EB838C24A24CBB96C8309487FD08D065
Malicious:	false
Reputation:	low
URL:	https://t-y-p.site/static/style.css
Preview:	body {..text-align: center;.}.#container {. position: absolute;. top: 50%;. margin-top: -285px;. /* half of #content height*/. left: 0;. width: 100%;.}.#main_block {. width: 1480px;. height: 570px;. display: inline-block;. margin-left: auto;. margin-right: auto;.}. #promo-head {. . width: 1480px;.. height: 140px;.. position: relative;. }. #promo-head div {. . width:1389px;. . word-wrap:break-word;. . padding: 0px 45.5px;. . position:absolute; . . top:50%; . . margin: 0 auto;.. transform: translateY(-50%);.. -moz-transform: translateY(-50%);.. -webkit-transform: translateY(-50%);.. max-height:100%;.. overflow:hidden;.. font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;;.. font-size: 32px;.. font-weight: normal;.. font-style: normal;.. font-stretch: normal;.. line-height: 1.43;.. letter-spacing: normal;.. text-align: center;.. color: #1f395c;. }.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 438 x 76, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	28527
Entropy (8bit):	5.230845187767531
Encrypted:	false
SSDEEP:	384:Z50w6iKwh5gVfDeKZOOzNelTAMTQFfz57W3OZ:r8isVfDeGq4FfzFW3q
MD5:	7E3028AA1C664DAFBB6E7D771F1C68CA
SHA1:	663519D6441D284FA385666C2AAC590F5DBCC116
SHA-256:	D1EB8CF889202F439BB6BD1A03049B2E71953C7C0A5AADDDDE498CBEA9BCADAC
SHA-512:	648D466F43354C1C02B8C813ACAA61FD341E284C2827D5D6A62FA045DA63133C4F2F056EB3CF3836BC6E9025FA2B19CB1685BEA32EA2E5DAD815831CA69FF8F0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......L.....vp.-....pHYs................MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3087
Entropy (8bit):	7.830189834622441
Encrypted:	false
SSDEEP:	48:ih3amEikclnEEXEMFz/6h9F5mVGTLP6GYwIlBF8mtl6dyvyIv03KLJ/gzsFMDBJ:ZwkclnEqt2mkP6VhBoA6Iv03KLJozsCT
MD5:	3ABC1A671CE196E4F3F69B9EB382F84A
SHA1:	9A9D8A8E6EB5FC45AC7AF2CF3CD023308157E237
SHA-256:	85243F1C5B8F00515712C5520AC4303C920BE3FCD6AC1A78A23BB43F30087482
SHA-512:	1FF5991D37952AFAE48C5B1290C662B43030438D64421141BDF72252E54C3025DD16827DD6A6B6959CE33915A8A37C0A74F63296015B16BD16A89D6FF3AF3DF3
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/RO8kwprBOCyMFHLH9_Homa6MCSiATjhOtTsrAW7Xk3fLJyByz1VCgMRGeGdp6gZ226c-Sde_UUqd7NzLFR-B8NXb1PE=s60
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d....xzTXtRaw profile type APP1....U.K..0.C.=E..~f.=..#.Q.......!..Q[9.....(.AA..]...,.....x.[.O.g. pd.Fz....[...~.U..w..8Z....G<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/"> <dc:creator> <rdf:Seq> <rdf:li>IMT Support</rdf:li> </rdf:Seq> </dc:creator> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>."......IDATh..[{p.........E.. ...P^...Y..q$.G.v..i..-..`..Z.m..VmMD.E...:.2"..h+l`@.!.....I..y?6.....?..!.o....S....d..s..}..{.=...5.Mr...sy....p<A..<..6+.<K../..d..@..W..z..!@w5...f.{ .j!...@2t.`......I...g....-.x"m.XD..p....?.q..X2X....Y..@X.o......o....k..&...U.-..6{.A..AI...Q.0c?......k.8.a.Z\...P.)...B. .(\....*......E_......4.2.+......C........v.}..u\....v.<s....c.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	5548
Entropy (8bit):	7.914640815653405
Encrypted:	false
SSDEEP:	96:p/A/MWgLVxKVnWfWW9X08qTw/+udx4KDCRN9Xy6cruMcDj:p/A/MWgLVx8n9W9X0VtudxJo9XU0
MD5:	F7E7EE9C177634322D1424E7F89F8231
SHA1:	BA2733EEEC563670AFF8AF2CF6385C608B4B0488
SHA-256:	25B08BE766A06F61D916C3DA10C4063C319146EEFCB03ACE7215B1BA94A51335
SHA-512:	84BA009C898FDF363AEBDF27BFFC2F7E0EF9BC27AB4FF447ADAA604289B89BB9D293593849BB22E6757C53F8A053D1C82CBEBEBD1320A2B1368BBFF66AEE6D46
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/XIm6YA4O6Xw/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5&(-/222."8=70=+12/.........../...//////////////////////////////////////////////////........@..".......................................C........................!1.A.."Qaq#2.....B...$%34Rrs.....5bc....................................%......................1.!2A."Qq.#Ba............?...$.B+R..H....y.G...%.].....Os...B,........q..r.$.a.....6.#.....m0.....(...h^.zC4...D3.....y.2.F...G......L.'QqzC..}.DzJ....s.....cdR=.8a.`..5.=.....\|.W.V;....h..G.G.t.......2...V.n[....P...Gy...1...u.5.j6.......[s.,.>.^......k1.Hq...T#Prk.'..W....=.......a.!fmi...e..2W..DY.s.v..x23).....X....................?.F..^....*...%7.4....%.L.=;...FpB...XB,"...2..0m=M..F.\...-.=1.....~.....:D......$.I.....b.Ox.}D....N$..0Q.m..VjN..j.N....#....W.j.Dn...W6....-.;M.q.M...........jv..9..#..K.8u.B..k...{...x...JKL.....o}.....X.A~@.%C.=..{....VT.VQr.W........s..66....Z.}Of.y.:....HQ..0e_Vg.;........1..X...jL.f....1.--.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8621), with no line terminators
Category:	downloaded
Size (bytes):	8621
Entropy (8bit):	5.154508111957083
Encrypted:	false
SSDEEP:	192:GJYH+mmNhCBN+vrDexpwSFjuMON+6vWzU3lcvOCylYqeWe:v+mSCBN+vrDejwSFjuM+GzU30aqqeWe
MD5:	E24CBC3895EF5CAF8BFF57C09D03065F
SHA1:	697277EDA7CCFF388281400811AEF952AF410743
SHA-256:	35FA195C1DDBD8D1A0273965DB63F33C2062AF501981388E9C4622A3FAF9CDED
SHA-512:	F1B0D2F099ED76FC457AD3F4FD3CD7BBC40FC8F4C0A5A4F0682732C9EF29D4DF64B2CBBCA432E691F45C793CD99F2B408AD22D770782356FF4F10784986C3492
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/css/custome.css?ver=233
Preview:	img#globe{vertical-align:bottom}.copyright_text{1.padding:10px}img#spin_loader,img#speen{animation:spin 3s linear infinite;vertical-align:text-bottom}@-moz-keyframes spin{100%{-moz-transform:rotate(360deg)}}@-webkit-keyframes spin{100%{-webkit-transform:rotate(360deg)}}@keyframes spin{100%{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}.nav-link:hover .language-dropdown{display:block}.language-dropdown{border-top:3px solid #0087cf!important;position:absolute;z-index:1000;display:none;float:left;min-width:8rem;padding:.5rem 0;font-size:1rem;text-align:left;list-style:none;background-color:#fff;background-clip:padding-box;border:1px solid rgba(22,22,22,.15);-webkit-border-radius:.25rem;-moz-border-radius:.25rem;border-radius:.25rem}.language-dropdown ul{list-style:none;margin:0;padding:0;text-align:center}.language-dropdown ul li{padding:5px 0}.language-dropdown ul li:hover{background-color:#0087cf}.language-dropdown ul li:hover a{color:#fff!important}.language-dropdown ul li

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3135), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	21977
Entropy (8bit):	5.781440992959009
Encrypted:	false
SSDEEP:	384:8246H7f7TQhK47dsQI8S4VIQ4fpVIQ4f2W1LsQI83LBsQI8RsQI8AsQI84sQI8U6:b46Hj714U4
MD5:	E69C982D1F2EE6DF5A6353B6D1E82BE2
SHA1:	29B90334CE2B931A1D6F5E036683C1F7FDA9D048
SHA-256:	B91F895E775F56189B2DFA86A4CE780559AB2D19714EE8808DAF0331170CB32E
SHA-512:	7B25843A083943E7743ECA4E5BB6FE85E8CC037169CDA27EDEAAD99B2734839CB32AF95448492FC6D339C547EF0C1C832113C38765C7ED6AAB9E43D0BE33925C
Malicious:	false
Reputation:	low
URL:	https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26bag%3DydU9kaAfa6I%3D%26ruid%3Dab37d699-010f-450d-8692-ddfdc6930388%26os%3Dwindows%26os_version%3D10.0.0%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fconvert%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D984%26cw%3D1263%26wiw%3D1280%26wih%3D907%26wfc%3D3%26sah%3D984%26drf%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fsearch%252F%26hil%3D1%26ist%3D0%26os%3Dwindows%26os_version%3D10.0.0%26tbc%3D1
Preview:	<!DOCTYPE html>.<html>.<head>.. .. <meta charset="utf-8" />. <meta name="land" content="207813;7088;21588">. <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no">.. <style type="text/css">. html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidde

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1022
Entropy (8bit):	6.452382930560113
Encrypted:	false
SSDEEP:	12:6v/7uUIYvzN1Kjml/Kq9ZkI/vwBqiISw3tEBap0dhSESlwcx/23/YPTviEW+d++V:CIekISGS6iiPESqr/KzSqvz02EMwhvq
MD5:	C46069D3E0067FA173CFB1E81E551ED7
SHA1:	F7A7329FB41E2C94D0D678EF6D4FF84CD21F444E
SHA-256:	50F8B93011116F6D6FE49FEFE5C16DAAF80C862DF9D4E616D2792133D4BF6883
SHA-512:	CB1A2EA2B87735518F1B34626BEDCC38995EF9BA8AE55BC03CDC252CE5094A24C66661A1109C942774A65930D4F40211DF7BB16848BDB4A3557FD4AE37517045
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...VPLTE.............................................................................................................................................................................................................................................................................................................................................................ptRNS./.?(....yZ<......q.MBEP.zr\|3U.\...}&.....~%.A..9.........e..............^....I2....]0.;G....:.=T=S`._vuJj@x..{!R.w+....bKGD....H....pHYs..........+......tIME.......;.......IDAT..-..B.@.D.&X.....bP.Jt........W.^....I.\|..w{@...~....$....G...J....!mt,.!..f\|BW'...h\|.H....L....\..5.......rl%.m8.k.[.m..]j...7.+.Q .[6.wv.T..(!.q.J......4...3.#.........X5Y.jy...o....G<Y./...iy.d.h....f7...W4...4...h5..yzK.?X.*/z.G...%tEXtdate:create.2020-10-09T12:16:08+00:00......%tEXtdate:modify.2020-10-09T12:16:08+00:00..^.....tEXtSoftware.www.inksca

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3896)
Category:	downloaded
Size (bytes):	108620
Entropy (8bit):	5.486017165484962
Encrypted:	false
SSDEEP:	1536:TOx5+5dug90IDjD5yZjj07omEtw20O8rUYb3Pr1nBRRdnE7+tIbEGcF:LqgLD52PkVwqhb/r1nBDddIs
MD5:	C08DBEC8B2CF32BC4E5BD21B2B327D48
SHA1:	8896FAF1AB1957E0A9814B77BF6771ED1D83AFD1
SHA-256:	C891A72C5B0D63C5F7B641149BA7F254826195FDD40108118E216821E9C7193D
SHA-512:	FA49834DEFA2CFCF82B63ED8A9763E13E3FC6BD723A91CE44ED2F999ACD80E80F16BEDAD13C0DCE0CA86CCD2027D9F47B1159779DEEBACBFC8E48D3C0B7F3F8E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.wc=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.wc};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555), with no line terminators
Category:	downloaded
Size (bytes):	555
Entropy (8bit):	4.986491523588767
Encrypted:	false
SSDEEP:	12:4WsoD+fWs/k9PnAc6RpGt52R+bQhKFy1twQ7EvtwWV2ROQhKFst+1tmEHoqAHsCs:4WsdfWsxVg6KFnh0KFduHsr
MD5:	1B7CCB3ECD03CB623D1FD83280781E28
SHA1:	1DB3FE9074C2BF065DB459178D1D0682BCF1A1C8
SHA-256:	AC70F1AFA152D32C35A4F04C43BCC77D8ED4862A59BCB5974F2E567BD987D6C4
SHA-512:	6BC73F27B2A194254B94C60939D475625511DA6A49783FCCE01D1F5F1D336EB70A71A4E5EF90CD5B7BBA43A2AC322B158F63654E44891322F6E886D2CD8DE190
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497001&q=ht&_=1704923497002
Preview:	jQuery34109376985483024884_1704923497001 && jQuery34109376985483024884_1704923497001(["ht",[["html tutorial for beginners",0,[512,433]],["html",0,[512,433]],["hthaze",0,[512,433]],["htet yan",0,[512]],["htb",0,[512,433]],["httyd reacts to hiccup",0,[512,433,131]],["htoo eain thin songs",0,[512]],["html full course",0,[512]],["hthaze taylor swift",0,[512,433]],["httyd reacts to the future",0,[512,433,131]],["htoo eain thin",0,[512]],["htet yan songs",0,[512]],["httyd",0,[512,433]],["htar lite par",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	5680
Entropy (8bit):	7.926043460421807
Encrypted:	false
SSDEEP:	96:28rR7QpJ1p4/W1F0rMvjowSYqZIfRcSBnMAm/vq7kGLdcel6kdL/om/n2j:28rR7QpJ17F0w7SvZxAm/S7kMx6mLZU
MD5:	74B365A4B4205FA8A219330F550F8FDD
SHA1:	A532EC568D5BB5E06B9039614B8FBCF12710C205
SHA-256:	951F469405CEEC12530776C3F300DAA5480E166F5DCFBB66593D4E8888367246
SHA-512:	6E29C37B848E4C608B5D74D4C02819464AEE6A185E0B19E59118D28671B4312C869BC2B4E0759E0689DE3BFBAB81964DBFB3B66D33B70C081401D6CA99FA4E4C
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/AJTcpNBXAL8/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../.../////////////////;///////5////////////////;///////........@.."........................................G......................!..1..AQ."aq..#2......5Rr..$B.4Cbs.......%3Sc................................$.....................!1..A.."qBQa2............?..TA?Fy&..V(...+7.o<...@QNP...pU7..B.5T....J#{"..Q....+p.j...r.Tlfk.4..7 ......R.?.VE@b.m.a......%\S....+TZ..SSj..4(6Z....N[k....&=kv...Di.JG.Q.T...LJ..,CZ.\,..8..F.Vvd.....d.Q.......1r..e.......1a.........T0....r..@#B..f.....H4@.n..1..(.. F.. ...V.... ...9;.&Rr Bt.:...;BB..<.?.."..S...Jz...]....[....@....W..N.N.....n{......j.\..l....n,.r..-.`......J...;]..X....0}r.....[.......&.o......z.\|.^.>.D+U+..lE....e.....w.O.{.AJ.!..h.&....`e...<=l.-p....p..4..rQ9....j..)DPsa.V..5..T}..EbSJ..6..m....6.7......X..7..1....G..LX.c..k~.;B...LXB.....I......I2!=.F...N.@T.P.Q..\..F.@......C.H..S`....R. ..OY_.E@.pT.;...4.F..%.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	33350
Entropy (8bit):	7.989245597826845
Encrypted:	false
SSDEEP:	768:T6Ag980FiwpByteL1uu30Ty+wArMUxe5oemsF:T6T8695ugUKUg5N
MD5:	B82C11B76C81B6E3B305F7CA034AC40D
SHA1:	8126BD01682465C222BBC4092A7E84CC5D8D4EE0
SHA-256:	9C99DD412A9A2F9A3D64260BB687E5B4FC0ABED461873AF952B03E137B2B777C
SHA-512:	9C71ADB5B604DE6F3D2415469AC447935EFF7F8570DCC24EED4B4AE6075746CF3C957CD701CEA33E3A0F31CE00229991636F17DA25ADDC44881E9A34E6EC4010
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/kJmHNz9SMV9mA7haNYe-gObnCz_344f7lrABB4xrSRDHBx_N01lEC1vMGl7J5qkdBBYqQ1pTc7pbROnbzbp6vZwF=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O... .IDATx..w.%U.>.Tw...7O..!g..Q.T..".....XXq.?w..+* ...A.,AA.A.$.$g....&..7...}B...v............T=U'.i..E[..0...E......db@g+,..X...}.d.f............oE..j..Ld.a.:.T..,.4...&..3..QRH...@.R%..M...m+..4.l....d\..........t.C.g.W.1.B..a$.......j.......R...lI%f..Kq.d.....A%.........B........]...Y:}..9z....d...(.up.O..O.."C&f.s. hyr.D.V>#Cj..p.2.\|^...%......3........^.6]T+....9_./..d...a...<r6..u..K..f...r^<..#SE.7Y7..`.3.Z0-0.&.n.1`O..vX$q... {...!M k.?......r.b..Z.$.. C..F.e.!..Y)...`f..[..lfJC....J..u.3..P..p.p..lF...Y.%.(.4...z..9-.i.h....).d3\|fHuM.."^s..F.....Y.....B..N'o..\.......E.P.C....../....?....7.P~&...A..c.V.....j.e..q>: Rn...`'....w\..G......LUA.......m...:.......rR...U..>...kOF.t...63[...Pp.~K..M.dk9&G..8.R8.a.7..)P=a.........43+.'....f.2e.r.r..a.4..".'f...m.+.}..b..!....8..r..8..X..D...b.......!.......7.....a...O...$..!.#f..2._.re....].\.DD...........#qV..K............X.".x.2........N.?

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2120)
Category:	downloaded
Size (bytes):	213168
Entropy (8bit):	5.521611720364064
Encrypted:	false
SSDEEP:	6144:6z9yXC7Faoc8opge921BqIaJzH4TzjNx097aLjoZFze/r0hCN:syXC7Faoc8opgK21BqIaJzYTzjNx097C
MD5:	4DD0614C10AF48265E9080223A85A229
SHA1:	5F7CA2F551C5BD4FB56DE3F492ABBD0DD4273B69
SHA-256:	7203FC8612BA56571C553592348F4299FC4699EE50B80BAB48CC6AC1C59BF358
SHA-512:	5BD3D7471C6645A8CDC2FA430A87E3440F1CBECE60B74905723479F3CD9C6A98180179E594671D4B8B735FA6D0DB2CD7EBDFBADB4D580C5DDCB2E682F94BA70F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.mgdhWpts9Vo.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTtBgtnAo8VhA-iXJlpSQ7nCpntuXg"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.ne=function(a){return _.wb(a)&&1==a.nodeType};_.oe=function(a,b){if("textContent"in a)a.textContent=b;else if(3==a.nodeType)a.data=String(b);else if(a.firstChild&&3==a.firstChild.nodeType){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.le(a),a.appendChild(_.me(a).createTextNode(String(b)))};var pe;_.qe=function(a,b){b?a.setAttribute("role",b):a.removeAttribute("role")};_.re=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;""===c\|\|void 0==c?(pe\|\|(pe={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=pe,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var ve;_.ue=function(a,b,c,d,e,f){if(_.Pb&&e)return _.se(a);if(e&&!d)return!1;if(!_.Nb){"number"===typeof

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	141
Entropy (8bit):	5.050121495982617
Encrypted:	false
SSDEEP:	3:RAXRUKsQRW5/rGpVyM+WRUKsQRW5/rGpVdNlWR+E7qAHsCJKiQTc84M:VKsEWli3cKsEWlivWR+E7qAHsCJVpi
MD5:	51FE5633027D00DA901CBEB970F0DEBC
SHA1:	12A1DED3F04EFC6894D8199179EC48A0E4454BA8
SHA-256:	163D2BD4B3E1E38810EA46AE162FE65B96F4DD78F8D717D59C2611AF189BD208
SHA-512:	AA486B5C7FD43E9DD9FBEB4B1D744295773D5715987A95C02BF9555C2F8C3DCCF6C65564DD4F115A36D51D05385B04785303BCA4753D0EF7CD4E006BF6BAA7C8
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497003&q=https%3A&_=1704923497009
Preview:	jQuery34109376985483024884_1704923497003 && jQuery34109376985483024884_1704923497003(["https:",[],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (896), with no line terminators
Category:	downloaded
Size (bytes):	896
Entropy (8bit):	5.300965184386866
Encrypted:	false
SSDEEP:	24:4WjWfAF7YHLe9F5OMy0/AAGxupV50AyziAzzuHsr:jF7YroF5G0nGxupDzOFOg
MD5:	B3D88E6FED7DB5C5BED373FC157B9B9B
SHA1:	F4E985743A055B2415F6F140F364A3EC6526A918
SHA-256:	650EBFDEBBBB9DA9085A94EEF620369AC84B904F26C9AF772D80425E123A9587
SHA-512:	0BF1BB6CE83EE0560F94739DE8BA47C5AFF940721302482F45240AFF3F4D1C0129770D4615B43A9F31F139BFF28DB6EC4B374D3721ECC50B0528CE1C53024E0E
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F%2Fyoutube.com&_=1704923497025
Preview:	jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["https://youtube.com",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["http://youtube.com/socialepfo",0,[512,10]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["http://youtube.com/tdjakesofficial",0,[512,10]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	35607
Entropy (8bit):	7.9689908798053
Encrypted:	false
SSDEEP:	768:C9idSsCQbQ/Ecy8OwUDitxhYT4mVnh/Jbw7jgF0h51NWvAEz3NTrHq5N:CObQMcytCeT4g/tw7z5Ofz3JOr
MD5:	4E61844A7532EE6D30450ABD6BB2A1DA
SHA1:	E11BAD4F8BA1F610713318FEDDCBFE6A0FAF50A0
SHA-256:	01A91CEF52F9849703FB84A945F9FB51B9DEBF7AC36730043D097C3865550E8C
SHA-512:	E165FCB54AB8320112048F1FA6F9CA5E029A4765F1347C9862D05DCBE770D68981153C7FEF5429E4E6527FB846CCC5593696AC444A30943164A74664DB88E76B
Malicious:	false
Reputation:	low
URL:	https://interstitial-08.com/contents/s/4e/61/84/4a7532ee6d30450abd6bb2a1da/0350025199145.jpeg
Preview:	......JFIF.............C...........................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=...C...........=)#)==================================================..........."...........................................................................................Z..,../..(W..8c6..)Hv..\G[..........uy.P6..<.....9.`........"z. .................5.4...N.z....-m.s.n.....c"o..e_U.Wn.@.`...... L...']....}.....X..."j\|d0'....._. ...........5+l'6......9.\|E...J..RE.......?/f.9.p..@.....@..0}9.....p.u.n"...L3..i.....v.%$\.H..............Rh0V.....R..M....g....}.a....6.B.}k..l.i.....,.8d.L...".B.K.r....u..(.c..>u5z...]..%@.R...6...H............R.O...M..y3.Z...`f.0.<.r.7.....~...~`...3x]\|0..\.V.d"~q....7..\|0i}..W......@.,..../.5.s... ..............,L..........0..5[..........g..k............y..\|..L.....4...W..g:<..$...........y...gX.......p......-......z..R..}.$..\|...gfg.....@......=.....{.1.}f>&..[.0rD..pG.#.e.. ........lj<...Yq...9H,z_'%O..h:.w..hG.).L.6.v.K...E.y

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	3920
Entropy (8bit):	7.77003650898938
Encrypted:	false
SSDEEP:	96:wGlgOH8QjZrbT+wEmPGlX1fEK7ceTMQwfpsHtAz3D:KIZrfzTGbEKlTMQwf2yz3D
MD5:	9A68CC349A31069DC14B6B1BB67A9DC2
SHA1:	26D913B5AA2C300BCFA641E51718D70E53632B67
SHA-256:	51F48FA16FB3981DFBFDFD02FCC38A901A27A1F5178BD3858463F32AD5DC2F2C
SHA-512:	D830EB25FBFCB3D669ABB00BBF50EB854B9EC6ACC4C5A20D80FF395AA890A0957ACE1431BB5EAF35B0419D28C7AEC54AA904606231B093BAB041E85DC05E8D03
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+%..(...%5%4-/222."8=71=+12/.........../...////;/////0////////;/;0/0///////////;/////////////........@..".......................................E........................!.1A.."Qaq.#24......rs...$%35BRb......Cct................................(....................1.!..2A.aq.".3Q...............?...........$.H.s....ok.L...H.~...S..fe..M.0.........`..!.....T~I.\|........go..3..M8...p=Q...W.2i.1S,.^Yl.b,z.4..3jp..M<.C...k..2........\|....MD.."..@.E...A.. .k...(.... A .....(I..7<...7..i..$}?..\|).....g.OX..=..f<.-p..9.^...]i?....r\.~K.....Go..&Zr..z.cA.........E3..T[0s<....9}....$Lc'j.Mg.>Db....j..dI.".r..............H......@..ny#.C..\|).cs....ok.LQ.....4.dT....(...~....?(O.a~....\|g-8.3.1....}.^~.....nd9.S..3...R....O......?...?1...v..RH.... ........N.86.......P&............7..h.Q-..k..[O..yo.d....*...i7,..E.....`...)U........;....l\9....R.Z..&....7.ecS?M.f>..V...,.I,5D..".....}...#9...M^-^...

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	29112
Entropy (8bit):	7.984700286499984
Encrypted:	false
SSDEEP:	768:2gQgR2hVIFWJHdSCW5lIBoKgHeP0Ueh5sOlj:2kR2hVXGZl9iTelj
MD5:	4F895F6895261F81437FA30263B3B81C
SHA1:	D2D5D6EFDB926515E43AFBD79D3667FFA323D102
SHA-256:	3853A45A0BBE9346040567396264977854AD83D12E37AFB530D9522FD92D617A
SHA-512:	40EA3A69E4056A7A54DE40A69D27E6C3EA9D01D6878ADA6A871F59BF07EC1794FB35750728AF9CD90465B8B0583B91ADD2E8498FF27FB772AF00A0ED1E8B8F52
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/-AR2DrDB0h9ElGhjXxb_MW7148DtRaiypdfNq7Tho_kRFS2WwproRfAnsZwRuJXcHDqTQcnYpF1uL4cCW16VMONz9Q=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2.. .IDATx..}w..G..S..g.V.]I....U..%.-.m.}....a.s`0w.....;88.\|..>lc0.9H.A8(:(..8.C..Gu.........2.,MWWW~...V...c.8.D.\|E.J.....<#R{6.i.t\..$. ....q....'H..8.r.t.p41P....t.O.(#....]'....#1...'H\os^.p..'?.=P....V...H@.v.I.#.AF..T.&^..=^.pbq...>P....S.,J..N...o....^.,.....#.N...l`.W...]_......K#..N...C.y..N....T..&..N.....#.x.t...y..y#.2...4....0.6..dS9..t.'.r.#..@..tR.:I...c.".hB@eY..p.I...O.h....`B...{X&..L.G.p.P)...q.-.l.>...N.p'6...A.....}.W.....NZ.O..$xNEe..aB.......9i...4.rJk......O...8.a...."..@.aW....+XA:.......N.d........`.<...N...W..yw..W.w/.....R.qN.@'.(g.A.y........HZ.U..6.I..q..v..9`>....eA..p'M.'.....2!x.-.pr..o.J.!..2!x.=y.....U.2.o....nB@Q..}X.....N.p....to.B..yN...}X..!...P.i..0..g..+J...p...pr..BT.9h.M.#..`4..B...I'M..mT.]..k5!...(E.:iB0...B..?.v.t.L.'..'~......F..N..0.2yN..

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3166
Entropy (8bit):	7.916306739369559
Encrypted:	false
SSDEEP:	48:tcRD86S0+ak9/hfZtSY5KQSy1ajxEYBK2ZflOXc0LkK4lpy5diF:6nZUf3YQPadEYnhYXWHigF
MD5:	E9076C4711D7F9504858F74FFFF6DB62
SHA1:	A59242E94F933F0688DB9715C218A48FC956C1ED
SHA-256:	ECCDFE9D867373E2DA66EEDFCAAAB40CBCDF6A221B83D6EE1400895A3E4C8046
SHA-512:	F992D8F642816216C1BECB3EF5F1C6ED172DEEC1E7404911B011DD3EB6AC96E849CE48A27ECE092A0275BA6FCBF6A1BEDA58C7B442AE46AE37C30624BEFFA675
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/browser-logos/72.0.0/chrome/chrome_48x48.png
Preview:	.PNG........IHDR...0...0.....W......%IDATx.........ogf..2..l......x.233333333..23...bn....q.Z}-...#N1.u..!.I.>.......i....@)"...N.7.r.;...D....KQ.s. .\|b8.b4.:......U...;@..v.....4I.E...K.=...v.=.u".....o..)E.%.;k....F..V.IQ.!...c...' ..ujp,..[....t.)"....=[.l-"...K...$..dR..wLg.E`!^05....%7.("$.NGh.-%.L"......j.(.>....hP..xd.R.S..b.....A..-..h..,....jT..9.....I.l.Gkt......6m.\...=....p(.3^..S!...m.._...5r.....o.T......c/t.../...a....+.F..D.....7.h......#...>t..~].9......#t...`.U...wX\|... ..;...HD......M<.............P.M..+.(. .. t...{.EAQ.445M+.Q....u$.../...7. .Q......T..{~'.v........}o.[.vn.{.".....n..Q...m...sDA......P..r6.dn?!.}...B...j...p...@.U.`.\|.....Y0..W.....o...........3ip....~@......]...!.[5[...m..o...."k2...N.. k..Z...............y[.o.m....km..;..<\)..F.,..7..s/.^.Z..~O]:............+_....C.@&.1.I ....(.....Td.a.z...:~.l.....12.h.L....I...o.iJ.t..z...;......m.)_\.s."U...s.....D.!.@...Q.Q..... T.~@..0...E..k.....m.9}l.M

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	4596
Entropy (8bit):	7.9046819400623995
Encrypted:	false
SSDEEP:	96:czzzSwwVEjNAmi/HcXrrw2sPSv9et6gNVwDzmMFG/xnCwOFt+2ozfkJ:cPzSzECmzbDvc6dzmOeJkFt8kJ
MD5:	1C17A5F4D8A6C3746BAA7535002792C7
SHA1:	ADFCA2A4D374AEF959CD62E4F149C56174AD3200
SHA-256:	8A554BD9D038829E754BF67D65B933430784CC434E0227D7153C50D13AD9C4A6
SHA-512:	DBDEC748C1A70DEBFF6019398F670A75BA269C7396EE50E7446D961DB29E1EE9F7FFDD08F4E7645CE7EB3F6C5961494B3C5E965A6102B06715B6C76019A894B0
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...$5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////........@..".......................................A........................!1.AQ"a....q...2r......#3R...$4B..Sb.................................%.....................!1..2AQ"q.a...............?...V....Fm.._;..1....}.W....1.v.. 5..l[b4l..b.w.8....Q-...e.....F...j.Z...n.v...V7...E....z......yy....T.h.7...7._.-.^....~D[....o.R.kh._..h`....pYi.NK....~F.e..........:...dm...i.!....C..`2..9.......q.{..@..)GQ......\..g.d...xo.y{.....\|;+....>.../o/..M.[.p..s.R.++.;.......+w{.ge..@..h..M.........Yq....e.....B..i.4)...?#Dju....I~.ZbT...h...E..e.....cA......o..:.EI.=..@..!.~u.1.....!i...`0.!R...'1.....P...TMH.....=....i....q...u.og..N.,m.V.R-..~.kez6.2..?..k.}.!#...9..g...C...>I?.<..1...~...gq...Q/.........].<..r.=...c...e../....:....;.....%.2..q}..Y.8.ZZ...v.<....-5Z....xLM'N.d..v.....n...{k...

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.6042015135302385
Encrypted:	false
SSDEEP:	3:YCMxvOUmVR0oQA3E/WjVxXMcYU:YCM5OUiR0N7eHcXU
MD5:	71059E9DD759864825E3ED6700DEA741
SHA1:	15D405FB6AB488C1DE764808CB88FEFFA95AF66B
SHA-256:	FF1B5EA96EA9A4D300E12BA7C27919DCFD376112786442E5D8861EE454DEADF2
SHA-512:	981F046883D68D1DE01A23677224EFD4532C808B7F9C910FABA0B3FD30255022FFFA698B6376B8527A8407068B4742603F13B06B61A7BDE4D303106578CA1583
Malicious:	false
Reputation:	low
URL:	https://my.rtmark.net/gid.js?pub=0&userId=&zoneId=4662709&checkDuplicate=true&ymid=769067736944087664&var=5596087
Preview:	{"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1293)
Category:	downloaded
Size (bytes):	206436
Entropy (8bit):	5.518791198750223
Encrypted:	false
SSDEEP:	3072:Cl8LMbVd5HsSzog3e/t9vLP33MZpYQ5uBFF6CkxRKG4KIqg0SFDoXrDM59P/Bmi7:xLMdH28Y/zpG4KIP0m9P/Bmitl
MD5:	2B0C7F4A6A242CE461A301A0252424C5
SHA1:	D133D42C1A84D131B73614FD6DD89995A3F7D860
SHA-256:	192E90A44F7163B13AC725826B63CD2AD5070942A8C9568C7E05A0219EE8790B
SHA-512:	10FCEAC9C4583814BAC9417F4EDB3925E1E812E5145E28C2591C436C25FC15BA3B90F4C6173F3424172EA148814A5DBEE3A9EF5C6B1A90097E0D98FE1ADE2DD9
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.GsbA68hXs80.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo899t-H8Lxb3OqzMDuPn6TV_i36ag/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.Gh=(window.gapi\|\|{}).load;._.Qo=_.nf(_.zf,"rw",_.of());.var Ro=function(a,b){(a=_.Qo[a])&&a.state<b&&(a.state=b)};var So=function(a){a=(a=_.Qo[a])?a.oid:void 0;if(a){var b=_.kf.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Qo[a];So(a)}};_.To=function(a){a=a.container;"string"===typeof a&&(a=document.getElementById(a));return a};_.Uo=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Vo=function(a,b){var c={},d=a.Hc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Ro(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.zf.oa){var k=d.id;if(k){f=(f=_.Qo[k])?f.state:void 0;if(1===f\|\|4===f)break a;So(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.6042015135302385
Encrypted:	false
SSDEEP:	3:YCMxvOUmVR0oQA3E/WjVxXMcYU:YCM5OUiR0N7eHcXU
MD5:	71059E9DD759864825E3ED6700DEA741
SHA1:	15D405FB6AB488C1DE764808CB88FEFFA95AF66B
SHA-256:	FF1B5EA96EA9A4D300E12BA7C27919DCFD376112786442E5D8861EE454DEADF2
SHA-512:	981F046883D68D1DE01A23677224EFD4532C808B7F9C910FABA0B3FD30255022FFFA698B6376B8527A8407068B4742603F13B06B61A7BDE4D303106578CA1583
Malicious:	false
Reputation:	low
URL:	https://my.rtmark.net/gid.js?pub=0&userId=e2a7bc1998804a45b0975f679663174b&zoneId=5588624&checkDuplicate=true&ymid=&var=
Preview:	{"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}.

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2160
Entropy (8bit):	7.844916287555353
Encrypted:	false
SSDEEP:	48:W/69Naih+D8LBVnHkSZGUiRay8UXmHcShk5A/LhbLpyZhi:WSNhkQZa8U2BLLhnpyq
MD5:	2796230A9E7F59A50E8725AAE9276187
SHA1:	7EB89CBDE28A198AF3EE8E18D6C348E8BF5AA924
SHA-256:	FEBE8B6403F01D8182EA25BB9C3F05AFD0D5AAF6C44C33A3C64B7FF02552F380
SHA-512:	05C8FC70A79D371DCFF3F578F6FB2EA0FAB5BF2FA69CD6AD8234C9E0DD8CB397FAE9DCDC607B67CDA53C511D96A8DE9311423E38960AB29C411CC7FF6EBD1145
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/5iqSydGWCwZl180kxxi8cYBGJrxCQtwj4qCWGTRfQ_3LX_W3qCiA1pS47bT-sMA4aC7QiBjZwHvq21u9vgo_8znj7Qo
Preview:	.PNG........IHDR..............>a.....pHYs.................sRGB.........gAMA......a.....IDATx..=V.H.....f"L6Y.W.{..l2.M6.........C8....+.{.f...SWry..e...^..;.....U.^..:$K.o..g..E.W_x5Zd^.....?..C......B.,.J..~.3DS....F........_Q(.....X..........&V{..l..)$2..[...HQ.0...%.<.. h.o...M.$@d4'w3.7..I.(t.4&..D....&.(.~kM.Q(.V. t....K{8..`....D....W....Cr..A.uI......d....{..S.......G..P..2.....[a.h....]M@La..o,(m..l7.6.......4.?).s.!.."J..#...j.7.D.\|'.O..}.Q..0..B..?..G../._...c..n.(.6_..b.....&_..c........P..~.z.....l...0...3....\|>.....I<...f.. g.._K......n...n.7..q......-)7.w.<.;ej....j.\.W\....`e..Sy..Y......*d>j;g.o.Q.Q#.e..+O.F.5....!...L.?....\|..4....O......5.NW..P4H.....^..Z..D..F...Dk...].....K.}.S.....]..b.La.u;~...>..\|..H@..^.....1iJ.B..i..j...\^^..s5..p.m(.".&..&M...a..VF...H..L..&`2..8...F..t....5....z...(....D...^og..;n0.m."....k....d..7E..$..b....$.H...%..D....H.@....t.hM...#.....G.l...G2..:N..Ek.........P.%z...(..!Y.`&~(P..9..-V...V....3.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (719), with no line terminators
Category:	downloaded
Size (bytes):	719
Entropy (8bit):	5.215261607889732
Encrypted:	false
SSDEEP:	12:4WszWsauR8usBtMuscKLtMustxtMusRtMus/iRZtMusOtMusMtMusWtMusYZtMuj:4WszWsvR5sdscKsttsNs/y1sysgsasYh
MD5:	8154DCDC787A1EB7930F461ABCCC5651
SHA1:	73828401AAD9337DD8517E83E0ADF836E5728BBE
SHA-256:	9DD5BED289671D0D84FF3A4FC7104A371F83E5430F543B6AFD34B38FC5C9EBA6
SHA-512:	4BFE1A2FC6A763859F895F21C4AAD7F09AB08D0192C508210DAAD6F452DBD31836D0DEDD25DA57407F060AB1F1CE3E444C09F92AE07071D4537C41D261FE2F7C
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2Fyou&_=1704923497018
Preview:	jQuery34109376985483024884_1704923497014 && jQuery34109376985483024884_1704923497014(["https://you",[["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]],["https://youtu.be/ucv-2x5bxkw",0,[512]],["https://youtu.be/byuzdnchuy4",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (720), with no line terminators
Category:	downloaded
Size (bytes):	720
Entropy (8bit):	5.221167305834425
Encrypted:	false
SSDEEP:	12:4WjWquz8usBtMuscKLtMustxtMusRtMus/iRZtMusOtMusMtMusWtMusYZtMusLu:4WjWfz5sdscKsttsNs/y1sysgsasY1sC
MD5:	A41A74AE8C6B8143C4CE304ED2CE3B1E
SHA1:	FDF1AF6515543714CC5228275003DFAD08DEF803
SHA-256:	2AF52446B949DE489E1E42AD1B9799BC0E650CBD58821AC17FCA3F6910A35A65
SHA-512:	4516A440BD333EE7AE1DF736CEB763B08B9B6DBB2E0C49AE56C6CA03F1B9921E9D53F9D7D132C773A704FEC3043EBFF7DF901913B4204578BAFC2030E8F18F1B
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F%2Fyout&_=1704923497019
Preview:	jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["https://yout",[["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]],["https://youtu.be/ucv-2x5bxkw",0,[512]],["https://youtu.be/byuzdnchuy4",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	6454
Entropy (8bit):	7.933697319439295
Encrypted:	false
SSDEEP:	96:Vp6YgwcpV7gHEpVk6Q+TZtUZzXSr8CjQMhiXf4Vwn56gv9WCLsMIIluAhI4Q46+0:yjVWGTzTDaDAQJXf55rLsMtl9lW1G1Qj
MD5:	E66C2821AA401176B1EE4F9AA7258F0B
SHA1:	866529859BBF2326B9A2F8C8D00F10811251BEDD
SHA-256:	EAED49BA8D05D91A1032D3AD514ADB02D5E00BE179B3F014AE09EFE6BD16EA19
SHA-512:	BD989CDD714E8B0F27EF9A007E3AB1BB766214877E39A2EE04B099E769231478B7B3A5F83DF51E9F8D4A0CC5AC9B5F1CF46A03B132DF5D7093CD58869613FD3E
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5&(-/222."8=70<+12/.........../%"%////////////5////////////////////////;/0//////////........@..".......................................D......................!..1.AQ..."2aq......#B..$4RS.......3Cbs.%cr...............................0......................1!..A2aQq..."..3BRb....#............?......BC8.....up.. .UK..D....".R.. 3q..........u.:.O..!G..r...z..4.>.......cG.......j..F.n.>v.%3...E."..{w..0.y..u9#.%....TsG..h{.;5......`...S...V.i..)....x.E4B...T.<.z..7..'`i.WR0.!....#.E..JqLy#.eX...... ...>...F6.....mt......,U.r."......(...T..t.B..9.+Q..Tv9!Tt8.F.....0Q@..-Q...gN...\.WwO.... ..QE...V.P...!T.E!..%.......Z..R.. ..w..#..h.......:.T7.D.;.v..)a.p[=...gN.no.n.,.+Bh.c.1_d.?..9.jT....9ezl......Jd..3P...[U*6......H^P6.T.....".V...hq.A.n`.(.z...L./..=...s.hs..vZ...v..3h....o._...0.B..T.U.L......[.Kk.......&.x%;.<Ofv.....J...fp~.6dL..eW...........e../.L.j...5.iQy..s.v..]....9......J

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	103384
Entropy (8bit):	5.075593477882953
Encrypted:	false
SSDEEP:	768:93jjNN0KINN0JNN07NN0WonNN0l8oNN0U/QC5NN0C4rw0CAMB5Ts440r:93jda8q4rw0CAMB5Tf
MD5:	16B4DE5946E570F8F024B4C7108E70C9
SHA1:	1B3A7A30E1E6C2C1CD60A0115CAF03E392C05E5F
SHA-256:	793B99E4ADBEC2EB9943FD021369878A9DA461C91C9DEDE675A13DDCD43B000F
SHA-512:	4A290179ABD8043BDB6BDF60A37C4F46649D0DF8305959A9C4BDCE2D940E58C95BB36E0D567D80F9D6514A7215087804C3239526A57EBFE1E50BFC911C1C3FEF
Malicious:	false
Reputation:	low
URL:	https://dl--master--cdn.ytapis.com/css/app.css?id=16b4de5946e570f8f024b4c7108e70c9
Preview:	/! tailwindcss v3.0.23 \| MIT License \| https://tailwindcss.com/*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}html{-webkit-text-size-adjust:100%;font-family:Nunito,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;line-height:1.5;-moz-tab-size:4;-o-tab-size:4;tab-size:4}body{line-height:inherit;margin:0}hr{border-top-width:1px;color:inherit;height:0}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 355x355, components 3
Category:	dropped
Size (bytes):	14651
Entropy (8bit):	7.9336328685322135
Encrypted:	false
SSDEEP:	384:sBMP/KZfR03MhJqT0z81HHQ7Kx1UU9u2ndxb:WMKFR0chkwzaIKx2RKb
MD5:	545811B0A815692A6CA16DD9A46924AB
SHA1:	0AD596F3F23312B129A505CED277AF9FF83CA7FC
SHA-256:	F710C2B11DF9CADCB3A6D25A9DC8306172C04FF1D2FA8D96D4019D70833F695D
SHA-512:	1E2E1335F299032FA3AC31D03016D8595E328D7C8BD4269DEF375B58BE54A82D6AD8C7A3EE412177DA1D266F9254D2189D665C30EB82A264738D8C7DCCD35961
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333......c.c..................................................................................E"@8....C...`...... .....)$H....1......1....B$ ...."..@.c"D.."e4..d...D!......."D@..!... ^........@.......`"B...."......k".@.b......$ ..@0....b.. .....P....@H`D..D..!.... ......c6.D@......"$.0...`.....@1..!...HE`X..HC"HD..0...1..C 0..C.....RL..!.C..1...@."H@..D.0..........2@!....D........@....09....."DI.... ......@..@.+"H..@a7...`..b..8C.Db....b L.Vd7..00...@...Dc..\|....+;...._.u..jv..v.......^.)......`..9{.......C.....!.@L`!...%....__....OO....G...n^..C\}v..8..>.....x.._K.9e....i...Q.8.."#.1.@..,........\|.o....<.}...\.]...N.\...=..rq.....k.r.w7.....:..B....<.d@...... H.....I.N?`@..>.\|\|.=>.^O..O.;x...>....;.{..,.[S........ .....#9.."......$...~..Q....=.s:.4..?+>...u.zq..W.E..~. ."f,"VRtJ.uI!.&"#$...W...b.."#$.=Je.L...

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (503)
Category:	downloaded
Size (bytes):	1612
Entropy (8bit):	5.457652128361433
Encrypted:	false
SSDEEP:	24:knkZVUNKzd8aTDyylzIrYEaVczIo/MDy1dxlfQLgxihIR4vNLGkbkfCmKbQFELax:0i38PqoYEa2zNde/Cu1I6Xmcrcn
MD5:	2A1BDCA0305E1982F9B863A39CB21D36
SHA1:	CBFDD05368D6AF882C49FB9271767404EEEC5992
SHA-256:	93A8E59B24B6B959B4017C4E62F824F2B5E3EB10C43E8409113B8636DF6D7CAB
SHA-512:	952A14DDF6E0786F2BB397E879860A9C19E34CBC3688BB394D1C931C396169CAA4323E00110D75C1197F69840818767FDC91160CA876FB41E657B4EC644F9F7A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.dJPrtZvRqDw.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.Z4IE48QAiHc.L.B1.O/am=6AYGyQI/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,COQbmf,CfLNpd,DNlSjf,ECBKud,EEDORb,EFQ78c,FdMhB,HsQQib,IZT63,JNoxi,KG2eXe,KUM7Z,KfQkxf,L1AAkb,LBaJxb,LEikZe,LcrBLd,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,OmgaI,PIVayb,PrPYRd,QIhFr,QVysJe,QjUiqc,QvLWAb,Qy2cOb,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,VwDzFe,XVMNvd,Xi0ENb,YA1iG,Z5uLle,ZfAoz,ZvHseb,ZwDk9d,_b,_tp,aW3pY,aurFic,bZ0mod,bm51tf,byfTOb,cephkf,db7dHd,dsBBae,duFQFc,e5qFLc,fKUV3e,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,ovKuLd,p8L0ob,pjICDe,pw70Gc,q0xTif,qv5bsb,ri2s0b,rm99Nc,s39S4,sOXFj,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zKiH5d,zXfYdc,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720LDE8ISk-83wVQHVDoQdYmvmJiiEA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=qUYJve"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.gla=_.z("qUYJve",[]);._.n("qUYJve");.var dMa=_.Cg(["aria-"]),eMa=_.Cg(["aria-"]),S4=function(a){_.Q.call(this,a.ua);this.closed=_.J(R4(this),"XDoBEd-JGcpL-P1ekSe-OWXEXe-xTMeO");this.j=!_.J(R4(this),"XDoBEd-JGcpL-P1ekSe-OWXEXe-A9y3zc");this.progress=0;this.j&&_.Py([_.Qy(dMa)],R4(this).el(),"aria-valuenow",this.progress.toString());this.radius=Number(_.L(this.ya("MU5Wmf"),"r"));this.progress=_.Qe(this.H().getData("progressvalue"));this.j&&(a=2(1-this.progress)Math.PI*this.radius,this.ya("MU5Wmf").el().setAttribute("stroke-dashoffset",.""+a),_.Py([_.Qy(eMa)],R4(this).el(),"aria-valuenow",this.progress.toString()));_.xP(this.H())};_.C(S4,_.Q);S4.na=_.Q.na;_.k=S4.prototype;_.k.open=function(){this.closed=!1;R4(this).Ea("XDoBEd-JGcpL-P1ekSe-OWXEXe-xTMeO");_.ps(this.H(),"aria-hidden")};_.k.close=function(){this.closed=!0;R4(this).Ga("XDoBEd-JGcpL-P1ekSe-OWXEX

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2318
Entropy (8bit):	5.206665349898711
Encrypted:	false
SSDEEP:	48:+XfQSkHJBWr3fv5Ge3CfGvWviPT8MgTstDzPHu2GH4vwJRHozktkHJBWr3b:+vEHnWrpJ04WyFz/dGH4++HnWrL
MD5:	7BBB431D2E9FB94BB738BEA8E1E2E218
SHA1:	479AC381EF226D54E998A30E8210F14B87028E93
SHA-256:	D2140D44A0416BA4B09271EF7DA2FB106BAB382BAD52E105D82786F305E38E90
SHA-512:	EF2C0AF6FF991B58BBBE45FD0290E16A73FFF69DAA7D40D56ACBDBB1B8273444CFE8DF1626E3F6F3E093AC3602AB1BF92FCFAE89A3E389D183417B0E4A7AB8CD
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/chrome_store/v7/192px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="192" viewBox="0 0 192 192" width="192"><path d="M0 0h192v192H0z" fill="none"/><defs><path d="M8 20v140c0 6.6 5.4 12 12 12h152c6.6 0 12-5.4 12-12V20H8zm108 32H76c-4.42 0-8-3.58-8-8s3.58-8 8-8h40c4.42 0 8 3.58 8 8s-3.58 8-8 8z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><path clip-path="url(#b)" d="M8 20h176v152H8z" fill="#eee"/><path clip-path="url(#b)" d="M116 36H76c-4.42 0-8 3.58-8 8s3.58 8 8 8h40c4.42 0 8-3.58 8-8s-3.58-8-8-8z" fill="#fff"/><g clip-path="url(#b)"><defs><circle cx="96" cy="160" id="c" r="76"/></defs><clipPath id="d"><use overflow="visible" xlink:href="#c"/></clipPath><path clip-path="url(#d)" d="M32.07 84v93.27h34.01L96 125.45h76V84zm0 0v93.27h34.01L96 125.45h76V84z" fill="#DB4437"/><path clip-path="url(#d)" d="M20 236h72.34l33.58-33.58v-25.14l-59.84-.01L20 98.24zm0 0h72.34l33.58-33.58v-25.14l-59.84-.01L20 98.24z" fill="#0F9D58"/><path cl

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	53472
Entropy (8bit):	7.973137567408234
Encrypted:	false
SSDEEP:	768:Io4QO4uJN+eL6L+NBnJPLBg1Y1r6NrOViTNV15OWwk10JSACYo4J44Kn1FR5XL:IrQhupcyB9H1r6N5NfG3yYJUFP
MD5:	79E35A7CC99858CA5E078BA86E64E13D
SHA1:	83A654FEF8ED228E595386B451804EC1666EAB2A
SHA-256:	BE88718A0EB175EBC4385600FE4168853A2BA705D814D2F9887CA7AA8CBD9238
SHA-512:	6507AE0218A982E61BAE012E1A5F7F26C701A5179D7660D02B074F903A4697DD9AD4CC4C46E1357261B8CAFE062E614AD30DFCDF772D9CEB1235EA63A66F9656
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................R.........................!1A..Qa."q.2....#B...Rb.r....$3Cs...4c...EU...%&Seu....................................-........................!1AQ..."a2q....BR..............?..M..+.g8Z.+..L..4.(...L....Y.%.8.....[..<.y..........77H..3Y.._s.\.[........f ..^r$....3^6.....R...;..]....).>....)....~.K.4...^.......Ez ..D.~..%.1,p....)....T.Yu.M...i.n......H..'.~..Y....waoj..5....4xb.,d..b.E....qx!k.%..(..F....@.+.N..i....X....T.Y4..J..,...f.L.1.3.........)......z...R=.B..c.q0...ZO.J.X-;~Q...M.5..ua..8...K.x..U.iP....885n........`.V#..W?.o...S'..i_$..,j.'B.B...-..(..r.].09...B..+...(...WhP.(WqC....(P..s................\".B....Q..G(P"..r.v..r..P..B....+.j..\P.W1@...Wq]...(.(..(.b.....(b...]...uB.U\|W{:j6....D...T....s..9..o#WF...Q^KV(VY.x.{......b.[.,..a...`..Z

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	7395
Entropy (8bit):	7.937385939773316
Encrypted:	false
SSDEEP:	192:mk2fuIDGQa+4KfwR13S/jr8ddNsGz0tmcSTSmJ0mKyYEtufFco4H:GQzE/j+dy80I+6YEtSco4H
MD5:	44B544F1CBEA2842C8715060E36B4DED
SHA1:	A15D1A46F9E3A51A19F6B47A01624592E7719679
SHA-256:	383A41BD7FA46B5B26B705025F74A2AF0781E3F7721F6C6FC0B56AE4D891F50D
SHA-512:	D1AC5A272EA207603654007C9FC9B4129CA12A2B86BF1FDF168691644BAE11173D2FAEF3069E27CFB86578DD7CCF2050A0468A6700DB55C429BAF164DE321B16
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<-12/.........../' %///1//////0/////70//00///0///5///00///////////////........@.."........................................@........................!1.AQ.."aq.2...#B....Rbr.3.....S.CD.................................).......................!1..AQa"2q..................?..%)...!.P...!.H.0...@.....S...B..O......N..~..l.....H.n..7.nB...6^.E)hl...3Zt..-.E..C$..E....+l..MR.Y.._M.(G..<.-....b...?....\|..{.Zce.C4...E.4r2...-'.Y...x.Tm...^..t.).$f.c@#@X.^["........kH..i....F.M........N........(s...ZxF.<../.........O`..9....>M.E.l(g.....V.o....s........ij0.a.B."b..G... Dh..CP...+PNB.5c-rE...%...m4.G (..i.. .!.@.8$...R%L..B.D!....?z..u4...Y\|%.(..K.t>.@.......^...@....../d.&.?...."^.<....9...{...$z.g8..8`Iix......![. 7..u...1.8...FX.P.._..1..@$y..l.D/uk..m.qa.F....'.4..'....y..4..`1.p.I.v....[..G...l..h............N.y.3..G3&W.D.W.s&.Kk5......\|..;*.Z.....G.........R`x.<=....p.Bm....

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18369)
Category:	downloaded
Size (bytes):	19019
Entropy (8bit):	5.448547902064018
Encrypted:	false
SSDEEP:	384:WD0oj9jB5FCCLbGPLG8wXcO0SXcxu7YB2glWqKbexTRl6mo+rv:Voq8UtwX30SXcvB/lHzRgMv
MD5:	89E89AEA544EA2785D49CC4CD9CF26F6
SHA1:	7D53437A89EB9861038EE27A8FF0E3BB70FA2A0B
SHA-256:	86DA38693FCEA056D36588A4146E85392F784C457511DE416FEC32034AAFA4F9
SHA-512:	4B8DD773D9F31126C5EDE9C02F2BA5BFFD5086CB28BD60838479AFB76929B73FC9242306DC83B8FF9AB89A272274041F8A2C58DF55C4399F420D70BDD0348E43
Malicious:	false
Reputation:	low
URL:	https://tzegilo.com/stattag.js
Preview:	!function(){window.__ds3dcv__.mmh=function(f,$){for(var x,_=f.length,e=$^_,d=0;_>=4;)x=(65535&(x=255&f.charCodeAt(d)\|(255&f.charCodeAt(++d))<<8\|(255&f.charCodeAt(++d))<<16\|(255&f.charCodeAt(++d))<<24))1540483477+(((x>>>16)1540483477&65535)<<16),x^=x>>>24,e=(65535&e)1540483477+(((e>>>16)1540483477&65535)<<16)^(x=(65535&x)1540483477+(((x>>>16)1540483477&65535)<<16)),_-=4,++d;switch(_){case 3:e^=(255&f.charCodeAt(d+2))<<16;case 2:e^=(255&f.charCodeAt(d+1))<<8;case 1:e^=255&f.charCodeAt(d),e=(65535&e)1540483477+(((e>>>16)1540483477&65535)<<16)}return e^=e>>>13,e=(65535&e)1540483477+(((e>>>16)1540483477&65535)<<16),(e^=e>>>15)>>>0};}();.(function(E){!function(){var n,e=E.u(),t=function(n,t=!E.E){if((n=n[E.x](new RegExp(E.uE,E.gE),E.j))in e)return e[n];var i=E.a+n+E.l,o=E.a+n+E.s,r=E.t;t&&r--;var a,d=window[E.ug][E.h],c=new RegExp(t?o:i)[E.gg](d);return c\|\|(a=E.Eg),c&&!c[r]&&(a=E.dg),c&&c[r]&&(a=decodeURIComponent(c[r][E.x](new RegExp(E.OT,E.gE),E.CE))),e[n]=a,a},i=function(){var n

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	6826
Entropy (8bit):	7.917421487942241
Encrypted:	false
SSDEEP:	192:zwdNCt3IcQeePQUxClY2ZOTTtrOtNiPUhmQ:zwdABXBuQ0F3t6tNiP67
MD5:	E39992AC13478511FDB6D50345AF8BD9
SHA1:	403F9BB746E29510C3D5F4B9BD9BEE924E410282
SHA-256:	C81CC6F073692CD5333109BBE08288B64752D0A188562B4DF755723178FBF551
SHA-512:	338E777F528FE34D82E6000888770C4266F535ECDFB28DCABDA2336B726E35855C8C30B0DAA976DF72D7D0283B47B92E5402F003A724E3528B391CD3A6634854
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70=+12/.........../%..//////////////////////////////////////////////////........@..".......................................A......................!..1A.Qa."2q.......R....#Bb....3CScrs..................................(.....................1.!A..aQq.."2..3r............?....Y.. H.R.^..IQqe..NqY.n..Z....Q4+.1.B.[.c...Z...d:...]3.^j..v.D....7:..'...3...c.T..Q........`,\|F.._$...;...3..u:.fm.7m{..%p.$..O%.....O.:...~.n.>..w.w.\|_J.f..6wq.....2.Z.\n..yoep!...&\|..\.o........oR..L{;wr{....M..h......l-9.;i'...x...^....7a.%Z.y...y..\|a.......r]..AxLw..].=.>v....:JTi>..y(......b)....6. yN.-\|eJ.5G9.&%.}.5.N.....]&j>...i.Z...m.$s...BOz9..k.$.>..9@...]4j....2......0[..r...S.p.<.*d.>/.>.o....a.O.Q..h.....H&w3>..........#M9.{mr..O.D..$sF]#D...:2.....Dn..0n.......(...P...R.Ls).&...."%.s@y5..,.-.4T..........uJD..).@0".Z.........D.`kA0L+.\.-:s@...S6..TMm.E....G..)..........}..6E].$.K....+L2..2.3.nh.I....qc...

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3166
Entropy (8bit):	7.916306739369559
Encrypted:	false
SSDEEP:	48:tcRD86S0+ak9/hfZtSY5KQSy1ajxEYBK2ZflOXc0LkK4lpy5diF:6nZUf3YQPadEYnhYXWHigF
MD5:	E9076C4711D7F9504858F74FFFF6DB62
SHA1:	A59242E94F933F0688DB9715C218A48FC956C1ED
SHA-256:	ECCDFE9D867373E2DA66EEDFCAAAB40CBCDF6A221B83D6EE1400895A3E4C8046
SHA-512:	F992D8F642816216C1BECB3EF5F1C6ED172DEEC1E7404911B011DD3EB6AC96E849CE48A27ECE092A0275BA6FCBF6A1BEDA58C7B442AE46AE37C30624BEFFA675
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W......%IDATx.........ogf..2..l......x.233333333..23...bn....q.Z}-...#N1.u..!.I.>.......i....@)"...N.7.r.;...D....KQ.s. .\|b8.b4.:......U...;@..v.....4I.E...K.=...v.=.u".....o..)E.%.;k....F..V.IQ.!...c...' ..ujp,..[....t.)"....=[.l-"...K...$..dR..wLg.E`!^05....%7.("$.NGh.-%.L"......j.(.>....hP..xd.R.S..b.....A..-..h..,....jT..9.....I.l.Gkt......6m.\...=....p(.3^..S!...m.._...5r.....o.T......c/t.../...a....+.F..D.....7.h......#...>t..~].9......#t...`.U...wX\|... ..;...HD......M<.............P.M..+.(. .. t...{.EAQ.445M+.Q....u$.../...7. .Q......T..{~'.v........}o.[.vn.{.".....n..Q...m...sDA......P..r6.dn?!.}...B...j...p...@.U.`.\|.....Y0..W.....o...........3ip....~@......]...!.[5[...m..o...."k2...N.. k..Z...............y[.o.m....km..;..<\)..F.,..7..s/.^.Z..~O]:............+_....C.@&.1.I ....(.....Td.a.z...:~.l.....12.h.L....I...o.iJ.t..z...;......m.)_\.s."U...s.....D.!.@...Q.Q..... T.~@..0...E..k.....m.9}l.M

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	7395
Entropy (8bit):	7.937385939773316
Encrypted:	false
SSDEEP:	192:mk2fuIDGQa+4KfwR13S/jr8ddNsGz0tmcSTSmJ0mKyYEtufFco4H:GQzE/j+dy80I+6YEtSco4H
MD5:	44B544F1CBEA2842C8715060E36B4DED
SHA1:	A15D1A46F9E3A51A19F6B47A01624592E7719679
SHA-256:	383A41BD7FA46B5B26B705025F74A2AF0781E3F7721F6C6FC0B56AE4D891F50D
SHA-512:	D1AC5A272EA207603654007C9FC9B4129CA12A2B86BF1FDF168691644BAE11173D2FAEF3069E27CFB86578DD7CCF2050A0468A6700DB55C429BAF164DE321B16
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/-1iNwmT2RVg/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<-12/.........../' %///1//////0/////70//00///0///5///00///////////////........@.."........................................@........................!1.AQ.."aq.2...#B....Rbr.3.....S.CD.................................).......................!1..AQa"2q..................?..%)...!.P...!.H.0...@.....S...B..O......N..~..l.....H.n..7.nB...6^.E)hl...3Zt..-.E..C$..E....+l..MR.Y.._M.(G..<.-....b...?....\|..{.Zce.C4...E.4r2...-'.Y...x.Tm...^..t.).$f.c@#@X.^["........kH..i....F.M........N........(s...ZxF.<../.........O`..9....>M.E.l(g.....V.o....s........ij0.a.B."b..G... Dh..CP...+PNB.5c-rE...%...m4.G (..i.. .!.@.8$...R%L..B.D!....?z..u4...Y\|%.(..K.t>.@.......^...@....../d.&.?...."^.<....9...{...$z.g8..8`Iix......![. 7..u...1.8...FX.P.._..1..@$y..l.D/uk..m.qa.F....'.4..'....y..4..`1.p.I.v....[..G...l..h............N.y.3..G3&W.D.W.s&.Kk5......\|..;*.Z.....G.........R`x.<=....p.Bm....

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	57187
Entropy (8bit):	5.868253734115879
Encrypted:	false
SSDEEP:	768:tUDeGwmUh69By1+mJDE3iLyWYkr7XMGB/nt0H:iDeGA6sJDE+/g
MD5:	76BCE54DA368115005674F3C2C435CFE
SHA1:	BF72BA3454016AA42665188C0F746998C0C33A93
SHA-256:	7B23E3A7155161323573E58616FF1BFDAFFD0560483DB31315D181F6B394DDD5
SHA-512:	88BA86EBC64350A326E73E1DBCC418A396949A0E4E6F0CB4C17850558A1282FB0217E757DE6BFB100E343E6F72545E8105335F57694384A6808CAA4360AC9E8A
Malicious:	false
Reputation:	low
Preview:	{"iframe":{.."defaults":{"icon":""},.."html":"<html lang=\"en\"><head><meta charset=\"UTF-8\"><meta name=\"robots\" content=\"noindex\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><meta http-equiv=\"X-UA-Compatible\" content=\"ie=edge\"></head><body><main class=\"sc\"><div class=\"sc__wrp\"><div class=\"sc__sw\"><div class=\"sc__sw__close\"></div><div class=\"sc__sw__icon\"></div><div class=\"sc__sw__heading\">{notificationHeading}</div><div class=\"sc__sw__text sc__sw__text-desktop\">{notificationText}</div><div class=\"sc__sw__text sc__sw__text-mobile\">{notificationTextMobile}</div><div class=\"sc__sw__btn-c\"><button id=\"B2\" class=\"sc__sw__btn sc__sw__btn--allow\">{allowBtn}</button><button id=\"B1\" class=\"sc__sw__btn sc__sw__btn--block\">{denyBtn}</button></div></div></div></main><style>html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:content-box;height:0;overflow:v

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	4596
Entropy (8bit):	7.9046819400623995
Encrypted:	false
SSDEEP:	96:czzzSwwVEjNAmi/HcXrrw2sPSv9et6gNVwDzmMFG/xnCwOFt+2ozfkJ:cPzSzECmzbDvc6dzmOeJkFt8kJ
MD5:	1C17A5F4D8A6C3746BAA7535002792C7
SHA1:	ADFCA2A4D374AEF959CD62E4F149C56174AD3200
SHA-256:	8A554BD9D038829E754BF67D65B933430784CC434E0227D7153C50D13AD9C4A6
SHA-512:	DBDEC748C1A70DEBFF6019398F670A75BA269C7396EE50E7446D961DB29E1EE9F7FFDD08F4E7645CE7EB3F6C5961494B3C5E965A6102B06715B6C76019A894B0
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/TCUuPHQEM_w/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...$5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////........@..".......................................A........................!1.AQ"a....q...2r......#3R...$4B..Sb.................................%.....................!1..2AQ"q.a...............?...V....Fm.._;..1....}.W....1.v.. 5..l[b4l..b.w.8....Q-...e.....F...j.Z...n.v...V7...E....z......yy....T.h.7...7._.-.^....~D[....o.R.kh._..h`....pYi.NK....~F.e..........:...dm...i.!....C..`2..9.......q.{..@..)GQ......\..g.d...xo.y{.....\|;+....>.../o/..M.[.p..s.R.++.;.......+w{.ge..@..h..M.........Yq....e.....B..i.4)...?#Dju....I~.ZbT...h...E..e.....cA......o..:.EI.=..@..!.~u.1.....!i...`0.!R...'1.....P...TMH.....=....i....q...u.og..N.,m.V.R-..~.kez6.2..?..k.}.!#...9..g...C...>I?.<..1...~...gq...Q/.........].<..r.=...c...e../....:....;.....%.2..q}..Y.8.ZZ...v.<....-5Z....xLM'N.d..v.....n...{k...

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1196)
Category:	downloaded
Size (bytes):	15681
Entropy (8bit):	5.513595965484267
Encrypted:	false
SSDEEP:	192:uqfTF4qScoDfWPuT4fN1Gl96A6gkOM7GQ/Jzxnr3wj0VbcITSzEqMktR:prFkfWPuT4Q9F6gkOMCQ/JFDVcSSzEW
MD5:	0E98F1627DE1F06393CA26013699BFCA
SHA1:	91BE1B8BA902E323AF0017644B22FA1DD6862DDD
SHA-256:	C8091E8471B9031FE82263949E49682E48EA7494BD9F0D8F23F07ED3250B02B5
SHA-512:	9F6B03390B65174E8D649E235A80D4360137E1554B49E85184D19C06B5F87BA4501C61DF755957732FE599A17C55D4326A033FF54D00F5EA58FA3FDC5CA81998
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<meta name="robots" content="index,follow" />.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title>YTmp4 Converter Youtube to Mp4 Video Downloader </title>.<meta name="description" content="YTmp4 is Free Online Youtube to Mp4 Downloader which Allows you to Convert and Download Youtube video files Easily. it's fast and safe">.<meta itemprop="name" content="YTmp4 Converter Youtube to Mp4 Video Downloader" />.<meta itemprop="description" content="YTmp4 is Free Online Youtube to Mp4 Downloader which Allows you to Convert and Download Youtube video files Easily. it's fast and safe" />.<meta itemprop="image" content="https://www-ytmp4.com/images/logo.png" />.<meta property="og:type" content="website" />.<meta property="og:title" content="YTmp4 Converter Youtube to Mp4 Video Downloader" />.<meta property="og:description" content="YTmp4 is Free Online Youtube to Mp4 Downloader which Allows y

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (961)
Category:	downloaded
Size (bytes):	3393
Entropy (8bit):	5.5359923867487275
Encrypted:	false
SSDEEP:	96:0bs+ABeBddTv8rjdCltZnrpulg6dT5i4mcn:GmWnEgct
MD5:	F3D8A7D7A10ACD405F61A6614F2D0586
SHA1:	69DA1548A3B6565039EBBA1C61E59DEEB0D51569
SHA-256:	C8F5D1CA15A18CDE28CB685D05C6EAA207F5B40D92BCA473799BA3203AE4662E
SHA-512:	4F2849A6A8BCA9D8ED772107EB82AC2816D95271BA0C0D872589EA97A36C8C09E679CA69BCD66269B003A395EC35B06A12B5AA5C670D4DABC8928B8ACD3C8827
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.dJPrtZvRqDw.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.Z4IE48QAiHc.L.B1.O/am=6AYGyQI/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,COQbmf,CfLNpd,DNlSjf,ECBKud,EEDORb,EFQ78c,FdMhB,HsQQib,IZT63,JNoxi,KG2eXe,KUM7Z,KfQkxf,L1AAkb,LBaJxb,LEikZe,LcrBLd,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,OmgaI,PIVayb,PrPYRd,QIhFr,QVysJe,QjUiqc,QvLWAb,Qy2cOb,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,VwDzFe,XVMNvd,Xi0ENb,YA1iG,Z5uLle,ZfAoz,ZvHseb,ZwDk9d,_b,_tp,aW3pY,aurFic,bZ0mod,bm51tf,byfTOb,cephkf,db7dHd,dsBBae,duFQFc,e5qFLc,fKUV3e,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,ovKuLd,p8L0ob,pjICDe,pw70Gc,q0xTif,qUYJve,qv5bsb,ri2s0b,rm99Nc,s39S4,sOXFj,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zKiH5d,zXfYdc,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720LDE8ISk-83wVQHVDoQdYmvmJiiEA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.n("Wt6vjf");.var Cy=function(a){this.va=_.y(a,0,Cy.messageId)};_.C(Cy,_.B);Cy.prototype.Oa=function(){return _.vk(this,1)};Cy.prototype.Mb=function(a){_.Ok(this,1,a)};Cy.messageId="f.bo";var Dy=function(){_.Hn.call(this)};_.C(Dy,_.Hn);Dy.prototype.Hb=function(){this.xv=!1;Ey(this);_.Hn.prototype.Hb.call(this)};Dy.prototype.j=function(){Fy(this);if(this.Ym)return Gy(this),!1;if(!this.Lw)return Hy(this),!0;this.dispatchEvent("p");if(!this.Gs)return Hy(this),!0;this.Ar?(this.dispatchEvent("r"),Hy(this)):Gy(this);return!1};.var Iy=function(a){var b=new _.Gt(a.GC);null!=a.Nt&&b.j.set("authuser",a.Nt);return b},Gy=function(a){a.Ym=!0;var b=Iy(a),c="rt=r&f_uid="+encodeURIComponent(String(a.Gs));_.Op(b,(0,_.ng)(a.o,a),"POST",c)};.Dy.prototype.o=function(a){a=a.target;Fy(this);if(_.Vp(a)){this.Dq=0;if(this.Ar)this.Ym=!1,this.dispatchEvent("r");else if(this.Lw)thi

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	6178
Entropy (8bit):	7.920885848746889
Encrypted:	false
SSDEEP:	192:9lHXvIq2E2U1lP5A6rou1l1wr1G3Poox05EklMCJR:9l8RULP5A6rdlirAgsBklMQR
MD5:	63244F7264BE5E529A0E14EB9036B62C
SHA1:	CB3F8E9AF4CA648CDA2C468C17757728693FA215
SHA-256:	9CFE0844BF476C68BEB9FC6E6DAE1F77722647C58C2AFCA981F71CF5553051F3
SHA-512:	51F960C8636EC01147B677AE112C266CD15C90EEBF1E8A83CA7E8FBE13AFB8ABE7F275A4477FDE5CA7E0029D82CE4B121ED3D091401C24246012B2B744802238
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...///////////////1//////////////////5///////////////........@.."........................................H........................!1..AQa.."q..#2Rb.....3....%5BSrs......$C.D..4..............................%........................!12A"Q.q.#.............?...E..$.I.I$.`.I$.$.H1...@..:.....~....z.Vt...\|..{,.5.H.HJ..f..N....J.t.CH..YY..&LL.1.#g..sS..-.)v.....`.v. ....iZ).....`A.A...R.X.6..P..4j(.J.G.....P.{/..J....G..LXK....}@%F.2.5Z.}...... .VXQZ...P.J@....)0)..@.#.w51.Z.i. ...+."....". .)BH..) .)".H..k.AH+V.....r.{o...Z....S.N....=..5..&.R..B.@....x.N4..V.0`.9.6CI...\|....,..N..-c*W......3.\..j:.lfT....l..B..-2.-.SP.....h..OQ.8...t.g.[g...x.`..;"aa.h.EMY.........]...<Txn{..us....K.{..WR...M..q.k..........."...!.]J..^...6.e..nt..m...1s.B.vc..\...JE....Be...J....A..{Z...I.. q)...`.....8.3.%(...m .).)0....#.J(-2..I).I$.. .H..I..E(Q.........R.T....mL...0...s.

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x175, components 3
Category:	downloaded
Size (bytes):	16590
Entropy (8bit):	7.948477340601516
Encrypted:	false
SSDEEP:	384:MuA4a5Gn+i9MpwQssIqYvh+epwdRs144ePOO5Sw1u3:Wl5S9QlsbqU+iB1wOhwo3
MD5:	B792350E52EAF3F0504C3C256F2ECB0F
SHA1:	F2590178DA48345AA82608910F0ABFAF557E9FA0
SHA-256:	4C1FD0D1901156727A4F60ADBDE0AFA18F7310D6912E3EF78A78E7F04334689D
SHA-512:	ABD60286658E4280317C138D8CED3C4A2B2DA6AC0A9D56894D174D796817E7E4CF4F9EE3AF0B6B8FDF292D5145B8006D33667C2BA907E411E6CD70D1088AFC05
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/sJloPKX06Y6OBg_AEBt5kXaXEp36d6M27Pj1pcUmxJTTrXeQxLOAmupGl0sqmoModna2xEsXFXJU0o3_t37J64xhww=s275-w275-h175
Preview:	......JFIF.....................................................................................................................................................................................................P......................!..1.."2AQa...#BRq...3b...Ur...$T.......4CSs....%Dc......................................@......................!1A...Qaq."...........2...#BSr....RTb..............?...Fn0Q......0<..w.0m...I...[H'f.V.H-....;q...74.Xv.<..r..)=........w[VR.$.@<..b$xX1V ..n.....r..qU-.!%..(........}...v...p..d.,.....Y.....X.i..na.Uq...\|E...q..]..!....<S.G^.M.%IS.0......pp..DYaVP...t.^....&....}.J...L..g.....?.Wi.cY...r...B..X.,.V..Kc.[...... ..u.K1.3.....@...ZZ..........VB.B(B(B.o........{.......#...\\).....&6......y....Tt.@....qR ....Y...Ibd...NN..~.[.U...L[~]..8.6.C.....*.....&I'.i.f.5.........tmv.i2..v.$..A...H22k.z{N.g...9........>....0.......j.....~.wpRd....V6.jd......#.wvH.D..<.1.h..^c.~.Y6...DP.P.P.P......$..{\C<...G.9..J...E6.=oWtV...$..v.F.

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1501
Entropy (8bit):	7.8069101365699645
Encrypted:	false
SSDEEP:	24:USLpWnM5lXW9bsk9bcq1/1v3a9PnPvef6bqiq8eGaa3dpYdXMI8SPk/NIz:UuWM5l/ktc0heHpbY8zKuIDk/NIz
MD5:	75D78A3233B5E0672F48247200DECDB0
SHA1:	DA7E8B9DB98A6950D1637B4DD5E098FA2EC3A02A
SHA-256:	E136AE509E08AC00FB264CB82CFA1081982DDCF775EE058B201FABBCC59B7C8A
SHA-512:	78101831843340D55A22DE928677FCDBC20A66FABB7CF8BC9961EE7AD334286E0C2FF3A10B09785BD84854ED511C6931A2A7CD0E0810C18ADF526EF3619697F0
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/chrome/webstore/images/icon_48px.png
Preview:	.PNG........IHDR...0...0.....W.......sBIT....\|.d.....pHYs...v...v.}......tEXtSoftware.www.inkscape.org..<....ZIDATh..]l.U...wf?..K.B[.+..5 jL..h./.F......G...E\|V.4"P.....\|0.D.%(..U....-.nk.....3;.v..1...C.&=.f.{.9.....sg....,.l......m...<.COO..nv{.../....# ...R.7.q.).)4..VO.b.....VUU.V!G`:...8'.xw....G..../K).M9.r.UTT..u.. .....\|.....EQ&.\|S.c...'.T.x<..}<...d^u#.0s.\.p..#...\WWWX...+`...7e._%.+..(..+`'3u.._.+...k... .g.....$.P.#..@Y.B..F.Bx.......+q.U........i..;.....{.Ej.g.J<..b.C..wrq.....tww;' %.I}u.#._.R.._.W.TQ.y+.....B'.$....H&.....>.~........(-..[d...7......jG{(..M...v....`..Z!..\..'..+Y.s....'.....}..u....o.P=,x.E\|.lrD..1......i6...x.D..#..._lu.mb.F...}.G...^..Q\|.R.....F.o.ae.H$.....\|....23.h.....A..y.&]..8....=..[./.i..g..h#...r..+q:....k..,...!..y.L...B.T..Y.....6,.T'j....Js...F.R9C...X.;[.G......x..n.....j.j....S....)..1.E.rCo.j...X...0....#.#p..\E...<z.*..).x.B`.6...b...VA[/t........k....<...H..2......#.K.r..5.F...C\|..0

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19986), with no line terminators
Category:	downloaded
Size (bytes):	19986
Entropy (8bit):	5.253227111919225
Encrypted:	false
SSDEEP:	384:XrqR6Q0npafIm4rKi/BwEXN1w29mItq0W5i6G:Q70nBrKuB0Uqti6G
MD5:	DD1D068FDB5FE90B6C05A5B3940E088C
SHA1:	0D96F9DF8772633A9DF4C81CF323A4EF8998BA59
SHA-256:	6153D13804862B0FC1C016CF1129F34CB7C6185F2CF4BF1A3A862EECDAB50101
SHA-512:	7AEA051A8C2195A2EA5EC3D6438F2A4A4052085B370CF4728B056EDC58D1F7A70C3F1F85AFE82959184869F707C2AC02A964B8D9166122E74EBC423E0A47FA30
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	6215
Entropy (8bit):	7.920328385167772
Encrypted:	false
SSDEEP:	192:3MXeysTANRfPuWZ9KA08rbXgyygRvSahw8Dg+ul:3a+8eM/vyoSuDpul
MD5:	CB59F68435CFD02EDAC00968101D6214
SHA1:	4842256578BB07A38BB19EF9F2B3A7437EDD030E
SHA-256:	275E6792F63962C759A18532F0D12BF458AD794E9A177D74BA3CFAA0C33540DB
SHA-512:	53450AEEF28B028A64676070F619D1B6C1B0AF4100540419193CE9FFA51F6A40E38985E231F2AAB8BB44A6B4EE0D8ED981393226CAFA5C15CE934A1010A0DC5E
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222.#8=70<+121.........../..'////////////////0/////////5//////////5////////////........@.."........................................B........................!1.A.."Qaq.2...#br.....BCc....3RS...Ds................................./.......................!1.A."2Qa....B.#3Rbq..............?...-F.k#a..I.J.j$.......@.@..."..RM.......>....uq[.?.4#..`t.o.._.e.U.7 {.V........NY..c.K.Fv..$7P........e...(.a.^.Fbh..."...u.UK..".Q}....?..O...&.>..k.>w.1.....R?F?}.?.^.tp..[4.:6.Y}.I.....RH...</..,!........!.{.lv.^...y.._.w...2v..j..p.x<.....H........}.........(.2..X......U`. .....cxcc..K..(..\.......c..y.lSy.....8.3.%I..k..u..G....I}Y\|..H...f.fk...m.,.P....G.g.....uZ...\..l.0.F....~Pa.....^..c..0..-.\..hu.C..Q\|:......A.<..UW^g{{.>6.!{.....C.V..>. .P..)7.QN.H..I...$&.R.!.$..(....H.z...(.2..d..ZI..."RBAb(N....N...hE&...l<...x...`k.psZ.p.y....B.8...........?e.....<o..........w...?.1...U.w.....?e.

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	3265
Entropy (8bit):	7.760769294697369
Encrypted:	false
SSDEEP:	96:/2aMLwyfcG4xydL8CK83ZLjdbc2RFBXCsLNpDaW:+asfcG4+53BhPn
MD5:	7C041D06D7CB22753C95DBB86B81803D
SHA1:	030D055519932A45F0ED676103A04C820828919B
SHA-256:	E6326A3E2BD1E36F6B88AB93C3908AF743B89BF9597E46DAF66F0DD6E20B6D46
SHA-512:	6617BCD468F387D527EF1F1B2E6837DF84F68370402155FB0DA7FA5C9FB0CA9695B5339261F0B36FA53FD7138D209EB2F031130BEA43D6C8D7A0C8CAD60ACF27
Malicious:	false
Reputation:	low
Preview:	......JFIF.................................................. +#..(...$5&(-/223."8=70<+12/.........../...////////////////////////////////////////////////<;........@..".......................................?........................!1.."2AQaq......#Sb.....3BR.$4Tr...................................#......................1.!a.2Aq..Q............?...bC96Bc$)#D..EC.....12........_....~...,J..................;Ey....sR.y.#....Z.\.2/1....6...Nfr.&K5.C...Xi.gjRf.d$h..#P.39.i.X&Q......U".f\B(.Q,.Bc.-1...e_...ML.._...r...............oI..2..-3.z1.e.d.bb..2F."H.Y4Kf..H.Ap.$&VV.JFh..+E".2Q4H.LQW3Lf...-..\..."..4%......a..U.E.2E.5..}I].wpJy.4..y.m.M.mu.O!.}\........rG....YB....._]m...3...+)F3..o......u...2[.\|G.....q......rG._...2..7.?....B..?..p}..{...v..:..&{f.......e}..\...`8j...n2...p..x1.......j.mw...........).].........z................2...].N._c.L..5..qn...R.Vn.Q...O..1.KT..)#..E...M/..D..r....B.."F.$g$n.....&R...@...,.....M"04.F.Z...R..4H...D......@...h...2X..h..D....'

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (894), with no line terminators
Category:	downloaded
Size (bytes):	894
Entropy (8bit):	5.292875801802277
Encrypted:	false
SSDEEP:	24:4Ws+CWsfAR7YHLe9F5OMy0/AAGxupV50AyziAzzuHsr:U3IR7YroF5G0nGxupDzOFOg
MD5:	9E05DBDF98846FA4AC405384EA81CCE3
SHA1:	E8AAACDC0E9D7B6C1EC2A3554E98DAAC297DB286
SHA-256:	9A0A57C586E642FF52A3459CE844FD8689087C651ED5A281655A71245465E70F
SHA-512:	01294DCAF7B0459A5201313FE7EE6101EC5099CC480AC0D63DBE47EA972E3C9D1B68D1359E3D8B5F7E8458254634F89F42A3CF96D740405CA88A1DD503791FBD
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2Fyoutube.c&_=1704923497024
Preview:	jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https://youtube.c",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com",0,[512,10]],["http://www.youtube.com/sports",0,[512,10]],["http://www.youtube.com/WATCH",0,[512,10]],["http://youtube.com/socialepfo",0,[512,10]],["http://youtube.com/wifidisplayreceiveranycast",0,[512,10]],["https://youtube.com/shorts/ebmlojxh2fg?si\u003djibxgfkgj3v8xf7i",0,[512]],["http://youtube.com/live",0,[512,10]],["http://www.youtube.com/shows",0,[512,10]],["http://youtube.com/@techlive-jo6on",0,[512,10]],["https://youtube.com/channel/ucexafolalzvzem7hkiaocsw",0,[512]],["http://youtube.com/tdjakesofficial",0,[512,10]],["https://youtube.com/shorts/64hiumzfpxc?feature\u003dshare",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1505)
Category:	downloaded
Size (bytes):	79852
Entropy (8bit):	5.585329372873524
Encrypted:	false
SSDEEP:	1536:S+w/zcRjlqyv8UGZKxJYfH9m9wHrV3yEhWRyTB2dITFDQtVBG:Blqyv+KyDcUTsdwFDOG
MD5:	8C79846F2B3509923D28DD933F2F0146
SHA1:	0BD969DF614E46FFC63BCED7D8335DE2FD63E019
SHA-256:	1B35E98600B2582E0EFE7F7C741831081D8CA0C5226986EFE1E090C9EA7556C6
SHA-512:	7683E3983E9239E710CF17A6831381096229F9B82BDA9DFF926F1741BD797E12A6076AE27195638517111528AAB1DCFB0191DB555AB3121B77B9AFAC1160FCB4
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.GsbA68hXs80.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/rs=AHpOoo899t-H8Lxb3OqzMDuPn6TV_i36ag/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ea,fa,na,pa,sa,va,wa,Ca;_.da=function(a){return function(){return _.ba[a].apply(this,arguments)}};_.ba=[];ea=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.na=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.oa=na(this);pa=function(a,b){if(b)a:{var c=_.oa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&fa(c,a,

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	5734
Entropy (8bit):	7.9044449668280325
Encrypted:	false
SSDEEP:	96:8IIDMEJtJubJI0ZkLoOKDAZzPyDC8w47IXpfwT96QI9PJsgpYKpzn:8vMMTJoRuuOf48Xp4PqP7O4zn
MD5:	BF5A0F4E6EC9C42C3719AAA1CBD73972
SHA1:	D0501B3682AFF760DCD889002997058452F89739
SHA-256:	654388399FC2C1FEA1EAC55C4962648E1BE128706A3F67CC73CBEA2E0FFA847D
SHA-512:	FF31124056069DA632EB0A969B3AA45B69B5AF6B7A3A24A4825756F4E6F756E726D7F44F1DD2FC63FA1FDBCC96E5E20F27A4F15F0F6FC11BE39640A8E7DBB1F4
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+%..(...%5%(-/222."8=70<+12/.........../..%//////////////////////////////////////////////////........@..".......................................?......................!..1Q.Aa.."q..2...B...#C...3Rb..4Srs..$..............................#.....................!1..AQaq2.."............?...M(..,6!0J....HD.. Z.P9H..j7d....#.B.l.)-.^..U).Z)R.9]........{.K.0....?j..B.C.#G...B...l.b....s.f.2..+S7..;lJ...D.9.ui.........~\|-SI....c.....b........^...`...6w.....b0A....u.....s@..}=p.O0.oJv9.......86M9...>&...Q.d\.gT..... .u...u...4.Ya....u...X..b..R.7.!l.N.O.5..Y.I.o&~^...0.k..0...L.Q.e:_.../.....R.a-..u./../..D.a..&Q\.W.}>.S*c.EG....L.WX...<.W\l..z....D.e..@.U4h.OQ.."V.(J....(.&%T.P!..R....~....kK;.j...W.R....%(..!0..e....S5H.B...hE.P..l.......=#.G..p..._...3..sq..X_...r.....O.Mh.W.mY1...Q.C..EW.[1V...G.S...^dR...W3M4 ....;/..}=.j.R.}7E`$......k.\K...B.6/..:'..7Rx}.....`..)....8.q..Q.............:4..\|..H.^j.-

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	81749
Entropy (8bit):	5.337705779804098
Encrypted:	false
SSDEEP:	1536:yzGP9fXNvEUQkQQJnomiJ1CNsuhgg0vU4H3Gv+GU:y6ly6DJnG0WgU2vC
MD5:	44D0CE821374C50D9EB680AD02DED8A9
SHA1:	6F5AA7E13F0CD2A96FBF6474895EABE6B7C36F0D
SHA-256:	4ADBE0B533D36E56781BDC4F9837AC45F702BB309BF5FD9A144A63FF38F6B1AC
SHA-512:	871481FF92FE3A5E7DBD7FAE989FDA33B4F284D3460620019F3ABC724E43469E5553268FAE4884FB9511C957B321DCCE001903A01BE1A5944E42C6A2F37B582F
Malicious:	false
Reputation:	low
URL:	https://arvigorothan.com/tag.min.js
Preview:	(function(qw){!function(){qw.q;var e=qw.L(),t=qw.Hy[qw.Jy](qw.v)[qw.ze]()[qw.Z](qw.v);function n(){var t=e[qw.A];try{e[qw.qt]=t[qw.qt]}catch(r){var n=[][qw.Wp][qw.Ke](t[qw.ua](qw.ow),function(e){return qw.ce===e[qw.c]});e[qw.qt]=n&&n[qw.Ay][qw.qt]}}qw.w!=typeof window&&(e[qw.P]=window,void qw.j!==window[qw.tw]&&(e[qw.Ky]=window[qw.tw])),qw.w!=typeof document&&(e[qw.A]=document,e[qw.Ge]=document[t]),qw.w!=typeof navigator&&(e[qw.rw]=navigator),n(),e[qw.X]=function(){if(!window[qw.Hw])return qw.V;try{var t=window[qw.Hw][qw.Ir],r=t[qw.qt](qw.Vi);return t[qw.By][qw.et](r),r[qw.Zy]!==t[qw.By]?!qw.k:(r[qw.Zy][qw.rt](r),e[qw.P]=window[qw.Hw],e[qw.A]=e[qw.P][qw.Ir],e[qw.Ge]=e[qw.P][qw.Ir][qw.Qe],n(),!qw.j)}catch(e){return!qw.k}},e[qw.C]=function(){try{return e[qw.A][qw.x][qw.Zy]!==e[qw.A][qw.By]&&(e[qw.Fs]=e[qw.A][qw.x][qw.Zy],e[qw.Fs][qw.Ly][qw.Ry]&&qw.nt!==e[qw.Fs][qw.Ly][qw.Ry]\|\|(e[qw.Fs][qw.Ly][qw.Ry]=qw.Gs),!qw.j)}catch(e){return!qw.k}};var r,o=e;function i(e,t,n){var r=o[qw.A][qw.qt](qw.

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8621), with no line terminators
Category:	downloaded
Size (bytes):	8621
Entropy (8bit):	5.154508111957083
Encrypted:	false
SSDEEP:	192:GJYH+mmNhCBN+vrDexpwSFjuMON+6vWzU3lcvOCylYqeWe:v+mSCBN+vrDejwSFjuM+GzU30aqqeWe
MD5:	E24CBC3895EF5CAF8BFF57C09D03065F
SHA1:	697277EDA7CCFF388281400811AEF952AF410743
SHA-256:	35FA195C1DDBD8D1A0273965DB63F33C2062AF501981388E9C4622A3FAF9CDED
SHA-512:	F1B0D2F099ED76FC457AD3F4FD3CD7BBC40FC8F4C0A5A4F0682732C9EF29D4DF64B2CBBCA432E691F45C793CD99F2B408AD22D770782356FF4F10784986C3492
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/css/custome.css
Preview:	img#globe{vertical-align:bottom}.copyright_text{1.padding:10px}img#spin_loader,img#speen{animation:spin 3s linear infinite;vertical-align:text-bottom}@-moz-keyframes spin{100%{-moz-transform:rotate(360deg)}}@-webkit-keyframes spin{100%{-webkit-transform:rotate(360deg)}}@keyframes spin{100%{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}.nav-link:hover .language-dropdown{display:block}.language-dropdown{border-top:3px solid #0087cf!important;position:absolute;z-index:1000;display:none;float:left;min-width:8rem;padding:.5rem 0;font-size:1rem;text-align:left;list-style:none;background-color:#fff;background-clip:padding-box;border:1px solid rgba(22,22,22,.15);-webkit-border-radius:.25rem;-moz-border-radius:.25rem;border-radius:.25rem}.language-dropdown ul{list-style:none;margin:0;padding:0;text-align:center}.language-dropdown ul li{padding:5px 0}.language-dropdown ul li:hover{background-color:#0087cf}.language-dropdown ul li:hover a{color:#fff!important}.language-dropdown ul li

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 48x48, components 3
Category:	downloaded
Size (bytes):	2722
Entropy (8bit):	7.808434741347837
Encrypted:	false
SSDEEP:	48:UcJrVcYP1SW7/CNCh8SVkXKQH336vKYj+ET3HjVw28ZmAdP7me:ZlVcgr7CQhtVkHMKuDW2APj
MD5:	F0947C90154B22F80A6F4F2864947063
SHA1:	922196C40A2213C02A6EDE61FC16073B053D17E6
SHA-256:	CD95478D76D549711DEFDFBC351F0F7BA3E4AA3F0C060E40779A5F801F0952A1
SHA-512:	82A8A07CF1D116E0A053C7D9A4BEB4734453F8BF24CECA9070D2CD850E11894FE2EAF636C53087C0CB8CBCF589E91CE049DB3E2D0624E46D143443BE3966576A
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/a-/ALV-UjWZquHmjVP-Z8z4VuSw8GFcDixrYN9Cf8lSEZqtHWXKig=s48-w48-h48
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................0.0.........................................-.........................!..."#1..Aa23QRqr.................................3.......................!1.A.Qaq....".....2..#BRbr............?...j,..SU..WV.,.h..w\|.._[...e......J........a...=.j.J...66.o.PS..l.}.4.....m....=..fv&..b..;...`..'.............v..pn!OI)H.......S...w...m..KM-.y.EGEo#..@...........$).7.(Xr,..0...R.PR$9R.....`r..q:...jyi..XU.......}G....8.Zq...Q].!J.Rl.....np..g...?..5...h..F.:.h..UL.._q.v......<....APE....]D.48M.s...\|[h.vk^iN..M>.....%...z.dpL.I...;.....N..4.Ya......./b.lpGN.4....u,A+.)"..J9W.<`.6l.dPK..w..2...&.-.,.-....])WC&.K....2~ n..N.NRX.7.......X.k%.R..0.G$ ..p."c...$/!..+.Y.w.....^Sa..s..r...UH..YK)x.....l,s....}\|IQB..U.Y-]4..^6....FA....^s...HW...\...oX..~.....P.&..rC$.lg.v...<

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	6215
Entropy (8bit):	7.920328385167772
Encrypted:	false
SSDEEP:	192:3MXeysTANRfPuWZ9KA08rbXgyygRvSahw8Dg+ul:3a+8eM/vyoSuDpul
MD5:	CB59F68435CFD02EDAC00968101D6214
SHA1:	4842256578BB07A38BB19EF9F2B3A7437EDD030E
SHA-256:	275E6792F63962C759A18532F0D12BF458AD794E9A177D74BA3CFAA0C33540DB
SHA-512:	53450AEEF28B028A64676070F619D1B6C1B0AF4100540419193CE9FFA51F6A40E38985E231F2AAB8BB44A6B4EE0D8ED981393226CAFA5C15CE934A1010A0DC5E
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/Z-LvPIt1qm4/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5%(-/222.#8=70<+121.........../..'////////////////0/////////5//////////5////////////........@.."........................................B........................!1.A.."Qaq.2...#br.....BCc....3RS...Ds................................./.......................!1.A."2Qa....B.#3Rbq..............?...-F.k#a..I.J.j$.......@.@..."..RM.......>....uq[.?.4#..`t.o.._.e.U.7 {.V........NY..c.K.Fv..$7P........e...(.a.^.Fbh..."...u.UK..".Q}....?..O...&.>..k.>w.1.....R?F?}.?.^.tp..[4.:6.Y}.I.....RH...</..,!........!.{.lv.^...y.._.w...2v..j..p.x<.....H........}.........(.2..X......U`. .....cxcc..K..(..\.......c..y.lSy.....8.3.%I..k..u..G....I}Y\|..H...f.fk...m.,.P....G.g.....uZ...\..l.0.F....~Pa.....^..c..0..-.\..hu.C..Q\|:......A.<..UW^g{{.>6.!{.....C.V..>. .P..)7.QN.H..I...$&.R.!.$..(....H.z...(.2..d..ZI..."RBAb(N....N...hE&...l<...x...`k.psZ.p.y....B.8...........?e.....<o..........w...?.1...U.w.....?e.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (778)
Category:	downloaded
Size (bytes):	1464
Entropy (8bit):	5.307476742076667
Encrypted:	false
SSDEEP:	24:knEtIDJMY7TKAJwYF9/zI04eUoRXhy6wIpxYdMFiBY7Vt0Gb985Gbzo0t7O4khZ6:0o0JMaTlwWVnVxbyspxoWt0GbO5GbLko
MD5:	98687B8A6E1B5E59FB89B005D9A67EFE
SHA1:	B056C4F323E21E6A04B728FBB8BB5F0E864963D5
SHA-256:	7ED62A995BB3454D21548472C26073B138940615BD65FBE438FED323159BB94F
SHA-512:	82E304B69EF70403AD55A365CD7F5DC8A49CD60DAA313BB264C53146D8D793E29B83F5FB4A0E7475A4E4C2C965E7E3D8867FACDF6A8C0A0C123AA6A291EB9C24
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.dJPrtZvRqDw.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.Z4IE48QAiHc.L.B1.O/am=6AYGyQI/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,COQbmf,CfLNpd,DNlSjf,ECBKud,EEDORb,EFQ78c,FdMhB,HsQQib,IZT63,JNoxi,KG2eXe,KUM7Z,KfQkxf,L1AAkb,LBaJxb,LEikZe,LcrBLd,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,OmgaI,PIVayb,PrPYRd,QIhFr,QVysJe,QjUiqc,QvLWAb,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,VwDzFe,XVMNvd,Xi0ENb,YA1iG,Z5uLle,ZfAoz,ZvHseb,ZwDk9d,_b,_tp,aW3pY,aurFic,bZ0mod,byfTOb,cephkf,dsBBae,duFQFc,e5qFLc,fKUV3e,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,ovKuLd,p8L0ob,pjICDe,pw70Gc,qv5bsb,ri2s0b,rm99Nc,s39S4,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zKiH5d,zXfYdc,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720LDE8ISk-83wVQHVDoQdYmvmJiiEA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=bm51tf"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.n("bm51tf");.var tta=!!(_.Vg[0]>>22&1);var vta=function(a,b,c,d,e){this.v=a;this.ha=b;this.N=c;this.ma=d;this.W=e;this.j=0;this.o=uta(this)},wta=function(a){var b={};_.Ja(a.Ru(),function(e){b[e]=!0});var c=a.Fu(),d=a.Ju();return new vta(a.Iu(),1E3c.j(),a.zu(),1E3d.j(),b)},uta=function(a){return Math.random()Math.min(a.haMath.pow(a.N,a.j),a.ma)},oX=function(a,b){return a.j>=a.v?!1:null!=b?!!a.W[b]:!0};var pX=function(a){_.P.call(this,a.ua);this.v=a.service.Ew;this.N=a.service.metadata;a=a.service.zM;this.o=a.v.bind(a)};_.C(pX,_.P);pX.Ba=_.P.Ba;pX.na=function(){return{service:{Ew:_.rta,metadata:_.kX,zM:_.MO}}};pX.prototype.j=function(a,b){if(1!=this.N.getType(a.mc()))return _.jo(a);var c=this.v.j;(c=c?wta(c):null)&&oX(c)?(b=xta(this,a,b,c),a=new _.io(a,b,2)):a=_.jo(a);return a};.var xta=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.583404153609093
Encrypted:	false
SSDEEP:	12:qTpj+WenRm4xYqJmryGUSgWVKAIeDKJZhVvccoF7taoQb:0pj+XnQmPGUFWVKteCZhVWtaz
MD5:	EAE554B256B14DEA63E2A67F2064A44B
SHA1:	4B08524A1AC751AFF186415171CF6BFD46AB19D6
SHA-256:	CDA1A46926DDC83AD75A319C852D6878F4256AF4E1AA1EEA245C9609722CCCB8
SHA-512:	476FD10A4D0D3CC0CA84522B504DC80C5990C987170A2154B3CB74C5503A0E66B8BC4B5D5F2AD0118A94B60196909540E29AAAB5EA59BD2133DB2101A943579C
Malicious:	false
Reputation:	low
URL:	https://understandingerrors.com/?a=godynamic&utm_source=3&utm_campaign=659f11d999fc0a000155a29d
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="utf-8">. <title>To The Store</title>.</head>.<body>.. <script type="text/javascript">. if (/Edg/.test(navigator.userAgent)) {. window.location.replace("https://microsoftedge.microsoft.com/addons/detail/none");}. else {. .window.location.replace("https://chrome.google.com/webstore/detail/dgcoeljmbmjppdaiiimcepjijfeleain");. }. </script>..</body>.</html>

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1246)
Category:	downloaded
Size (bytes):	157105
Entropy (8bit):	5.579358648442052
Encrypted:	false
SSDEEP:	1536:lTxN/N0GZQMxSsxkJNc+WAUsMJUSWTb+o1xLhpcCmuYYxYsdm6P/kRji:Qux/LhAUsMuSWXxLUCBEK8O
MD5:	529B85797B803792355DAA154E12E4C3
SHA1:	4C0BAA32668455751D239AB0EE59FEE507CD7636
SHA-256:	D3D6D81AD421F8F2B552330B6D5B6BCACDDDD1CE79D4CFA79323FEE178A4A0F7
SHA-512:	E3956EBBDBFAB5A3B5589B731D5BDBB5FEAF8F8487989188CA41AADED46FA5F1FD4816468152BD14A850294B56CAD59DBA70A5BB6C03DB3C6EB10D9B894CCEC6
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.dJPrtZvRqDw.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.Z4IE48QAiHc.L.B1.O/am=6AYGyQI/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CfLNpd,DNlSjf,EEDORb,EFQ78c,FdMhB,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,M0x0ie,MI6k7c,MT4Hub,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,QvLWAb,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VwDzFe,XVMNvd,Xi0ENb,YA1iG,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,duFQFc,e5qFLc,fKUV3e,gychg,h4ilFc,hKSk3e,hc6Ubd,kBpGk,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,ovKuLd,p8L0ob,pjICDe,pw70Gc,qv5bsb,ri2s0b,s39S4,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720LDE8ISk-83wVQHVDoQdYmvmJiiEA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=sQ8PT,tw4SJc,dsBBae,LBaJxb,HsQQib,cephkf,i8oNZb,QjUiqc,MH0hJe,AWpPDd,QVysJe,rm99Nc,ZvHseb,PIVayb,bZ0mod,O626Fe,w9C4d,zKiH5d,OhgRI,zXfYdc,ECBKud,KfQkxf,VBl5Ff,LcrBLd"
Preview:	"use strict";_F_installCss(".YNuLHe .VfPpkd-k2Wrsb{font-family:Google Sans;line-height:1.5rem;font-size:1rem}.YNuLHe .VfPpkd-k2Wrsb{color:#001d35}.YNuLHe .VfPpkd-cnG4Wd{font-family:Google Sans;line-height:1.25rem;font-size:.875rem}.YNuLHe .VfPpkd-cnG4Wd{color:#001d35}.YhdgGb{max-width:400px}.uhELY{margin-left:8px;margin-right:8px}.YNuLHe .uhELY,.YNuLHe .K2cW4e{margin-bottom:16px}sentinel{}");.this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.rka=_.z("sQ8PT",[_.cp,_.Ff,_.oo]);.var $ra=function(a,b,c){a.wb(qW,"uwif9c","button",b,c,Zra)},Zra=function(a,b){var c=b.id,d=b.pN,e=b.label,f=b.icon,g=b.ariaLabel,h=b.Hh,l=b.Gb,m=b.jsname,p=b.isActive;p=void 0===p?!1:p;var r=b.indicator,t=b.MQ,v=b.Ka,x=b.jR,w=b.UK;b=b.attributes;a.open("button","uwif9c");a.T(asa\|\|(asa=["role","tab","jsshadow",""]));a.attr("class",v);a.attr("aria-selected",p?"true":"false");g&&a.attr("aria-label",g);h&&a.attr("aria-labelledby",h);a.attr("tabinde

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (717), with no line terminators
Category:	downloaded
Size (bytes):	717
Entropy (8bit):	5.215358610968562
Encrypted:	false
SSDEEP:	12:4WsYAWsYQL8usBtMuscKLtMustxtMusRtMus/iRZtMusOtMusMtMusWtMusYZtM+:4WstWs/5sdscKsttsNs/y1sysgsasY1j
MD5:	B1747EB32D46BF927EA9425C762827DA
SHA1:	D32C7A48C452A86C96C24A0F94F7AB94DAA3DEA6
SHA-256:	6BDDBEA96AE7D7850098409608BB9294BB61828E9DCE9DDEC568D4E97B51F61A
SHA-512:	96B5C18C5A39B6A481F49951875CFD40E7FC2A571553FF01A9EDA69C7F80358A5513C888E24D28892BE779BCF9B573C137052510CEE24E332B37AA1DBF209C8A
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=https%3A%2F%2Fy&_=1704923497016
Preview:	jQuery34109376985483024884_1704923497005 && jQuery34109376985483024884_1704923497005(["https://y",[["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/exeixdkq4ks",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/fgyajd9-fhu",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]],["https://youtu.be/ucv-2x5bxkw",0,[512]],["https://youtu.be/byuzdnchuy4",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://trck.t-y-p.site/pixel/v?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54212)
Category:	downloaded
Size (bytes):	70738
Entropy (8bit):	5.6793266453777616
Encrypted:	false
SSDEEP:	1536:mueQ8xCKDGp5E9YJ3fj5lLoYZycwu6wQZhcDlWcLsUH:feqp5E9YJ3r5touycwuxwhcrLsUH
MD5:	23337C21134CB2979E1BD7B2187234AF
SHA1:	7AF9A8FA855552FF0DC3070A01255BCD88868031
SHA-256:	527D5E3DE36BCD6A2DE9647B08639A52A4C9805631A2CD9E1D34B0AD643F08DF
SHA-512:	8D0AE5A117D3B246B179852C627BCA28E7BFE22D95FA8D675B683D360D3E0651A92C466038B33775BEC864BB982178ED1D14CA733BF5969ED2A0F4B7A6ED5E94
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/convert/
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<meta name="robots" content="index,follow" />.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title>YTMP4 - Youtube to Mp4 converter Online Tool [100% Working]</title>.<meta name="description" content="Our YTMP4 is a free Youtube to mp4 converter or YT to mp4 online tool. you can convert and download youtube videos to mp4. It's totally free and 100% working.">.<meta content="width=device-width, initial-scale=1" name="viewport" />.<link rel="icon" href="/images/YTMP3.svg" sizes="any" type="image/svg+xml" />.<link rel="stylesheet" type="text/css" href="/css/custome.css?ver=233">.<link rel="canonical" href="https://www-ytmp4.com/convert/">.<link rel="alternate" hreflang="en" href="https://www-ytmp4.com">.<link rel="alternate" hreflang="fr" href="https://www-ytmp4.com/fr/">.<link rel="alternate" hreflang="th" href="https://www-ytmp4.com/th/">.<link rel="alternate" hreflang="id" href="http

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.6042015135302385
Encrypted:	false
SSDEEP:	3:YCMxvOUmVR0oQA3E/WjVxXMcYU:YCM5OUiR0N7eHcXU
MD5:	71059E9DD759864825E3ED6700DEA741
SHA1:	15D405FB6AB488C1DE764808CB88FEFFA95AF66B
SHA-256:	FF1B5EA96EA9A4D300E12BA7C27919DCFD376112786442E5D8861EE454DEADF2
SHA-512:	981F046883D68D1DE01A23677224EFD4532C808B7F9C910FABA0B3FD30255022FFFA698B6376B8527A8407068B4742603F13B06B61A7BDE4D303106578CA1583
Malicious:	false
Reputation:	low
Preview:	{"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65523)
Category:	downloaded
Size (bytes):	412676
Entropy (8bit):	5.3798336698854765
Encrypted:	false
SSDEEP:	3072:yADp9HKTJCFPcmdbD/EWoHDZfHVl683MX0vC0bS5nrxPFbIL7oX:Bz7dK/3xvpuZrvfX
MD5:	E335415A278A61AFF9C27644C08B256A
SHA1:	F6678898CFD770AE431EE6D2E08DC03799D317D0
SHA-256:	8DFC2108F0D4E1FB6254D5F75C2049BF46B32B1EF249F247D058F56458A503E6
SHA-512:	DB1ADAB54818303BBC8AE937F24E5F62FCB8BBBDD33D289A12D7EAB2711C36E274C7BDD8CD990A9E8B7B3ED5D9B2F82CFE1CF039441E967A43F2A42FC1A36297
Malicious:	false
Reputation:	low
URL:	https://cameesse.net/27/7ba4c9bd2293ad818049e8eac1f6be0a
Preview:	(function(){.(function(__$){!function(t){var e=__$.__$();function n(r){if(e[r])return e[r][__$.B];var o=e[r]=__$.__$(__$.a,r,__$.c,!__$.G,__$.B,__$.__$());return t[r][__$.D](o[__$.B],o,o[__$.B],n),o.l=!__$.F,o[__$.B];}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object[__$.b](t,e,__$.__$(__$.m,!__$.F,__$.o,r));},n.r=function(t){__$.I!=typeof Symbol&&Symbol[__$.n]&&Object[__$.b](t,Symbol[__$.n],__$.__$(__$.l,__$.p)),Object[__$.b](t,__$.e,__$.__$(__$.l,!__$.F));},n.t=function(t,e){if(__$.G&e&&(t=n(t)),__$.E&e)return t;if(__$.J&e&&__$.j==typeof t&&t&&t[__$.e])return t;var r=Object[__$.f](null);if(n.r(r),Object[__$.b](r,__$.g,__$.__$(__$.m,!__$.F,__$.l,t)),__$.H&e&&__$.i!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e];}[__$.q](null,o));return r;},n.n=function(t){var e=t&&t[__$.e]?function(){return t[__$.g];}:function(){return t;};return n.d(e,__$.k,e),e;},n.o=function(t,e){return Object[__$.d][__$.h][__$.D](t,e);},n.p=__$.A,n(n.s=__$.C);}([function(t,e,n){function r(t){return(r=__$.I

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	3920
Entropy (8bit):	7.77003650898938
Encrypted:	false
SSDEEP:	96:wGlgOH8QjZrbT+wEmPGlX1fEK7ceTMQwfpsHtAz3D:KIZrfzTGbEKlTMQwf2yz3D
MD5:	9A68CC349A31069DC14B6B1BB67A9DC2
SHA1:	26D913B5AA2C300BCFA641E51718D70E53632B67
SHA-256:	51F48FA16FB3981DFBFDFD02FCC38A901A27A1F5178BD3858463F32AD5DC2F2C
SHA-512:	D830EB25FBFCB3D669ABB00BBF50EB854B9EC6ACC4C5A20D80FF395AA890A0957ACE1431BB5EAF35B0419D28C7AEC54AA904606231B093BAB041E85DC05E8D03
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/vwopEAGNrWI/mqdefault.jpg
Preview:	......JFIF...................................................+%..(...%5%4-/222."8=71=+12/.........../...////;/////0////////;/;0/0///////////;/////////////........@..".......................................E........................!.1A.."Qaq.#24......rs...$%35BRb......Cct................................(....................1.!..2A.aq.".3Q...............?...........$.H.s....ok.L...H.~...S..fe..M.0.........`..!.....T~I.\|........go..3..M8...p=Q...W.2i.1S,.^Yl.b,z.4..3jp..M<.C...k..2........\|....MD.."..@.E...A.. .k...(.... A .....(I..7<...7..i..$}?..\|).....g.OX..=..f<.-p..9.^...]i?....r\.~K.....Go..&Zr..z.cA.........E3..T[0s<....9}....$Lc'j.Mg.>Db....j..dI.".r..............H......@..ny#.C..\|).cs....ok.LQ.....4.dT....(...~....?(O.a~....\|g-8.3.1....}.^~.....nd9.S..3...R....O......?...?1...v..RH.... ........N.86.......P&............7..h.Q-..k..[O..yo.d....*...i7,..E.....`...)U........;....l\9....R.Z..&....7.ecS?M.f>..V...,.I,5D..".....}...#9...M^-^...

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	735
Entropy (8bit):	4.90431584269588
Encrypted:	false
SSDEEP:	12:hYyZ2NUaZLCWG0Xi5HjgVWNsg7wYxIfyaguB6Lh7oM/Q/LaRV4IQL:hYycf2WG0Xi5DgKsmkfpgU6LqMOORV4j
MD5:	BE331C79359BEE710B1B66B2A2179746
SHA1:	E00219DFA724CD553A97E0A40146A1FD5999541F
SHA-256:	12F809430D9908DA8663E3A0856F3523B58D9184D8FE743226117C0BD3DC4BDD
SHA-512:	9D2681A6C8E4DF167E44837F93461EB34FD4C26E9EDCB20245128AEE6E6B52F5B3B031BAE6B36DBEE5860EB7241A949D42D7AE3C83420E4A612B087428D3C6C0
Malicious:	false
Reputation:	low
URL:	https://t-y-p.site/ty/video_downloader
Preview:	<!DOCTYPE html>.<html>.<head>. <link href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700" rel="stylesheet">. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>Thank you page</title>. <link rel="stylesheet" href="/static/style.css">.</head>.<body>. <div id='container'>. <div id = "main_block">. <section id="promo-head"> . <div>. Thank you for installing the Video Downloader </div>. </section>. </div>. </div>. <script>. window.product = 'video_downloader';. </script>. <script src="/static/scripts.js"></script>.</body>.</html>.

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 48x48, components 3
Category:	downloaded
Size (bytes):	2000
Entropy (8bit):	7.690073487765644
Encrypted:	false
SSDEEP:	48:U8Ezi8166AAQcJF76ntGS4JRAkgnzn4bjaH8:Ke76AbU0n4Sy2kj48
MD5:	CE5186DD512E4B0393657CCFFC5A734F
SHA1:	B01483B14EE1614CAE92C658DFE3861038398B95
SHA-256:	3CDC5F4B71B3B09EBB5BEE7AFF8CD79252C4FD13A3030A551D00F6147B5A6931
SHA-512:	1F05E4D0EB30F499660C81BEC0D35D591C529716635F1AFB7051790B8F65DECDA41D1EA4964FAD01E98B4A23A48A1702BFFCCBAA15E9D2AFF597C60FDE091473
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/a-/ALV-UjVALLA0UFG505w94odPuKiSx0lMN9-g3gh2_ykUwU6oXQ=s48-w48-h48
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................0.0.........................................3..........................!..."1A.CQ..qr.#%2Ra............................................................!1..Qa"Aq..2...#3...............?...Ie.....V.K/s.B...3..D......?..^.Z}*-2.ABq..u.....<5+#.g..I.f.l.....b\|<,a@k...i..\|....d.yE..;...U..9L...iG\|..W.IT.a.N...h%..l.3..\b[+.&#...,\0..g...9w.Y....zu[^..z...P.\.W......>%..C.r.(..%).!![A.m....a4q;b]d.....v.w^...S.8P..Xg5.C.5.[.\Y.Kh?.,.sU..6..gpV...v..Y......k..gT..9.5.%......_el....!.....r.........&...i......J.Z.......tC. ....T...rr8...M.<a...i.o.vZ$%^..K^.P..M.....,\|.e'..>...b.#Aj.&..8..w.Y_._Q.....(...[.)u..a..>@......oV.,nq(.-..5..2.,..\...Mh:...H.h.i.<..+..../....R..$.A..orX..}.....88:.NVZ..$.<......qW\q.)..b@an......$..!..U....:X.5.E..o.kM..2'.=+c..M

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	3333
Entropy (8bit):	7.929280439505556
Encrypted:	false
SSDEEP:	96:aDbkBoxS+8xbgAD5jdrco3b9wY7d/Mrb2lz:aHkBok3Z5gQMrbwz
MD5:	6B3187935CCEDE37FD0D514DBE167125
SHA1:	0F3D50A2DFA32DF5E59105B27F02ECD15F8B3D62
SHA-256:	ADEA2B373B486BAD96DECC3771B9A814339F4604976FBDA4DD92D59C731C62A7
SHA-512:	408A08DC6D580FB73E301F02E24B31CD1695C3FA4A62031C18BB71FDFDED97028070DB1539A015DF1E6EAABEF4E5BF342D732815F1CADE2E163F2DCAD71CB214
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/9l-v5C9T1MXzSVCMjgDN7WLsq6NMpOJ3HfroWTF16sePly4Ny8U1W1xu_1khwxf85UA1sARCJRHgr-82jwBbF_A7=s60
Preview:	.PNG........IHDR...<...<.......N%....sBIT.....O.....IDATh..Zkp[.u.v...H.!..)..(..b5z.$.d=..u..u..z.8..vl..I..I.v....\e...G.-96..).^.D..-.$AR..$@.....<H. .KO.....{.={...o..5...b.8......\.."&..Y........Q......>Cc...S.g.8g...7J........J.......3.%mP.I.10....`...M... o.....a....E.i....H;9...R.S_S..I=.....7...h^.0..6......Vk.<..&.s....3C....<..M...NN..x.....[.2]..q.....Z....~R...M3....'.....3Y...3...x....F..dl.W.....j.5m.2.)..j..[.D...U".....6....$.......i[&..............b.`X_...3....a:r.... ..(...4.,dG(K<...^...r..r`P.V.h...<.i..LPL:W...e..9.T1....#.w.YO.b........6....R....'ju`.Fk....){5\Tw....NBr.a.4<..P=....R...Uw{.s.a....?..._EA.u.LA..($.N.....^.8D....Gm..~..3<....*.5..;N.......<..LH3....3(....<.....Sr..R%....../..3........)?.y...h(....]..m.e..)3.L _.t.j. .....O...L<.....c.UU.......o..6..........,..<..P...h..L.d.....wu......3...V.Z+......?..H..%.CC...p.KM....u. ..z2i.'....=;.7...y4D.emIUY.J..:.DC...f..ra..<.I.7GG..u..F!........Q......z..........

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	9123
Entropy (8bit):	7.946132975922535
Encrypted:	false
SSDEEP:	192:bpnIGfrQnwrTdZnqTt+rHB8zC3i2Cipzd3ctz8s/gXxGSWO35WNqrMc:bCQlrXqZ+rHt3i4pzd3cysAGSWOpWNER
MD5:	E036C9B8B4B7EE74C1121989E6A8DA45
SHA1:	01FEE7B3BEC9DB687A40E98D0E2FB77536F92992
SHA-256:	FE2F65587A8909A13569F0A615DE10EB7C91D41A7A48C8720D46D0B3600593A5
SHA-512:	F216313F3C96E5FB96D2ABF8A94977CE6E928968E3331791AA2DBEB402159CEF53F8B76FA8DBB9345765440F46716E7EA6D828A1BF5BB753C1FEF2FAD19FDB49
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8?70=+12/.........../...//////////////////////////////////////////////////........@..".......................................H........................!.1A"Q..a..q..2BR...#3..b...CTrt....Dcds.....$..............................#.....................!1..A2Q...".............?..H.U....\|..R2.c...\|k...M...o....Q....A.:Y..W..$....1.<.25K.d..76p....9$`k. ..)[...\..K.E..>pw..3...q.h.......q.=/.f.]+......s....F.e.W2..b..g.......7\..G.:.+..GA.R........._...4.....@.......qt.......Dn...b..O.y.H.L.\....G...r.Y.yG....t..........Q.^;...X^.).\.Q\|B.{X.4x.........3^....DQ.Q...u..i....~..7....\|...... ...o.j...,h(..D..Z.<Q......oI...'...V3f.K..d.....2.n>%.``~................+]....#..:l..'...GY..e..aY..?..X..o.A.@O.:-8.sXT.SUg. ...:P.........PZ...9..p.y............^8.'.....l......}.q....8.].9{dtQ...l..,A.XP....+.....l...C^.......S......_.f.X..j.h.+..O.5.C<..5E.=.....m....G(.Tp..`..C...

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	53472
Entropy (8bit):	7.973137567408234
Encrypted:	false
SSDEEP:	768:Io4QO4uJN+eL6L+NBnJPLBg1Y1r6NrOViTNV15OWwk10JSACYo4J44Kn1FR5XL:IrQhupcyB9H1r6N5NfG3yYJUFP
MD5:	79E35A7CC99858CA5E078BA86E64E13D
SHA1:	83A654FEF8ED228E595386B451804EC1666EAB2A
SHA-256:	BE88718A0EB175EBC4385600FE4168853A2BA705D814D2F9887CA7AA8CBD9238
SHA-512:	6507AE0218A982E61BAE012E1A5F7F26C701A5179D7660D02B074F903A4697DD9AD4CC4C46E1357261B8CAFE062E614AD30DFCDF772D9CEB1235EA63A66F9656
Malicious:	false
Reputation:	low
URL:	https://interstitial-08.com/contents/s/2d/3f/7f/35d1f144fa688a67ba834d0931/0100657458245.jpeg
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................R.........................!1A..Qa."q.2....#B...Rb.r....$3Cs...4c...EU...%&Seu....................................-........................!1AQ..."a2q....BR..............?..M..+.g8Z.+..L..4.(...L....Y.%.8.....[..<.y..........77H..3Y.._s.\.[........f ..^r$....3^6.....R...;..]....).>....)....~.K.4...^.......Ez ..D.~..%.1,p....)....T.Yu.M...i.n......H..'.~..Y....waoj..5....4xb.,d..b.E....qx!k.%..(..F....@.+.N..i....X....T.Y4..J..,...f.L.1.3.........)......z...R=.B..c.q0...ZO.J.X-;~Q...M.5..ua..8...K.x..U.iP....885n........`.V#..W?.o...S'..i_$..,j.'B.B...-..(..r.].09...B..+...(...WhP.(WqC....(P..s................\".B....Q..G(P"..r.v..r..P..B....+.j..\P.W1@...Wq]...(.(..(.b.....(b...]...uB.U\|W{:j6....D...T....s..9..o#WF...Q^KV(VY.x.{......b.[.,..a...`..Z

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	203
Entropy (8bit):	5.511512372113036
Encrypted:	false
SSDEEP:	6:YWyb5LquTkQKtLsUN4wxiNUJ3w5hGikufhVG:YWyb5Gug7tLsy4rBthVG
MD5:	94CCFD1FAA33571E790EDE8BC36969CA
SHA1:	1F079BC973D899660EE991AA77B98690CF18A067
SHA-256:	C8539CD42A184C31CC7E44FEEC65127E49CF46DCBD6E09374B4E367B86AC5BE4
SHA-512:	B32C068AF9E3A1D5ED2113AD336221B647FB3C641DC1A5285263E2BCDE35EFBEA192CB2D9C8A05424ACE101D71CEC0EFF6C0569670E71AC45039400514880776
Malicious:	false
Reputation:	low
URL:	https://opmetapodor.com/key?pub=0&id=opmetapodor.com
Preview:	{"status":true,"code":"key","message":"","trace_id":"069f5c32-dc63-39bf-8640-4560f7b55b21","id":788083639,"key":"BO96oIT2V22W3R9bWEEDb-1yojv_306_YT6lTZU7tavvN6oyEP-4hQsOWX4OQN_IKN78tn1ynUqFhOS4sHyFNoA"}.

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (721), with no line terminators
Category:	downloaded
Size (bytes):	721
Entropy (8bit):	5.205631273690183
Encrypted:	false
SSDEEP:	12:4WszWsaugJL8usBtMuscKLtMustxtMusRtMus/iRZtMusOtMusMtMusYZtMusSZZ:4WszWsvML5sdscKsttsNs/y1sysgsY1p
MD5:	23C9AE3084FFA9C93CC533C7F4AACD0D
SHA1:	5745FB13445331D5E218C14E5417EBE7B3325FC4
SHA-256:	810C8E467D1A90CBA8083E41403259E43D0791904130B386883AE272927EEE06
SHA-512:	2B21FF6DEDC0EAB2567694A0CB82ABFB51F945A15DEB24582A7B45BBB891D134A7771327C9AC06A6A5DE72660D057AAE0E25F1285344891988CBC82D3D2D4E9B
Malicious:	false
Reputation:	low
URL:	https://suggestqueries.google.com/complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2Fyoutu&_=1704923497020
Preview:	jQuery34109376985483024884_1704923497014 && jQuery34109376985483024884_1704923497014(["https://youtu",[["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorltxm",0,[512]],["https://youtu.be/tt-xo_7rqt4",0,[512]],["https://youtu.be/zoewp3f47ws",0,[512]],["https://youtu.be/9ha2s_m10zs",0,[512]],["https://youtu.be/vlv16prlkfs",0,[512]],["https://youtu.be/tfoispqzbzq",0,[512]],["https://youtu.be/dhicvn_jiwc",0,[512]],["https://youtu.be/ucv-2x5bxkw",0,[512]],["https://youtu.be/byuzdnchuy4",0,[512]],["https://youtu.be/efo9fgvnyn8",0,[512]],["https://youtu.be/tksxiobgax0",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 800, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	404185
Entropy (8bit):	7.990034240099091
Encrypted:	true
SSDEEP:	12288:sC8Yep5xtCaushc0AlmwPDlKRXJHD7kFgs:OYed8arlAlrkXJj7kH
MD5:	9CF72BC608E11A2F9D83F8C14EFF0073
SHA1:	AFCF06CE5CB05BD7BAA872E939E4F274BDD71A05
SHA-256:	88F17B140758B25359D06C41A1E1CD21946FA15FBA91DF023A48C6C0A4FF4A2B
SHA-512:	D3394A4387A1D66FDA7A0FDAE756714B9A8167815A262C8C71DA66BF47DA30E10FF1B78EE10FB36DED76495835B15B0908F37783F80B4765C9F3F3FAB53E3E56
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/xCyFHoc8SX7ZhIR6-2qPnWc1PMInoh_k9hIdClmdr3VOLiXQsE1cE_yQEkUIPPUJzpzyfGCd-AYgwIsQ4NQnJZP1=s1280-w1280-h800
Preview:	.PNG........IHDR....... .....\|.......pHYs.................sRGB.........gAMA......a...nIDATx..]...E.>{.{/....@..B....$..T.""...."vAA.....KQ...{/..BH...W..sfw.{.9.{_I.{9_x.-3g..3.... ..BQ..?~<.w.y.P(./.q.Q.._.z...xy..4.1.........G....BH_.^V~h...\|.....u..T.<..\8....._(..T....t...'o..#...Y=;..^.3z..F^...;......K.Z.....]...5..CM...sG......z.....P....dq2.P..2d.v..$.w.^^...C.{......1a..P(...jy.....K.Q....O...W!9.hT.q..+7.......K..~\|K.C!.....!.t.e.2>i...D....d..T...P..<...Z...u.Zk..D...B(...i.Z._....Q9y.d.I......j....v9....k...9.....%.di..}....K..e.e[Iu..n.v(=[8.....]%yN.T..x..%(..P.9V[m5.7n.(....Y.......h....8...XR....$.)'..A......:-!OYS.%...Z..`.d.4i...9#....N....8yTgJj.!..2....8....v.~y......P{s2. .\.A.M'..g..zn."..0y...%..@..h...9......w'.............G.R[..a.....q.>.r.....t..sqh.PZ.n..2.k.t.s....J..u..;...E.A....8r..e.PY.A.E.P.S.......1..Cy..Q=..Y.y.k.qr.......N.o.s2...........In...i.c.W?.M[B.........j._....P.P\|)L.Y..L..?'+.lz/..:

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	80510
Entropy (8bit):	4.782228416772914
Encrypted:	false
SSDEEP:	768:Uqnm8OAL1Mzocm4KyH2CuwZwmij34k4RDl8Ibgo:JOocm4FuwZ5ijINRDl8o
MD5:	79877FB82DE8CA50845081E3C9A201C5
SHA1:	4F6EA69C0E03431FFA1A097A45453B5B3B246D8B
SHA-256:	AF35CC6ABA34E5005DE77099DFA72D4C1A7715D28DDCEC343F48031DC8CB08BC
SHA-512:	A0AC6C78D553964668B515BE45822F1DACBE616E0C7C341526A156CBD67D6E495A160EB15858F30F2C7501571684380B0B797510A00BD0074A7E894ABE75DB15
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css
Preview:	@font-face {. font-family: "bootstrap-icons";. src: url("./fonts/bootstrap-icons.woff2?524846017b983fc8ded9325d94ed40f3") format("woff2"),.url("./fonts/bootstrap-icons.woff?524846017b983fc8ded9325d94ed40f3") format("woff");.}...bi::before,.[class^="bi-"]::before,.[class*=" bi-"]::before {. display: inline-block;. font-family: bootstrap-icons !important;. font-style: normal;. font-weight: normal !important;. font-variant: normal;. text-transform: none;. line-height: 1;. vertical-align: -.125em;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}...bi-123::before { content: "\f67f"; }..bi-alarm-fill::before { content: "\f101"; }..bi-alarm::before { content: "\f102"; }..bi-align-bottom::before { content: "\f103"; }..bi-align-center::before { content: "\f104"; }..bi-align-end::before { content: "\f105"; }..bi-align-middle::before { content: "\f106"; }..bi-align-start::before { content: "\f107"; }..bi-align-top::before { content: "\f108"; }..bi-alt::befo

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.6042015135302385
Encrypted:	false
SSDEEP:	3:YCMxvOUmVR0oQA3E/WjVxXMcYU:YCM5OUiR0N7eHcXU
MD5:	71059E9DD759864825E3ED6700DEA741
SHA1:	15D405FB6AB488C1DE764808CB88FEFFA95AF66B
SHA-256:	FF1B5EA96EA9A4D300E12BA7C27919DCFD376112786442E5D8861EE454DEADF2
SHA-512:	981F046883D68D1DE01A23677224EFD4532C808B7F9C910FABA0B3FD30255022FFFA698B6376B8527A8407068B4742603F13B06B61A7BDE4D303106578CA1583
Malicious:	false
Reputation:	low
Preview:	{"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}.

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39124, version 1.0
Category:	downloaded
Size (bytes):	39124
Entropy (8bit):	7.994814808109655
Encrypted:	true
SSDEEP:	768:usTP6aNC1fdVoOCiqMR4+H42dLoPZsn578cLtxtQcvA7mQ7RHl:usTS/eDgR4u4IM+TJvUqQ7
MD5:	86B73AB5F530BE7984B704414F2A711D
SHA1:	8E297794ED7B6F5EA476D14B5270DF12E8F3E42A
SHA-256:	1A48B70F97555C13F84B8F088A417F9179D99B5101250819350ACAF6E91BB92F
SHA-512:	468F8D4AE9419CACDF913FBA2DA37055E3469D935D7B7B362717CF17D2C4C27882EA3BB34510273312DD80DC2DEA05775CE65BC3F9D1048F50AAD4B27E8188AC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2
Preview:	wOF2..............R...._.............................d...?HVAR.X.`?STAT.'2..2/t........J..L.0...6.$.... .....%..[.;Q#...K.!.tU...<..ap...............f.....%q.H..n?(.3k.i..=..@.H..".&1..3+i...(..B.....)........P-.7........d. 5.:..\\E.x;).6.T..HXx...g...1.\|yV.....U.....$.d!XH.]..4.U..,.....N....4...[._.i...k [.......=....Y@..vB..;.z...\.T\|$..(....?..dp..'...j.....l.-3...`.....{D. ....&.3<?...m.FM#&..jc.7.$m.z.'zP.6.&...3a.q..6as6f..ns..a5.F..J.Y5.HlD.."./...F.,D.w...J.....R^.C..=.....i.............s..d5.HLDv..o`..K..?...=...-../....Z.n..]...........~.MK.Y_....T..5...D..).....O...B'..iP.M.@k .H.z2..........o?.B..zk4z.......HGz......-.....G.:(..2.......oN_tg.zB=c.;. * _.]........`.J.^O...\2xiq...U..''.\......d....#....I:..W&..J..W.0W."....{..#.?z...V...T...j]..>.9...^......v..+m.G..{j.h...R.P..H.@.z.85(...F.. (..K.@.&i.6..H....J;...1....1..u.{..[.IU..DQ.w/............O.f.l..6..?.d....Qk_.eLE..my.A.`.U...`f.\AX"..3..'m..O.....Q.j....4-...............ml

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	3265
Entropy (8bit):	7.760769294697369
Encrypted:	false
SSDEEP:	96:/2aMLwyfcG4xydL8CK83ZLjdbc2RFBXCsLNpDaW:+asfcG4+53BhPn
MD5:	7C041D06D7CB22753C95DBB86B81803D
SHA1:	030D055519932A45F0ED676103A04C820828919B
SHA-256:	E6326A3E2BD1E36F6B88AB93C3908AF743B89BF9597E46DAF66F0DD6E20B6D46
SHA-512:	6617BCD468F387D527EF1F1B2E6837DF84F68370402155FB0DA7FA5C9FB0CA9695B5339261F0B36FA53FD7138D209EB2F031130BEA43D6C8D7A0C8CAD60ACF27
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/pTLtzDe0_9E/mqdefault.jpg
Preview:	......JFIF.................................................. +#..(...$5&(-/223."8=70<+12/.........../...////////////////////////////////////////////////<;........@..".......................................?........................!1.."2AQaq......#Sb.....3BR.$4Tr...................................#......................1.!a.2Aq..Q............?...bC96Bc$)#D..EC.....12........_....~...,J..................;Ey....sR.y.#....Z.\.2/1....6...Nfr.&K5.C...Xi.gjRf.d$h..#P.39.i.X&Q......U".f\B(.Q,.Bc.-1...e_...ML.._...r...............oI..2..-3.z1.e.d.bb..2F."H.Y4Kf..H.Ap.$&VV.JFh..+E".2Q4H.LQW3Lf...-..\..."..4%......a..U.E.2E.5..}I].wpJy.4..y.m.M.mu.O!.}\........rG....YB....._]m...3...+)F3..o......u...2[.\|G.....q......rG._...2..7.?....B..?..p}..{...v..:..&{f.......e}..\...`8j...n2...p..x1.......j.mw...........).].........z................2...].N._c.L..5..qn...R.Vn.Q...O..1.KT..)#..E...M/..D..r....B.."F.$g$n.....&R...@...,.....M"04.F.Z...R..4H...D......@...h...2X..h..D....'

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9497), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	16999
Entropy (8bit):	5.959572442842468
Encrypted:	false
SSDEEP:	384:EcAvn8RgwC8MRaWqjgPPRCOP1wZ/Gdc9cNIGje:VAvnqgwC8uCOPyZ/Uc9cN+
MD5:	BCBD33A77F575B9EA4C05A6F542BBE4E
SHA1:	5952794A8B77C717EA9436FF912D71548DA170F4
SHA-256:	FB2D1FE3818D9B7B8F08B778B35C275F703D9C87E43468B8F1C3B026C742A0BE
SHA-512:	BFB804ED8C73C2AFC7EA82436DA3F2C0E2CD220BE77AE52C30BB09CFC89DD89ACE8A15B53BD7B8CEA10A1F2CF91780E262327ECBBC8ECC801CA42205B3C7586C
Malicious:	false
Reputation:	low
URL:	https://understandingerrors.com/landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages.
Preview:	<!doctype html>.<html lang="en" class="h-100">.<head>.<meta charset="utf-8">.<meta name="viewport" content="width=device-width, initial-scale=1">.<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC" crossorigin="anonymous">.<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css">.<style>body{background:#f9f9f9 url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABaAAAAQACAMAAAAgFQ6gAAAAYFBMVEUAAAD5+fn6+vr5+fn39/f6+vr5+fn////5+fnv7+/i4uL////Hx8fz8/P19fXx8fHn5+f4+PjV1dX29vbg4ODl5eXt7e3d3d3Pz8/s7OzT09Pa2trKysr39/fp6enZ2dmVvO3UAAAACHRSTlMAady/IJ9/EL3PPagAABpuSURBVHja7NQxAQAADMOgnfOvuDZygAjuAUgSNECUoAGiBA0QJWiAKEEDRAkaIErQAFGCBogSNECUoAGiBA0QJWiAKEEDRAkaIErQAFGCBogSNECUoAGiBA0QJWiAKEEDRAkaIErQAFGCBogSNECUoAGiBA0QJWiAKEEDRAkaIErQAFGCBogSNECUoAGiBA0QJWiAKEEDRAkaIErQAFGCBogSNECUoBm79Y6CQBBEUTStFsYPI2buf5ti2goVDbyhz6n

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://my.rtmark.net/img.gif?f=merge&userId=efe83b1130104efea0d475e2cb75464f&z=6118780&p_rid=3c4d337a-df6e-44ea-a68b-8262067700eb&p_src=sf
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 438 x 76, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	28527
Entropy (8bit):	5.230845187767531
Encrypted:	false
SSDEEP:	384:Z50w6iKwh5gVfDeKZOOzNelTAMTQFfz57W3OZ:r8isVfDeGq4FfzFW3q
MD5:	7E3028AA1C664DAFBB6E7D771F1C68CA
SHA1:	663519D6441D284FA385666C2AAC590F5DBCC116
SHA-256:	D1EB8CF889202F439BB6BD1A03049B2E71953C7C0A5AADDDDE498CBEA9BCADAC
SHA-512:	648D466F43354C1C02B8C813ACAA61FD341E284C2827D5D6A62FA045DA63133C4F2F056EB3CF3836BC6E9025FA2B19CB1685BEA32EA2E5DAD815831CA69FF8F0
Malicious:	false
Reputation:	low
URL:	https://littlecdn.com/interstital/templates/inapp/Players/_gen-carousel-3d/images/player.png
Preview:	.PNG........IHDR.......L.....vp.-....pHYs................MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	6454
Entropy (8bit):	7.933697319439295
Encrypted:	false
SSDEEP:	96:Vp6YgwcpV7gHEpVk6Q+TZtUZzXSr8CjQMhiXf4Vwn56gv9WCLsMIIluAhI4Q46+0:yjVWGTzTDaDAQJXf55rLsMtl9lW1G1Qj
MD5:	E66C2821AA401176B1EE4F9AA7258F0B
SHA1:	866529859BBF2326B9A2F8C8D00F10811251BEDD
SHA-256:	EAED49BA8D05D91A1032D3AD514ADB02D5E00BE179B3F014AE09EFE6BD16EA19
SHA-512:	BD989CDD714E8B0F27EF9A007E3AB1BB766214877E39A2EE04B099E769231478B7B3A5F83DF51E9F8D4A0CC5AC9B5F1CF46A03B132DF5D7093CD58869613FD3E
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/4ev_Arx-tZU/mqdefault.jpg
Preview:	......JFIF...................................................+#..(...%5&(-/222."8=70<+12/.........../%"%////////////5////////////////////////;/0//////////........@..".......................................D......................!..1.AQ..."2aq......#B..$4RS.......3Cbs.%cr...............................0......................1!..A2aQq..."..3BRb....#............?......BC8.....up.. .UK..D....".R.. 3q..........u.:.O..!G..r...z..4.>.......cG.......j..F.n.>v.%3...E."..{w..0.y..u9#.%....TsG..h{.;5......`...S...V.i..)....x.E4B...T.<.z..7..'`i.WR0.!....#.E..JqLy#.eX...... ...>...F6.....mt......,U.r."......(...T..t.B..9.+Q..Tv9!Tt8.F.....0Q@..-Q...gN...\.WwO.... ..QE...V.P...!T.E!..%.......Z..R.. ..w..#..h.......:.T7.D.;.v..)a.p[=...gN.no.n.,.+Bh.c.1_d.?..9.jT....9ezl......Jd..3P...[U*6......H^P6.T.....".V...hq.A.n`.(.z...L./..=...s.hs..vZ...v..3h....o._...0.B..T.U.L......[.Kk.......&.x%;.<Ofv.....J...fp~.6dL..eW...........e../.L.j...5.iQy..s.v..]....9......J

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	5962
Entropy (8bit):	7.921735014218206
Encrypted:	false
SSDEEP:	96:tgrjwF+gQvlc6tpcAN4wm48/+Hxjmp7J627sNKGwSJ7RfBskufP:GQFlMc6t2AwWHKgNzhbBskCP
MD5:	43CD5098EB8EB12BC4375AAD152FA324
SHA1:	17FCA55FC145F881108C6233952710AC6D41E305
SHA-256:	4E9A14AECE369131FC37649F85C5E6CA2FED33FC44AD8A3FE000BAC9F2ED16CA
SHA-512:	778E434137926DD19C5D906E9ECEE517FB1AC1653FF39D997CEC901F802F2A7350B13325C64C9394EEE36879EFA52968BA8B341944CB947490A2265952B377EF
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////........@.."........................................D.........................!1..AQq"a.#2.......3Br.....4CR..5Sbs..$%c............................. .....................1.!.2A..Q............?..qB#1@.Qq.c..Zc.......DCX1....G.4.<........._.....~....3..B.5.....8......,l.V...8[.......?U.}{..J..\|&d...a...d.r.yg..O[W..fv...rc..........0.s.d.w...-K.z..x..R.<...K....f.an.....fxf..Y..l. .71...I+R......O.p$..;U^..E.nb....zf/_...\.csZ.;v.....-~..P..._'.........e..........k....Q.Z....Yq.Ic.u...{]..(....5..jMb..Gi.H`......1....m..p.vgpo...5..[......@S..)J.....h.lp...`.H.v.<...-...r9Z.....r${....w.;........Ei..Q....N...~\)$.........D.u..E..>m.RwN<Cx..L.HQ....,...\|.xE..}A..H..........%OM.......M~~.I&..:......H..I...>.....f".N.X..>.i.."R.(."q9....8RT).U.%H...#....#1@....8#o..-(........@@.`@..:.!.v.P.A...foT....Q.....

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2166
Entropy (8bit):	5.150894832429449
Encrypted:	false
SSDEEP:	48:kMNjSuNLQXDCYdLDCYtBS9cVr+ZqTfPTRhUvjC0ji:TjSulId3tMyVr+gfzU+0ji
MD5:	6438BA3E3BA572B9980F2E77291242DA
SHA1:	F1211E0697D2AD66DC8526C9EF01CD76A9266DD6
SHA-256:	440909253808CB9A64148077C8DF7D5436CB8573E85C6407DFB8B7A23872BA20
SHA-512:	A34FFB4E41D9B955CA0D72CEA2BDFEC6F0BF58BB38A05DED6CCF1E2841A5870990D291F6B0D790E5A9966B18FD4BB7B0D017550CD9FCB7FA284C9DC0915D81C2
Malicious:	false
Reputation:	low
URL:	https://v9.www-ytmp4.com/js/custome.js?ver=985289062
Preview:	jQuery(document).ready(function(){..$('.formate').click(function(){...$('.formate').removeClass("active");...$(this).addClass("active");...var format=$(this).text();...$('#formate').val(format);..});...$("#input").keyup(function(e){...var code = (e.keyCode \|\| e.which);...if(code == 37 \|\| code == 38 \|\| code == 39 \|\| code == 40) {....var index = $('.selected').index();....if(!index){.index = 0; }....$('#suggestion_list li').removeClass('selected');....switch (code){.... case 38: //up arrow key.... .var new_index = index - 1;.... .$('#suggestion_list li').eq(new_index).addClass('selected');.... .var new_query = $('#suggestion_list li.selected').text();.... .$('#input').val(new_query);..... .break;.... case 40: .//bottom arrow key.... .var new_index = index + 1;.... .$('#suggestion_list li').eq(new_index).addClass('selected');.... .var new_query = $('#suggestion_list li.selected').text();.... .$('#input').val(new_query);.... .break;..... }....} el

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	6281
Entropy (8bit):	7.937750195207032
Encrypted:	false
SSDEEP:	192:1sJlbHHJCce06dvIzlOz0uYcCCCFlUGYMuj8PZ:OJVHpCn06dwpOzzYfzlZYMuK
MD5:	C82360344CF47A555C06B790F88E817E
SHA1:	E539894D5E8D1B66B17B1C9570D9830177B01AC4
SHA-256:	3EED3CB4EDA8434AE92D16E2A63F09F097D0C79207CF4C0CCB67E4E3BA47A56A
SHA-512:	F20BDF55EB5285FC6A5BF783AAB8C198E987D201A739F1EEBC83FBFD80B127924FCED8E985BD492671A1CB1F058BA1F1AA532AFE3888F54827A080514774CB73
Malicious:	false
Reputation:	low
Preview:	......JFIF........................................................................................................................................................@.."........................................?.........................!1.AQ."2aq.......#BRr...$3b....t..................................&......................!.1..A.23Qa.."............?......C.uW#j...@.4.,...iI.Z....(w....mh).U`.:'....D..c].>...m.]q\..BW]-.Y.&e.Ke.A.).R.<#..rG9)Bx.....W..<...SN.kq..s.&...@......k.$.<.qbM../T...6g~.#3.....*........97Q.....nJ..n/}.i..)ksZ...C..`csr...k.8...d"Z.l\m.....5..K.O=k.=... }..d.Dv.a.apn.~..h.5...F.......8l..X......S....M2...'..:[.......v{F..kK...8......).F.My.m..a5..K..v.....cIqk.IN...U.c.R.....P.(..2.....N..R94.....E)Q..m.)...,;nX.m.E\.i.E7C...........rO....B..=6.....`.:..aj....B.%..-..P..BR..M. e.'.....c..2@.)V...8......S....kOKm.Z.5......F...,uC...Qc.......2...;..i.'Mz...C.w!m...B/......z:ry..3....z-...4n....h..[......4.gZ.}V...@F.....M.x...v....V`.E...

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2024 22:51:35.911885977 CET	192.168.2.16	1.1.1.1	0xce9d	Standard query (0)	v9.www-ytmp4.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:35.912081957 CET	192.168.2.16	1.1.1.1	0x4b2e	Standard query (0)	v9.www-ytmp4.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:35.928399086 CET	192.168.2.16	1.1.1.1	0x9d8f	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:35.928590059 CET	192.168.2.16	1.1.1.1	0xf705	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:35.929039001 CET	192.168.2.16	1.1.1.1	0x1708	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:35.929316044 CET	192.168.2.16	1.1.1.1	0xd753	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:36.252456903 CET	192.168.2.16	1.1.1.1	0xa0da	Standard query (0)	v9.www-ytmp4.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.252621889 CET	192.168.2.16	1.1.1.1	0x83d1	Standard query (0)	v9.www-ytmp4.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:37.552949905 CET	192.168.2.16	1.1.1.1	0x4e68	Standard query (0)	v9.www-ytmp4.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:37.553200960 CET	192.168.2.16	1.1.1.1	0x49bc	Standard query (0)	v9.www-ytmp4.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:40.361798048 CET	192.168.2.16	1.1.1.1	0xbe92	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:40.361931086 CET	192.168.2.16	1.1.1.1	0x57b2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:47.710442066 CET	192.168.2.16	1.1.1.1	0x2339	Standard query (0)	suggestqueries.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:47.710616112 CET	192.168.2.16	1.1.1.1	0xf154	Standard query (0)	suggestqueries.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:53.303865910 CET	192.168.2.16	1.1.1.1	0xc34e	Standard query (0)	vaikijie.net	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:53.304480076 CET	192.168.2.16	1.1.1.1	0x66cf	Standard query (0)	vaikijie.net	65	IN (0x0001)	false
Jan 10, 2024 22:51:53.313766956 CET	192.168.2.16	1.1.1.1	0xa7e1	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:53.314342022 CET	192.168.2.16	1.1.1.1	0x20a0	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:54.151492119 CET	192.168.2.16	1.1.1.1	0xd4b3	Standard query (0)	propeller-tracking.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.165575981 CET	192.168.2.16	1.1.1.1	0x94bd	Standard query (0)	propeller-tracking.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:54.166465998 CET	192.168.2.16	1.1.1.1	0xc11	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.166754961 CET	192.168.2.16	1.1.1.1	0x1e00	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Jan 10, 2024 22:51:54.208858013 CET	192.168.2.16	1.1.1.1	0x69f	Standard query (0)	ak.deephicy.net	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.209213972 CET	192.168.2.16	1.1.1.1	0xb596	Standard query (0)	ak.deephicy.net	65	IN (0x0001)	false
Jan 10, 2024 22:51:54.277579069 CET	192.168.2.16	1.1.1.1	0x812b	Standard query (0)	ak.deephicy.net	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.277981997 CET	192.168.2.16	1.1.1.1	0xc75f	Standard query (0)	ak.deephicy.net	65	IN (0x0001)	false
Jan 10, 2024 22:51:54.324042082 CET	192.168.2.16	1.1.1.1	0x1d42	Standard query (0)	app.www-y2mate.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.324292898 CET	192.168.2.16	1.1.1.1	0xfb90	Standard query (0)	app.www-y2mate.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:54.380119085 CET	192.168.2.16	1.1.1.1	0xe5ab	Standard query (0)	sr7pv7n5x.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.380527020 CET	192.168.2.16	1.1.1.1	0x4590	Standard query (0)	sr7pv7n5x.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:54.970801115 CET	192.168.2.16	1.1.1.1	0x8588	Standard query (0)	propeller-tracking.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.971330881 CET	192.168.2.16	1.1.1.1	0x7e15	Standard query (0)	propeller-tracking.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:54.973596096 CET	192.168.2.16	1.1.1.1	0x921b	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.974184036 CET	192.168.2.16	1.1.1.1	0x924c	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Jan 10, 2024 22:51:55.112647057 CET	192.168.2.16	1.1.1.1	0xc1fe	Standard query (0)	datatechone.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:55.113189936 CET	192.168.2.16	1.1.1.1	0x5dd4	Standard query (0)	datatechone.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:55.923729897 CET	192.168.2.16	1.1.1.1	0x2663	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:55.924109936 CET	192.168.2.16	1.1.1.1	0xdf76	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Jan 10, 2024 22:51:56.162117958 CET	192.168.2.16	1.1.1.1	0xa980	Standard query (0)	datatechone.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:56.162295103 CET	192.168.2.16	1.1.1.1	0xf187	Standard query (0)	datatechone.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:56.592262983 CET	192.168.2.16	1.1.1.1	0x901c	Standard query (0)	v2e81.bemobtrcks.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:56.592941046 CET	192.168.2.16	1.1.1.1	0xe233	Standard query (0)	v2e81.bemobtrcks.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:57.606405020 CET	192.168.2.16	1.1.1.1	0x453f	Standard query (0)	v2e81.bemobtrcks.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.838435888 CET	192.168.2.16	1.1.1.1	0x5f75	Standard query (0)	app.www-y2mate.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.838583946 CET	192.168.2.16	1.1.1.1	0x3ea3	Standard query (0)	app.www-y2mate.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:57.842155933 CET	192.168.2.16	1.1.1.1	0x53c3	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.842575073 CET	192.168.2.16	1.1.1.1	0x29da	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:58.128608942 CET	192.168.2.16	1.1.1.1	0x23e0	Standard query (0)	statuelikeazimuthsghostless.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.128819942 CET	192.168.2.16	1.1.1.1	0x7b69	Standard query (0)	statuelikeazimuthsghostless.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:58.383765936 CET	192.168.2.16	1.1.1.1	0x1da5	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.384090900 CET	192.168.2.16	1.1.1.1	0x715d	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jan 10, 2024 22:51:58.872419119 CET	192.168.2.16	1.1.1.1	0xac46	Standard query (0)	t-y-p.site	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.872735977 CET	192.168.2.16	1.1.1.1	0x2ee9	Standard query (0)	t-y-p.site	65	IN (0x0001)	false
Jan 10, 2024 22:51:59.762320042 CET	192.168.2.16	1.1.1.1	0xf523	Standard query (0)	trck.t-y-p.site	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:59.762684107 CET	192.168.2.16	1.1.1.1	0xb6d0	Standard query (0)	trck.t-y-p.site	65	IN (0x0001)	false
Jan 10, 2024 22:52:01.448180914 CET	192.168.2.16	1.1.1.1	0xc65f	Standard query (0)	chromewebstore.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:01.448709965 CET	192.168.2.16	1.1.1.1	0xf9d1	Standard query (0)	chromewebstore.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:01.471988916 CET	192.168.2.16	1.1.1.1	0x7f0a	Standard query (0)	trck.t-y-p.site	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:01.472120047 CET	192.168.2.16	1.1.1.1	0x1089	Standard query (0)	trck.t-y-p.site	65	IN (0x0001)	false
Jan 10, 2024 22:52:02.770972967 CET	192.168.2.16	1.1.1.1	0xfca9	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:02.771317005 CET	192.168.2.16	1.1.1.1	0x41ba	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:03.682486057 CET	192.168.2.16	1.1.1.1	0xeadc	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:03.682698011 CET	192.168.2.16	1.1.1.1	0x603c	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:04.845540047 CET	192.168.2.16	1.1.1.1	0xc7ed	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:04.850133896 CET	192.168.2.16	1.1.1.1	0x6332	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:06.249017954 CET	192.168.2.16	1.1.1.1	0x77	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:06.249373913 CET	192.168.2.16	1.1.1.1	0xa0d1	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:06.753251076 CET	192.168.2.16	1.1.1.1	0x8999	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:06.753349066 CET	192.168.2.16	1.1.1.1	0x83c1	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:09.007946014 CET	192.168.2.16	1.1.1.1	0xc58f	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:09.008367062 CET	192.168.2.16	1.1.1.1	0x6988	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:10.847795010 CET	192.168.2.16	1.1.1.1	0x1d56	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:10.847980976 CET	192.168.2.16	1.1.1.1	0x8d74	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:17.098301888 CET	192.168.2.16	1.1.1.1	0x3471	Standard query (0)	metrika.traff.space	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:17.098604918 CET	192.168.2.16	1.1.1.1	0x6c97	Standard query (0)	metrika.traff.space	65	IN (0x0001)	false
Jan 10, 2024 22:52:17.617482901 CET	192.168.2.16	1.1.1.1	0xa9fd	Standard query (0)	videodown.site	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:17.617820024 CET	192.168.2.16	1.1.1.1	0x3b50	Standard query (0)	videodown.site	65	IN (0x0001)	false
Jan 10, 2024 22:52:18.059257984 CET	192.168.2.16	1.1.1.1	0x2be	Standard query (0)	metrika.traff.space	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:18.059536934 CET	192.168.2.16	1.1.1.1	0xdc97	Standard query (0)	metrika.traff.space	65	IN (0x0001)	false
Jan 10, 2024 22:52:35.825395107 CET	192.168.2.16	1.1.1.1	0xfba	Standard query (0)	opmetapodor.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:35.825587988 CET	192.168.2.16	1.1.1.1	0x3d2a	Standard query (0)	opmetapodor.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:35.851942062 CET	192.168.2.16	1.1.1.1	0xb2cd	Standard query (0)	opmetapodor.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:35.852148056 CET	192.168.2.16	1.1.1.1	0x71fa	Standard query (0)	opmetapodor.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:36.121578932 CET	192.168.2.16	1.1.1.1	0x723d	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:36.121681929 CET	192.168.2.16	1.1.1.1	0x24cf	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:36.560518026 CET	192.168.2.16	1.1.1.1	0xf517	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:36.560518026 CET	192.168.2.16	1.1.1.1	0x984c	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Jan 10, 2024 22:52:36.944382906 CET	192.168.2.16	1.1.1.1	0x980c	Standard query (0)	arvigorothan.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:36.944588900 CET	192.168.2.16	1.1.1.1	0x2ad7	Standard query (0)	arvigorothan.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:36.945745945 CET	192.168.2.16	1.1.1.1	0xf7c9	Standard query (0)	dl--master--cdn.ytapis.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:36.946032047 CET	192.168.2.16	1.1.1.1	0x3127	Standard query (0)	dl--master--cdn.ytapis.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:37.069137096 CET	192.168.2.16	1.1.1.1	0xad53	Standard query (0)	doruffleton.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.069271088 CET	192.168.2.16	1.1.1.1	0x86cc	Standard query (0)	doruffleton.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:37.119684935 CET	192.168.2.16	1.1.1.1	0x2333	Standard query (0)	propeller-tracking.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.119921923 CET	192.168.2.16	1.1.1.1	0x4747	Standard query (0)	propeller-tracking.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:37.120650053 CET	192.168.2.16	1.1.1.1	0xcdd4	Standard query (0)	sr7pv7n5x.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.120836973 CET	192.168.2.16	1.1.1.1	0xeb56	Standard query (0)	sr7pv7n5x.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:37.134970903 CET	192.168.2.16	1.1.1.1	0x8c86	Standard query (0)	opmetapodor.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.135150909 CET	192.168.2.16	1.1.1.1	0x3767	Standard query (0)	opmetapodor.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:37.689049959 CET	192.168.2.16	1.1.1.1	0xb23a	Standard query (0)	piteevoo.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.689445972 CET	192.168.2.16	1.1.1.1	0x5ec1	Standard query (0)	piteevoo.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:37.971513033 CET	192.168.2.16	1.1.1.1	0x9b26	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.971847057 CET	192.168.2.16	1.1.1.1	0x6a77	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Jan 10, 2024 22:52:37.973031998 CET	192.168.2.16	1.1.1.1	0xc9fe	Standard query (0)	propeller-tracking.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.973460913 CET	192.168.2.16	1.1.1.1	0xfc98	Standard query (0)	propeller-tracking.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:37.979609966 CET	192.168.2.16	1.1.1.1	0x94a	Standard query (0)	doruffleton.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.979984999 CET	192.168.2.16	1.1.1.1	0x43e1	Standard query (0)	doruffleton.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:38.070059061 CET	192.168.2.16	1.1.1.1	0x9f98	Standard query (0)	sr7pv7n5x.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.070461035 CET	192.168.2.16	1.1.1.1	0x2dce	Standard query (0)	sr7pv7n5x.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:38.178395033 CET	192.168.2.16	1.1.1.1	0xd332	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.178881884 CET	192.168.2.16	1.1.1.1	0x11bb	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:38.637182951 CET	192.168.2.16	1.1.1.1	0xa079	Standard query (0)	piteevoo.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.637573004 CET	192.168.2.16	1.1.1.1	0x41a8	Standard query (0)	piteevoo.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:38.641196966 CET	192.168.2.16	1.1.1.1	0xbdde	Standard query (0)	ibrapush.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.641668081 CET	192.168.2.16	1.1.1.1	0x1c3a	Standard query (0)	ibrapush.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:38.645072937 CET	192.168.2.16	1.1.1.1	0xd6c6	Standard query (0)	gishejuy.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.645473957 CET	192.168.2.16	1.1.1.1	0x1643	Standard query (0)	gishejuy.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:38.648418903 CET	192.168.2.16	1.1.1.1	0xf1a9	Standard query (0)	cameesse.net	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.648833990 CET	192.168.2.16	1.1.1.1	0x1e84	Standard query (0)	cameesse.net	65	IN (0x0001)	false
Jan 10, 2024 22:52:39.402214050 CET	192.168.2.16	1.1.1.1	0x3cd0	Standard query (0)	ak.phumpauk.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:39.402625084 CET	192.168.2.16	1.1.1.1	0x4733	Standard query (0)	ak.phumpauk.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:39.747363091 CET	192.168.2.16	1.1.1.1	0x5165	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:39.747699022 CET	192.168.2.16	1.1.1.1	0xb0a4	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:39.881933928 CET	192.168.2.16	1.1.1.1	0x6ac5	Standard query (0)	tzegilo.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:39.882313013 CET	192.168.2.16	1.1.1.1	0x153c	Standard query (0)	tzegilo.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:40.379286051 CET	192.168.2.16	1.1.1.1	0x679d	Standard query (0)	ibrapush.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:40.379842997 CET	192.168.2.16	1.1.1.1	0x3555	Standard query (0)	ibrapush.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:40.605628014 CET	192.168.2.16	1.1.1.1	0xb9dc	Standard query (0)	flerap.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:40.606096029 CET	192.168.2.16	1.1.1.1	0x314b	Standard query (0)	flerap.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:40.612694979 CET	192.168.2.16	1.1.1.1	0xd036	Standard query (0)	fleraprt.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:40.613074064 CET	192.168.2.16	1.1.1.1	0x65a6	Standard query (0)	fleraprt.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:41.647694111 CET	192.168.2.16	1.1.1.1	0xc776	Standard query (0)	fleraprt.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:41.648091078 CET	192.168.2.16	1.1.1.1	0xb9d0	Standard query (0)	fleraprt.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:42.785223007 CET	192.168.2.16	1.1.1.1	0x1d7f	Standard query (0)	dl--master--cdn.ytapis.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:42.785566092 CET	192.168.2.16	1.1.1.1	0x993d	Standard query (0)	dl--master--cdn.ytapis.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:43.371114969 CET	192.168.2.16	1.1.1.1	0x58	Standard query (0)	interstitial-08.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:43.371589899 CET	192.168.2.16	1.1.1.1	0xcf9c	Standard query (0)	interstitial-08.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:43.379147053 CET	192.168.2.16	1.1.1.1	0xe8dd	Standard query (0)	cameesse.net	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:43.379388094 CET	192.168.2.16	1.1.1.1	0xe475	Standard query (0)	cameesse.net	65	IN (0x0001)	false
Jan 10, 2024 22:52:44.635504961 CET	192.168.2.16	1.1.1.1	0xf4ec	Standard query (0)	littlecdn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:44.635684013 CET	192.168.2.16	1.1.1.1	0x620f	Standard query (0)	littlecdn.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:45.205862045 CET	192.168.2.16	1.1.1.1	0x1463	Standard query (0)	littlecdn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:45.206281900 CET	192.168.2.16	1.1.1.1	0x63c6	Standard query (0)	littlecdn.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:45.732964993 CET	192.168.2.16	1.1.1.1	0xe23a	Standard query (0)	interstitial-08.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:45.733326912 CET	192.168.2.16	1.1.1.1	0x1dcc	Standard query (0)	interstitial-08.com	65	IN (0x0001)	false
Jan 10, 2024 22:52:53.311045885 CET	192.168.2.16	1.1.1.1	0xc02	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:53.311352968 CET	192.168.2.16	1.1.1.1	0xd8af	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:05.354675055 CET	192.168.2.16	1.1.1.1	0xb460	Standard query (0)	clients1.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:05.355032921 CET	192.168.2.16	1.1.1.1	0x1d34	Standard query (0)	clients1.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:28.515778065 CET	192.168.2.16	1.1.1.1	0xced5	Standard query (0)	n.opmetapodor.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:28.516068935 CET	192.168.2.16	1.1.1.1	0x4424	Standard query (0)	n.opmetapodor.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:28.516896009 CET	192.168.2.16	1.1.1.1	0x3643	Standard query (0)	track.routes.name	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:28.517085075 CET	192.168.2.16	1.1.1.1	0xc889	Standard query (0)	track.routes.name	65	IN (0x0001)	false
Jan 10, 2024 22:53:29.167571068 CET	192.168.2.16	1.1.1.1	0xb36	Standard query (0)	understandingerrors.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.169112921 CET	192.168.2.16	1.1.1.1	0x26fa	Standard query (0)	understandingerrors.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:30.057298899 CET	192.168.2.16	1.1.1.1	0x71c0	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:30.057538986 CET	192.168.2.16	1.1.1.1	0x941	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Jan 10, 2024 22:53:30.058806896 CET	192.168.2.16	1.1.1.1	0xeda8	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:30.060791969 CET	192.168.2.16	1.1.1.1	0xae29	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:31.347121000 CET	192.168.2.16	1.1.1.1	0xee7c	Standard query (0)	understandingerrors.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:31.347389936 CET	192.168.2.16	1.1.1.1	0xd36b	Standard query (0)	understandingerrors.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:31.499254942 CET	192.168.2.16	1.1.1.1	0x176	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:31.499536037 CET	192.168.2.16	1.1.1.1	0xf969	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:34.637408018 CET	192.168.2.16	1.1.1.1	0x103	Standard query (0)	chrome.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:34.637502909 CET	192.168.2.16	1.1.1.1	0x286f	Standard query (0)	chrome.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:35.636311054 CET	192.168.2.16	1.1.1.1	0x3a98	Standard query (0)	chromewebstore.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:35.636607885 CET	192.168.2.16	1.1.1.1	0x1b1f	Standard query (0)	chromewebstore.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:37.651002884 CET	192.168.2.16	1.1.1.1	0xf761	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:37.651308060 CET	192.168.2.16	1.1.1.1	0xed5c	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:39.107326031 CET	192.168.2.16	1.1.1.1	0x5466	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:39.107745886 CET	192.168.2.16	1.1.1.1	0x9304	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:40.221204042 CET	192.168.2.16	1.1.1.1	0xc5a8	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:40.221262932 CET	192.168.2.16	1.1.1.1	0x4e2d	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Jan 10, 2024 22:53:41.289203882 CET	192.168.2.16	1.1.1.1	0x76c4	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:41.289406061 CET	192.168.2.16	1.1.1.1	0x2791	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2024 22:51:36.011399031 CET	1.1.1.1	192.168.2.16	0xce9d	No error (0)	v9.www-ytmp4.com		172.67.187.174	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.011399031 CET	1.1.1.1	192.168.2.16	0xce9d	No error (0)	v9.www-ytmp4.com		104.21.76.46	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.023511887 CET	1.1.1.1	192.168.2.16	0x9d8f	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:51:36.023511887 CET	1.1.1.1	192.168.2.16	0x9d8f	No error (0)	clients.l.google.com		142.251.167.138	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.023511887 CET	1.1.1.1	192.168.2.16	0x9d8f	No error (0)	clients.l.google.com		142.251.167.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.023511887 CET	1.1.1.1	192.168.2.16	0x9d8f	No error (0)	clients.l.google.com		142.251.167.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.023511887 CET	1.1.1.1	192.168.2.16	0x9d8f	No error (0)	clients.l.google.com		142.251.167.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.023511887 CET	1.1.1.1	192.168.2.16	0x9d8f	No error (0)	clients.l.google.com		142.251.167.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.023511887 CET	1.1.1.1	192.168.2.16	0x9d8f	No error (0)	clients.l.google.com		142.251.167.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.023974895 CET	1.1.1.1	192.168.2.16	0xf705	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:51:36.024593115 CET	1.1.1.1	192.168.2.16	0x1708	No error (0)	accounts.google.com		142.251.16.84	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.036807060 CET	1.1.1.1	192.168.2.16	0x4b2e	No error (0)	v9.www-ytmp4.com			65	IN (0x0001)	false
Jan 10, 2024 22:51:36.350667000 CET	1.1.1.1	192.168.2.16	0xa0da	No error (0)	v9.www-ytmp4.com		172.67.187.174	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.350667000 CET	1.1.1.1	192.168.2.16	0xa0da	No error (0)	v9.www-ytmp4.com		104.21.76.46	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:36.351959944 CET	1.1.1.1	192.168.2.16	0x83d1	No error (0)	v9.www-ytmp4.com			65	IN (0x0001)	false
Jan 10, 2024 22:51:37.649414062 CET	1.1.1.1	192.168.2.16	0x4e68	No error (0)	v9.www-ytmp4.com		104.21.76.46	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:37.649414062 CET	1.1.1.1	192.168.2.16	0x4e68	No error (0)	v9.www-ytmp4.com		172.67.187.174	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:37.651882887 CET	1.1.1.1	192.168.2.16	0x49bc	No error (0)	v9.www-ytmp4.com			65	IN (0x0001)	false
Jan 10, 2024 22:51:40.456971884 CET	1.1.1.1	192.168.2.16	0x57b2	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2024 22:51:40.457114935 CET	1.1.1.1	192.168.2.16	0xbe92	No error (0)	www.google.com		172.253.62.104	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:40.457114935 CET	1.1.1.1	192.168.2.16	0xbe92	No error (0)	www.google.com		172.253.62.105	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:40.457114935 CET	1.1.1.1	192.168.2.16	0xbe92	No error (0)	www.google.com		172.253.62.99	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:40.457114935 CET	1.1.1.1	192.168.2.16	0xbe92	No error (0)	www.google.com		172.253.62.106	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:40.457114935 CET	1.1.1.1	192.168.2.16	0xbe92	No error (0)	www.google.com		172.253.62.103	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:40.457114935 CET	1.1.1.1	192.168.2.16	0xbe92	No error (0)	www.google.com		172.253.62.147	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:47.809319973 CET	1.1.1.1	192.168.2.16	0xf154	No error (0)	suggestqueries.google.com	suggestqueries.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:51:47.809453011 CET	1.1.1.1	192.168.2.16	0x2339	No error (0)	suggestqueries.google.com	suggestqueries.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:51:47.809453011 CET	1.1.1.1	192.168.2.16	0x2339	No error (0)	suggestqueries.l.google.com		142.251.16.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:47.809453011 CET	1.1.1.1	192.168.2.16	0x2339	No error (0)	suggestqueries.l.google.com		142.251.16.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:47.809453011 CET	1.1.1.1	192.168.2.16	0x2339	No error (0)	suggestqueries.l.google.com		142.251.16.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:47.809453011 CET	1.1.1.1	192.168.2.16	0x2339	No error (0)	suggestqueries.l.google.com		142.251.16.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:47.809453011 CET	1.1.1.1	192.168.2.16	0x2339	No error (0)	suggestqueries.l.google.com		142.251.16.138	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:47.809453011 CET	1.1.1.1	192.168.2.16	0x2339	No error (0)	suggestqueries.l.google.com		142.251.16.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:53.403273106 CET	1.1.1.1	192.168.2.16	0xc34e	No error (0)	vaikijie.net		139.45.197.244	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:53.411823034 CET	1.1.1.1	192.168.2.16	0xa7e1	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.248842955 CET	1.1.1.1	192.168.2.16	0xd4b3	No error (0)	propeller-tracking.com		139.45.197.240	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.263158083 CET	1.1.1.1	192.168.2.16	0xc11	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.306144953 CET	1.1.1.1	192.168.2.16	0xb596	No error (0)	ak.deephicy.net	ak.deephicy.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:51:54.307230949 CET	1.1.1.1	192.168.2.16	0x69f	No error (0)	ak.deephicy.net	ak.deephicy.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:51:54.372499943 CET	1.1.1.1	192.168.2.16	0x812b	No error (0)	ak.deephicy.net	ak.deephicy.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:51:54.377192974 CET	1.1.1.1	192.168.2.16	0xc75f	No error (0)	ak.deephicy.net	ak.deephicy.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:51:54.422883034 CET	1.1.1.1	192.168.2.16	0x1d42	No error (0)	app.www-y2mate.com		104.21.12.237	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.422883034 CET	1.1.1.1	192.168.2.16	0x1d42	No error (0)	app.www-y2mate.com		172.67.153.236	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:54.425554991 CET	1.1.1.1	192.168.2.16	0xfb90	No error (0)	app.www-y2mate.com			65	IN (0x0001)	false
Jan 10, 2024 22:51:54.475783110 CET	1.1.1.1	192.168.2.16	0xe5ab	No error (0)	sr7pv7n5x.com		212.117.190.201	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:55.066292048 CET	1.1.1.1	192.168.2.16	0x8588	No error (0)	propeller-tracking.com		139.45.197.240	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:55.068506956 CET	1.1.1.1	192.168.2.16	0x921b	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:55.208877087 CET	1.1.1.1	192.168.2.16	0xc1fe	No error (0)	datatechone.com		37.48.68.71	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:56.021374941 CET	1.1.1.1	192.168.2.16	0x2663	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:56.259293079 CET	1.1.1.1	192.168.2.16	0xa980	No error (0)	datatechone.com		139.45.195.253	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.714890003 CET	1.1.1.1	192.168.2.16	0x453f	No error (0)	v2e81.bemobtrcks.com		52.204.19.219	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937109947 CET	1.1.1.1	192.168.2.16	0x53c3	No error (0)	i.ytimg.com		172.253.63.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937109947 CET	1.1.1.1	192.168.2.16	0x53c3	No error (0)	i.ytimg.com		172.253.115.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937109947 CET	1.1.1.1	192.168.2.16	0x53c3	No error (0)	i.ytimg.com		142.251.179.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937109947 CET	1.1.1.1	192.168.2.16	0x53c3	No error (0)	i.ytimg.com		142.251.16.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937109947 CET	1.1.1.1	192.168.2.16	0x53c3	No error (0)	i.ytimg.com		172.253.122.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937109947 CET	1.1.1.1	192.168.2.16	0x53c3	No error (0)	i.ytimg.com		172.253.62.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937109947 CET	1.1.1.1	192.168.2.16	0x53c3	No error (0)	i.ytimg.com		142.251.163.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937109947 CET	1.1.1.1	192.168.2.16	0x53c3	No error (0)	i.ytimg.com		142.251.167.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937109947 CET	1.1.1.1	192.168.2.16	0x53c3	No error (0)	i.ytimg.com		142.250.31.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937319994 CET	1.1.1.1	192.168.2.16	0x5f75	No error (0)	app.www-y2mate.com		104.21.12.237	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937319994 CET	1.1.1.1	192.168.2.16	0x5f75	No error (0)	app.www-y2mate.com		172.67.153.236	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:57.937860966 CET	1.1.1.1	192.168.2.16	0x3ea3	No error (0)	app.www-y2mate.com			65	IN (0x0001)	false
Jan 10, 2024 22:51:58.227098942 CET	1.1.1.1	192.168.2.16	0x7b69	No error (0)	statuelikeazimuthsghostless.com			65	IN (0x0001)	false
Jan 10, 2024 22:51:58.227432966 CET	1.1.1.1	192.168.2.16	0x23e0	No error (0)	statuelikeazimuthsghostless.com		104.21.65.185	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.227432966 CET	1.1.1.1	192.168.2.16	0x23e0	No error (0)	statuelikeazimuthsghostless.com		172.67.191.120	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.480295897 CET	1.1.1.1	192.168.2.16	0x1da5	No error (0)	i.ytimg.com		142.251.163.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.480295897 CET	1.1.1.1	192.168.2.16	0x1da5	No error (0)	i.ytimg.com		172.253.63.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.480295897 CET	1.1.1.1	192.168.2.16	0x1da5	No error (0)	i.ytimg.com		142.251.167.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.480295897 CET	1.1.1.1	192.168.2.16	0x1da5	No error (0)	i.ytimg.com		142.251.16.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.480295897 CET	1.1.1.1	192.168.2.16	0x1da5	No error (0)	i.ytimg.com		172.253.62.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.480295897 CET	1.1.1.1	192.168.2.16	0x1da5	No error (0)	i.ytimg.com		142.251.111.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.480295897 CET	1.1.1.1	192.168.2.16	0x1da5	No error (0)	i.ytimg.com		172.253.115.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.480295897 CET	1.1.1.1	192.168.2.16	0x1da5	No error (0)	i.ytimg.com		172.253.122.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:51:58.967901945 CET	1.1.1.1	192.168.2.16	0xac46	No error (0)	t-y-p.site		35.84.115.54	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:00.694993973 CET	1.1.1.1	192.168.2.16	0xf523	No error (0)	trck.t-y-p.site		54.190.82.3	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:01.543961048 CET	1.1.1.1	192.168.2.16	0xc65f	No error (0)	chromewebstore.google.com		172.253.115.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:01.543961048 CET	1.1.1.1	192.168.2.16	0xc65f	No error (0)	chromewebstore.google.com		172.253.115.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:01.543961048 CET	1.1.1.1	192.168.2.16	0xc65f	No error (0)	chromewebstore.google.com		172.253.115.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:01.543961048 CET	1.1.1.1	192.168.2.16	0xc65f	No error (0)	chromewebstore.google.com		172.253.115.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:01.543961048 CET	1.1.1.1	192.168.2.16	0xc65f	No error (0)	chromewebstore.google.com		172.253.115.138	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:01.543961048 CET	1.1.1.1	192.168.2.16	0xc65f	No error (0)	chromewebstore.google.com		172.253.115.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:01.567323923 CET	1.1.1.1	192.168.2.16	0x7f0a	No error (0)	trck.t-y-p.site		54.190.82.3	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:02.866497040 CET	1.1.1.1	192.168.2.16	0x41ba	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:52:02.866513968 CET	1.1.1.1	192.168.2.16	0xfca9	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:52:02.866513968 CET	1.1.1.1	192.168.2.16	0xfca9	No error (0)	googlehosted.l.googleusercontent.com		142.250.31.132	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:03.777811050 CET	1.1.1.1	192.168.2.16	0xeadc	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:52:03.777811050 CET	1.1.1.1	192.168.2.16	0xeadc	No error (0)	plus.l.google.com		142.251.179.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:03.777811050 CET	1.1.1.1	192.168.2.16	0xeadc	No error (0)	plus.l.google.com		142.251.179.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:03.777811050 CET	1.1.1.1	192.168.2.16	0xeadc	No error (0)	plus.l.google.com		142.251.179.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:03.777811050 CET	1.1.1.1	192.168.2.16	0xeadc	No error (0)	plus.l.google.com		142.251.179.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:03.777811050 CET	1.1.1.1	192.168.2.16	0xeadc	No error (0)	plus.l.google.com		142.251.179.138	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:03.777811050 CET	1.1.1.1	192.168.2.16	0xeadc	No error (0)	plus.l.google.com		142.251.179.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:03.779480934 CET	1.1.1.1	192.168.2.16	0x603c	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:52:04.940676928 CET	1.1.1.1	192.168.2.16	0xc7ed	No error (0)	play.google.com		172.253.122.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:04.940676928 CET	1.1.1.1	192.168.2.16	0xc7ed	No error (0)	play.google.com		172.253.122.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:04.940676928 CET	1.1.1.1	192.168.2.16	0xc7ed	No error (0)	play.google.com		172.253.122.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:04.940676928 CET	1.1.1.1	192.168.2.16	0xc7ed	No error (0)	play.google.com		172.253.122.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:04.940676928 CET	1.1.1.1	192.168.2.16	0xc7ed	No error (0)	play.google.com		172.253.122.138	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:04.940676928 CET	1.1.1.1	192.168.2.16	0xc7ed	No error (0)	play.google.com		172.253.122.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:06.345201969 CET	1.1.1.1	192.168.2.16	0x77	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:52:06.345201969 CET	1.1.1.1	192.168.2.16	0x77	No error (0)	googlehosted.l.googleusercontent.com		172.253.115.132	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:06.345526934 CET	1.1.1.1	192.168.2.16	0xa0d1	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:52:06.847949982 CET	1.1.1.1	192.168.2.16	0x8999	No error (0)	scone-pa.clients6.google.com		172.253.62.95	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:09.103497028 CET	1.1.1.1	192.168.2.16	0xc58f	No error (0)	scone-pa.clients6.google.com		172.253.62.95	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:10.945226908 CET	1.1.1.1	192.168.2.16	0x1d56	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:52:10.945226908 CET	1.1.1.1	192.168.2.16	0x1d56	No error (0)	googlehosted.l.googleusercontent.com		172.253.63.132	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:10.949748993 CET	1.1.1.1	192.168.2.16	0x8d74	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:52:17.200963020 CET	1.1.1.1	192.168.2.16	0x3471	No error (0)	metrika.traff.space		157.230.107.172	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:18.158992052 CET	1.1.1.1	192.168.2.16	0xa9fd	No error (0)	videodown.site		3.10.43.234	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:18.162112951 CET	1.1.1.1	192.168.2.16	0x2be	No error (0)	metrika.traff.space		157.230.107.172	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:35.921201944 CET	1.1.1.1	192.168.2.16	0xfba	No error (0)	opmetapodor.com		172.64.167.17	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:35.921201944 CET	1.1.1.1	192.168.2.16	0xfba	No error (0)	opmetapodor.com		172.64.166.17	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:35.921293020 CET	1.1.1.1	192.168.2.16	0x3d2a	No error (0)	opmetapodor.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:35.948364019 CET	1.1.1.1	192.168.2.16	0x71fa	No error (0)	opmetapodor.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:35.948404074 CET	1.1.1.1	192.168.2.16	0xb2cd	No error (0)	opmetapodor.com		172.64.166.17	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:35.948404074 CET	1.1.1.1	192.168.2.16	0xb2cd	No error (0)	opmetapodor.com		172.64.167.17	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:36.217169046 CET	1.1.1.1	192.168.2.16	0x723d	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:36.217169046 CET	1.1.1.1	192.168.2.16	0x723d	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:36.217725992 CET	1.1.1.1	192.168.2.16	0x24cf	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:36.655649900 CET	1.1.1.1	192.168.2.16	0xf517	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.042097092 CET	1.1.1.1	192.168.2.16	0x2ad7	No error (0)	arvigorothan.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:37.042140961 CET	1.1.1.1	192.168.2.16	0xf7c9	No error (0)	dl--master--cdn.ytapis.com		104.26.3.120	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.042140961 CET	1.1.1.1	192.168.2.16	0xf7c9	No error (0)	dl--master--cdn.ytapis.com		104.26.2.120	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.042140961 CET	1.1.1.1	192.168.2.16	0xf7c9	No error (0)	dl--master--cdn.ytapis.com		172.67.75.3	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.042635918 CET	1.1.1.1	192.168.2.16	0x980c	No error (0)	arvigorothan.com		104.21.30.34	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.042635918 CET	1.1.1.1	192.168.2.16	0x980c	No error (0)	arvigorothan.com		172.67.150.119	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.043199062 CET	1.1.1.1	192.168.2.16	0x3127	No error (0)	dl--master--cdn.ytapis.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:37.178145885 CET	1.1.1.1	192.168.2.16	0xad53	No error (0)	doruffleton.com		139.45.197.244	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.215730906 CET	1.1.1.1	192.168.2.16	0x2333	No error (0)	propeller-tracking.com		139.45.197.240	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.215970039 CET	1.1.1.1	192.168.2.16	0xcdd4	No error (0)	sr7pv7n5x.com		212.117.190.201	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.231024027 CET	1.1.1.1	192.168.2.16	0x8c86	No error (0)	opmetapodor.com		172.64.166.17	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.231024027 CET	1.1.1.1	192.168.2.16	0x8c86	No error (0)	opmetapodor.com		172.64.167.17	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:37.231100082 CET	1.1.1.1	192.168.2.16	0x3767	No error (0)	opmetapodor.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:37.785257101 CET	1.1.1.1	192.168.2.16	0xb23a	No error (0)	piteevoo.com		139.45.197.244	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.066572905 CET	1.1.1.1	192.168.2.16	0x9b26	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.067825079 CET	1.1.1.1	192.168.2.16	0xc9fe	No error (0)	propeller-tracking.com		139.45.197.240	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.087878942 CET	1.1.1.1	192.168.2.16	0x94a	No error (0)	doruffleton.com		139.45.197.244	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.165566921 CET	1.1.1.1	192.168.2.16	0x9f98	No error (0)	sr7pv7n5x.com		212.117.190.201	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.273718119 CET	1.1.1.1	192.168.2.16	0xd332	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.273718119 CET	1.1.1.1	192.168.2.16	0xd332	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.274955034 CET	1.1.1.1	192.168.2.16	0x11bb	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:38.733052015 CET	1.1.1.1	192.168.2.16	0xa079	No error (0)	piteevoo.com		139.45.197.244	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.737215996 CET	1.1.1.1	192.168.2.16	0xbdde	No error (0)	ibrapush.com		139.45.197.250	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.739639997 CET	1.1.1.1	192.168.2.16	0xd6c6	No error (0)	gishejuy.com		139.45.197.242	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:38.744107962 CET	1.1.1.1	192.168.2.16	0xf1a9	No error (0)	cameesse.net		139.45.197.242	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:39.498051882 CET	1.1.1.1	192.168.2.16	0x4733	No error (0)	ak.phumpauk.com	ak.phumpauk.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:52:39.499507904 CET	1.1.1.1	192.168.2.16	0x3cd0	No error (0)	ak.phumpauk.com	ak.phumpauk.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:52:39.842853069 CET	1.1.1.1	192.168.2.16	0x5165	No error (0)	static.cloudflareinsights.com		104.16.56.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:39.842853069 CET	1.1.1.1	192.168.2.16	0x5165	No error (0)	static.cloudflareinsights.com		104.16.57.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:39.844052076 CET	1.1.1.1	192.168.2.16	0xb0a4	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:39.977586031 CET	1.1.1.1	192.168.2.16	0x6ac5	No error (0)	tzegilo.com		172.67.193.52	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:39.977586031 CET	1.1.1.1	192.168.2.16	0x6ac5	No error (0)	tzegilo.com		104.21.11.245	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:39.978420019 CET	1.1.1.1	192.168.2.16	0x153c	No error (0)	tzegilo.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:40.477492094 CET	1.1.1.1	192.168.2.16	0x679d	No error (0)	ibrapush.com		139.45.197.250	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:40.702295065 CET	1.1.1.1	192.168.2.16	0xb9dc	No error (0)	flerap.com		139.45.195.254	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:40.708188057 CET	1.1.1.1	192.168.2.16	0xd036	No error (0)	fleraprt.com		139.45.195.254	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:41.743292093 CET	1.1.1.1	192.168.2.16	0xc776	No error (0)	fleraprt.com		139.45.195.254	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:42.882879972 CET	1.1.1.1	192.168.2.16	0x1d7f	No error (0)	dl--master--cdn.ytapis.com		104.26.2.120	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:42.882879972 CET	1.1.1.1	192.168.2.16	0x1d7f	No error (0)	dl--master--cdn.ytapis.com		104.26.3.120	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:42.882879972 CET	1.1.1.1	192.168.2.16	0x1d7f	No error (0)	dl--master--cdn.ytapis.com		172.67.75.3	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:42.941716909 CET	1.1.1.1	192.168.2.16	0x993d	No error (0)	dl--master--cdn.ytapis.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:43.467618942 CET	1.1.1.1	192.168.2.16	0x58	No error (0)	interstitial-08.com		139.45.197.151	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:43.474780083 CET	1.1.1.1	192.168.2.16	0xe8dd	No error (0)	cameesse.net		139.45.197.242	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:44.731264114 CET	1.1.1.1	192.168.2.16	0x620f	No error (0)	littlecdn.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:44.731342077 CET	1.1.1.1	192.168.2.16	0xf4ec	No error (0)	littlecdn.com		172.67.10.98	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:44.731342077 CET	1.1.1.1	192.168.2.16	0xf4ec	No error (0)	littlecdn.com		104.22.24.116	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:44.731342077 CET	1.1.1.1	192.168.2.16	0xf4ec	No error (0)	littlecdn.com		104.22.25.116	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:45.301830053 CET	1.1.1.1	192.168.2.16	0x1463	No error (0)	littlecdn.com		104.22.24.116	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:45.301830053 CET	1.1.1.1	192.168.2.16	0x1463	No error (0)	littlecdn.com		104.22.25.116	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:45.301830053 CET	1.1.1.1	192.168.2.16	0x1463	No error (0)	littlecdn.com		172.67.10.98	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:45.302947044 CET	1.1.1.1	192.168.2.16	0x63c6	No error (0)	littlecdn.com			65	IN (0x0001)	false
Jan 10, 2024 22:52:45.840888977 CET	1.1.1.1	192.168.2.16	0xe23a	No error (0)	interstitial-08.com		139.45.197.151	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:52:53.406138897 CET	1.1.1.1	192.168.2.16	0xc02	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:05.450598955 CET	1.1.1.1	192.168.2.16	0xb460	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:05.450598955 CET	1.1.1.1	192.168.2.16	0xb460	No error (0)	clients.l.google.com		142.251.111.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:05.450598955 CET	1.1.1.1	192.168.2.16	0xb460	No error (0)	clients.l.google.com		142.251.111.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:05.450598955 CET	1.1.1.1	192.168.2.16	0xb460	No error (0)	clients.l.google.com		142.251.111.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:05.450598955 CET	1.1.1.1	192.168.2.16	0xb460	No error (0)	clients.l.google.com		142.251.111.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:05.450598955 CET	1.1.1.1	192.168.2.16	0xb460	No error (0)	clients.l.google.com		142.251.111.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:05.450598955 CET	1.1.1.1	192.168.2.16	0xb460	No error (0)	clients.l.google.com		142.251.111.138	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:05.455238104 CET	1.1.1.1	192.168.2.16	0x1d34	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:28.613277912 CET	1.1.1.1	192.168.2.16	0xced5	No error (0)	n.opmetapodor.com		172.64.166.17	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:28.613277912 CET	1.1.1.1	192.168.2.16	0xced5	No error (0)	n.opmetapodor.com		172.64.167.17	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:28.613795996 CET	1.1.1.1	192.168.2.16	0x4424	No error (0)	n.opmetapodor.com			65	IN (0x0001)	false
Jan 10, 2024 22:53:28.630284071 CET	1.1.1.1	192.168.2.16	0xc889	No error (0)	track.routes.name	ewcms.rdtk.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:28.630284071 CET	1.1.1.1	192.168.2.16	0xc889	No error (0)	ewcms.rdtk.io	wdc.rdtk.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:28.664946079 CET	1.1.1.1	192.168.2.16	0x3643	No error (0)	track.routes.name	ewcms.rdtk.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:28.664946079 CET	1.1.1.1	192.168.2.16	0x3643	No error (0)	ewcms.rdtk.io	wdc.rdtk.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:28.664946079 CET	1.1.1.1	192.168.2.16	0x3643	No error (0)	wdc.rdtk.io		108.62.123.181	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.267426968 CET	1.1.1.1	192.168.2.16	0xb36	No error (0)	understandingerrors.com		172.67.152.171	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.267426968 CET	1.1.1.1	192.168.2.16	0xb36	No error (0)	understandingerrors.com		104.21.82.40	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.268239021 CET	1.1.1.1	192.168.2.16	0x26fa	No error (0)	understandingerrors.com			65	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.250.31.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.250.31.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		172.253.62.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		172.253.62.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.251.111.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.251.111.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.251.16.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.251.16.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.251.16.138	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.251.16.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.251.16.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.251.16.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		172.253.62.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		172.253.62.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.250.31.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:29.449740887 CET	1.1.1.1	192.168.2.16	0x61ac	No error (0)	android.l.google.com		142.251.111.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:30.114438057 CET	1.1.1.1	192.168.2.16	0xfbc2	No error (0)	mobile-gtalk.l.google.com		142.251.111.188	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:30.152530909 CET	1.1.1.1	192.168.2.16	0x71c0	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:30.152530909 CET	1.1.1.1	192.168.2.16	0x71c0	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:30.152530909 CET	1.1.1.1	192.168.2.16	0x71c0	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:30.152530909 CET	1.1.1.1	192.168.2.16	0x71c0	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:30.152530909 CET	1.1.1.1	192.168.2.16	0x71c0	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:30.152910948 CET	1.1.1.1	192.168.2.16	0x941	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:30.154074907 CET	1.1.1.1	192.168.2.16	0xeda8	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:30.154074907 CET	1.1.1.1	192.168.2.16	0xeda8	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:30.155766964 CET	1.1.1.1	192.168.2.16	0xae29	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2024 22:53:31.446484089 CET	1.1.1.1	192.168.2.16	0xd36b	No error (0)	understandingerrors.com			65	IN (0x0001)	false
Jan 10, 2024 22:53:31.504610062 CET	1.1.1.1	192.168.2.16	0xee7c	No error (0)	understandingerrors.com		104.21.82.40	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:31.504610062 CET	1.1.1.1	192.168.2.16	0xee7c	No error (0)	understandingerrors.com		172.67.152.171	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:31.594563961 CET	1.1.1.1	192.168.2.16	0x176	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:31.594563961 CET	1.1.1.1	192.168.2.16	0x176	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:31.594937086 CET	1.1.1.1	192.168.2.16	0xf969	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2024 22:53:34.733956099 CET	1.1.1.1	192.168.2.16	0x103	No error (0)	chrome.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:34.733956099 CET	1.1.1.1	192.168.2.16	0x103	No error (0)	www3.l.google.com		172.253.62.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:34.733956099 CET	1.1.1.1	192.168.2.16	0x103	No error (0)	www3.l.google.com		172.253.62.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:34.733956099 CET	1.1.1.1	192.168.2.16	0x103	No error (0)	www3.l.google.com		172.253.62.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:34.733956099 CET	1.1.1.1	192.168.2.16	0x103	No error (0)	www3.l.google.com		172.253.62.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:34.733956099 CET	1.1.1.1	192.168.2.16	0x103	No error (0)	www3.l.google.com		172.253.62.138	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:34.733956099 CET	1.1.1.1	192.168.2.16	0x103	No error (0)	www3.l.google.com		172.253.62.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:34.738174915 CET	1.1.1.1	192.168.2.16	0x286f	No error (0)	chrome.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:35.734548092 CET	1.1.1.1	192.168.2.16	0x3a98	No error (0)	chromewebstore.google.com		142.251.16.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:35.734548092 CET	1.1.1.1	192.168.2.16	0x3a98	No error (0)	chromewebstore.google.com		142.251.16.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:35.734548092 CET	1.1.1.1	192.168.2.16	0x3a98	No error (0)	chromewebstore.google.com		142.251.16.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:35.734548092 CET	1.1.1.1	192.168.2.16	0x3a98	No error (0)	chromewebstore.google.com		142.251.16.138	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:35.734548092 CET	1.1.1.1	192.168.2.16	0x3a98	No error (0)	chromewebstore.google.com		142.251.16.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:35.734548092 CET	1.1.1.1	192.168.2.16	0x3a98	No error (0)	chromewebstore.google.com		142.251.16.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:37.745743036 CET	1.1.1.1	192.168.2.16	0xf761	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:37.745743036 CET	1.1.1.1	192.168.2.16	0xf761	No error (0)	googlehosted.l.googleusercontent.com		142.250.31.132	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:37.745938063 CET	1.1.1.1	192.168.2.16	0xed5c	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2024 22:53:39.202828884 CET	1.1.1.1	192.168.2.16	0x5466	No error (0)	play.google.com		172.253.122.100	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:39.202828884 CET	1.1.1.1	192.168.2.16	0x5466	No error (0)	play.google.com		172.253.122.101	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:39.202828884 CET	1.1.1.1	192.168.2.16	0x5466	No error (0)	play.google.com		172.253.122.102	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:39.202828884 CET	1.1.1.1	192.168.2.16	0x5466	No error (0)	play.google.com		172.253.122.113	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:39.202828884 CET	1.1.1.1	192.168.2.16	0x5466	No error (0)	play.google.com		172.253.122.138	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:39.202828884 CET	1.1.1.1	192.168.2.16	0x5466	No error (0)	play.google.com		172.253.122.139	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:40.316538095 CET	1.1.1.1	192.168.2.16	0xc5a8	No error (0)	scone-pa.clients6.google.com		172.253.63.95	A (IP address)	IN (0x0001)	false
Jan 10, 2024 22:53:41.384351015 CET	1.1.1.1	192.168.2.16	0x76c4	No error (0)	scone-pa.clients6.google.com		142.251.167.95	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49720	172.67.187.174	80	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2024 22:51:36.133872986 CET	431	OUT	GET / HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2024 22:51:36.249768972 CET	660	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 10 Jan 2024 21:51:36 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Wed, 10 Jan 2024 22:51:36 GMT Location: https://v9.www-ytmp4.com/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=361sKSl73zbOarkwqDOTRkThIOwGONcNP0GQu40NAyn%2FgoYyZsoCALd7eiR5TLo3ceMfhSg42voBedNV2W2Nkf7PJCElf8qDm0LU6IxsGJzH%2FTBLS%2F2Nd8ayPgJzhXn4AeCb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 8438246b2b5707b0-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Jan 10, 2024 22:52:21.259773970 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 10, 2024 22:53:06.356899977 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49719	142.251.16.84	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:36 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:36 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-01-10 21:51:36 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 10 Jan 2024 21:51:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-nvTP9psxW5Z5bPBcvwhnSw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:36 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-01-10 21:51:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49722	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:36 UTC	659	OUT	GET / HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:36 UTC	697	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 806 Last-Modified: Wed, 10 Jan 2024 21:38:10 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SBjXi8HxgS9ycA8YtcIMgw8HBNFZINMT%2Bi0ABoW9%2FX%2FO%2BzismmXaleujAH1LVd67XWUAzv415UKggRfe%2BGHs2790ZX4crr0lZLqldQ6XlOmNQUjTjTWYpJCiVrVHCh2wB%2F1f"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438246eaf232012-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:36 UTC	672	IN	Data Raw: 33 64 34 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 59 54 6d 70 34 20 43 6f 6e 76 65 72 74 65 72 20 59 6f 75 74 75 62 65 20 74 6f 20 4d 70 34 20 56 69 64 65 6f 20 44 6f 77 6e 6c 6f 61 64 65 Data Ascii: 3d41<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="robots" content="index,follow" /><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title>YTmp4 Converter Youtube to Mp4 Video Downloade
2024-01-10 21:51:36 UTC	1369	IN	Data Raw: 2e 20 69 74 27 73 20 66 61 73 74 20 61 6e 64 20 73 61 66 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 70 6e 67 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 59 54 6d 70 34 20 43 6f 6e 76 65 72 74 65 72 20 59 6f 75 74 75 62 65 20 74 6f 20 4d 70 34 20 56 69 64 65 6f 20 44 6f 77 6e 6c 6f 61 64 65 72 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 Data Ascii: . it's fast and safe" /><meta itemprop="image" content="https://www-ytmp4.com/images/logo.png" /><meta property="og:type" content="website" /><meta property="og:title" content="YTmp4 Converter Youtube to Mp4 Video Downloader" /><meta property="og:desc
2024-01-10 21:51:36 UTC	1369	IN	Data Raw: 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 61 72 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 69 74 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6a 61 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6a 61 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6b 6f 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 Data Ascii: e" hreflang="ar" href="https://v9.www-ytmp4.com/ar/"><link rel="alternate" hreflang="it" href="https://v9.www-ytmp4.com/it/"><link rel="alternate" hreflang="ja" href="https://v9.www-ytmp4.com/ja/"><link rel="alternate" hreflang="ko" href="https://v9.ww
2024-01-10 21:51:36 UTC	1369	IN	Data Raw: 3c 61 20 74 69 74 6c 65 3d 22 45 6e 67 6c 69 73 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 22 3e 45 6e 67 6c 69 73 68 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 46 72 61 6e c3 a7 61 69 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 66 72 2f 22 3e 46 72 61 6e c3 a7 61 69 73 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 54 68 61 69 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 74 68 2f 22 3e 54 68 61 69 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 49 6e 64 6f 6e 65 73 69 61 6e 22 20 68 72 65 66 Data Ascii: <a title="English" href="https://v9.www-ytmp4.com/">English</a> </li><li> <a title="Franais" href="https://v9.www-ytmp4.com/fr/">Franais</a> </li><li> <a title="Thai" href="https://v9.www-ytmp4.com/th/">Thai</a> </li><li> <a title="Indonesian" href
2024-01-10 21:51:36 UTC	1369	IN	Data Raw: 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 7a 68 2d 63 6e 2f 22 3e e7 ae 80 e4 bd 93 e4 b8 ad e6 96 87 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 7a 68 2d 74 77 2f 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 d8 b9 d8 b1 d8 a8 d9 8a 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 61 72 2f 22 3e d8 b9 d8 b1 d8 a8 d9 8a 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 e0 a6 ac e0 a6 be e0 a6 99 e0 a6 be e0 a6 b2 Data Ascii: tps://v9.www-ytmp4.com/zh-cn/"></a> </li><li> <a title="" href="https://v9.www-ytmp4.com/zh-tw/"></a> </li><li> <a title="" href="https://v9.www-ytmp4.com/ar/"></a> </li><li> <a title="
2024-01-10 21:51:36 UTC	1369	IN	Data Raw: 74 65 73 74 20 77 61 79 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 59 6f 75 54 75 62 65 20 76 69 64 65 6f 73 20 74 6f 20 4d 70 34 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 59 6f 75 20 63 61 6e 20 44 6f 77 6e 6c 6f 61 64 20 59 6f 75 74 75 62 65 20 76 69 64 65 6f 73 20 69 6e 74 6f 20 33 47 50 2c 20 4d 50 34 2c 20 57 4d 41 2c 20 4d 34 41 2c 20 46 4c 56 2c 20 57 45 42 4d 20 61 6e 64 20 65 74 63 20 77 69 74 68 20 61 20 46 65 77 20 53 69 6d 70 6c 65 20 53 74 65 70 73 2e 20 59 74 6d 70 34 20 69 73 20 53 61 66 65 73 74 20 61 6e 64 20 46 61 73 74 65 73 74 20 43 6f 6e 76 65 72 74 65 72 20 61 6e 64 20 64 6f 77 6e 6c 6f 61 64 65 72 20 66 6f 72 20 73 61 76 69 6e 67 20 59 6f 75 74 75 62 65 20 76 69 64 65 6f 73 20 74 6f 20 79 6f 75 72 20 44 65 76 69 63 65 73 2e 20 53 6f 20 44 6f 77 Data Ascii: test way to download YouTube videos to Mp4.</p><p>You can Download Youtube videos into 3GP, MP4, WMA, M4A, FLV, WEBM and etc with a Few Simple Steps. Ytmp4 is Safest and Fastest Converter and downloader for saving Youtube videos to your Devices. So Dow
2024-01-10 21:51:36 UTC	1369	IN	Data Raw: 61 6e 64 20 51 75 61 6c 69 74 79 20 53 75 70 70 6f 72 74 3c 2f 68 33 3e 0a 3c 70 3e 57 65 20 50 72 6f 76 69 64 65 20 48 69 67 68 2d 51 75 61 6c 69 74 79 20 61 6e 64 20 4d 75 6c 74 69 70 6c 65 20 56 69 64 65 6f 20 46 6f 72 6d 61 74 73 20 73 75 63 68 20 61 73 20 31 34 34 70 2c 20 32 34 30 70 2c 20 33 36 30 70 2c 20 34 38 30 70 2c 20 37 32 30 70 2c 20 61 6e 64 20 31 30 38 30 70 2e 20 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 59 6f 75 20 63 68 6f 6f 73 65 20 61 6e 64 20 63 6f 6e 76 65 72 74 20 59 6f 75 54 75 62 65 20 69 6e 74 6f 20 33 47 50 2c 20 4d 50 34 2c 20 57 4d 41 2c 20 4d 34 41 2c 20 46 4c 56 2c 20 57 45 42 4d 20 61 6e 64 20 4d 4f 20 66 6f 72 6d 61 74 73 3c 2f 70 3e 0a 3c 68 33 3e 55 6e 6c 69 6d 69 74 65 64 20 43 6f 6e 76 65 72 73 69 6f 6e 3c 2f 68 33 Data Ascii: and Quality Support</h3><p>We Provide High-Quality and Multiple Video Formats such as 144p, 240p, 360p, 480p, 720p, and 1080p. Additionally, You choose and convert YouTube into 3GP, MP4, WMA, M4A, FLV, WEBM and MO formats</p><h3>Unlimited Conversion</h3
2024-01-10 21:51:36 UTC	1369	IN	Data Raw: 2f 74 68 2f 22 3e e0 b8 a2 e0 b8 b9 e0 b8 97 e0 b8 b9 e0 b8 9b e0 b9 80 e0 b8 9b e0 b9 87 e0 b8 99 20 4d 50 34 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 69 64 2f 22 3e 59 6f 75 74 75 62 65 20 6b 65 20 4d 50 34 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 64 65 2f 22 3e 59 6f 75 74 75 62 65 20 7a 75 20 4d 50 34 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 65 73 2f 22 3e 59 6f 75 74 75 62 65 20 61 20 4d 50 34 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f Data Ascii: /th/"> MP4</a><a href="https://v9.www-ytmp4.com/id/">Youtube ke MP4</a><a href="https://v9.www-ytmp4.com/de/">Youtube zu MP4</a><a href="https://v9.www-ytmp4.com/es/">Youtube a MP4</a><a href="https://v9.www-ytmp4.co
2024-01-10 21:51:36 UTC	1369	IN	Data Raw: 32 31 2e 30 38 20 31 32 34 2e 37 32 76 37 30 2e 36 32 48 32 32 2e 38 39 56 32 38 38 68 38 31 2e 33 39 76 32 32 34 68 31 30 30 2e 31 37 56 32 38 38 7a 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 20 2f 3e 3c 2f 73 76 67 3e 3c 73 70 61 6e 3e 46 61 63 65 62 6f 6f 6b 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 68 61 72 65 42 75 74 74 6f 6e 73 22 3e 3c 61 20 69 64 3d 22 73 68 61 72 65 5f 74 77 69 74 74 65 72 22 20 63 6c 61 73 73 3d 22 74 77 69 74 74 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 69 6e 74 65 6e 74 2f 74 77 65 65 74 3f 74 65 78 74 3d 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b Data Ascii: 21.08 124.72v70.62H22.89V288h81.39v224h100.17V288z" fill="white" /></svg><span>Facebook</span></a></div><div class="shareButtons"><a id="share_twitter" class="twitter" href="https://twitter.com/intent/tweet?text=https://v9.www-ytmp4.com/" target="_blank
2024-01-10 21:51:36 UTC	1369	IN	Data Raw: 22 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 30 34 20 36 2e 35 43 31 30 31 2e 34 20 36 2e 35 20 30 20 37 34 2e 39 20 30 20 31 38 35 2e 36 20 30 20 32 35 36 20 33 39 2e 36 20 32 39 36 20 36 33 2e 36 20 32 39 36 63 39 2e 39 20 30 20 31 35 2e 36 2d 32 37 2e 36 20 31 35 2e 36 2d 33 35 2e 34 20 30 2d 39 2e 33 2d 32 33 2e 37 2d 32 39 2e 31 2d 32 33 2e 37 2d 36 37 2e 38 20 30 2d 38 30 2e 34 20 36 31 2e 32 2d 31 33 37 2e 34 20 31 34 30 2e 34 2d 31 33 37 2e 34 20 36 38 2e 31 20 30 20 31 31 38 2e 35 20 33 38 2e 37 20 31 31 38 2e 35 20 31 30 39 2e 38 20 30 20 35 Data Ascii: "24" width="24" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M204 6.5C101.4 6.5 0 74.9 0 185.6 0 256 39.6 296 63.6 296c9.9 0 15.6-27.6 15.6-35.4 0-9.3-23.7-29.1-23.7-67.8 0-80.4 61.2-137.4 140.4-137.4 68.1 0 118.5 38.7 118.5 109.8 0 5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49725	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:37 UTC	546	OUT	GET /css/custome.css HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:37 UTC	791	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:37 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Cf-Bgj: minify Cf-Polished: origSize=10759 ETag: W/"653c4b5c-2a07" Expires: Wed, 10 Jan 2024 21:52:37 GMT Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT Vary: Accept-Encoding X-Cache: HIT CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rWU6EEJ4pwKNKutJsLgQ6ZOhmRbdpwYPLo6wAsIMsvk%2BS4qs6%2BiqqizVbyIIaKGzAg%2FaLb6lO4Cp2ZT2mxuA1P20%2Byif8Ctep%2F%2BhXtUFqwtD92L4Yf7dwaRoY%2BOtN0m5QRBd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824725ed381d6-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:37 UTC	578	IN	Data Raw: 32 31 61 64 0d 0a 69 6d 67 23 67 6c 6f 62 65 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 7d 2e 63 6f 70 79 72 69 67 68 74 5f 74 65 78 74 7b 31 2e 70 61 64 64 69 6e 67 3a 31 30 70 78 7d 69 6d 67 23 73 70 69 6e 5f 6c 6f 61 64 65 72 2c 69 6d 67 23 73 70 65 65 6e 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 33 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 65 78 74 2d 62 6f 74 74 6f 6d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 31 30 30 25 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: 21adimg#globe{vertical-align:bottom}.copyright_text{1.padding:10px}img#spin_loader,img#speen{animation:spin 3s linear infinite;vertical-align:text-bottom}@-moz-keyframes spin{100%{-moz-transform:rotate(360deg)}}@-webkit-keyframes spin{100%{-webkit-trans
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 74 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 32 2c 32 32 2c 32 32 2c 2e 31 35 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 6c 61 6e 67 75 61 67 65 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d Data Ascii: t;list-style:none;background-color:#fff;background-clip:padding-box;border:1px solid rgba(22,22,22,.15);-webkit-border-radius:.25rem;-moz-border-radius:.25rem;border-radius:.25rem}.language-dropdown ul{list-style:none;margin:0;padding:0;text-align:center}
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 3a 30 20 2e 35 33 37 36 33 34 34 30 38 36 30 32 31 35 30 35 25 20 30 20 31 2e 30 37 35 32 36 38 38 31 37 32 30 34 33 30 31 25 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 6f 6e 76 65 72 74 65 72 20 2e 66 6f 72 6d 20 23 73 75 62 6d 69 74 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 38 37 63 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 32 32 2e 33 38 33 35 31 33 25 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 33 70 78 20 2e 35 33 37 36 33 34 34 30 38 36 30 32 31 35 30 35 25 20 33 70 78 20 30 3b 63 75 72 73 Data Ascii: :0 .5376344086021505% 0 1.075268817204301%;padding:0}#converter .form #submit{color:#fff;background-color:#0087cf;font-size:15px;font-weight:500;float:left;width:22.383513%;height:36px;border:none;border-radius:3px;margin:3px .5376344086021505% 3px 0;curs
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 34 25 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 23 30 30 38 37 63 66 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 7d 23 73 65 70 61 72 61 74 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 61 64 61 64 61 3b 77 69 64 74 68 3a 36 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 37 25 3b 68 65 69 67 68 74 3a 35 70 78 3b 6d 61 72 67 69 6e 3a 34 30 70 78 20 61 75 74 6f 7d 23 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 32 32 32 31 32 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 3b 70 61 64 64 69 6e 67 3a 30 Data Ascii: 4%;height:42px;border:1px #0087cf solid;border-radius:3px;display:none;font-weight:800}#separator{background-color:#dadada;width:6.666666666666667%;height:5px;margin:40px auto}#text{color:#222121;font-size:15px;font-weight:400;text-align:justify;padding:0
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 39 36 2e 36 37 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 3a 31 2e 36 37 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 64 69 76 2e 72 69 67 68 74 5f 70 61 72 74 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 77 69 64 74 68 3a 37 30 25 7d 61 2e 64 6f 77 6e 6c 6f 61 64 5f 6d 70 34 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 32 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6f 75 74 73 65 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 62 75 74 74 6f 6e 62 6f 72 64 65 72 3b 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 69 6e 69 74 69 61 6c 3b 61 70 70 65 61 72 61 6e 63 65 3a 61 75 74 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 64 69 76 23 Data Ascii: center;width:96.67%;border-radius:2px;margin-bottom:15px;padding:1.67%;display:flex}div.right_part{margin:auto;width:70%}a.download_mp4{border-width:2px;border-style:outset;border-color:buttonborder;border-image:initial;appearance:auto;font-size:12px}div#
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 38 30 30 7d 23 61 64 20 61 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 2c 23 64 77 6e 5f 61 64 20 61 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 61 38 30 63 7d 23 61 64 20 61 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 2c 23 64 77 6e 5f 61 64 20 61 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 33 32 39 31 61 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 33 2e 35 32 39 39 31 34 35 32 39 39 31 34 35 33 25 7d 23 61 64 20 23 74 65 78 74 2c 23 64 77 6e 5f 61 64 20 23 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 63 Data Ascii: eight:800}#ad a:first-of-type,#dwn_ad a:first-of-type{color:#fff;background-color:#00a80c}#ad a:last-of-type,#dwn_ad a:last-of-type{color:#fff;background-color:#c3291a;margin-left:13.52991452991453%}#ad #text,#dwn_ad #text{font-size:12px;font-weight:300;c
2024-01-10 21:51:37 UTC	1206	IN	Data Raw: 69 6f 6e 3a 66 69 78 65 64 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 31 20 31 3b 74 6f 70 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 30 3b 74 6f 70 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 73 68 61 72 65 42 75 74 74 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 65 78 3a 31 20 31 3b 6c 65 66 74 3a 30 7d 2e 73 68 61 72 65 42 75 74 74 6f 6e 73 20 61 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: ion:fixed;display:flex;flex:1 1;top:auto;bottom:0;top:auto;-webkit-transform:none;-moz-transform:none;-ms-transform:none;transform:none}.shareButtons{display:inline-block;flex:1 1;left:0}.shareButtons a{display:block;margin:0 auto;line-height:24px;padding
2024-01-10 21:51:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49727	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:37 UTC	593	OUT	GET /images/globe.png HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:37 UTC	734	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:37 GMT Content-Type: image/png Content-Length: 867 Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT ETag: "653c4b5c-363" Expires: Wed, 10 Jan 2024 21:52:37 GMT Cache-Control: max-age=14400 X-Cache: HIT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cqlr%2BEL1a6%2Fh%2B80PAQIdSU5NdvgbbMzD6acPu31XXzEiekG%2Bml5mHjJxV8y23gZ8EUSbQ0Q44hib2YunOPYvfGNlnsQqImoNCPENoJHmI9CRCeyTnXFYR4b2%2FFTD%2FgGe2A3H"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824723971207c-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:37 UTC	635	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 f3 50 4c 54 45 00 00 00 00 86 d0 00 88 ce 00 85 d1 00 88 cf 00 87 ce 00 87 d0 00 88 cf 00 86 cc 00 80 d5 00 88 ce 00 87 cf 00 88 d0 00 86 cf 00 86 d0 00 87 cf 00 87 cf 00 aa aa 00 87 cf 00 87 cf 00 89 cf 00 89 d1 00 87 cf 00 87 cf 00 86 d0 00 87 d1 00 89 cf 00 88 d0 00 88 cf 00 86 cf 00 87 d0 00 87 d0 00 88 ce 00 83 d0 00 87 d0 00 88 d2 00 87 cf 00 86 cf 00 87 ce 00 87 d0 00 86 ce 00 86 ce 00 86 ce 00 87 cf 00 85 d1 00 87 ce 00 88 d2 00 86 d0 00 87 cf 00 88 ce 00 8a cf 00 Data Ascii: PNGIHDR(-SgAMAa cHRMz&u0`:pQ<PLTE
2024-01-10 21:51:37 UTC	232	IN	Data Raw: 65 e8 8c 63 ba e7 b9 87 3c f2 c8 b8 a0 11 d7 65 be f4 89 f1 99 86 21 06 fd 34 4d 92 38 8e 7a 08 5f 88 82 4e db 5d 79 af be f7 e6 36 ea 81 3a dd 41 e5 1d 6b 81 c8 c6 87 75 78 ee 73 2d 36 a6 f1 f5 fd ff 6f e1 47 ff d5 66 7f 5b c5 3b 2b 1e 27 21 ee 0f 20 3e 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 32 30 32 30 2d 31 30 2d 30 39 54 31 32 3a 30 35 3a 31 30 2b 30 30 3a 30 30 63 50 cc 8d 00 00 00 25 74 45 58 74 64 61 74 65 3a 6d 6f 64 69 66 79 00 32 30 32 30 2d 31 30 2d 30 39 54 31 32 3a 30 35 3a 31 30 2b 30 30 3a 30 30 12 0d 74 31 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ec<e!4M8z_N]y6:Akuxs-6oGf[;+'! >%tEXtdate:create2020-10-09T12:05:10+00:00cP%tEXtdate:modify2020-10-09T12:05:10+00:00t1tEXtSoftwarewww.inkscape.org<IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49723	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:37 UTC	539	OUT	GET /js/jquery-3.4.1.min.js HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:37 UTC	768	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:37 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT Vary: Accept-Encoding ETag: W/"653c4b5c-15850" Expires: Wed, 10 Jan 2024 21:52:37 GMT Cache-Control: max-age=14400 X-Cache: HIT CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=43MVCaSlgMCF3ZL1ySVnkLWjbdhEGUsAsR8DPGT3lm8XDu4%2FPUA5%2BS%2FSIKZjJpq8kZjv0sjQRDPTyr7uIIx9FeDV50Fy9xmQCVreIYjGaAhVsrak91O8Tuuq7MQFxLP18IJB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438247278552d22-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:37 UTC	601	IN	Data Raw: 37 63 62 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7cb1/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 45 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 63 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 Data Ascii: e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.a
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 6d 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29 3b 73 3c 75 3b 73 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 61 21 3d 3d 72 26 26 28 6c 26 26 72 26 26 28 6b Data Ascii: var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|m(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(k
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 64 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 72 65 74 75 72 6e 20 67 2e 61 70 70 6c 79 28 5b 5d 2c 61 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 79 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 Data Ascii: +)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(d(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g.apply([],a)},guid:1,support:y}),"function"==typeof Symb
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 49 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 57 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 24 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4d 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 Data Ascii: V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"\|[])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+$),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+M+"(even\|odd\|((
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 72 26 26 28 28 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 6d 29 21 3d 3d 43 26 26 54 28 65 29 2c 65 3d 65 7c 7c 43 2c 45 29 29 7b 69 66 28 31 31 21 3d 3d 70 26 26 28 75 3d 5a 2e 65 78 65 63 28 74 29 29 29 69 66 28 69 3d 75 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 70 29 7b 69 66 28 21 28 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 Data Ascii: e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==p)return n;if(!r&&((e?e.ownerDocument\|\|e:m)!==C&&T(e),e=e\|\|C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)retur
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e Data Ascii: rceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nodeName.toLowerCase();return
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 64 2e 67 65 74 42 79 49 64 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 6b 2c 21 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 6b 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 42 79 49 64 3f 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 Data Ascii: yTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(function(e){return a.appendChild(e).id=k,!C.getElementsByName\|\|!C.getElementsByName(k).length}),d.getById?(b.filter.ID=function(e){var t=e.replace(te,ne);return
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4d 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 52 2b 22 29 Data Ascii: id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option selected=''></option></select>",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[^$]="+M+"(?:''\|\"\")"),e.querySelectorAll("[selected]").length\|\|v.push("\\["+M+"*(?:value\|"+R+")
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 72 29 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 77 68 69 6c 65 28 74 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 74 3d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 44 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 6e 3d 21 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f Data Ascii: n e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},D=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49724	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:37 UTC	544	OUT	GET /js/custome.js?ver=985289062 HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:37 UTC	755	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:37 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT Vary: Accept-Encoding ETag: W/"653c4b5c-876" Expires: Wed, 10 Jan 2024 21:52:37 GMT Cache-Control: max-age=14400 X-Cache: HIT CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7HS6LK8V0IZvHSz33B6PyrYk3FYZDrn3hEEREpv9pCDityvKf9Y9%2BfvLkRV0FzrKGSfBBIqsGzaKQgL9WW9dPUHKqYu7kt0Ti6LlPhu5p36a9kUs6ErEYaepHcG5Dygmh9DX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824727be78212-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:37 UTC	614	IN	Data Raw: 38 37 36 0d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 24 28 27 2e 66 6f 72 6d 61 74 65 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 24 28 27 2e 66 6f 72 6d 61 74 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 3b 0a 09 09 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 3b 0a 09 09 76 61 72 20 66 6f 72 6d 61 74 3d 24 28 74 68 69 73 29 2e 74 65 78 74 28 29 3b 0a 09 09 24 28 27 23 66 6f 72 6d 61 74 65 27 29 2e 76 61 6c 28 66 6f 72 6d 61 74 29 3b 0a 09 7d 29 3b 0a 0a 09 24 28 22 23 69 6e 70 75 74 22 29 2e 6b 65 79 75 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 09 09 76 61 72 20 63 6f 64 65 20 3d 20 28 65 2e 6b Data Ascii: 876jQuery(document).ready(function(){$('.formate').click(function(){$('.formate').removeClass("active");$(this).addClass("active");var format=$(this).text();$('#formate').val(format);});$("#input").keyup(function(e){var code = (e.k
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 20 20 20 20 09 76 61 72 20 6e 65 77 5f 71 75 65 72 79 20 3d 20 24 28 27 23 73 75 67 67 65 73 74 69 6f 6e 5f 6c 69 73 74 20 6c 69 2e 73 65 6c 65 63 74 65 64 27 29 2e 74 65 78 74 28 29 3b 0a 09 09 09 20 20 20 20 09 24 28 27 23 69 6e 70 75 74 27 29 2e 76 61 6c 28 6e 65 77 5f 71 75 65 72 79 29 3b 0a 0a 09 09 09 20 20 20 20 09 62 72 65 61 6b 3b 0a 09 09 09 20 20 20 20 63 61 73 65 20 34 30 3a 20 20 20 09 2f 2f 62 6f 74 74 6f 6d 20 61 72 72 6f 77 20 6b 65 79 0a 09 09 09 20 20 20 20 09 76 61 72 20 6e 65 77 5f 69 6e 64 65 78 20 3d 20 69 6e 64 65 78 20 2b 20 31 3b 0a 09 09 09 20 20 20 20 09 24 28 27 23 73 75 67 67 65 73 74 69 6f 6e 5f 6c 69 73 74 20 6c 69 27 29 2e 65 71 28 6e 65 77 5f 69 6e 64 65 78 29 2e 61 64 64 43 6c 61 73 73 28 27 73 65 6c 65 63 74 65 64 27 29 Data Ascii: var new_query = $('#suggestion_list li.selected').text(); $('#input').val(new_query); break; case 40: //bottom arrow key var new_index = index + 1; $('#suggestion_list li').eq(new_index).addClass('selected')
2024-01-10 21:51:37 UTC	190	IN	Data Raw: 6f 78 22 29 2e 68 69 64 65 28 29 3b 0a 09 09 24 28 27 23 73 75 62 6d 69 74 27 29 2e 63 6c 69 63 6b 28 29 3b 0a 0a 09 7d 29 3b 09 0a 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6d 6f 75 73 65 75 70 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 09 09 69 66 20 28 24 28 65 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 22 23 73 75 67 67 65 73 73 74 69 6f 6e 2d 62 6f 78 22 29 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 30 29 20 7b 0a 09 09 09 24 28 22 23 73 75 67 67 65 73 73 74 69 6f 6e 2d 62 6f 78 22 29 2e 68 69 64 65 28 29 3b 0a 09 09 7d 0a 09 7d 29 3b 0a 7d 29 3b 0d 0a Data Ascii: ox").hide();$('#submit').click();});$(document).mouseup(function (e) {if ($(e.target).closest("#suggesstion-box").length === 0) {$("#suggesstion-box").hide();}});});
2024-01-10 21:51:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49726	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:37 UTC	592	OUT	GET /images/logo.png HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:37 UTC	724	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:37 GMT Content-Type: image/png Content-Length: 4208 Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT ETag: "653c4b5c-1070" Expires: Wed, 10 Jan 2024 21:52:37 GMT Cache-Control: max-age=14400 X-Cache: HIT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8wn9bOvrun25E9QUIQadH5FCkrQujOshFKWku0dC1cSqHuBH5X6905Ekql62HXmsrUlAwkbAbzOICF91Rtf8EFByExTiXwGbyQOVDUeZmE1qXW9uZYjuDQs7uhYrXcQ6nJGL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824726dc73b06-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:37 UTC	645	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c2 00 00 00 3d 08 06 00 00 00 ff 25 b6 fd 00 00 10 37 49 44 41 54 78 da ed 9d 6d 70 5c d5 79 c7 7f e7 ee 6a 25 cb 2b e9 1a 39 42 7e 21 08 63 4b 18 69 d7 72 21 e1 1d 4b 24 7a 0b 93 d8 e9 97 7e b0 19 c4 b4 fd d2 32 ad 01 cf d0 86 4c 30 09 2d a1 d5 24 fa 14 a6 d3 66 6c 18 66 e8 4c 3a c1 6e 26 e3 2c 2f b1 5c da 34 6d 43 bd da ab 12 47 26 20 43 03 8e 03 58 7e 6b b1 a4 bd 4f 3f ec 5d 73 b5 5a ad ee b9 77 b5 92 9a fb 9f d9 f1 ec fa 9e fb 9c 7b ee f3 3f e7 79 3b 47 10 22 44 88 10 21 42 00 28 f7 97 d8 da 8d 6c de ff c3 35 c0 47 1e db 4f 01 ab de 78 70 9b ed b7 03 4d 5f 7c 90 b5 7d 7f 78 0f f0 aa c7 26 ff f8 c6 83 db 76 ae a4 41 5e b5 6a 15 9b b7 6c 5e 07 bc b7 0c ba 33 09 58 c0 0f 80 67 ac 8c 75 31 a4 01 18 Data Ascii: PNGIHDR=%7IDATxmp\yj%+9B~!cKir!K$z~2L0-$flfL:n&,/\4mCG& CX~kO?]sZw{?y;G"D!B(l5GOxpM_\|}x&vA^jl^3Xgu1
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 6c d8 02 7a 61 c5 39 32 9b 7a 7e 9f ab ef fd e3 bb 34 fc 8c c5 c4 4f ac bd bf 33 e5 fe 21 16 8b e9 28 f3 c9 32 2b b3 97 b6 d3 c0 a9 92 ef 29 62 d0 de de 5e 0d ac 0a 38 3e 62 65 ac 73 cb 9a 08 a2 1f d9 08 3c 8b 04 95 19 5b d3 cc ba 2f fc 51 03 22 ff b4 4c c6 73 0d b9 b2 93 42 b4 05 18 d3 36 8f 43 79 c5 bc 71 f2 16 5e fd bd 37 ad 8c 95 9d 33 c1 34 35 71 75 f3 d5 77 03 7b 81 1d c0 55 e5 18 a0 44 32 61 03 ff 09 fc 8d 95 b1 fe ce b3 a2 c6 a2 6c bc 71 a3 19 b7 e3 47 15 aa b3 e4 60 88 1c 1b b3 c6 ba 7c 11 c1 09 9d ea cc ce 81 cc 94 68 7c 0d 86 c8 6a 72 d9 4d 2f c8 02 bf 9c 65 76 dc 78 17 22 cb 2a 3e 3f 5f dd 8e b6 69 e4 ac 24 6b f0 16 da 7c d7 ca 58 57 22 3f 9a 99 ec 39 ab 90 e3 9b 3c 06 3c b9 08 63 64 00 37 03 37 27 92 89 0d 56 c6 7a c2 4b a3 ad 6d 5b 21 cb 30 Data Ascii: lza92z~4O3!(2+)b^8>bes<[/Q"LsB6Cyq^7345quw{UD2alqG`\|h\|jrM/evx"*>?_i$k\|XW"?9<<cd77'VzKm[!0
2024-01-10 21:51:37 UTC	1369	IN	Data Raw: 0a e6 ca 03 78 d9 c7 7d d1 ca 58 ef 97 c3 c9 d6 24 5f 39 f0 63 11 b1 e3 d9 f8 48 91 6a d2 73 d9 99 ec 15 12 00 54 57 55 63 88 d1 59 fa 1d fb 3f ea c7 00 c8 7e 7c 91 13 df b9 ef 63 11 f9 bc 88 fc c0 83 33 b9 98 9f ac 88 7c 4f 44 b6 8f 7e 7d c7 bf 95 6f dc 05 90 36 0f 04 3c 51 c6 97 ed 45 29 83 e4 01 82 14 db 05 31 a9 ca 81 67 14 ea a0 52 6a 5b 91 57 35 f8 c6 1b 6f a4 67 ff 24 08 52 d2 2c f3 53 5a 31 db 59 06 2e 7f f0 0e 99 6f 74 7d 60 76 7c fe 4b 9f de f5 d5 04 d0 07 6c 23 97 26 af 2d 31 e3 ad f3 28 eb 2d e6 cf 05 9c 25 b7 6f f6 75 20 95 79 b2 eb dd 72 8f ba d8 9e 0f 26 08 ec 8f 38 79 80 0d 0b 38 8a 79 94 2d 0f e0 b7 ad b3 0a 19 54 ee 80 81 83 82 dc a6 54 f1 30 a9 65 59 87 e6 98 3d b9 3e ee 28 b1 1a 8c 06 e9 d0 9c 59 67 72 ec 15 26 c7 5e b1 c8 9d 8f 39 2f Data Ascii: x}X$_9cHjsTWUcY?~\|c3\|OD~}o6<QE)1gRj[W5og$R,SZ1Y.ot}`v\|Kl#&-1(-%ou yr&8y8y-TT0eY=>(Ygr&^9/
2024-01-10 21:51:37 UTC	825	IN	Data Raw: 92 ee ef ef 3f 9c 97 d1 db db cb be 7d fb 3a 6d db fe 36 30 2a 22 87 0c c3 d8 49 ae f4 a1 45 44 44 29 95 b6 6d fb f0 c0 c0 c0 48 5e c6 e5 cb 97 0f 2a a5 24 16 8b 3d d0 dd dd 3d e9 ee 77 e1 3d fb fb fb f7 ce d3 b7 63 4e df b6 15 eb db d0 d0 10 c9 64 72 d0 b6 ed fb 0d c3 78 16 48 8b c8 4e 00 11 e9 1a 1b 1b eb ce ff bf 52 ca 74 ee 3b 81 73 6e 92 61 18 0f f5 f6 f6 a6 0b 64 b7 88 48 97 33 8e 93 e4 f6 0c 1c 07 d2 b1 58 ec 70 fe 59 8a 8c cb b0 61 18 f7 e7 65 e7 ef 1d 12 61 91 91 57 02 11 39 20 22 87 45 64 ef c0 c0 c0 44 91 ff 6f b1 6d fb e0 ab af be 3a d1 d3 d3 b3 0b 38 00 8c da b6 3d e8 be 7e cf 9e 3d ec de bd bb 4b 29 75 30 f7 2e a5 7b 60 60 60 22 ff bb 61 18 47 81 73 4a a9 ae 42 62 39 4a bf 53 44 1e ea ef ef 1f ce 2b 89 88 8c 00 6f c7 62 b1 ee 42 05 12 91 a3 Data Ascii: ?}:m60"IEDD)mH^$==w=cNdrxHNRt;snadH3XpYaeaW9 "EdDom:8=~=K)u0.{```"aGsJBb9JSD+obB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49730	104.21.76.46	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:37 UTC	356	OUT	GET /images/globe.png HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:38 UTC	732	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:38 GMT Content-Type: image/png Content-Length: 867 Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT ETag: "653c4b5c-363" Expires: Wed, 10 Jan 2024 21:52:38 GMT Cache-Control: max-age=14400 X-Cache: HIT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5f6e4ID6YbGbbZogkY1us8NQGIHSr%2BpSH1%2BqnJvsxIhoaNSEMLuubs7m3LsSTGj3AS%2Fn7j0NY%2BWe4O5GLYRLhqLfBDbREaGcuGNAZ1VTazijWLn3kcSv4z8Jp7j0hODS%2FkyH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84382476d855580f-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:38 UTC	637	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 f3 50 4c 54 45 00 00 00 00 86 d0 00 88 ce 00 85 d1 00 88 cf 00 87 ce 00 87 d0 00 88 cf 00 86 cc 00 80 d5 00 88 ce 00 87 cf 00 88 d0 00 86 cf 00 86 d0 00 87 cf 00 87 cf 00 aa aa 00 87 cf 00 87 cf 00 89 cf 00 89 d1 00 87 cf 00 87 cf 00 86 d0 00 87 d1 00 89 cf 00 88 d0 00 88 cf 00 86 cf 00 87 d0 00 87 d0 00 88 ce 00 83 d0 00 87 d0 00 88 d2 00 87 cf 00 86 cf 00 87 ce 00 87 d0 00 86 ce 00 86 ce 00 86 ce 00 87 cf 00 85 d1 00 87 ce 00 88 d2 00 86 d0 00 87 cf 00 88 ce 00 8a cf 00 Data Ascii: PNGIHDR(-SgAMAa cHRMz&u0`:pQ<PLTE
2024-01-10 21:51:38 UTC	230	IN	Data Raw: 8c 63 ba e7 b9 87 3c f2 c8 b8 a0 11 d7 65 be f4 89 f1 99 86 21 06 fd 34 4d 92 38 8e 7a 08 5f 88 82 4e db 5d 79 af be f7 e6 36 ea 81 3a dd 41 e5 1d 6b 81 c8 c6 87 75 78 ee 73 2d 36 a6 f1 f5 fd ff 6f e1 47 ff d5 66 7f 5b c5 3b 2b 1e 27 21 ee 0f 20 3e 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 32 30 32 30 2d 31 30 2d 30 39 54 31 32 3a 30 35 3a 31 30 2b 30 30 3a 30 30 63 50 cc 8d 00 00 00 25 74 45 58 74 64 61 74 65 3a 6d 6f 64 69 66 79 00 32 30 32 30 2d 31 30 2d 30 39 54 31 32 3a 30 35 3a 31 30 2b 30 30 3a 30 30 12 0d 74 31 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: c<e!4M8z_N]y6:Akuxs-6oGf[;+'! >%tEXtdate:create2020-10-09T12:05:10+00:00cP%tEXtdate:modify2020-10-09T12:05:10+00:00t1tEXtSoftwarewww.inkscape.org<IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49729	104.21.76.46	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:37 UTC	355	OUT	GET /images/logo.png HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:38 UTC	732	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:38 GMT Content-Type: image/png Content-Length: 4208 Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT ETag: "653c4b5c-1070" Expires: Wed, 10 Jan 2024 21:52:38 GMT Cache-Control: max-age=14400 X-Cache: HIT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F2ONmouy%2BkOr6ofbnoihnUTzsDdJFP%2BCjmvn9z2TxMEojqKfsOkEPVSbanT6N4VNp0uSmNWVwAqGPxostev075UVj42kAbqvWWo29gKJImGLg2TZ3kkgEHslyz%2FFrj9vVYgI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84382476dc872039-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:38 UTC	637	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c2 00 00 00 3d 08 06 00 00 00 ff 25 b6 fd 00 00 10 37 49 44 41 54 78 da ed 9d 6d 70 5c d5 79 c7 7f e7 ee 6a 25 cb 2b e9 1a 39 42 7e 21 08 63 4b 18 69 d7 72 21 e1 1d 4b 24 7a 0b 93 d8 e9 97 7e b0 19 c4 b4 fd d2 32 ad 01 cf d0 86 4c 30 09 2d a1 d5 24 fa 14 a6 d3 66 6c 18 66 e8 4c 3a c1 6e 26 e3 2c 2f b1 5c da 34 6d 43 bd da ab 12 47 26 20 43 03 8e 03 58 7e 6b b1 a4 bd 4f 3f ec 5d 73 b5 5a ad ee b9 77 b5 92 9a fb 9f d9 f1 ec fa 9e fb 9c 7b ee f3 3f e7 79 3b 47 10 22 44 88 10 21 42 00 28 f7 97 d8 da 8d 6c de ff c3 35 c0 47 1e db 4f 01 ab de 78 70 9b ed b7 03 4d 5f 7c 90 b5 7d 7f 78 0f f0 aa c7 26 ff f8 c6 83 db 76 ae a4 41 5e b5 6a 15 9b b7 6c 5e 07 bc b7 0c ba 33 09 58 c0 0f 80 67 ac 8c 75 31 a4 01 18 Data Ascii: PNGIHDR=%7IDATxmp\yj%+9B~!cKir!K$z~2L0-$flfL:n&,/\4mCG& CX~kO?]sZw{?y;G"D!B(l5GOxpM_\|}x&vA^jl^3Xgu1
2024-01-10 21:51:38 UTC	1369	IN	Data Raw: ae 15 6c 2d 33 25 f0 ec 6c d8 02 7a 61 c5 39 32 9b 7a 7e 9f ab ef fd e3 bb 34 fc 8c c5 c4 4f ac bd bf 33 e5 fe 21 16 8b e9 28 f3 c9 32 2b b3 97 b6 d3 c0 a9 92 ef 29 62 d0 de de 5e 0d ac 0a 38 3e 62 65 ac 73 cb 9a 08 a2 1f d9 08 3c 8b 04 95 19 5b d3 cc ba 2f fc 51 03 22 ff b4 4c c6 73 0d b9 b2 93 42 b4 05 18 d3 36 8f 43 79 c5 bc 71 f2 16 5e fd bd 37 ad 8c 95 9d 33 c1 34 35 71 75 f3 d5 77 03 7b 81 1d c0 55 e5 18 a0 44 32 61 03 ff 09 fc 8d 95 b1 fe ce b3 a2 c6 a2 6c bc 71 a3 19 b7 e3 47 15 aa b3 e4 60 88 1c 1b b3 c6 ba 7c 11 c1 09 9d ea cc ce 81 cc 94 68 7c 0d 86 c8 6a 72 d9 4d 2f c8 02 bf 9c 65 76 dc 78 17 22 cb 2a 3e 3f 5f dd 8e b6 69 e4 ac 24 6b f0 16 da 7c d7 ca 58 57 22 3f 9a 99 ec 39 ab 90 e3 9b 3c 06 3c b9 08 63 64 00 37 03 37 27 92 89 0d 56 c6 7a c2 Data Ascii: l-3%lza92z~4O3!(2+)b^8>bes<[/Q"LsB6Cyq^7345quw{UD2alqG`\|h\|jrM/evx"*>?_i$k\|XW"?9<<cd77'Vz
2024-01-10 21:51:38 UTC	1369	IN	Data Raw: fd b5 3b a7 2a 4c 84 2b 0a e6 ca 03 78 d9 c7 7d d1 ca 58 ef 97 c3 c9 d6 24 5f 39 f0 63 11 b1 e3 d9 f8 48 91 6a d2 73 d9 99 ec 15 12 00 54 57 55 63 88 d1 59 fa 1d fb 3f ea c7 00 c8 7e 7c 91 13 df b9 ef 63 11 f9 bc 88 fc c0 83 33 b9 98 9f ac 88 7c 4f 44 b6 8f 7e 7d c7 bf 95 6f dc 05 90 36 0f 04 3c 51 c6 97 ed 45 29 83 e4 01 82 14 db 05 31 a9 ca 81 67 14 ea a0 52 6a 5b 91 57 35 f8 c6 1b 6f a4 67 ff 24 08 52 d2 2c f3 53 5a 31 db 59 06 2e 7f f0 0e 99 6f 74 7d 60 76 7c fe 4b 9f de f5 d5 04 d0 07 6c 23 97 26 af 2d 31 e3 ad f3 28 eb 2d e6 cf 05 9c 25 b7 6f f6 75 20 95 79 b2 eb dd 72 8f ba d8 9e 0f 26 08 ec 8f 38 79 80 0d 0b 38 8a 79 94 2d 0f e0 b7 ad b3 0a 19 54 ee 80 81 83 82 dc a6 54 f1 30 a9 65 59 87 e6 98 3d b9 3e ee 28 b1 1a 8c 06 e9 d0 9c 59 67 72 ec 15 26 Data Ascii: ;*L+x}X$_9cHjsTWUcY?~\|c3\|OD~}o6<QE)1gRj[W5og$R,SZ1Y.ot}`v\|Kl#&-1(-%ou yr&8y8y-TT0eY=>(Ygr&
2024-01-10 21:51:38 UTC	833	IN	Data Raw: 44 c4 04 1a 94 52 23 22 92 ee ef ef 3f 9c 97 d1 db db cb be 7d fb 3a 6d db fe 36 30 2a 22 87 0c c3 d8 49 ae f4 a1 45 44 44 29 95 b6 6d fb f0 c0 c0 c0 48 5e c6 e5 cb 97 0f 2a a5 24 16 8b 3d d0 dd dd 3d e9 ee 77 e1 3d fb fb fb f7 ce d3 b7 63 4e df b6 15 eb db d0 d0 10 c9 64 72 d0 b6 ed fb 0d c3 78 16 48 8b c8 4e 00 11 e9 1a 1b 1b eb ce ff bf 52 ca 74 ee 3b 81 73 6e 92 61 18 0f f5 f6 f6 a6 0b 64 b7 88 48 97 33 8e 93 e4 f6 0c 1c 07 d2 b1 58 ec 70 fe 59 8a 8c cb b0 61 18 f7 e7 65 e7 ef 1d 12 61 91 91 57 02 11 39 20 22 87 45 64 ef c0 c0 c0 44 91 ff 6f b1 6d fb e0 ab af be 3a d1 d3 d3 b3 0b 38 00 8c da b6 3d e8 be 7e cf 9e 3d ec de bd bb 4b 29 75 30 f7 2e a5 7b 60 60 60 22 ff bb 61 18 47 81 73 4a a9 ae 42 62 39 4a bf 53 44 1e ea ef ef 1f ce 2b 89 88 8c 00 6f c7 Data Ascii: DR#"?}:m60"IEDD)mH^$==w=cNdrxHNRt;snadH3XpYaeaW9 "EdDom:8=~=K)u0.{```"aGsJBb9JSD+o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49737	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:39 UTC	748	OUT	GET /images/YTMP3.svg HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.0.1704923498.0.0.0; _ga=GA1.1.20077430.1704923498
2024-01-10 21:51:39 UTC	763	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:39 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT Vary: Accept-Encoding ETag: W/"653c4b5c-c2a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Cache: EXPIRED CF-Cache-Status: HIT Age: 275462 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=05DKShaXjD3ZZaM1sMZsnMoB7qW0ZIU3mzUv9BNbwDw4x%2BVG3RN%2B6lLBt%2FkVYSbQ66YCAtJwpL8I0WWcl%2Bp0cWqrbI81XLEdlxo%2Bvl9s7xE3wkNFJkZO7OG%2B%2FfkBQgn1kbYS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824805ad10a13-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:39 UTC	606	IN	Data Raw: 63 32 61 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 Data Ascii: c2a<?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.or
2024-01-10 21:51:39 UTC	1369	IN	Data Raw: 41 41 41 43 4e 46 42 4d 56 45 58 2f 2f 2f 38 41 68 38 38 41 68 38 38 41 68 38 38 41 0a 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 0a 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 0a 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 Data Ascii: AAACNFBMVEX///8Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88A
2024-01-10 21:51:39 UTC	1146	IN	Data Raw: 6b 36 70 4b 4d 31 6d 6f 7a 43 62 66 49 33 46 76 4a 6e 75 77 49 73 43 30 6c 4e 57 31 37 65 6b 62 6d 44 74 4e 4f 31 47 58 74 6b 6e 2f 42 0a 62 69 4a 6b 4b 77 4a 4d 34 66 4e 72 78 61 59 72 42 68 52 4b 44 6e 70 79 6c 51 42 35 50 70 49 56 33 36 4d 34 4f 66 6d 30 73 6e 76 6c 67 48 32 79 4c 5a 4f 76 43 44 41 57 6f 43 39 41 42 6a 43 4a 59 59 56 46 59 71 74 59 65 58 33 32 0a 6f 2b 2b 41 44 4a 42 4b 4d 54 6b 48 7a 53 57 6c 68 38 71 6f 58 65 35 67 67 53 76 51 65 56 67 4b 4f 45 49 78 52 34 2b 78 58 67 53 4f 34 72 67 44 51 43 55 71 71 36 51 41 32 6d 50 56 52 72 46 62 55 78 75 66 34 69 41 65 54 71 44 30 0a 70 41 52 51 56 34 39 57 62 31 42 54 54 69 6d 4e 49 42 75 4e 44 61 72 69 77 59 55 6d 71 4e 45 65 51 4e 51 6d 64 51 44 68 6d 4a 2b 32 41 35 78 42 6b 34 63 36 67 45 46 Data Ascii: k6pKM1mozCbfI3FvJnuwIsC0lNW17ekbmDtNO1GXtkn/BbiJkKwJM4fNrxaYrBhRKDnpylQB5PpIV36M4Ofm0snvlgH2yLZOvCDAWoC9ABjCJYYVFYqtYeX32o++ADJBKMTkHzSWlh8qoXe5ggSvQeVgKOEIxR4+xXgSO4rgDQCUqq6QA2mPVRrFbUxuf4iAeTqD0pARQV49Wb1BTTimNIBuNDariwYUmqNEeQNQmdQDhmJ+2A5xBk4c6gEF
2024-01-10 21:51:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49739	104.21.76.46	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:39 UTC	511	OUT	GET /images/YTMP3.svg HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.0.1704923498.0.0.0; _ga=GA1.1.20077430.1704923498
2024-01-10 21:51:40 UTC	770	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:40 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT Vary: Accept-Encoding ETag: W/"653c4b5c-c2a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Cache: EXPIRED CF-Cache-Status: HIT Age: 3581221 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b7pNOCiFDW9%2Fq%2FH1EuJkZK6PoRWrTqW6W%2BhipbByFommzbNOeDr%2FZp0AAY4B6nzbBkUR9n2Y%2B3Z%2BBlE8QMc3QGeMHwVbRCj%2F9iv%2BwMCv2JP9tv6ke%2FnijI%2F9Hpwzwcltqk0g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824832f50082f-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:40 UTC	599	IN	Data Raw: 63 32 61 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 Data Ascii: c2a<?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.or
2024-01-10 21:51:40 UTC	1369	IN	Data Raw: 33 43 63 75 6c 45 38 41 41 41 43 4e 46 42 4d 56 45 58 2f 2f 2f 38 41 68 38 38 41 68 38 38 41 68 38 38 41 0a 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 0a 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 0a 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 38 38 41 68 Data Ascii: 3CculE8AAACNFBMVEX///8Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah88Ah
2024-01-10 21:51:40 UTC	1153	IN	Data Raw: 45 79 50 6f 46 67 45 6b 36 70 4b 4d 31 6d 6f 7a 43 62 66 49 33 46 76 4a 6e 75 77 49 73 43 30 6c 4e 57 31 37 65 6b 62 6d 44 74 4e 4f 31 47 58 74 6b 6e 2f 42 0a 62 69 4a 6b 4b 77 4a 4d 34 66 4e 72 78 61 59 72 42 68 52 4b 44 6e 70 79 6c 51 42 35 50 70 49 56 33 36 4d 34 4f 66 6d 30 73 6e 76 6c 67 48 32 79 4c 5a 4f 76 43 44 41 57 6f 43 39 41 42 6a 43 4a 59 59 56 46 59 71 74 59 65 58 33 32 0a 6f 2b 2b 41 44 4a 42 4b 4d 54 6b 48 7a 53 57 6c 68 38 71 6f 58 65 35 67 67 53 76 51 65 56 67 4b 4f 45 49 78 52 34 2b 78 58 67 53 4f 34 72 67 44 51 43 55 71 71 36 51 41 32 6d 50 56 52 72 46 62 55 78 75 66 34 69 41 65 54 71 44 30 0a 70 41 52 51 56 34 39 57 62 31 42 54 54 69 6d 4e 49 42 75 4e 44 61 72 69 77 59 55 6d 71 4e 45 65 51 4e 51 6d 64 51 44 68 6d 4a 2b 32 41 35 78 42 Data Ascii: EyPoFgEk6pKM1mozCbfI3FvJnuwIsC0lNW17ekbmDtNO1GXtkn/BbiJkKwJM4fNrxaYrBhRKDnpylQB5PpIV36M4Ofm0snvlgH2yLZOvCDAWoC9ABjCJYYVFYqtYeX32o++ADJBKMTkHzSWlh8qoXe5ggSvQeVgKOEIxR4+xXgSO4rgDQCUqq6QA2mPVRrFbUxuf4iAeTqD0pARQV49Wb1BTTimNIBuNDariwYUmqNEeQNQmdQDhmJ+2A5xB
2024-01-10 21:51:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49742	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:48 UTC	932	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=h&_=1704923497000 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:48 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:48 GMT Expires: Wed, 10 Jan 2024 21:51:48 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-X5ilNe_aV2xDXWHRDfd0lA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:48 UTC	596	IN	Data Raw: 32 34 64 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 36 39 39 39 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 36 39 39 39 28 5b 22 68 22 2c 5b 5b 22 68 69 6e 64 69 20 73 6f 6e 67 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 61 6e 75 6d 61 6e 20 63 68 61 6c 69 73 61 22 2c 30 2c 5b 35 31 32 2c 34 33 33 5d 5d 2c 5b 22 68 69 6e 64 69 20 6d 6f 76 69 65 22 2c 30 2c 5b 35 31 32 2c 34 33 33 5d 5d 2c 5b 22 68 61 70 70 79 20 62 69 72 74 68 64 61 79 20 73 6f 6e 67 22 2c 30 2c 5b 35 31 32 2c 34 33 33 5d 5d 2c 5b 22 68 61 70 70 79 20 62 69 72 74 68 64 61 79 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 65 6c 6c 75 76 61 20 62 6f 73 Data Ascii: 24djQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["h",[["hindi song",0,[512]],["hanuman chalisa",0,[512,433]],["hindi movie",0,[512,433]],["happy birthday song",0,[512,433]],["happy birthday",0,[512]],["helluva bos
2024-01-10 21:51:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49743	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:48 UTC	933	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497001&q=ht&_=1704923497002 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:48 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:48 GMT Expires: Wed, 10 Jan 2024 21:51:48 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CUkXLNKygs5zpzhZ6fjX9g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:48 UTC	562	IN	Data Raw: 32 32 62 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 31 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 31 28 5b 22 68 74 22 2c 5b 5b 22 68 74 6d 6c 20 74 75 74 6f 72 69 61 6c 20 66 6f 72 20 62 65 67 69 6e 6e 65 72 73 22 2c 30 2c 5b 35 31 32 2c 34 33 33 5d 5d 2c 5b 22 68 74 6d 6c 22 2c 30 2c 5b 35 31 32 2c 34 33 33 5d 5d 2c 5b 22 68 74 68 61 7a 65 22 2c 30 2c 5b 35 31 32 2c 34 33 33 5d 5d 2c 5b 22 68 74 65 74 20 79 61 6e 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 62 22 2c 30 2c 5b 35 31 32 2c 34 33 33 5d 5d 2c 5b 22 68 74 74 79 64 20 72 65 61 63 74 73 20 74 6f 20 68 69 63 63 75 70 22 2c 30 2c 5b Data Ascii: 22bjQuery34109376985483024884_1704923497001 && jQuery34109376985483024884_1704923497001(["ht",[["html tutorial for beginners",0,[512,433]],["html",0,[512,433]],["hthaze",0,[512,433]],["htet yan",0,[512]],["htb",0,[512,433]],["httyd reacts to hiccup",0,[
2024-01-10 21:51:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49744	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:48 UTC	934	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497003&q=htt&_=1704923497004 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:48 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:48 GMT Expires: Wed, 10 Jan 2024 21:51:48 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-UDPgoA4WVFqS9gBj2PmKmA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:48 UTC	639	IN	Data Raw: 32 37 38 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 33 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 33 28 5b 22 68 74 74 22 2c 5b 5b 22 68 74 74 79 64 20 72 65 61 63 74 73 20 74 6f 20 68 69 63 63 75 70 22 2c 30 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 5d 5d 2c 5b 22 68 74 74 79 64 20 72 65 61 63 74 73 20 74 6f 20 74 68 65 20 66 75 74 75 72 65 22 2c 30 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 5d 5d 2c 5b 22 68 74 74 79 64 22 2c 30 2c 5b 35 31 32 2c 34 33 33 5d 5d 2c 5b 22 68 74 74 79 64 20 72 65 61 63 74 73 20 74 6f 20 68 69 63 63 75 70 20 72 75 6e 61 77 61 79 20 61 75 22 2c 30 2c 5b 35 31 32 2c 34 Data Ascii: 278jQuery34109376985483024884_1704923497003 && jQuery34109376985483024884_1704923497003(["htt",[["httyd reacts to hiccup",0,[512,433,131]],["httyd reacts to the future",0,[512,433,131]],["httyd",0,[512,433]],["httyd reacts to hiccup runaway au",0,[512,4
2024-01-10 21:51:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49745	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:48 UTC	935	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=http&_=1704923497006 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:48 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:48 GMT Expires: Wed, 10 Jan 2024 21:51:48 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-4OlobmOYRo75asCMdl3jJA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:48 UTC	226	IN	Data Raw: 64 63 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 35 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 35 28 5b 22 68 74 74 70 22 2c 5b 5b 22 68 74 74 70 20 63 75 73 74 6f 6d 20 66 72 65 65 20 69 6e 74 65 72 6e 65 74 22 2c 30 2c 5b 35 31 32 2c 34 33 33 5d 5d 2c 5b 22 68 74 74 70 20 69 6e 6a 65 63 74 6f 72 20 66 72 65 65 20 69 6e 74 65 72 6e 65 74 22 2c 30 2c 5b 35 31 32 5d 5d 5d 2c 7b 22 6b 22 3a 31 2c 22 71 22 3a 22 6a 68 56 49 5a 58 6d 62 32 30 71 75 49 4e 65 47 67 35 52 75 38 57 68 6c 39 77 55 22 7d 5d 29 0d 0a Data Ascii: dcjQuery34109376985483024884_1704923497005 && jQuery34109376985483024884_1704923497005(["http",[["http custom free internet",0,[512,433]],["http injector free internet",0,[512]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])
2024-01-10 21:51:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49746	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:48 UTC	936	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https&_=1704923497008 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:48 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:48 GMT Expires: Wed, 10 Jan 2024 21:51:48 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2gppfGFFpdWgIvurckWrnQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:48 UTC	199	IN	Data Raw: 63 31 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 37 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 37 28 5b 22 68 74 74 70 73 22 2c 5b 5b 22 68 74 74 70 73 2e 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 20 76 5c 75 30 30 33 64 22 2c 30 2c 5b 35 31 32 2c 34 33 33 5d 5d 5d 2c 7b 22 6b 22 3a 31 2c 22 71 22 3a 22 6a 68 56 49 5a 58 6d 62 32 30 71 75 49 4e 65 47 67 35 52 75 38 57 68 6c 39 77 55 22 7d 5d 29 0d 0a Data Ascii: c1jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https",[["https.//www.youtube.com/watch v\u003d",0,[512,433]]],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])
2024-01-10 21:51:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49747	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:48 UTC	939	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497003&q=https%3A&_=1704923497009 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:48 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:48 GMT Expires: Wed, 10 Jan 2024 21:51:48 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-wxLhmYZcp2OqJS-pa9Z3bA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:48 UTC	147	IN	Data Raw: 38 64 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 33 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 33 28 5b 22 68 74 74 70 73 3a 22 2c 5b 5d 2c 7b 22 6b 22 3a 31 2c 22 71 22 3a 22 6a 68 56 49 5a 58 6d 62 32 30 71 75 49 4e 65 47 67 35 52 75 38 57 68 6c 39 77 55 22 7d 5d 29 0d 0a Data Ascii: 8djQuery34109376985483024884_1704923497003 && jQuery34109376985483024884_1704923497003(["https:",[],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])
2024-01-10 21:51:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49748	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:48 UTC	939	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497001&q=https%3A&_=1704923497010 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:48 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:48 GMT Expires: Wed, 10 Jan 2024 21:51:48 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2XCoR2_8eXozzr9dHAZVug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:48 UTC	147	IN	Data Raw: 38 64 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 31 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 31 28 5b 22 68 74 74 70 73 3a 22 2c 5b 5d 2c 7b 22 6b 22 3a 31 2c 22 71 22 3a 22 6a 68 56 49 5a 58 6d 62 32 30 71 75 49 4e 65 47 67 35 52 75 38 57 68 6c 39 77 55 22 7d 5d 29 0d 0a Data Ascii: 8djQuery34109376985483024884_1704923497001 && jQuery34109376985483024884_1704923497001(["https:",[],{"k":1,"q":"jhVIZXmb20quINeGg5Ru8Whl9wU"}])
2024-01-10 21:51:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49749	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:48 UTC	942	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=https%3A%2F&_=1704923497011 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:49 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:49 GMT Expires: Wed, 10 Jan 2024 21:51:49 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-F5Y8YexebdBkVIIvoROn7A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:49 UTC	762	IN	Data Raw: 32 66 33 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 35 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 35 28 5b 22 68 74 74 70 73 3a 2f 22 2c 5b 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 5c 75 30 30 33 64 75 7a 73 79 75 2d 74 63 36 78 65 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 5c 75 30 30 33 64 6c 64 6a 69 65 6c 6c 32 78 61 75 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 69 71 65 6e 6c 6c 77 61 37 79 67 22 Data Ascii: 2f3jQuery34109376985483024884_1704923497005 && jQuery34109376985483024884_1704923497005(["https:/",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg"
2024-01-10 21:51:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49750	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:48 UTC	942	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F&_=1704923497012 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:49 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:49 GMT Expires: Wed, 10 Jan 2024 21:51:49 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-epFwfGK1OHyjymFN3AD5kA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:49 UTC	762	IN	Data Raw: 32 66 33 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 36 39 39 39 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 36 39 39 39 28 5b 22 68 74 74 70 73 3a 2f 22 2c 5b 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 5c 75 30 30 33 64 75 7a 73 79 75 2d 74 63 36 78 65 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 5c 75 30 30 33 64 6c 64 6a 69 65 6c 6c 32 78 61 75 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 69 71 65 6e 6c 6c 77 61 37 79 67 22 Data Ascii: 2f3jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["https:/",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg"
2024-01-10 21:51:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49751	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:48 UTC	945	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2F&_=1704923497013 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:49 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:49 GMT Expires: Wed, 10 Jan 2024 21:51:49 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-iBGNVYQRqU5M9aDb87o_TA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:49 UTC	763	IN	Data Raw: 32 66 34 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 37 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 37 28 5b 22 68 74 74 70 73 3a 2f 2f 22 2c 5b 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 5c 75 30 30 33 64 75 7a 73 79 75 2d 74 63 36 78 65 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 5c 75 30 30 33 64 6c 64 6a 69 65 6c 6c 32 78 61 75 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 69 71 65 6e 6c 6c 77 61 37 79 67 Data Ascii: 2f4jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https://",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg
2024-01-10 21:51:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49752	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:49 UTC	945	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2F&_=1704923497015 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:49 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:49 GMT Expires: Wed, 10 Jan 2024 21:51:49 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-N30i_ijX-j1kxkHfLWaPRA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:49 UTC	763	IN	Data Raw: 32 66 34 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 31 34 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 31 34 28 5b 22 68 74 74 70 73 3a 2f 2f 22 2c 5b 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 5c 75 30 30 33 64 75 7a 73 79 75 2d 74 63 36 78 65 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 5c 75 30 30 33 64 6c 64 6a 69 65 6c 6c 32 78 61 75 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 69 71 65 6e 6c 6c 77 61 37 79 67 Data Ascii: 2f4jQuery34109376985483024884_1704923497014 && jQuery34109376985483024884_1704923497014(["https://",[["https://www.youtube.com/watch?v\u003duzsyu-tc6xe",0,[512]],["https://www.youtube.com/watch?v\u003dldjiell2xau",0,[512]],["https://youtu.be/iqenllwa7yg
2024-01-10 21:51:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49753	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:49 UTC	946	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=https%3A%2F%2Fy&_=1704923497016 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:49 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:49 GMT Expires: Wed, 10 Jan 2024 21:51:49 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gu_y4sakKkSRz8XG3MKvEw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:49 UTC	724	IN	Data Raw: 32 63 64 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 35 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 35 28 5b 22 68 74 74 70 73 3a 2f 2f 79 22 2c 5b 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 69 71 65 6e 6c 6c 77 61 37 79 67 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 76 63 64 62 78 68 30 65 67 74 63 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 31 69 32 35 66 77 79 69 7a 65 63 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 72 70 75 62 79 6f 72 6c 74 Data Ascii: 2cdjQuery34109376985483024884_1704923497005 && jQuery34109376985483024884_1704923497005(["https://y",[["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorlt
2024-01-10 21:51:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49754	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:49 UTC	947	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2Fyo&_=1704923497017 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:49 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:49 GMT Expires: Wed, 10 Jan 2024 21:51:49 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-DGopijKPqDLxzbjjSZsAiw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:49 UTC	725	IN	Data Raw: 32 63 65 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 37 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 37 28 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 22 2c 5b 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 69 71 65 6e 6c 6c 77 61 37 79 67 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 76 63 64 62 78 68 30 65 67 74 63 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 31 69 32 35 66 77 79 69 7a 65 63 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 72 70 75 62 79 6f 72 6c Data Ascii: 2cejQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https://yo",[["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyorl
2024-01-10 21:51:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49755	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:49 UTC	948	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2Fyou&_=1704923497018 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:49 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:49 GMT Expires: Wed, 10 Jan 2024 21:51:49 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-n3pD1TPzWLpfkVupvwqsZw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:49 UTC	726	IN	Data Raw: 32 63 66 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 31 34 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 31 34 28 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 22 2c 5b 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 69 71 65 6e 6c 6c 77 61 37 79 67 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 76 63 64 62 78 68 30 65 67 74 63 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 31 69 32 35 66 77 79 69 7a 65 63 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 72 70 75 62 79 6f 72 Data Ascii: 2cfjQuery34109376985483024884_1704923497014 && jQuery34109376985483024884_1704923497014(["https://you",[["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyor
2024-01-10 21:51:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49756	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:49 UTC	949	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F%2Fyout&_=1704923497019 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:49 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:49 GMT Expires: Wed, 10 Jan 2024 21:51:49 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-YvmG1LReS4AVFd5AoQTz8g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:49 UTC	727	IN	Data Raw: 32 64 30 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 36 39 39 39 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 36 39 39 39 28 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 22 2c 5b 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 69 71 65 6e 6c 6c 77 61 37 79 67 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 76 63 64 62 78 68 30 65 67 74 63 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 31 69 32 35 66 77 79 69 7a 65 63 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 72 70 75 62 79 6f Data Ascii: 2d0jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["https://yout",[["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpubyo
2024-01-10 21:51:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49757	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:50 UTC	950	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2Fyoutu&_=1704923497020 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:50 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:50 GMT Expires: Wed, 10 Jan 2024 21:51:50 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-QaJf8p2P_z11aadByr3Jww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:50 UTC	728	IN	Data Raw: 32 64 31 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 31 34 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 31 34 28 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 22 2c 5b 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 69 71 65 6e 6c 6c 77 61 37 79 67 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 76 63 64 62 78 68 30 65 67 74 63 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 31 69 32 35 66 77 79 69 7a 65 63 22 2c 30 2c 5b 35 31 32 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 2e 62 65 2f 72 70 75 62 79 Data Ascii: 2d1jQuery34109376985483024884_1704923497014 && jQuery34109376985483024884_1704923497014(["https://youtu",[["https://youtu.be/iqenllwa7yg",0,[512]],["https://youtu.be/vcdbxh0egtc",0,[512]],["https://youtu.be/1i25fwyizec",0,[512]],["https://youtu.be/rpuby
2024-01-10 21:51:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49758	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:50 UTC	951	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2Fyoutub&_=1704923497021 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:50 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:50 GMT Expires: Wed, 10 Jan 2024 21:51:50 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-55h3ZkyYL_uzyeoJ8EU53A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:50 UTC	908	IN	Data Raw: 33 38 35 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 37 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 37 28 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 62 22 2c 5b 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 68 6f 72 74 73 2f 77 68 75 37 71 6e 38 75 6e 67 63 3f 66 65 61 74 75 72 65 5c 75 30 30 33 64 73 68 61 72 65 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 6e 63 65 72 74 6f 66 66 69 63 69 61 6c 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 30 2c 5b Data Ascii: 385jQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https://youtub",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["https://youtube.com",0,[
2024-01-10 21:51:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49759	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:50 UTC	952	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F%2Fyoutube&_=1704923497022 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:50 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:50 GMT Expires: Wed, 10 Jan 2024 21:51:50 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-rm_LwS9pc_RRy5R_QZImCg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:50 UTC	909	IN	Data Raw: 33 38 36 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 36 39 39 39 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 36 39 39 39 28 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 62 65 22 2c 5b 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 68 6f 72 74 73 2f 77 68 75 37 71 6e 38 75 6e 67 63 3f 66 65 61 74 75 72 65 5c 75 30 30 33 64 73 68 61 72 65 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 6e 63 65 72 74 6f 66 66 69 63 69 61 6c 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 30 2c Data Ascii: 386jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["https://youtube",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["https://youtube.com",0,
2024-01-10 21:51:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49760	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:50 UTC	953	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497014&q=https%3A%2F%2Fyoutube.&_=1704923497023 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:50 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:50 GMT Expires: Wed, 10 Jan 2024 21:51:50 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-SK1-TcUQ7WKOs5NKfkL2hQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:50 UTC	900	IN	Data Raw: 33 37 64 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 31 34 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 31 34 28 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 62 65 2e 22 2c 5b 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 68 6f 72 74 73 2f 77 68 75 37 71 6e 38 75 6e 67 63 3f 66 65 61 74 75 72 65 5c 75 30 30 33 64 73 68 61 72 65 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 6e 63 65 72 74 6f 66 66 69 63 69 61 6c 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 30 2c Data Ascii: 37djQuery34109376985483024884_1704923497014 && jQuery34109376985483024884_1704923497014(["https://youtube.",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com",0,
2024-01-10 21:51:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49762	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:50 UTC	954	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497007&q=https%3A%2F%2Fyoutube.c&_=1704923497024 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:51 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:50 GMT Expires: Wed, 10 Jan 2024 21:51:50 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-fgwVn1ikGghffyVfTxk35g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:51 UTC	901	IN	Data Raw: 33 37 65 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 37 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 37 28 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 22 2c 5b 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 68 6f 72 74 73 2f 77 68 75 37 71 6e 38 75 6e 67 63 3f 66 65 61 74 75 72 65 5c 75 30 30 33 64 73 68 61 72 65 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 6e 63 65 72 74 6f 66 66 69 63 69 61 6c 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 30 Data Ascii: 37ejQuery34109376985483024884_1704923497007 && jQuery34109376985483024884_1704923497007(["https://youtube.c",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com",0
2024-01-10 21:51:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49761	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:50 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=79NlTh1+hhOO4dP&MD=9n5xSzmn HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-01-10 21:51:51 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: bb268158-cf5a-494d-ac4d-05aa8c52e64e MS-RequestId: 60879e4a-10d4-4d63-83e7-09781ceff7ad MS-CV: 5fDu0KuX5ECLgrC9.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 21:51:50 GMT Connection: close Content-Length: 24490
2024-01-10 21:51:51 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-01-10 21:51:51 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49764	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:50 UTC	956	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923496999&q=https%3A%2F%2Fyoutube.com&_=1704923497025 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:51 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:51 GMT Expires: Wed, 10 Jan 2024 21:51:51 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-BMRFNkzzmhS4CodQ5zoQKw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:51 UTC	903	IN	Data Raw: 33 38 30 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 36 39 39 39 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 36 39 39 39 28 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 5b 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 68 6f 72 74 73 2f 77 68 75 37 71 6e 38 75 6e 67 63 3f 66 65 61 74 75 72 65 5c 75 30 30 33 64 73 68 61 72 65 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 6e 63 65 72 74 6f 66 66 69 63 69 61 6c 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 22 Data Ascii: 380jQuery34109376985483024884_1704923496999 && jQuery34109376985483024884_1704923496999(["https://youtube.com",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com"
2024-01-10 21:51:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49765	142.251.16.102	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:50 UTC	956	OUT	GET /complete/search?hl=en&ds=yt&client=youtube&hjson=t&cp=1&callback=jQuery34109376985483024884_1704923497005&q=https%3A%2F%2Fyoutube.com&_=1704923497026 HTTP/1.1 Host: suggestqueries.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:51:51 UTC	1665	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:51 GMT Expires: Wed, 10 Jan 2024 21:51:51 GMT Cache-Control: private, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7Qvwpoz5VjY2HRW29a9VsA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:51:51 UTC	903	IN	Data Raw: 33 38 30 0d 0a 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 35 20 26 26 20 6a 51 75 65 72 79 33 34 31 30 39 33 37 36 39 38 35 34 38 33 30 32 34 38 38 34 5f 31 37 30 34 39 32 33 34 39 37 30 30 35 28 5b 22 68 74 74 70 73 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 5b 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 68 6f 72 74 73 2f 77 68 75 37 71 6e 38 75 6e 67 63 3f 66 65 61 74 75 72 65 5c 75 30 30 33 64 73 68 61 72 65 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 6e 63 65 72 74 6f 66 66 69 63 69 61 6c 22 2c 30 2c 5b 35 31 32 2c 31 30 5d 5d 2c 5b 22 68 74 74 70 3a 2f 2f 79 6f 75 74 75 62 65 2e 63 6f 6d 22 Data Ascii: 380jQuery34109376985483024884_1704923497005 && jQuery34109376985483024884_1704923497005(["https://youtube.com",[["http://youtube.com/shorts/whu7qn8ungc?feature\u003dshare",0,[512,10]],["http://youtube.com/ncertofficial",0,[512,10]],["http://youtube.com"
2024-01-10 21:51:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49768	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:52 UTC	994	OUT	POST /search/ HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive Content-Length: 90 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://v9.www-ytmp4.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.0.1704923498.0.0.0; _ga=GA1.1.20077430.1704923498
2024-01-10 21:51:52 UTC	90	OUT	Data Raw: 76 69 64 65 6f 5f 75 72 6c 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 79 6f 75 74 75 62 65 2e 63 6f 6d 25 32 46 73 68 6f 72 74 73 25 32 46 77 68 75 37 71 6e 38 75 6e 67 63 25 33 46 66 65 61 74 75 72 65 25 33 44 73 68 61 72 65 26 73 75 62 6d 69 74 3d 43 6f 6e 76 65 72 74 Data Ascii: video_url=http%3A%2F%2Fyoutube.com%2Fshorts%2Fwhu7qn8ungc%3Ffeature%3Dshare&submit=Convert
2024-01-10 21:51:52 UTC	597	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4VfXo9xoHNneUY2ynqvUEzLA1UGnlCjZ0GDKY5BOrFlUts7GQcNBUBS4KlC%2BlgMfiH2QW5PPooDh0OCtDhtQNwEtaWEG%2B5FUclg%2FZoq3Yw%2B9oylSlQN1xU0HUJPDy7Pl4rvs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824d19f1c3979-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:52 UTC	772	IN	Data Raw: 34 33 61 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 59 54 6d 70 34 20 43 6f 6e 76 65 72 74 65 72 20 59 6f 75 74 75 62 65 20 74 6f 20 4d 70 34 20 56 69 64 65 6f 20 44 6f 77 6e 6c Data Ascii: 43a3<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="robots" content="noindex,nofollow" /><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title>YTmp4 Converter Youtube to Mp4 Video Downl
2024-01-10 21:51:52 UTC	1369	IN	Data Raw: 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 59 54 6d 70 34 20 43 6f 6e 76 65 72 74 65 72 20 59 6f 75 74 75 62 65 20 74 6f 20 4d 70 34 20 56 69 64 65 6f 20 44 6f 77 6e 6c 6f 61 64 65 72 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 59 54 6d 70 34 20 69 73 20 46 72 65 65 20 4f 6e 6c 69 6e 65 20 59 6f 75 74 75 62 65 20 74 6f 20 4d 70 34 20 44 6f 77 6e 6c 6f 61 64 65 72 20 77 68 69 63 68 20 41 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 43 6f 6e 76 65 72 74 20 61 6e 64 Data Ascii: /><meta property="og:type" content="website" /><meta property="og:title" content="YTmp4 Converter Youtube to Mp4 Video Downloader" /><meta property="og:description" content="YTmp4 is Free Online Youtube to Mp4 Downloader which Allows you to Convert and
2024-01-10 21:51:52 UTC	1369	IN	Data Raw: 74 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6a 61 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6a 61 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6b 6f 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6b 6f 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 79 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6d 79 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 73 22 20 68 72 65 66 Data Ascii: t/"><link rel="alternate" hreflang="ja" href="https://www-ytmp4.com/ja/"><link rel="alternate" hreflang="ko" href="https://www-ytmp4.com/ko/"><link rel="alternate" hreflang="my" href="https://www-ytmp4.com/my/"><link rel="alternate" hreflang="ms" href
2024-01-10 21:51:52 UTC	1369	IN	Data Raw: 64 6f 77 6e 22 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 22 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 45 6e 67 6c 69 73 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 22 3e 45 6e 67 6c 69 73 68 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 46 72 61 6e c3 a7 61 69 73 22 20 68 72 65 66 3d 22 2f 66 72 2f 22 3e 46 72 61 6e c3 a7 61 69 73 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 54 68 61 69 22 20 68 72 65 66 3d 22 2f 74 68 2f 22 3e 54 68 61 69 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 49 6e 64 6f 6e 65 73 69 61 6e 22 20 68 72 65 66 3d 22 2f 69 64 2f 22 3e 49 6e 64 6f Data Ascii: down"><ul class="list-unstyled"><li> <a title="English" href="https://www-ytmp4.com/">English</a> </li><li> <a title="Franais" href="/fr/">Franais</a> </li><li> <a title="Thai" href="/th/">Thai</a> </li><li> <a title="Indonesian" href="/id/">Indo
2024-01-10 21:51:52 UTC	1369	IN	Data Raw: 20 61 6c 74 3d 22 79 74 6d 70 34 22 3e 3c 2f 61 3e 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 76 65 72 74 65 72 5f 77 72 61 70 70 65 72 22 3e 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 76 65 72 74 65 72 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 22 3e 0a 50 6c 65 61 73 65 20 69 6e 73 65 72 74 20 61 20 76 61 6c 69 64 20 76 69 64 65 6f 20 55 52 4c 0a 3c 2f 64 69 76 3e 0a 3c 66 6f 72 6d 20 63 6c 61 73 73 3d 22 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 2f 73 65 61 72 63 68 2f 22 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 3e 0a 3c 69 6e 70 75 74 20 69 64 3d 22 69 6e 70 75 74 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 76 69 64 65 6f 5f 75 72 6c 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 76 61 6c 75 65 3d 22 68 74 74 70 3a 2f Data Ascii: alt="ytmp4"></a><div id="converter_wrapper"><div id="converter"><div id="title">Please insert a valid video URL</div><form class="form" action="/search/" method="POST"><input id="input" type="text" name="video_url" autocomplete="off" value="http:/
2024-01-10 21:51:52 UTC	1369	IN	Data Raw: 46 65 77 20 53 69 6d 70 6c 65 20 53 74 65 70 73 2e 20 59 74 6d 70 34 20 69 73 20 53 61 66 65 73 74 20 61 6e 64 20 46 61 73 74 65 73 74 20 43 6f 6e 76 65 72 74 65 72 20 61 6e 64 20 64 6f 77 6e 6c 6f 61 64 65 72 20 66 6f 72 20 73 61 76 69 6e 67 20 59 6f 75 74 75 62 65 20 76 69 64 65 6f 73 20 74 6f 20 79 6f 75 72 20 44 65 76 69 63 65 73 2e 20 53 6f 20 44 6f 77 6e 6c 6f 61 64 20 56 69 64 65 6f 20 59 6f 75 20 63 61 6e 20 70 6c 61 79 20 69 74 20 6c 61 74 65 72 20 77 69 74 68 6f 75 74 20 61 6e 20 69 6e 74 65 72 6e 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 68 32 3e 48 6f 77 20 74 6f 20 63 6f 6e 76 65 72 74 20 59 6f 75 54 75 62 65 20 76 69 64 65 6f 73 20 74 6f 20 4d 50 34 20 75 73 69 6e 67 20 59 54 4d 50 34 3f 3c 2f 68 32 3e 0a 3c 70 3e 43 6f Data Ascii: Few Simple Steps. Ytmp4 is Safest and Fastest Converter and downloader for saving Youtube videos to your Devices. So Download Video You can play it later without an internet connection.</p><h2>How to convert YouTube videos to MP4 using YTMP4?</h2><p>Co
2024-01-10 21:51:52 UTC	1369	IN	Data Raw: 2f 70 3e 0a 3c 68 33 3e 55 6e 6c 69 6d 69 74 65 64 20 43 6f 6e 76 65 72 73 69 6f 6e 3c 2f 68 33 3e 0a 3c 70 3e 44 6f 77 6e 6c 6f 61 64 20 59 6f 75 74 75 62 65 20 76 69 64 65 6f 20 55 6e 6c 69 6d 69 74 65 64 20 41 73 20 6d 75 63 68 20 61 73 20 79 6f 75 20 77 61 6e 74 2e 20 43 6f 6e 76 65 72 74 20 59 6f 75 74 75 62 65 20 56 69 64 65 6f 20 77 69 74 68 6f 75 74 20 61 6e 79 20 6c 69 6d 69 74 61 74 69 6f 6e 2e 3c 2f 70 3e 0a 3c 68 33 3e 31 30 30 25 20 53 61 66 65 20 26 20 53 65 63 75 72 65 3c 2f 68 33 3e 0a 3c 70 3e 4f 75 72 20 57 65 62 73 69 74 65 20 69 73 20 68 6f 73 74 65 64 20 6f 6e 20 61 20 48 69 67 68 2d 51 75 61 6c 69 74 79 20 73 65 72 76 65 72 20 73 6f 20 74 68 69 73 20 69 73 20 74 6f 74 61 6c 6c 79 20 73 61 66 65 20 61 6e 64 20 73 65 63 75 72 65 2e 20 Data Ascii: /p><h3>Unlimited Conversion</h3><p>Download Youtube video Unlimited As much as you want. Convert Youtube Video without any limitation.</p><h3>100% Safe & Secure</h3><p>Our Website is hosted on a High-Quality server so this is totally safe and secure.
2024-01-10 21:51:52 UTC	1369	IN	Data Raw: 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6a 61 2f 22 3e e6 97 a5 e6 9c ac e8 aa 9e 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6b 6f 2f 22 3e ed 95 9c ea b5 ad ec 96 b4 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6d 79 2f 22 3e 4d 79 61 6e 6d 61 72 20 28 e1 80 99 e1 80 bc e1 80 94 e1 80 ba e1 80 99 e1 80 ac 29 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6d 73 2f 22 3e 4d 61 6c 61 79 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 70 68 2f 22 3e 46 69 6c 69 70 69 6e 6f 3c Data Ascii: s://www-ytmp4.com/ja/"></a><a href="https://www-ytmp4.com/ko/"></a><a href="https://www-ytmp4.com/my/">Myanmar ()</a><a href="https://www-ytmp4.com/ms/">Malay</a><a href="https://www-ytmp4.com/ph/">Filipino<
2024-01-10 21:51:52 UTC	1369	IN	Data Raw: 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 3e 3c 70 61 74 68 20 64 3d 22 4d 34 35 39 2e 33 37 20 31 35 31 2e 37 31 36 63 2e 33 32 35 20 34 2e 35 34 38 2e 33 32 35 20 39 2e 30 39 37 2e 33 32 35 20 31 33 2e 36 34 35 20 30 20 31 33 38 2e 37 32 2d 31 30 35 2e 35 38 33 20 32 39 38 2e 35 35 38 2d 32 39 38 2e 35 35 38 20 32 39 38 2e 35 35 38 2d 35 39 2e 34 35 32 20 30 2d 31 31 34 2e 36 38 2d 31 37 2e 32 31 39 2d 31 36 31 2e 31 33 37 2d 34 37 2e 31 30 36 20 38 2e 34 34 37 2e 39 37 34 20 31 36 2e 35 36 38 20 31 2e 32 39 39 20 32 35 2e 33 34 20 31 2e 32 39 39 20 34 39 2e 30 35 35 20 30 20 39 34 2e 32 31 33 2d 31 36 2e 35 36 38 20 31 33 30 2e 32 37 34 2d 34 34 2e 38 33 32 2d 34 36 2e 31 33 32 2d 2e 39 37 35 2d 38 34 2e 37 39 32 2d 33 31 2e 31 38 38 2d 39 38 2e 31 31 Data Ascii: ="0 0 512 512"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49769	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:52 UTC	764	OUT	GET /images/circles-loader.png HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/search/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga=GA1.1.20077430.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923512.0.0.0
2024-01-10 21:51:53 UTC	727	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:53 GMT Content-Type: image/png Content-Length: 1624 Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT ETag: "653c4b5c-658" Expires: Wed, 10 Jan 2024 21:52:53 GMT Cache-Control: max-age=14400 X-Cache: HIT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d1SmonGeLVKW2lHJdEtvhYzllR2aVVlUgqcS6Oi4BPefDXHucuOB%2FIsaOcGSGe17nBrJhfppumxIUDRo1sLO2aUIMpXrNvoG2Nppgb0TnavCUH90OkcdoFUiSq8CTG%2BIyNTg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824d3b8242d17-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:53 UTC	642	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 03 00 00 00 47 3c 65 66 00 00 00 b4 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 52 7b 51 b6 00 00 00 3b 74 52 4e 53 00 fc 14 04 0f 0c 09 21 06 f9 e1 2d ef e9 f6 f3 d6 ad 8f 60 47 29 Data Ascii: PNGIHDRddG<efPLTER{Q;tRNS!-`G)
2024-01-10 21:51:53 UTC	982	IN	Data Raw: bc 24 99 12 49 16 0f 4f 56 55 d9 8f a0 e8 ec 53 87 14 c4 55 2f 49 f8 36 91 a4 1f 5a 73 be 90 02 4b 29 96 13 fb 19 62 65 95 05 af 60 11 49 56 91 d3 7a 67 77 a7 fe 1c 6e 83 57 d9 e6 0c 5e e2 2a 93 c2 7a 9d 0c 58 01 2f 00 12 99 40 29 bf 26 e1 6c d2 e1 ca 56 bd 73 2c 50 ea 3a c8 c0 5c c6 37 72 03 99 e0 0f f2 f3 f5 19 9b f9 f6 1e 0f 45 16 64 43 d0 5b f0 cf 89 98 5e de 78 7d 80 1e b0 dd 9b d5 e8 d0 d3 d4 9d 75 63 de 7b b9 5f 89 47 f5 cf 10 14 01 ae b3 85 a1 34 8e 3a 3c 28 08 65 7d b7 15 6b e2 76 a7 0f 40 81 60 19 a7 6a 0e 59 90 33 98 9e d7 d1 0d 47 00 c5 c1 3c b4 24 e8 c3 ca 49 f5 8a ea d3 4a 93 48 ab e5 f6 26 1f 83 73 03 86 8f 1f 27 ad 92 90 1e 23 07 e3 eb fd 51 73 bb 5c 99 cf 60 d5 20 52 38 f4 be e5 30 ec 60 49 71 56 0a e4 aa 8e 25 a9 2f 5b ce 79 54 20 42 f7 Data Ascii: $IOVUSU/I6ZsK)be`IVzgwnW^*zX/@)&lVs,P:\7rEdC[^x}uc{_G4:<(e}kv@`jY3G<$IJH&s'#Qs\` R80`IqV%/[yT B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49771	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:53 UTC	692	OUT	GET /js/custome.js HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/search/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga=GA1.1.20077430.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923512.0.0.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49773	104.21.76.46	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:53 UTC	520	OUT	GET /images/circles-loader.png HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923512.0.0.0; _ga=GA1.1.20077430.1704923498
2024-01-10 21:51:53 UTC	735	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:53 GMT Content-Type: image/png Content-Length: 1624 Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT ETag: "653c4b5c-658" Expires: Wed, 10 Jan 2024 21:52:53 GMT Cache-Control: max-age=14400 X-Cache: HIT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BpeqHtXKoOail7AwQuZ7iptdpyl12%2F%2FWxIe5DJC7TFaXdr2IR6vKEKVq80WdpkzpLBa1vYtFUEh9U6jJmGT7%2Bwt4M8ZS0C%2FItaY5jkrNOWnTzzsrm7Gp9hr%2BttlGtci1P%2Beh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824d7ba2b5a40-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:53 UTC	634	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 03 00 00 00 47 3c 65 66 00 00 00 b4 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 52 7b 51 b6 00 00 00 3b 74 52 4e 53 00 fc 14 04 0f 0c 09 21 06 f9 e1 2d ef e9 f6 f3 d6 ad 8f 60 47 29 Data Ascii: PNGIHDRddG<efPLTER{Q;tRNS!-`G)
2024-01-10 21:51:53 UTC	990	IN	Data Raw: b7 0e e1 5a 65 84 7f c4 bc 24 99 12 49 16 0f 4f 56 55 d9 8f a0 e8 ec 53 87 14 c4 55 2f 49 f8 36 91 a4 1f 5a 73 be 90 02 4b 29 96 13 fb 19 62 65 95 05 af 60 11 49 56 91 d3 7a 67 77 a7 fe 1c 6e 83 57 d9 e6 0c 5e e2 2a 93 c2 7a 9d 0c 58 01 2f 00 12 99 40 29 bf 26 e1 6c d2 e1 ca 56 bd 73 2c 50 ea 3a c8 c0 5c c6 37 72 03 99 e0 0f f2 f3 f5 19 9b f9 f6 1e 0f 45 16 64 43 d0 5b f0 cf 89 98 5e de 78 7d 80 1e b0 dd 9b d5 e8 d0 d3 d4 9d 75 63 de 7b b9 5f 89 47 f5 cf 10 14 01 ae b3 85 a1 34 8e 3a 3c 28 08 65 7d b7 15 6b e2 76 a7 0f 40 81 60 19 a7 6a 0e 59 90 33 98 9e d7 d1 0d 47 00 c5 c1 3c b4 24 e8 c3 ca 49 f5 8a ea d3 4a 93 48 ab e5 f6 26 1f 83 73 03 86 8f 1f 27 ad 92 90 1e 23 07 e3 eb fd 51 73 bb 5c 99 cf 60 d5 20 52 38 f4 be e5 30 ec 60 49 71 56 0a e4 aa 8e 25 a9 Data Ascii: Ze$IOVUSU/I6ZsK)be`IVzgwnW^*zX/@)&lVs,P:\7rEdC[^x}uc{_G4:<(e}kv@`jY3G<$IJH&s'#Qs\` R80`IqV%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49774	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:53 UTC	981	OUT	POST /search/ HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive Content-Length: 90 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://v9.www-ytmp4.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://v9.www-ytmp4.com/search/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923512.0.0.0; _ga=GA1.1.20077430.1704923498
2024-01-10 21:51:53 UTC	90	OUT	Data Raw: 76 69 64 65 6f 5f 75 72 6c 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 79 6f 75 74 75 62 65 2e 63 6f 6d 25 32 46 73 68 6f 72 74 73 25 32 46 77 68 75 37 71 6e 38 75 6e 67 63 25 33 46 66 65 61 74 75 72 65 25 33 44 73 68 61 72 65 26 73 75 62 6d 69 74 3d 43 6f 6e 76 65 72 74 Data Ascii: video_url=http%3A%2F%2Fyoutube.com%2Fshorts%2Fwhu7qn8ungc%3Ffeature%3Dshare&submit=Convert
2024-01-10 21:51:53 UTC	599	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XW%2Bjh8HJY12CVsVn4o04KVUS%2Bs2ex%2BA3IopAYkCTnsy7QDiAqTtC4%2BCNGMnKTZuCKz2r0L93PqrlFcP8Tcql19k%2BZqJUa4MJBZbpwdbX8fm7NM2BAcXFwk0pdzLckZ2mxuUd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824d8da36289a-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:53 UTC	770	IN	Data Raw: 34 33 61 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 59 54 6d 70 34 20 43 6f 6e 76 65 72 74 65 72 20 59 6f 75 74 75 62 65 20 74 6f 20 4d 70 34 20 56 69 64 65 6f 20 44 6f 77 6e 6c Data Ascii: 43a3<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="robots" content="noindex,nofollow" /><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title>YTmp4 Converter Youtube to Mp4 Video Downl
2024-01-10 21:51:53 UTC	1369	IN	Data Raw: 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 59 54 6d 70 34 20 43 6f 6e 76 65 72 74 65 72 20 59 6f 75 74 75 62 65 20 74 6f 20 4d 70 34 20 56 69 64 65 6f 20 44 6f 77 6e 6c 6f 61 64 65 72 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 59 54 6d 70 34 20 69 73 20 46 72 65 65 20 4f 6e 6c 69 6e 65 20 59 6f 75 74 75 62 65 20 74 6f 20 4d 70 34 20 44 6f 77 6e 6c 6f 61 64 65 72 20 77 68 69 63 68 20 41 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 43 6f 6e 76 65 72 74 20 61 Data Ascii: " /><meta property="og:type" content="website" /><meta property="og:title" content="YTmp4 Converter Youtube to Mp4 Video Downloader" /><meta property="og:description" content="YTmp4 is Free Online Youtube to Mp4 Downloader which Allows you to Convert a
2024-01-10 21:51:53 UTC	1369	IN	Data Raw: 2f 69 74 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6a 61 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6a 61 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6b 6f 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6b 6f 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 79 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6d 79 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 73 22 20 68 72 Data Ascii: /it/"><link rel="alternate" hreflang="ja" href="https://www-ytmp4.com/ja/"><link rel="alternate" hreflang="ko" href="https://www-ytmp4.com/ko/"><link rel="alternate" hreflang="my" href="https://www-ytmp4.com/my/"><link rel="alternate" hreflang="ms" hr
2024-01-10 21:51:53 UTC	1369	IN	Data Raw: 6f 70 64 6f 77 6e 22 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 22 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 45 6e 67 6c 69 73 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 22 3e 45 6e 67 6c 69 73 68 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 46 72 61 6e c3 a7 61 69 73 22 20 68 72 65 66 3d 22 2f 66 72 2f 22 3e 46 72 61 6e c3 a7 61 69 73 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 54 68 61 69 22 20 68 72 65 66 3d 22 2f 74 68 2f 22 3e 54 68 61 69 3c 2f 61 3e 20 3c 2f 6c 69 3e 0a 3c 6c 69 3e 20 3c 61 20 74 69 74 6c 65 3d 22 49 6e 64 6f 6e 65 73 69 61 6e 22 20 68 72 65 66 3d 22 2f 69 64 2f 22 3e 49 6e Data Ascii: opdown"><ul class="list-unstyled"><li> <a title="English" href="https://www-ytmp4.com/">English</a> </li><li> <a title="Franais" href="/fr/">Franais</a> </li><li> <a title="Thai" href="/th/">Thai</a> </li><li> <a title="Indonesian" href="/id/">In
2024-01-10 21:51:53 UTC	1369	IN	Data Raw: 67 22 20 61 6c 74 3d 22 79 74 6d 70 34 22 3e 3c 2f 61 3e 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 76 65 72 74 65 72 5f 77 72 61 70 70 65 72 22 3e 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 76 65 72 74 65 72 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 22 3e 0a 50 6c 65 61 73 65 20 69 6e 73 65 72 74 20 61 20 76 61 6c 69 64 20 76 69 64 65 6f 20 55 52 4c 0a 3c 2f 64 69 76 3e 0a 3c 66 6f 72 6d 20 63 6c 61 73 73 3d 22 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 2f 73 65 61 72 63 68 2f 22 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 3e 0a 3c 69 6e 70 75 74 20 69 64 3d 22 69 6e 70 75 74 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 76 69 64 65 6f 5f 75 72 6c 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 76 61 6c 75 65 3d 22 68 74 74 70 Data Ascii: g" alt="ytmp4"></a><div id="converter_wrapper"><div id="converter"><div id="title">Please insert a valid video URL</div><form class="form" action="/search/" method="POST"><input id="input" type="text" name="video_url" autocomplete="off" value="http
2024-01-10 21:51:53 UTC	1369	IN	Data Raw: 61 20 46 65 77 20 53 69 6d 70 6c 65 20 53 74 65 70 73 2e 20 59 74 6d 70 34 20 69 73 20 53 61 66 65 73 74 20 61 6e 64 20 46 61 73 74 65 73 74 20 43 6f 6e 76 65 72 74 65 72 20 61 6e 64 20 64 6f 77 6e 6c 6f 61 64 65 72 20 66 6f 72 20 73 61 76 69 6e 67 20 59 6f 75 74 75 62 65 20 76 69 64 65 6f 73 20 74 6f 20 79 6f 75 72 20 44 65 76 69 63 65 73 2e 20 53 6f 20 44 6f 77 6e 6c 6f 61 64 20 56 69 64 65 6f 20 59 6f 75 20 63 61 6e 20 70 6c 61 79 20 69 74 20 6c 61 74 65 72 20 77 69 74 68 6f 75 74 20 61 6e 20 69 6e 74 65 72 6e 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 68 32 3e 48 6f 77 20 74 6f 20 63 6f 6e 76 65 72 74 20 59 6f 75 54 75 62 65 20 76 69 64 65 6f 73 20 74 6f 20 4d 50 34 20 75 73 69 6e 67 20 59 54 4d 50 34 3f 3c 2f 68 32 3e 0a 3c 70 3e Data Ascii: a Few Simple Steps. Ytmp4 is Safest and Fastest Converter and downloader for saving Youtube videos to your Devices. So Download Video You can play it later without an internet connection.</p><h2>How to convert YouTube videos to MP4 using YTMP4?</h2><p>
2024-01-10 21:51:53 UTC	1369	IN	Data Raw: 73 3c 2f 70 3e 0a 3c 68 33 3e 55 6e 6c 69 6d 69 74 65 64 20 43 6f 6e 76 65 72 73 69 6f 6e 3c 2f 68 33 3e 0a 3c 70 3e 44 6f 77 6e 6c 6f 61 64 20 59 6f 75 74 75 62 65 20 76 69 64 65 6f 20 55 6e 6c 69 6d 69 74 65 64 20 41 73 20 6d 75 63 68 20 61 73 20 79 6f 75 20 77 61 6e 74 2e 20 43 6f 6e 76 65 72 74 20 59 6f 75 74 75 62 65 20 56 69 64 65 6f 20 77 69 74 68 6f 75 74 20 61 6e 79 20 6c 69 6d 69 74 61 74 69 6f 6e 2e 3c 2f 70 3e 0a 3c 68 33 3e 31 30 30 25 20 53 61 66 65 20 26 20 53 65 63 75 72 65 3c 2f 68 33 3e 0a 3c 70 3e 4f 75 72 20 57 65 62 73 69 74 65 20 69 73 20 68 6f 73 74 65 64 20 6f 6e 20 61 20 48 69 67 68 2d 51 75 61 6c 69 74 79 20 73 65 72 76 65 72 20 73 6f 20 74 68 69 73 20 69 73 20 74 6f 74 61 6c 6c 79 20 73 61 66 65 20 61 6e 64 20 73 65 63 75 72 65 Data Ascii: s</p><h3>Unlimited Conversion</h3><p>Download Youtube video Unlimited As much as you want. Convert Youtube Video without any limitation.</p><h3>100% Safe & Secure</h3><p>Our Website is hosted on a High-Quality server so this is totally safe and secure
2024-01-10 21:51:53 UTC	1369	IN	Data Raw: 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6a 61 2f 22 3e e6 97 a5 e6 9c ac e8 aa 9e 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6b 6f 2f 22 3e ed 95 9c ea b5 ad ec 96 b4 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6d 79 2f 22 3e 4d 79 61 6e 6d 61 72 20 28 e1 80 99 e1 80 bc e1 80 94 e1 80 ba e1 80 99 e1 80 ac 29 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 6d 73 2f 22 3e 4d 61 6c 61 79 3c 2f 61 3e e2 80 82 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 70 68 2f 22 3e 46 69 6c 69 70 69 6e Data Ascii: tps://www-ytmp4.com/ja/"></a><a href="https://www-ytmp4.com/ko/"></a><a href="https://www-ytmp4.com/my/">Myanmar ()</a><a href="https://www-ytmp4.com/ms/">Malay</a><a href="https://www-ytmp4.com/ph/">Filipin
2024-01-10 21:51:53 UTC	1369	IN	Data Raw: 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 3e 3c 70 61 74 68 20 64 3d 22 4d 34 35 39 2e 33 37 20 31 35 31 2e 37 31 36 63 2e 33 32 35 20 34 2e 35 34 38 2e 33 32 35 20 39 2e 30 39 37 2e 33 32 35 20 31 33 2e 36 34 35 20 30 20 31 33 38 2e 37 32 2d 31 30 35 2e 35 38 33 20 32 39 38 2e 35 35 38 2d 32 39 38 2e 35 35 38 20 32 39 38 2e 35 35 38 2d 35 39 2e 34 35 32 20 30 2d 31 31 34 2e 36 38 2d 31 37 2e 32 31 39 2d 31 36 31 2e 31 33 37 2d 34 37 2e 31 30 36 20 38 2e 34 34 37 2e 39 37 34 20 31 36 2e 35 36 38 20 31 2e 32 39 39 20 32 35 2e 33 34 20 31 2e 32 39 39 20 34 39 2e 30 35 35 20 30 20 39 34 2e 32 31 33 2d 31 36 2e 35 36 38 20 31 33 30 2e 32 37 34 2d 34 34 2e 38 33 32 2d 34 36 2e 31 33 32 2d 2e 39 37 35 2d 38 34 2e 37 39 32 2d 33 31 2e 31 38 38 2d 39 38 2e Data Ascii: ox="0 0 512 512"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49779	35.190.80.1	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:53 UTC	533	OUT	OPTIONS /report/v3?s=d1SmonGeLVKW2lHJdEtvhYzllR2aVVlUgqcS6Oi4BPefDXHucuOB%2FIsaOcGSGe17nBrJhfppumxIUDRo1sLO2aUIMpXrNvoG2Nppgb0TnavCUH90OkcdoFUiSq8CTG%2BIyNTg HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://v9.www-ytmp4.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:53 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 10 Jan 2024 21:51:53 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49777	139.45.197.244	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:53 UTC	706	OUT	GET /4/5596087 HTTP/1.1 Host: vaikijie.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:54 UTC	1685	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:51:54 GMT Content-Type: text/html; charset=utf8 Content-Length: 1222 Connection: close X-Trace-Id: 9aadf825bde2db8ea5c2ffd9b272bf6b Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch" Link: <https://ak.deephicy.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=a12b2079a0554715ad9689b20b20a045; expires=Thu, 09 Jan 2025 21:51:54 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923514; expires=Thu, 09 Jan 2025 21:51:54 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, favicon
2024-01-10 21:51:54 UTC	1222	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6e 6f 73 63 72 69 70 74 3e 0a 09 09 3c 6d 65 74 61 20 69 64 3d 22 6d 65 74 61 2d 72 65 66 72 65 73 68 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 61 6b 2e 64 65 65 70 68 69 63 79 2e 6e 65 74 2f 34 2f 36 31 31 38 37 38 30 2f 3f 76 61 72 3d 35 35 39 36 30 38 37 26 61 Data Ascii: <!doctype html><html lang="en" xmlns="http://www.w3.org/1999/html"><head> <meta charset="UTF-8"/> <title>Redirect</title><noscript><meta id="meta-refresh" http-equiv="refresh" content="1; url=https://ak.deephicy.net/4/6118780/?var=5596087&a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49775	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:54 UTC	692	OUT	GET /js/custome.js HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/search/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923512.0.0.0; _ga=GA1.1.20077430.1704923498
2024-01-10 21:51:54 UTC	828	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:54 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Cf-Bgj: minify Cf-Polished: origSize=2166 ETag: W/"653c4b5c-876" Expires: Wed, 10 Jan 2024 21:52:54 GMT Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT Vary: Accept-Encoding X-Cache: HIT CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jm%2FwtL1FoI3L6Lxc%2BLXqmeu%2B9CItTtDW3B4ekBDEaLJTgs%2Bbao9hRMWUq7HD%2FMeIuOghVOYpnUXeaX%2BxAaXYIRc2Xm5oB6H%2F%2FZ8%2F%2FXw2ZNs4AiGzv6F1%2FdFeXzwycnSJ%2BarZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824daff449c2a-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:54 UTC	541	IN	Data Raw: 36 38 61 0d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 27 2e 66 6f 72 6d 61 74 65 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 27 2e 66 6f 72 6d 61 74 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 3b 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 3b 76 61 72 20 66 6f 72 6d 61 74 3d 24 28 74 68 69 73 29 2e 74 65 78 74 28 29 3b 24 28 27 23 66 6f 72 6d 61 74 65 27 29 2e 76 61 6c 28 66 6f 72 6d 61 74 29 3b 7d 29 3b 24 28 22 23 69 6e 70 75 74 22 29 2e 6b 65 79 75 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 63 6f 64 65 3d 28 65 2e 6b 65 79 43 6f 64 65 7c 7c 65 2e 77 68 69 63 68 29 3b 69 66 28 63 6f 64 65 Data Ascii: 68ajQuery(document).ready(function(){$('.formate').click(function(){$('.formate').removeClass("active");$(this).addClass("active");var format=$(this).text();$('#formate').val(format);});$("#input").keyup(function(e){var code=(e.keyCode\|\|e.which);if(code
2024-01-10 21:51:54 UTC	1140	IN	Data Raw: 64 27 29 2e 74 65 78 74 28 29 3b 24 28 27 23 69 6e 70 75 74 27 29 2e 76 61 6c 28 6e 65 77 5f 71 75 65 72 79 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 30 3a 76 61 72 20 6e 65 77 5f 69 6e 64 65 78 3d 69 6e 64 65 78 2b 31 3b 24 28 27 23 73 75 67 67 65 73 74 69 6f 6e 5f 6c 69 73 74 20 6c 69 27 29 2e 65 71 28 6e 65 77 5f 69 6e 64 65 78 29 2e 61 64 64 43 6c 61 73 73 28 27 73 65 6c 65 63 74 65 64 27 29 3b 76 61 72 20 6e 65 77 5f 71 75 65 72 79 3d 24 28 27 23 73 75 67 67 65 73 74 69 6f 6e 5f 6c 69 73 74 20 6c 69 2e 73 65 6c 65 63 74 65 64 27 29 2e 74 65 78 74 28 29 3b 24 28 27 23 69 6e 70 75 74 27 29 2e 76 61 6c 28 6e 65 77 5f 71 75 65 72 79 29 3b 62 72 65 61 6b 3b 7d 7d 65 6c 73 65 20 69 66 28 63 6f 64 65 3d 3d 31 33 29 7b 24 28 22 23 73 75 67 67 65 73 73 74 69 Data Ascii: d').text();$('#input').val(new_query);break;case 40:var new_index=index+1;$('#suggestion_list li').eq(new_index).addClass('selected');var new_query=$('#suggestion_list li.selected').text();$('#input').val(new_query);break;}}else if(code==13){$("#suggessti
2024-01-10 21:51:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49780	35.190.80.1	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:54 UTC	474	OUT	POST /report/v3?s=d1SmonGeLVKW2lHJdEtvhYzllR2aVVlUgqcS6Oi4BPefDXHucuOB%2FIsaOcGSGe17nBrJhfppumxIUDRo1sLO2aUIMpXrNvoG2Nppgb0TnavCUH90OkcdoFUiSq8CTG%2BIyNTg HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 430 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:54 UTC	430	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 33 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 73 65 61 72 63 68 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 38 37 2e 31 37 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c Data Ascii: [{"age":10,"body":{"elapsed_time":434,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://v9.www-ytmp4.com/search/","sampling_fraction":1.0,"server_ip":"172.67.187.174","status_code":0,"type":"abandoned"},"type":"network-error",
2024-01-10 21:51:54 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 10 Jan 2024 21:51:54 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49789	104.21.12.237	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:54 UTC	619	OUT	GET /@api/search/YouTube/http://youtube.com/shorts/whu7qn8ungc?feature=share HTTP/1.1 Host: app.www-y2mate.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:57 UTC	848	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:57 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: PHPSESSID=38so0catp3ovdkh3goe3sjdiia; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://v9.www-ytmp4.com X-Cache: MISS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zBCr1HSC731ptTtzZOBNcpXWQMvErRmFS7pl%2FQuf4V7U0%2FRP9riIkq%2F3LaFifKXy799G4s66Bu0upac4X3m3Khp2CKIG97TCrjBQLodCbvQ9XfpwUnXpkH%2FDbw62YKpxMzCJ6Fw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824dfbe4f07d0-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:57 UTC	521	IN	Data Raw: 32 32 62 65 0d 0a 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 69 64 22 3a 22 30 6e 42 5a 4c 48 78 6d 55 64 30 22 2c 22 74 69 74 6c 65 22 3a 22 44 6f 20 79 6f 75 20 6b 6e 6f 77 20 41 62 6f 75 74 20 54 68 69 73 20 23 53 68 6f 72 74 73 22 2c 22 74 68 75 6d 62 44 65 66 61 75 6c 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 30 6e 42 5a 4c 48 78 6d 55 64 30 5c 2f 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 74 68 75 6d 62 4d 65 64 69 75 6d 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 30 6e 42 5a 4c 48 78 6d 55 64 30 5c 2f 6d 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 74 68 75 6d 62 48 69 67 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c Data Ascii: 22be{"items":[{"id":"0nBZLHxmUd0","title":"Do you know About This #Shorts","thumbDefault":"https:\/\/i.ytimg.com\/vi\/0nBZLHxmUd0\/default.jpg","thumbMedium":"https:\/\/i.ytimg.com\/vi\/0nBZLHxmUd0\/mqdefault.jpg","thumbHigh":"https:\/\/i.ytimg.com\/vi\
2024-01-10 21:51:57 UTC	1369	IN	Data Raw: 75 6c 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 70 54 4c 74 7a 44 65 30 5f 39 45 5c 2f 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 74 68 75 6d 62 4d 65 64 69 75 6d 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 70 54 4c 74 7a 44 65 30 5f 39 45 5c 2f 6d 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 74 68 75 6d 62 48 69 67 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 70 54 4c 74 7a 44 65 30 5f 39 45 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 4d 75 6e 75 20 50 65 67 75 20 4f 66 66 69 63 69 61 6c 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 4c 70 79 56 74 55 55 Data Ascii: ult":"https:\/\/i.ytimg.com\/vi\/pTLtzDe0_9E\/default.jpg","thumbMedium":"https:\/\/i.ytimg.com\/vi\/pTLtzDe0_9E\/mqdefault.jpg","thumbHigh":"https:\/\/i.ytimg.com\/vi\/pTLtzDe0_9E\/hqdefault.jpg","channelTitle":"Munu Pegu Official","channelId":"UCLpyVtUU
2024-01-10 21:51:57 UTC	1369	IN	Data Raw: 48 69 67 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 44 4c 72 70 63 78 78 47 61 68 49 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 4a 75 73 74 20 53 68 6f 72 74 73 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 4f 4d 57 54 78 49 37 6b 77 56 58 51 33 42 49 4d 61 65 4b 67 76 77 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 32 20 79 65 61 72 73 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 33 30 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 36 30 36 32 36 33 35 22 7d 2c 7b 22 69 64 22 3a 22 75 5a 46 62 52 4d 52 74 4a 6a 30 22 2c 22 74 69 74 6c 65 22 3a 22 74 72 79 69 6e 67 20 74 6f 20 72 65 63 72 65 61 74 65 20 63 6f 75 70 6c 65 73 20 Data Ascii: High":"https:\/\/i.ytimg.com\/vi\/DLrpcxxGahI\/hqdefault.jpg","channelTitle":"Just Shorts","channelId":"UCOMWTxI7kwVXQ3BIMaeKgvw","publishedAt":"2 years ago","duration":"0:30","viewCount":"6062635"},{"id":"uZFbRMRtJj0","title":"trying to recreate couples
2024-01-10 21:51:57 UTC	1369	IN	Data Raw: 54 32 52 56 67 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 41 53 20 4d 69 78 20 52 65 61 63 74 69 6f 6e 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 55 4c 4f 44 47 73 2d 31 78 61 70 51 77 41 39 34 67 39 68 46 5f 41 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 31 31 20 6d 6f 6e 74 68 73 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 33 33 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 32 33 38 32 31 22 7d 2c 7b 22 69 64 22 3a 22 61 6f 52 4a 6d 6e 54 79 72 74 4d 22 2c 22 74 69 74 6c 65 22 3a 22 44 6f 20 79 6f 75 20 4b 6e 6f 77 20 57 68 61 74 20 69 73 20 54 68 69 73 20 23 53 68 6f 72 74 73 22 2c 22 74 68 75 6d 62 44 65 66 61 75 6c 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 Data Ascii: T2RVg\/hqdefault.jpg","channelTitle":"AS Mix Reaction","channelId":"UCULODGs-1xapQwA94g9hF_A","publishedAt":"11 months ago","duration":"0:33","viewCount":"23821"},{"id":"aoRJmnTyrtM","title":"Do you Know What is This #Shorts","thumbDefault":"https:\/\/i.y
2024-01-10 21:51:57 UTC	1369	IN	Data Raw: 45 4d 5f 77 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 72 61 64 6d 69 72 75 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 4a 4a 6a 42 64 54 62 64 5f 77 73 33 4a 33 6e 4c 41 38 49 5f 53 67 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 31 20 79 65 61 72 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 33 31 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 31 37 36 33 31 32 33 33 36 22 7d 2c 7b 22 69 64 22 3a 22 34 65 76 5f 41 72 78 2d 74 5a 55 22 2c 22 74 69 74 6c 65 22 3a 22 73 61 62 6b 20 73 61 74 68 20 68 75 61 20 68 6f 67 61 20 79 65 20 5c 75 64 38 33 64 5c 75 64 65 34 38 5c 75 64 38 33 64 5c 75 64 65 34 38 5c 75 64 38 33 65 5c 75 64 64 32 33 5c 75 64 38 33 65 5c 75 64 64 32 33 20 Data Ascii: EM_w\/hqdefault.jpg","channelTitle":"radmiru","channelId":"UCJJjBdTbd_ws3J3nLA8I_Sg","publishedAt":"1 year ago","duration":"0:31","viewCount":"176312336"},{"id":"4ev_Arx-tZU","title":"sabk sath hua hoga ye \ud83d\ude48\ud83d\ude48\ud83e\udd23\ud83e\udd23
2024-01-10 21:51:57 UTC	1369	IN	Data Raw: 5c 2f 6d 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 74 68 75 6d 62 48 69 67 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 58 49 6d 36 59 41 34 4f 36 58 77 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 44 65 73 69 32 34 20 76 6c 6f 67 20 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 58 49 44 7a 31 4e 64 54 41 72 75 30 38 6e 6a 38 38 6b 39 77 48 77 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 31 20 79 65 61 72 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 31 36 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 31 37 30 37 22 7d 2c 7b 22 69 64 22 3a 22 5a 2d 4c 76 50 49 74 31 71 6d 34 22 2c 22 74 69 74 6c 65 22 3a 22 68 74 74 70 73 3a 5c Data Ascii: \/mqdefault.jpg","thumbHigh":"https:\/\/i.ytimg.com\/vi\/XIm6YA4O6Xw\/hqdefault.jpg","channelTitle":"Desi24 vlog ","channelId":"UCXIDz1NdTAru08nj88k9wHw","publishedAt":"1 year ago","duration":"0:16","viewCount":"1707"},{"id":"Z-LvPIt1qm4","title":"https:\
2024-01-10 21:51:57 UTC	1369	IN	Data Raw: 7a 51 69 4d 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 5c 75 32 36 30 35 20 4f 50 20 53 48 4f 52 54 5c 6e 5c 75 32 36 30 35 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 62 55 79 67 56 36 78 6a 4e 52 6a 63 39 34 37 63 6a 78 4b 4e 76 77 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 31 20 79 65 61 72 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 31 32 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 33 31 36 34 32 22 7d 2c 7b 22 69 64 22 3a 22 41 4a 54 63 70 4e 42 58 41 4c 38 22 2c 22 74 69 74 6c 65 22 3a 22 53 65 65 69 6e 67 20 68 6f 77 20 6c 6f 6e 67 20 69 74 20 74 61 6b 65 73 20 6d 79 20 68 75 73 62 61 6e 64 20 74 6f 20 74 61 6b 65 20 6f 66 66 20 6d 79 20 73 68 69 72 74 2e 2e 20 Data Ascii: zQiM\/hqdefault.jpg","channelTitle":"\u2605 OP SHORT\n\u2605","channelId":"UCbUygV6xjNRjc947cjxKNvw","publishedAt":"1 year ago","duration":"0:12","viewCount":"31642"},{"id":"AJTcpNBXAL8","title":"Seeing how long it takes my husband to take off my shirt..
2024-01-10 21:51:57 UTC	167	IN	Data Raw: 45 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 5c 75 32 36 30 35 20 4f 50 20 53 48 4f 52 54 5c 6e 5c 75 32 36 30 35 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 62 55 79 67 56 36 78 6a 4e 52 6a 63 39 34 37 63 6a 78 4b 4e 76 77 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 31 20 79 65 61 72 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 32 39 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 31 30 31 31 36 22 7d 5d 7d 0d 0a Data Ascii: E\/hqdefault.jpg","channelTitle":"\u2605 OP SHORT\n\u2605","channelId":"UCbUygV6xjNRjc947cjxKNvw","publishedAt":"1 year ago","duration":"0:29","viewCount":"10116"}]}
2024-01-10 21:51:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49783	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:54 UTC	581	OUT	POST /img.gif?f=merge&userId=a12b2079a0554715ad9689b20b20a045 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://vaikijie.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:55 UTC	678	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:51:54 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: https://vaikijie.net Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=a12b2079a0554715ad9689b20b20a045; expires=Thu, 09 Jan 2025 21:51:54 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:51:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49792	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:55 UTC	689	OUT	GET /img.gif?f=merge&userId=efe83b1130104efea0d475e2cb75464f&z=6118780&p_rid=3c4d337a-df6e-44ea-a68b-8262067700eb&p_src=sf HTTP/1.1 Host: my.rtmark.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ak.deephicy.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:55 UTC	659	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:51:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:51:55 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:51:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49793	37.48.68.71	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:55 UTC	696	OUT	POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=9d090693-cfc0-4150-a229-3957785207d8 HTTP/1.1 Host: datatechone.com Connection: keep-alive Content-Length: 1979 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ak.deephicy.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ak.deephicy.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:55 UTC	1979	OUT	Data Raw: 4c 1b 52 52 1f 1c 26 1c 14 05 67 1f 1c 4b 12 03 01 05 50 0e 4c 5f 04 0b 6c 65 3c 46 55 4a 07 0b 1a 53 5b 78 2f 2d 22 2e 52 1c 29 02 58 5e 5f 53 56 44 2f 1d 19 09 59 07 59 08 4f 59 40 5b 52 1c 3d 1a 5e 5f 47 65 12 05 1d 0d 07 42 7c 0c 0f 50 02 0f 4e 43 21 41 0c 17 52 4b 5c 1f 5a 4c 49 10 45 52 08 59 3a 09 25 2f 47 42 5e 14 3d 1a 5e 5f 47 65 12 05 1d 0d 07 42 5c 1b 10 4f 04 18 47 49 5e 16 1c 1b 15 03 11 71 15 0b 1e 04 10 42 71 07 1a 17 41 42 29 04 1d 53 02 08 1e 1b 1f 14 08 14 09 4a 4f 5a 14 4b 0d 43 0e 48 54 46 44 04 42 4f 40 4e 11 0c 4b 56 41 58 59 40 4f 01 5b 03 58 52 5a 47 50 43 07 1a 15 03 02 04 42 54 55 4a 02 0b 50 4b 43 00 51 5d 42 49 05 4c 4c 57 07 15 11 41 03 46 43 58 59 40 51 11 5b 03 51 46 4c 1c 14 57 4c 57 07 15 11 45 1b 0c 5b 52 4c 5a 0c 45 5b Data Ascii: LRR&gKPL_le<FUJS[x/-".R)X^_SVD/YYOY@[R=^_GeB\|PNC!ARK\ZLIERY:%/GB^=^_GeB\OGI^qBqAB)SJOZKCHTFDBO@NKVAXY@O[XRZGPCBTUJPKCQ]BILLWAFCXY@Q[QFLWLWE[RLZE[
2024-01-10 21:51:56 UTC	461	IN	HTTP/1.1 200 OK Server: nginx/1.19.10 Date: Wed, 10 Jan 2024 21:51:56 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: https://ak.deephicy.net Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-01-10 21:51:56 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49796	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:56 UTC	499	OUT	GET /img.gif?f=merge&userId=efe83b1130104efea0d475e2cb75464f&z=6118780&p_rid=3c4d337a-df6e-44ea-a68b-8262067700eb&p_src=sf HTTP/1.1 Host: my.rtmark.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:51:56 UTC	659	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:51:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:51:56 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:51:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49797	139.45.195.253	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:56 UTC	429	OUT	GET /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=9d090693-cfc0-4150-a229-3957785207d8 HTTP/1.1 Host: datatechone.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:56 UTC	438	IN	HTTP/1.1 200 OK Server: nginx/1.19.10 Date: Wed, 10 Jan 2024 21:51:56 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-01-10 21:51:56 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49799	52.204.19.219	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:57 UTC	919	OUT	GET /go/79441144-fdef-4871-8aba-b2793f4c1a03?cost=0.000115&visitor_id=769067572518986295&zoneid=6118780&campaignid=7743636&bannerid=19837134&language=en&os=windows&osversion=win10&browser=chrome&browserversion=117&connection.type=broadband&region=dc HTTP/1.1 Host: v2e81.bemobtrcks.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:58 UTC	1433	IN	HTTP/1.1 302 Found Server: openresty Date: Wed, 10 Jan 2024 21:51:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 446 Connection: close accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced Access-Control-Allow-Origin: * Location: https://statuelikeazimuthsghostless.com/5hrxy6b9f367ae6479fe12d4b544354b57c05f9629e66?s1=e5315b22&s3=G5kCG9zjtQT6ZZXpnCAPtY&s2=61ff2ce2-4168-4ac1-8076-a3ebe1255ce0&s3=G5kCG9zjtQT6ZZXpnCAPtY Set-Cookie: bemob-viewer-id=69bd4987-f3c8-4a03-9569-fd3b5702c5d3; Domain=v2e81.bemobtrcks.com; Path=/; Expires=Thu, 09 Jan 2025 21:51:58 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: bemob-uniq-visit:79441144-fdef-4871-8aba-b2793f4c1a03=1; Domain=v2e81.bemobtrcks.com; Path=/; Expires=Thu, 11 Jan 2024 21:51:58 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: bemob-rotation:79441144-fdef-4871-8aba-b2793f4c1a03:random:800e55d1d2bc0928070d28acd96d8089=0-0-0; Domain=v2e81.bemobtrcks.com; Path=/; Expires=Thu, 11 Jan 2024 21:51:58 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: bemob-click-id=G5kCG9zjtQT6ZZXpnCAPtY; Domain=v2e81.bemobtrcks.com; Path=/; Expires=Thu, 11 Jan 2024 21:51:58 GMT; HttpOnly; Secure; SameSite=None Vary: Accept X-Response-Time: 16.845ms Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache
2024-01-10 21:51:58 UTC	446	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 75 65 6c 69 6b 65 61 7a 69 6d 75 74 68 73 67 68 6f 73 74 6c 65 73 73 2e 63 6f 6d 2f 35 68 72 78 79 36 62 39 66 33 36 37 61 65 36 34 37 39 66 65 31 32 64 34 62 35 34 34 33 35 34 62 35 37 63 30 35 66 39 36 32 39 65 36 36 3f 73 31 3d 65 35 33 31 35 62 32 32 26 61 6d 70 3b 73 33 3d 47 35 6b 43 47 39 7a 6a 74 51 54 36 5a 5a 58 70 6e 43 41 50 74 59 26 61 6d 70 3b 73 32 3d 36 31 66 66 32 63 65 32 2d 34 31 36 38 2d 34 61 63 31 2d 38 30 37 36 2d 61 33 65 62 65 31 32 35 35 63 65 30 26 61 6d 70 3b 73 33 3d 47 35 6b 43 47 39 7a 6a 74 51 54 36 5a 5a 58 70 6e 43 41 50 74 59 22 3e 68 74 74 70 73 3a 2f 2f 73 74 61 74 75 65 6c 69 6b 65 Data Ascii: <p>Found. Redirecting to <a href="https://statuelikeazimuthsghostless.com/5hrxy6b9f367ae6479fe12d4b544354b57c05f9629e66?s1=e5315b22&s3=G5kCG9zjtQT6ZZXpnCAPtY&s2=61ff2ce2-4168-4ac1-8076-a3ebe1255ce0&s3=G5kCG9zjtQT6ZZXpnCAPtY">https://statuelike

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49800	104.21.12.237	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:58 UTC	413	OUT	GET /@api/search/YouTube/http://youtube.com/shorts/whu7qn8ungc?feature=share HTTP/1.1 Host: app.www-y2mate.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:58 UTC	845	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:51:58 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: PHPSESSID=38so0catp3ovdkh3goe3sjdiia; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://v9.www-ytmp4.com X-Cache: HIT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BIQbxqMKvpVVumciCLOKAWHdvIwT%2B6xGkz2obL4E%2Fdu7SkQR6dH%2Bqt7fogaZqpjIhc81GvmkuXvKAtRsVlmu94N9Jb5kNspkLPmoH3yAmDe26smViaReClV4jNOt9zsYXv6Tedc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824f58f3507b5-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:58 UTC	524	IN	Data Raw: 32 32 62 65 0d 0a 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 69 64 22 3a 22 30 6e 42 5a 4c 48 78 6d 55 64 30 22 2c 22 74 69 74 6c 65 22 3a 22 44 6f 20 79 6f 75 20 6b 6e 6f 77 20 41 62 6f 75 74 20 54 68 69 73 20 23 53 68 6f 72 74 73 22 2c 22 74 68 75 6d 62 44 65 66 61 75 6c 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 30 6e 42 5a 4c 48 78 6d 55 64 30 5c 2f 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 74 68 75 6d 62 4d 65 64 69 75 6d 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 30 6e 42 5a 4c 48 78 6d 55 64 30 5c 2f 6d 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 74 68 75 6d 62 48 69 67 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c Data Ascii: 22be{"items":[{"id":"0nBZLHxmUd0","title":"Do you know About This #Shorts","thumbDefault":"https:\/\/i.ytimg.com\/vi\/0nBZLHxmUd0\/default.jpg","thumbMedium":"https:\/\/i.ytimg.com\/vi\/0nBZLHxmUd0\/mqdefault.jpg","thumbHigh":"https:\/\/i.ytimg.com\/vi\
2024-01-10 21:51:58 UTC	1369	IN	Data Raw: 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 70 54 4c 74 7a 44 65 30 5f 39 45 5c 2f 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 74 68 75 6d 62 4d 65 64 69 75 6d 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 70 54 4c 74 7a 44 65 30 5f 39 45 5c 2f 6d 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 74 68 75 6d 62 48 69 67 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 70 54 4c 74 7a 44 65 30 5f 39 45 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 4d 75 6e 75 20 50 65 67 75 20 4f 66 66 69 63 69 61 6c 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 4c 70 79 56 74 55 55 31 30 33 Data Ascii: ":"https:\/\/i.ytimg.com\/vi\/pTLtzDe0_9E\/default.jpg","thumbMedium":"https:\/\/i.ytimg.com\/vi\/pTLtzDe0_9E\/mqdefault.jpg","thumbHigh":"https:\/\/i.ytimg.com\/vi\/pTLtzDe0_9E\/hqdefault.jpg","channelTitle":"Munu Pegu Official","channelId":"UCLpyVtUU103
2024-01-10 21:51:58 UTC	1369	IN	Data Raw: 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 44 4c 72 70 63 78 78 47 61 68 49 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 4a 75 73 74 20 53 68 6f 72 74 73 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 4f 4d 57 54 78 49 37 6b 77 56 58 51 33 42 49 4d 61 65 4b 67 76 77 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 32 20 79 65 61 72 73 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 33 30 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 36 30 36 32 36 33 35 22 7d 2c 7b 22 69 64 22 3a 22 75 5a 46 62 52 4d 52 74 4a 6a 30 22 2c 22 74 69 74 6c 65 22 3a 22 74 72 79 69 6e 67 20 74 6f 20 72 65 63 72 65 61 74 65 20 63 6f 75 70 6c 65 73 20 70 6f 73 Data Ascii: h":"https:\/\/i.ytimg.com\/vi\/DLrpcxxGahI\/hqdefault.jpg","channelTitle":"Just Shorts","channelId":"UCOMWTxI7kwVXQ3BIMaeKgvw","publishedAt":"2 years ago","duration":"0:30","viewCount":"6062635"},{"id":"uZFbRMRtJj0","title":"trying to recreate couples pos
2024-01-10 21:51:58 UTC	1369	IN	Data Raw: 56 67 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 41 53 20 4d 69 78 20 52 65 61 63 74 69 6f 6e 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 55 4c 4f 44 47 73 2d 31 78 61 70 51 77 41 39 34 67 39 68 46 5f 41 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 31 31 20 6d 6f 6e 74 68 73 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 33 33 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 32 33 38 32 31 22 7d 2c 7b 22 69 64 22 3a 22 61 6f 52 4a 6d 6e 54 79 72 74 4d 22 2c 22 74 69 74 6c 65 22 3a 22 44 6f 20 79 6f 75 20 4b 6e 6f 77 20 57 68 61 74 20 69 73 20 54 68 69 73 20 23 53 68 6f 72 74 73 22 2c 22 74 68 75 6d 62 44 65 66 61 75 6c 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d Data Ascii: Vg\/hqdefault.jpg","channelTitle":"AS Mix Reaction","channelId":"UCULODGs-1xapQwA94g9hF_A","publishedAt":"11 months ago","duration":"0:33","viewCount":"23821"},{"id":"aoRJmnTyrtM","title":"Do you Know What is This #Shorts","thumbDefault":"https:\/\/i.ytim
2024-01-10 21:51:58 UTC	1369	IN	Data Raw: 77 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 72 61 64 6d 69 72 75 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 4a 4a 6a 42 64 54 62 64 5f 77 73 33 4a 33 6e 4c 41 38 49 5f 53 67 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 31 20 79 65 61 72 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 33 31 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 31 37 36 33 31 32 33 33 36 22 7d 2c 7b 22 69 64 22 3a 22 34 65 76 5f 41 72 78 2d 74 5a 55 22 2c 22 74 69 74 6c 65 22 3a 22 73 61 62 6b 20 73 61 74 68 20 68 75 61 20 68 6f 67 61 20 79 65 20 5c 75 64 38 33 64 5c 75 64 65 34 38 5c 75 64 38 33 64 5c 75 64 65 34 38 5c 75 64 38 33 65 5c 75 64 64 32 33 5c 75 64 38 33 65 5c 75 64 64 32 33 20 23 73 68 Data Ascii: w\/hqdefault.jpg","channelTitle":"radmiru","channelId":"UCJJjBdTbd_ws3J3nLA8I_Sg","publishedAt":"1 year ago","duration":"0:31","viewCount":"176312336"},{"id":"4ev_Arx-tZU","title":"sabk sath hua hoga ye \ud83d\ude48\ud83d\ude48\ud83e\udd23\ud83e\udd23 #sh
2024-01-10 21:51:58 UTC	1369	IN	Data Raw: 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 74 68 75 6d 62 48 69 67 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 2e 79 74 69 6d 67 2e 63 6f 6d 5c 2f 76 69 5c 2f 58 49 6d 36 59 41 34 4f 36 58 77 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 44 65 73 69 32 34 20 76 6c 6f 67 20 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 58 49 44 7a 31 4e 64 54 41 72 75 30 38 6e 6a 38 38 6b 39 77 48 77 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 31 20 79 65 61 72 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 31 36 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 31 37 30 37 22 7d 2c 7b 22 69 64 22 3a 22 5a 2d 4c 76 50 49 74 31 71 6d 34 22 2c 22 74 69 74 6c 65 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f Data Ascii: qdefault.jpg","thumbHigh":"https:\/\/i.ytimg.com\/vi\/XIm6YA4O6Xw\/hqdefault.jpg","channelTitle":"Desi24 vlog ","channelId":"UCXIDz1NdTAru08nj88k9wHw","publishedAt":"1 year ago","duration":"0:16","viewCount":"1707"},{"id":"Z-LvPIt1qm4","title":"https:\/\/
2024-01-10 21:51:58 UTC	1369	IN	Data Raw: 4d 5c 2f 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 5c 75 32 36 30 35 20 4f 50 20 53 48 4f 52 54 5c 6e 5c 75 32 36 30 35 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 62 55 79 67 56 36 78 6a 4e 52 6a 63 39 34 37 63 6a 78 4b 4e 76 77 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 31 20 79 65 61 72 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 31 32 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 33 31 36 34 32 22 7d 2c 7b 22 69 64 22 3a 22 41 4a 54 63 70 4e 42 58 41 4c 38 22 2c 22 74 69 74 6c 65 22 3a 22 53 65 65 69 6e 67 20 68 6f 77 20 6c 6f 6e 67 20 69 74 20 74 61 6b 65 73 20 6d 79 20 68 75 73 62 61 6e 64 20 74 6f 20 74 61 6b 65 20 6f 66 66 20 6d 79 20 73 68 69 72 74 2e 2e 20 23 53 68 Data Ascii: M\/hqdefault.jpg","channelTitle":"\u2605 OP SHORT\n\u2605","channelId":"UCbUygV6xjNRjc947cjxKNvw","publishedAt":"1 year ago","duration":"0:12","viewCount":"31642"},{"id":"AJTcpNBXAL8","title":"Seeing how long it takes my husband to take off my shirt.. #Sh
2024-01-10 21:51:58 UTC	164	IN	Data Raw: 68 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 2c 22 63 68 61 6e 6e 65 6c 54 69 74 6c 65 22 3a 22 5c 75 32 36 30 35 20 4f 50 20 53 48 4f 52 54 5c 6e 5c 75 32 36 30 35 22 2c 22 63 68 61 6e 6e 65 6c 49 64 22 3a 22 55 43 62 55 79 67 56 36 78 6a 4e 52 6a 63 39 34 37 63 6a 78 4b 4e 76 77 22 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 31 20 79 65 61 72 20 61 67 6f 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 30 3a 32 39 22 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 22 31 30 31 31 36 22 7d 5d 7d 0d 0a Data Ascii: hqdefault.jpg","channelTitle":"\u2605 OP SHORT\n\u2605","channelId":"UCbUygV6xjNRjc947cjxKNvw","publishedAt":"1 year ago","duration":"0:29","viewCount":"10116"}]}
2024-01-10 21:51:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49803	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:58 UTC	692	OUT	GET /vi/0nBZLHxmUd0/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:58 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6826 Date: Wed, 10 Jan 2024 21:51:58 GMT Expires: Wed, 10 Jan 2024 23:51:58 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:58 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 13 12 16 13 13 13 15 15 16 17 17 17 17 16 17 16 17 15 15 17 17 15 17 15 19 18 17 15 18 15 1d 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3d 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 25 1f 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 07 ff c4 00 41 10 00 01 03 02 04 03 05 05 05 07 01 09 01 00 00 00 01 00 02 11 03 21 04 12 31 41 05 51 61 13 22 32 71 81 06 91 a1 c1 f0 14 52 b1 d1 e1 15 23 42 62 Data Ascii: JFIF+#(%5%(-/222"8=70=+12//%//////////////////////////////////////////////////@"A!1AQa"2qR#Bb
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 92 79 a3 dd 7c 2a 61 1e f7 8c 7f b4 97 ba 72 5d da 0e 41 78 4c 77 13 ad 5d d9 aa 3d cf 3e 76 1d 00 d9 0d 3a 4a 54 69 3e 1d ae 79 28 93 ba b2 1e 1f 8f 62 29 0c 8c aa e0 36 16 20 79 4e 8b 2d 7c 65 4a 87 35 47 39 ce 26 25 c6 7d dd 35 d1 4e c1 c4 f7 be a5 5d 26 6a 3e 1c fc fa 69 ee 5a b2 9a d9 6d 02 24 73 82 9c da 42 4f 7a 39 11 eb 6b 1f 24 ec 3e 09 ce 39 40 b9 f5 8e 5d 34 6a f5 fc 1b d9 32 e0 d7 b9 b2 09 00 e6 30 5b 0d 90 72 81 a5 b7 53 bd 70 ad 3c bd 2a 64 01 3e 2f a8 3e e5 6f 12 bb 1e d3 61 9b 4f 17 51 8d b0 68 a7 02 f3 06 93 48 26 77 33 3e ab 94 ad 04 b5 a6 04 c0 08 88 23 4d 39 a1 7b 6d 72 98 d7 4f 8b 44 02 e9 ba 24 73 46 5d 23 44 c2 c0 10 3a 32 a6 14 0e 80 f3 44 6e 96 e3 a2 30 6e 90 1b 88 10 89 ae d1 28 95 05 bd 50 0c 9d ca b2 52 9a 4c 73 29 80 26 04 80 Data Ascii: y\|ar]AxLw]=>v:JTi>y(b)6 yN-\|eJ5G9&%}5N]&j>iZm$sBOz9k$>9@]4j20[rSp<d>/>oaOQhH&w3>#M9{mrOD$sF]#D:2Dn0n(PRLs)&
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: eb 6f 8e ff 00 b4 2a 87 f6 c6 26 19 a0 a5 31 a0 fd c3 17 0e 93 41 00 9b 1d 57 4f db 97 3f f6 8e 24 b6 60 9a 72 7f d1 62 e0 e6 2e 20 19 0b 68 9b 1d 0c c0 0d 54 0e 08 1d 40 00 00 2a e4 0b 04 ea 06 d2 50 82 74 42 c7 6c aa a9 20 84 8c 4e 11 64 27 90 56 cb ca 8f 9b 42 00 22 d1 be e8 da eb 18 40 00 be ea b2 d9 00 47 64 43 44 25 c2 51 b7 9a 01 9b 4a a1 cd 08 b8 51 c5 01 e5 42 e8 37 c2 b9 f0 b7 b3 c2 ad 2b a6 11 aa a6 ad c5 25 30 d5 d5 46 85 6e 32 55 b5 a8 21 23 05 5e 54 0f 29 28 e6 95 61 b9 4b 5c 74 9d 10 53 a8 01 45 9b 31 02 51 a0 7b df 2e cc 47 77 45 55 18 1c 79 37 64 b7 92 d1 92 65 03 18 4e a6 c2 c9 91 98 aa 4c 11 94 ea 97 87 69 cc 01 d0 7e 48 de 43 40 b5 e5 08 ac 4b a7 44 13 d7 f0 5a 91 84 3d 5e 7d 46 90 91 8e ae 43 63 94 9f 7a 3e 1c e8 c2 b0 73 24 9f 57 15 Data Ascii: o&1AWO?$`rb. hT@PtBl Nd'VB"@GdCD%QJQB7+%0Fn2U!#^T)(aK\tSE1Q{.GwEUy7deNLi~HC@KDZ=^}FCcz>s$W
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 2e b7 1e e5 35 5a 3d cf 13 0d 33 7d 75 bc ed 1a df 7e 89 f8 4a b3 23 90 eb 78 fc 17 2d ce bc 89 12 2d fd 3f e1 69 c2 bf ba 4c 45 89 f2 11 a4 e9 3a 7b 94 ef b8 7c c3 db fc 33 4e 3a b3 bf f1 cf a5 26 05 e6 70 d8 60 60 4a ef fb 76 09 c7 56 33 ae 4b 72 8a 4c 01 70 59 49 cc 23 f0 5d 33 84 6d a2 a6 10 b7 42 82 8b 48 36 bd ee 4a 63 eb 12 24 a5 3a b4 d9 82 39 a7 4a 53 ea db 43 3b a4 b8 12 67 41 c9 1d 2a 7d 74 dd 50 74 0c c5 20 26 b4 c1 e4 a3 9f a2 06 56 27 c8 94 6d d7 a9 48 2c 0f 8a 07 11 30 8b 3c 18 3a a8 d0 99 20 37 2a 9c df 82 8d 3a a1 94 8c 41 fb f2 55 9e 44 0d f7 42 04 92 36 4c 68 d5 04 f3 05 6d c2 1b 2c 8f 6a 76 15 cb 54 b5 8d 50 d7 d1 10 4a c5 1b 29 32 5a 9a d4 a6 26 b5 00 72 96 e2 8a 55 14 8c 74 ea 86 8b 0b f3 51 b5 b5 3b 94 b2 15 d3 8b d9 32 59 7b 9c 79 Data Ascii: .5Z=3}u~J#x--?iLE:{\|3N:&p``JvV3KrLpYI#]3mBH6Jc$:9JSC;gA}tPt &V'mH,0<: 7:AUDB6Lhm,jvTPJ)2Z&rUtQ;2Y{y
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 07 b2 9d 51 0e 6c c0 23 34 32 ed 81 b1 9e 48 d1 6d d2 06 a5 46 d2 70 7b aa c4 01 52 3b 17 b4 39 e5 ac 78 24 41 10 0f 4b 41 4b 6b 4b 5a 4d 27 51 3d f9 a9 99 ee cf 01 d2 e0 ea 42 1a 60 cc 9d 22 f2 ae a3 a5 fb 3c 39 99 86 76 12 3c 55 0b 5f d9 83 95 c2 04 4b 6d de 19 41 5c ba 55 ab 0e e3 29 d3 02 2c 4e 57 b8 e5 73 9e e9 91 2c 19 6d 04 66 b1 1b c2 9a bc 5d 9f b5 ba 4e a5 dc f6 be a2 e6 7d e8 69 52 11 33 04 dc f2 6c 44 fa e8 b9 74 2a 16 ba 4b 83 b3 5f 33 44 0e 80 36 d6 fc 82 d0 dc 68 02 34 9b 09 d4 9f 35 8a b4 f2 9e d5 d1 1f 6a a8 7e f1 60 00 9d 00 a6 d0 b8 d8 8c 39 1a 19 5d 1f 68 29 b9 f8 97 99 d4 88 fe 90 b9 d5 28 38 1d 4c 0f 8a ec c7 f8 c7 3d e4 15 18 fc b7 36 57 d9 b4 53 9d 5c 55 e2 71 25 d0 22 02 95 30 d1 05 b7 dc a6 05 86 c3 49 b9 43 5a 26 06 db a1 18 90 Data Ascii: Ql#42HmFp{R;9x$AKAKkKZM'Q=B`"<9v<U_KmA\U),NWs,mf]N}iR3lDt*K_3D6h45j~`9]h)(8L=6WS\Uq%"0ICZ&
2024-01-10 21:51:58 UTC	1203	IN	Data Raw: b1 74 e7 1d 44 1f e7 fe d3 e1 56 33 79 46 3e a2 eb a3 9f da fe 1d 0e 2b 87 6b 6b 53 27 42 72 12 3a 84 bc 67 05 04 cb 45 81 df c4 57 b6 e3 3e cd f6 b4 8b da 01 78 33 04 7f 10 d3 75 cf c1 e1 1f 56 94 92 d6 3a 25 cd d4 f2 8f e5 2b 5b 87 7e ef 1f a7 ea 7f 6c b3 c3 c4 e2 b0 bd ab dc 58 20 03 00 0e 96 ba 98 2e 20 fa 1d c3 e1 eb b7 55 df af 83 7d 1a d2 1a ea 8d 23 66 80 01 bc 4c 1b f9 af 35 c4 de f3 50 97 73 e4 00 1e 8b 0c b0 f1 5e a7 43 d4 5f 77 bb 1a ea 7d b0 b8 4b b2 d4 61 f1 37 90 fc d7 37 1b c3 32 f7 e9 f7 9a 6e 06 a4 7e 6b 1d 3c 4b 9a 64 10 57 4f 07 88 15 0c 4e 53 cb f4 59 c9 ed bf 0f 43 2e a7 ea cf 97 21 b5 61 69 a5 8c 1a 15 d9 af c2 5a e9 24 4f 51 62 b9 18 ae 17 90 da 47 c5 54 b3 2e 11 96 39 61 c8 4d 78 21 68 66 2b aa ce ec 13 c3 73 48 70 f3 82 b1 38 94 Data Ascii: tDV3yF>+kkS'Br:gEW>x3uV:%+[~lX . U}#fL5Ps^C_w}Ka772n~k<KdWONSYC.!aiZ$OQbGT.9aMx!hf+sHp8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49801	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:58 UTC	692	OUT	GET /vi/pTLtzDe0_9E/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:58 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3265 Date: Wed, 10 Jan 2024 21:51:58 GMT Expires: Wed, 10 Jan 2024 23:51:58 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:58 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 10 0e 0f 0f 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 11 0d 0d 0d 0d 17 15 19 18 16 15 16 15 1a 20 2b 23 1a 1e 28 1d 15 16 24 35 26 28 2d 2f 32 32 33 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 10 1d 2f 1d 1d 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 3c 3b ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 3f 10 00 02 01 02 04 01 09 04 07 05 09 00 00 00 00 00 00 01 02 03 11 04 12 21 31 05 13 22 32 41 51 61 71 81 b1 06 14 82 91 23 53 62 92 a1 b2 d1 15 33 Data Ascii: JFIF +#($5&(-/223"8=70<+12//////////////////////////////////////////////////<;@"?!1"2AQaq#Sb3
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 88 d0 b8 ae 02 61 17 16 55 c8 45 00 32 2a 45 c9 35 14 db 7d 49 5d 94 77 70 4a 79 f1 34 a2 f6 79 ef 6d ed 95 b6 4d ea 6d 75 bf 4f 21 e1 aa 7d 5c fe e3 1f ba d4 fa ba 9f 72 47 dd cb 1a f2 59 42 8d 92 9a e8 b6 9e 9a 5f 5d 6d ff 00 b7 33 a8 96 8d 2b 29 46 33 b6 f9 6f ba f9 a3 9c e7 f8 75 cb e9 ee 32 5b f9 7c 47 ba d4 fa ba 9f 71 87 ba d4 fa ba 9f 72 47 d7 5f 9e 8d ea 32 ff 00 37 c3 3f c5 f2 f8 8e 42 7f c9 3f ba c9 70 7d 8f e4 7b b8 ea d9 76 de e7 99 3a ad 9d 26 7b 66 f1 eb f2 e4 ca fb 18 65 7d 8c ea 8c 5c 9d 91 ec 60 38 6a 9d 9d bc 6e 32 e4 98 f6 b8 70 dc fa 78 31 c3 cd ed 09 bf 08 b6 6a b8 6d 77 b5 0a ef fd 19 fe 87 e8 18 1c 0c 29 e5 b2 5d e7 d0 d0 a8 95 ba 8e 1f d9 f8 7a bf a5 fe d7 e3 ff 00 b2 f1 1f e1 f1 1f ec cf f4 32 96 16 a4 5d a5 4e a4 5f 63 83 4c fd Data Ascii: aUE2*E5}I]wpJy4ymMmuO!}\rGYB_]m3+)F3ou2[\|GqrG_27?B?p}{v:&{fe}\`8jn2px1jmw)]z2]N_cL
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 29 85 75 f2 e0 eb 5f 43 85 c9 97 02 b2 d1 95 16 19 44 83 4d 40 49 8c 80 00 00 8f 28 2c 55 87 63 b3 ca 8b 05 8b b0 58 08 b0 58 d3 28 58 0c f2 85 8d 2c 2c a0 45 82 c5 e5 15 80 94 8d 69 91 62 e9 85 8d 47 4b a4 bc c9 2a 97 49 79 fa 18 57 49 4a 68 86 24 cc b6 d2 c9 e8 5d 39 e5 4e 2b b4 c5 1a d3 82 cb 29 3d db 49 12 f4 b8 cd d2 cf 67 7e b2 67 5d b5 b9 33 d0 c9 99 d3 af db d3 de f6 37 1d 1a 78 b5 4e 7d 1a f1 95 3d 76 cf bc 7f ef 79 f4 bc 67 09 b4 92 eb 3f 3b a7 9a 32 8b 86 92 52 4e 2d 6e a5 7d 0f d3 23 5f 96 a1 cf 69 d4 a6 96 7b 7f 35 8e 1c d8 fe 5e 9f a7 ce ed f3 d5 d2 82 52 9b b7 89 34 38 95 18 cb 5f c0 f3 b8 9d 4a 95 aa f2 7b 65 e8 a3 9a 1c 2e b5 fa 0d 78 99 c3 8e 6b dd 7b fc ee f5 26 df 53 ef 90 a8 af 06 9a ec ec 26 9b b6 c7 83 4b 0d 56 8c a0 be b1 37 6e ab Data Ascii: )u_CDM@I(,UcXX(X,,EibGK*IyWIJh$]9N+)=Ig~g]37xN}=vyg?;2RN-n}#_i{5^R48_J{e.xk{&S&KV7n
2024-01-10 21:51:58 UTC	146	IN	Data Raw: 14 8e 88 cd 19 ca 04 d8 76 db a7 3a 0e 51 1c d7 0b 93 c5 74 e9 75 51 3c a9 81 48 78 9a 34 ae ee 59 37 b0 9c 8a 95 4d 8a e2 13 61 92 93 15 84 d9 a1 58 b5 80 00 1a 73 48 80 0a 80 18 00 42 b8 5c 00 02 e3 00 08 0d 63 b0 00 ad 42 33 a9 b0 01 22 d6 60 00 6d cc 00 00 00 00 00 00 00 00 00 00 00 00 1e b6 07 f7 71 f8 bd 59 b3 00 38 de de 9c 7a 65 52 0a c7 2b 00 0e 90 9a 04 80 0a a6 0c 40 15 2d 82 00 0c 56 a4 48 00 8c d2 82 2e 60 05 73 7f ff d9 Data Ascii: v:QtuQ<Hx4Y7MaXsHB\cB3"`mqY8zeR+@-VH.`s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49802	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:58 UTC	692	OUT	GET /vi/C5kIQ9zpjRI/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:58 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 4835 Date: Wed, 10 Jan 2024 21:51:58 GMT Expires: Wed, 10 Jan 2024 23:51:58 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:58 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 13 12 15 12 13 13 15 15 15 15 15 15 17 15 15 16 15 15 16 15 15 15 17 15 19 18 16 15 17 15 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2d 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 0f 1d 2f 1d 1d 1d 2f 2f 2f 2f 2f 2f 2f 3b 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 46 10 00 01 03 02 03 04 06 06 04 0c 06 03 01 00 00 00 01 00 02 11 03 21 04 12 31 05 41 51 61 06 71 81 91 a1 f0 13 22 b1 b3 c1 d1 23 24 32 82 14 33 34 Data Ascii: JFIF+#(%5%(-/222"8=70<-12/////////;/////////////5////////////////////////////@"F!1AQaq"#$234
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 0b d9 d5 7d d7 1b 69 61 9a e2 64 0b ad 22 38 97 59 6b d7 4f 26 d0 bb 78 13 34 da b9 55 a8 65 71 0b a1 b3 aa 8c b1 cd 7d 0f 4d 6e 2d db e5 7a aa f3 5e 9c dd a8 7e 95 df 77 f9 42 d5 60 5b 5b 4c fd 2b be ef f2 85 a8 1b 2b 1c 9e 73 f7 2f 3d 75 0b d7 e0 93 94 92 37 cf 52 65 dd 8b 35 53 46 f4 9e 53 6e 8a 55 03 40 55 29 48 4b 55 00 65 53 42 08 4a 50 49 37 55 a2 86 ea a8 a0 02 a9 48 24 10 66 14 d5 16 42 c7 29 81 c6 50 50 79 48 b9 49 00 20 3e 6c 80 36 de 91 33 a0 29 86 2a b2 08 c8 52 70 01 37 39 49 72 06 1e 16 27 d5 e0 a8 34 a3 d1 73 85 44 93 22 50 d1 1b d5 e4 81 ac a9 cc 83 20 29 b6 ac 5f d8 b1 14 c8 b2 92 ee 9e 51 f6 de a1 b4 22 d2 b2 bb 1b 3b d7 24 15 80 be 4f 20 b3 7d 0f 73 b7 f8 59 58 df 89 3c 57 21 d5 88 20 49 56 6a 14 e1 d7 bd b5 56 b2 dd d8 d6 a8 c2 0b 73 Data Ascii: }iad"8YkO&x4Ueq}Mn-z^~wB`[[L++s/=u7Re5SFSnU@U)HKUeSBJPI7UH$fB)PPyHI >l63)*Rp79Ir'4sD"P )_Q";$O }sYX<W! IVjVs
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: b0 b6 ee 3e d5 e6 6c b0 f9 cc 72 8b fa a2 c3 41 be 7a fd 89 bf 11 ea 86 c0 ee 1a 69 3e d5 2e 78 b0 03 77 72 c7 98 4c f6 0e 65 07 cd 3a 61 6c 6d 5d df 8b b7 0f a2 62 e3 b9 d6 8e f5 d8 e9 68 fa f5 61 fb 3f 74 c5 c4 95 eb ae a1 84 ec e6 ca 1a 53 71 dc 15 64 55 13 99 52 49 91 cd 02 71 53 b9 32 6e 92 a0 01 22 53 94 10 a0 1a 12 29 9b 24 02 00 26 21 04 42 40 aa 33 b5 a6 6e a9 49 28 cc a0 64 a9 f3 28 ec 52 e7 14 0c 2a 21 49 08 17 45 12 94 a4 5a 9c 20 10 1a 9c 6e 48 94 0e 21 17 42 21 10 8b 4a ee f4 32 94 e3 e8 49 ff 00 73 74 fe 89 eb 88 65 76 ba 1a e8 c7 51 37 fd 27 8d 27 85 cd b5 2b 1b 7d 64 96 8d c7 91 3a ce eb 03 65 86 a8 de eb 75 dc ff 00 0e e5 57 8d 72 8d d1 3f 25 8f 20 12 75 3d 5f 09 f6 af 1b 76 ad 40 4f d9 66 62 0e a4 c0 8e ef 05 2c 7e e7 41 83 02 04 45 f4 Data Ascii: >lrAzi>.xwrLe:alm]bha?tSqdURIqS2n"S)$&!B@3nI(d(R*!IEZ nH!B!J2IstevQ7''+}d:euWr?% u=_v@Ofb,~AE
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 79 2c e5 e7 49 e5 f1 71 37 e0 bc b1 2d a6 19 00 b8 3a ef dc 39 fb 00 52 c6 de 78 92 4d 87 7a c2 da ce 87 ba 79 77 ff 00 45 6d ac 44 d8 58 7b 57 5c c2 70 f9 c7 4b 0f d7 6a fd cd 7f 66 d5 c6 2b b1 d2 b7 fd 72 a9 e3 e8 fb 3e 89 8b 8e 17 aa ba 86 33 b1 29 3d d2 a8 04 9d 75 51 0e d1 36 d8 23 2c a6 5a 82 66 55 04 9a d4 c8 40 0d 14 83 cd 53 8a 41 00 e8 43 51 50 a9 0a 86 15 48 84 81 54 e2 78 04 16 02 0f 52 32 a7 3b 94 54 42 25 3c a8 2d eb 50 22 51 94 a7 95 22 e5 43 80 91 25 20 82 88 50 9a 92 e4 22 91 28 05 54 22 50 4c 2e ff 00 42 c8 18 ea 3b ff 00 19 ee 9e b8 37 5b fb 1b 19 e8 71 14 aa 4c 06 bc 12 47 fa 7f 3b c2 57 36 d4 91 b7 d8 6a 3c c5 ec 38 49 1e c5 8b 34 68 23 db 1d ba 2d 2d 9f b6 e9 62 0f d1 3a 63 88 83 d8 16 eb 44 1b 5e 57 8d ba 1c 6f 7d ea 40 e5 26 79 59 Data Ascii: y,Iq7-:9RxMzywEmDX{W\pKjf+r>3)=uQ6#,ZfU@SACQPHTxR2;TB%<-P"Q"C% P"(T"PL.B;7[qLG;W6j<8I4h#--b:cD^Wo}@&yY
2024-01-10 21:51:58 UTC	464	IN	Data Raw: b4 65 2a e5 63 ad a1 52 56 36 e5 b5 6f e0 1f 0e 5a 0d 5b 58 73 0e 09 2e 9e fb 62 62 c8 1c 37 4f 35 eb f0 ce 90 00 f8 2f 9f 6c 6a b7 1c 3c ca f6 fb 3d d2 09 06 e7 c9 5e 4b c3 5a b0 f4 a0 c5 36 0f f9 7b 1a 63 cf 35 ce e8 be 04 b9 f9 a2 00 3a ae e6 37 02 2b 00 1f 20 34 82 23 8d ec 6d c2 4f 6a 75 30 ef 6f a3 6d 1c 94 da d7 4b e6 5c 4e 96 02 6e 35 d7 92 e3 e1 d3 b5 56 84 b4 19 dd af 77 cd 71 c8 32 ee 13 6e 7c 7b 16 ed 6c 69 de 44 5c 9b 19 31 a0 68 d0 2d 27 5c c9 68 1c 06 b1 bc c9 d2 4d b4 5c d6 3b 24 88 f3 e7 99 55 36 3e 6d bf d8 98 2a b7 6b a7 60 9d 34 5a 39 49 12 5a 10 ed 3a cd bb 3f ba cc da 7e 1f 00 b1 96 5c 6f b2 e8 7c cb a5 c6 31 95 79 e4 f7 6d 5c 60 bb 1d 2f fc b6 af dc f7 6d 5c 86 05 ea ae 98 ce d5 11 bd 04 1f ee 90 6a 73 e4 2a e4 f4 09 37 54 89 4c 1f Data Ascii: ecRV6oZ[Xs.bb7O5/lj<=^KZ6{c5:7+ 4#mOju0omK\Nn5Vwq2n\|{liD\1h-'\hM\;$U6>mk`4Z9IZ:?~\o\|1ym\`/m\js*7TL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49804	104.21.65.185	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:58 UTC	835	OUT	GET /5hrxy6b9f367ae6479fe12d4b544354b57c05f9629e66?s1=e5315b22&s3=G5kCG9zjtQT6ZZXpnCAPtY&s2=61ff2ce2-4168-4ac1-8076-a3ebe1255ce0&s3=G5kCG9zjtQT6ZZXpnCAPtY HTTP/1.1 Host: statuelikeazimuthsghostless.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:58 UTC	936	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 21:51:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Mobile, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64 Location: https://t-y-p.site/goto/?utm_source=wrtzr&utm_medium=video_downloader&utm_campaign=test2&clickID=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subID1=347207 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vthv6q0JQ00g%2F6tyPNTDtxY0vegIEcRmpZ8o6%2B0sLb1KUvwEPG4CdfzVsoshjdSCCk7IXTuAsTS2Xn2sJLXDd2f7RXjyrzqQp2IrPDDe%2FV4R3Bva9nVrUpi1uOUCcbiL2hixQSlR89pRtNAJQZuBnYYe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843824f74a5782c3-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:51:58 UTC	188	IN	Data Raw: 62 36 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 2d 79 2d 70 2e 73 69 74 65 2f 67 6f 74 6f 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 77 72 74 7a 72 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 76 69 64 65 6f 5f 64 6f 77 6e 6c 6f 61 64 65 72 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 74 65 73 74 32 26 61 6d 70 3b 63 6c 69 63 6b 49 44 3d 41 48 34 52 6e 32 56 48 54 41 55 41 57 6c 34 43 41 46 56 54 46 77 41 53 41 41 41 41 41 41 41 50 26 61 6d 70 3b 73 75 62 49 44 31 3d 33 34 37 32 30 37 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: b6<a href="https://t-y-p.site/goto/?utm_source=wrtzr&utm_medium=video_downloader&utm_campaign=test2&clickID=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subID1=347207">Found</a>.
2024-01-10 21:51:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49805	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:58 UTC	692	OUT	GET /vi/vwopEAGNrWI/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:58 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3920 Date: Wed, 10 Jan 2024 21:51:58 GMT Expires: Wed, 10 Jan 2024 23:51:58 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:58 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 0f 0f 0f 0d 0d 0d 0e 0e 0f 0f 0d 0d 0f 0e 0d 0d 0f 0e 11 0d 0e 10 10 17 15 19 18 16 15 17 15 1a 1f 2b 25 1a 1d 28 1d 15 16 25 35 25 34 2d 2f 32 32 32 19 22 38 3d 37 31 3d 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 0f 0f 1d 2f 1d 1d 1d 2f 2f 2f 2f 3b 2f 2f 2f 2f 2f 30 2f 2f 2f 2f 2f 2f 2f 2f 3b 2f 3b 30 2f 30 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 3b 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 03 07 ff c4 00 45 10 00 02 01 02 03 03 07 08 05 0b 03 05 00 00 00 00 00 01 02 03 11 04 12 21 05 31 41 06 13 22 51 61 71 b3 23 32 34 81 83 91 b1 b2 14 72 73 a1 f0 07 Data Ascii: JFIF+%(%5%4-/222"8=71=+12//////;/////0////////;/;0/0///////////;/////////////@"E!1A"Qaq#24rs
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 47 6f 0f be 26 5a 72 14 e4 7a a6 63 41 9e b9 8f a7 cb ca f4 b9 0e 45 33 10 e4 54 5b 30 73 3c 9c 8a b9 0a 39 7d b0 ef 8b ad fd 1f 24 4c 63 27 6a fa 4d 67 f5 3e 44 62 9e 0b ee bf 97 a2 6a 00 80 64 49 17 22 e0 a1 72 00 00 00 00 00 00 00 03 a6 00 1c 1b 00 00 48 00 08 00 04 00 01 40 00 12 6e 79 23 fb 43 0d ed 7c 29 9a 63 73 c9 0f da 18 6f 6b e1 4c 51 f4 e8 9e 88 a2 2e 8c 34 b1 64 54 90 0c e4 7f 28 0f c9 e1 7e d6 a7 ca 8e b8 e4 3f 28 4f c9 61 7e d6 a7 ca 8e de 1f 7c 67 2d 38 c8 33 d3 31 8f 19 17 cc 7d 1e 5e 7e 1e b9 8a b9 1e 6e 64 39 0e 53 85 a5 33 cd cc ac a4 52 e4 e4 e1 a1 da 4f f3 8a bf d1 f2 a3 1c f7 da 3f af a9 fd 3f 2a 31 cf 1d dd 76 f8 19 52 48 00 00 02 00 20 09 00 00 04 12 00 00 07 4e 00 38 36 00 00 90 00 10 2e 19 50 26 e4 00 00 9b 90 00 b1 ba e4 7f ed Data Ascii: Go&ZrzcAE3T[0s<9}$Lc'jMg>DbjdI"rH@ny#C\|)csokLQ.4dT(~?(Oa~\|g-831}^~nd9S3RO??*1vRH N86.P&
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: b4 ac 3c 45 5b c3 2c 53 7a 2b b5 aa de cd 5d 38 ef 96 eb b7 a7 56 a6 c6 aa a3 7d 6f 17 aa 77 8b 4a fd e5 31 db 23 13 87 59 ab 61 ab d3 a7 a3 8d 49 53 97 36 e2 f7 35 3b 59 af 59 db c3 39 c9 8b 7a 61 49 9e 53 65 9b ea 3c a4 cf 6c 72 41 29 95 b8 46 97 84 c9 ea 41 2c 83 cd 76 d4 40 00 80 41 24 00 20 92 00 90 40 02 40 00 48 20 01 d5 00 0e 0d 84 06 ca dc 0b 0b 95 b9 05 16 6c 86 40 00 41 24 00 22 e4 95 60 2e 6d f9 1f 4e 2b 69 61 67 c5 73 de 14 cd 39 ba e4 9f a7 e1 fd af 87 22 5d 11 f4 99 ce ec f3 73 2e b7 18 d2 7a 9c 5b 5f 30 8b d4 a2 64 c6 49 5e 4f 74 53 93 ee 46 a2 38 fe 50 57 e7 31 35 ae b4 84 e5 4a f7 ea 4a 36 ec dc fd ec d0 d4 9f 49 e9 7f 81 93 3a ce b4 a7 17 27 9e 72 cd 2b 25 67 29 3b b5 f7 99 18 8c 2c 79 b4 92 57 5b 9a d3 5b 5b e3 62 51 a9 9d 15 25 7b 38 Data Ascii: <E[,Sz+]8V}owJ1#YaIS65;YY9zaISe<lrA)FA,v@A$ @@H l@A$"`.mN+iags9"]s.z[_0dI^OtSF8PW15JJ6I:'r+%g);,yW[[[bQ%{8
2024-01-10 21:51:58 UTC	801	IN	Data Raw: 9a 59 5d 68 3e 8d 95 dc 3a ef 2e eb e9 a9 e9 5f 68 4e 5d 0a 31 70 4f 4d 3a 55 27 d8 df f6 5f 79 95 82 d9 f1 8f 4a aa 52 97 08 3b 4a 2b fe 59 71 97 2b c4 63 2c a4 9c d6 8f 0d b0 27 8b 51 53 6e 95 16 ef 2a 99 73 49 a5 fc 31 7b fb f7 7c 0e 97 07 80 a3 86 8b 8e 16 92 86 64 a3 3a 8e d2 ad 35 fc d3 b7 5f 05 65 d8 6d b6 7e 0e 15 73 67 9c b3 25 7e 6e 16 53 92 eb 4d e8 c5 5d af 38 4e d4 61 1a 30 83 fd 5e 55 76 ff 00 9f b4 f4 cf 1e 32 f7 db cf 96 76 fd a3 06 8e 0e 9b 4e a6 45 29 27 e6 ab 5f bd 85 55 e8 f4 59 7c dc bd 07 1e e6 b7 19 df 46 8e 27 35 4c 3f 42 aa b3 9d 16 ec b5 e3 19 7e 3d 46 2c a7 92 56 a9 04 e7 1d ef 35 9d fb 6d a3 3c 5e 5f 0e 7e bb 9e 53 ea 4b ae f8 b8 fe 3e 3f ce ff 00 2b 32 9c 49 2f a7 fe ad 29 53 bc 65 5e 12 9d f5 52 b6 49 5f aa 4d 69 2e fd e7 96 Data Ascii: Y]h>:._hN]1pOM:U'_yJR;J+Yq+c,'QSn*sI1{\|d:5_em~sg%~nSM]8Na0^Uv2vNE)'_UY\|F'5L?B~=F,V5m<^_~SK>?+2I/)Se^RI_Mi.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49806	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:58 UTC	692	OUT	GET /vi/DLrpcxxGahI/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:58 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6281 Date: Wed, 10 Jan 2024 21:51:58 GMT Expires: Wed, 10 Jan 2024 23:51:58 GMT Cache-Control: public, max-age=7200 ETag: "1626433108" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:58 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0e 0a 0a 0a 0d 0a 08 0a 08 0d 0a 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 0a 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0d 09 08 0f 12 0d 0d 0d 12 12 12 12 12 12 12 12 15 12 12 12 12 15 12 12 15 12 15 12 12 12 12 12 15 15 12 12 12 12 12 12 15 15 15 15 12 15 15 12 12 15 1e 15 12 15 15 15 15 15 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 01 02 03 04 06 00 07 08 ff c4 00 3f 10 00 01 03 02 04 03 06 05 00 07 07 05 01 00 00 00 01 00 02 03 04 11 05 12 21 31 06 41 51 13 22 32 61 71 81 07 91 a1 b1 c1 14 23 42 52 72 82 d1 Data Ascii: JFIF@"?!1AQ"2aq#BRr
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: c5 03 68 18 35 10 c3 ea 8b 46 e4 0d fd fa fd 11 d8 38 6c 9b 9b 58 00 08 bf 9e c3 d5 53 c5 f0 a2 0e 83 4d 32 db f7 7f 27 fa ac 3a 5b c2 f1 e2 db 09 05 da 76 7b 46 a3 c8 8e 6b 4b 0c a1 c0 38 1b 83 b1 0b 18 cc 29 f9 46 87 4d 79 ed 6d ac ad 61 35 8e 8a 4b 1b e4 76 e0 fe c9 ea 13 63 49 71 6b 13 49 4e bd c5 d3 55 08 63 94 52 a9 9c a3 91 00 50 98 28 0a b3 32 85 ea d1 cd 97 b4 4e 09 8e 52 39 34 85 8b b3 0a 8e 45 29 51 c8 16 6d a1 29 ae 09 e9 a4 2c 3b 6e 58 d5 6d 83 45 5c 05 69 83 45 37 43 15 c6 9b 14 bc 14 dd 13 b8 c9 b7 07 fe 72 4f e0 c1 a0 f6 42 ce cf 3d 36 b1 8d 13 b2 ae 60 d1 3a c9 c8 61 6a 8c a9 1c a3 42 b4 25 92 d9 2d 93 83 50 d3 18 42 52 14 96 4d b2 20 65 92 27 90 91 0d 0e cd b2 63 94 a5 32 40 b3 29 56 c8 1a d7 38 9b 00 2e b0 18 a5 53 9e f0 e3 b5 c8 6b 4f Data Ascii: h5F8lXSM2':[v{FkK8)FMyma5KvcIqkINUcRP(2NR94E)Qm),;nXmE\iE7CrOB=6`:ajB%-PBRM e'c2@)V8.SkO
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 4d 7b f9 6d 99 e4 81 f4 2b 71 de c9 f2 3b 85 7b 94 2e 72 57 b9 57 92 45 d2 e0 36 57 28 8b 94 33 cd 64 32 ae be dc d5 25 d2 39 63 6d 15 74 a1 44 66 0b 3b 36 26 7a aa e2 b8 f5 28 79 c6 9c 55 aa cc 9a 50 5a 4c 45 15 8a 5b 84 d3 29 49 96 1a 39 ea 25 2b 94 45 14 de 89 22 9a 05 1c aa 5a 74 ae a6 6f 8b c7 75 c8 6f 07 6f ee 3e e8 b7 16 8e e9 41 f8 3b 7f 7f ca 19 29 1e 81 0e c1 38 a4 a7 f0 84 e2 11 4a a0 7a 40 9d 22 68 43 62 91 a9 1c 94 24 72 2c 45 cb 97 2c 26 a4 29 4a 42 b0 10 a8 a4 52 95 04 a5 6a d1 88 e3 46 d8 83 cf ed bf f5 41 70 a0 2e 49 f7 d7 e5 ee b4 5c 71 50 d2 e6 c7 fb 56 b9 3b f7 8d ec 3d 2d 95 66 69 1a e1 66 ec 2f aa e7 be dd 32 74 d8 47 10 0d 1f 35 4e a6 70 1d 9a dd eb 5a fd 3d 15 e8 8d e3 6f a2 a1 55 46 4a 9a 9a 06 ac c4 5e f7 65 04 8d 6c 03 7c 47 d3 Data Ascii: M{m+q;{.rWWE6W(3d2%9cmtDf;6&z(yUPZLE[)I9%+E"Ztouoo>A;)8Jz@"hCb$r,E,&)JBRjFAp.I\qPV;=-fif/2tG5NpZ=oUFJ^el\|G
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 8e 8b 9f 3b ba e9 e3 ff 00 cc 69 70 c2 04 99 00 b0 b5 9b ec 92 b7 42 80 d3 71 13 73 c6 72 b8 77 9b 7d ac 01 20 1d 7d 16 8f 16 6f 78 f4 4a a6 e2 ac 72 ab 71 48 a9 34 29 18 52 8c 58 7c 77 59 aa f0 f2 e0 3b c2 c7 71 7d 56 a2 27 29 cc ac 1e 2b 1f 2d 2e b3 7b 68 be 11 51 39 b2 35 f2 12 d8 dc 34 bf 3d 45 8a f5 cc 17 86 a2 8e 59 25 69 91 ce 91 c5 cf 2f 79 75 c9 b5 f7 f4 5e 61 43 c4 71 16 c4 cc af 66 5b 58 dd b9 5c 07 2f 25 e8 3c 3d c5 f1 10 1a ee ee c0 3b 30 3f 31 c9 6f 17 66 18 d9 3a 69 ff 00 46 ca ec c3 dc 29 9c 57 32 a1 ae 00 82 08 3b 11 a8 29 1c 12 64 12 aa d5 4b 66 b8 f2 0d 71 f9 02 57 ce 1c 45 c4 92 d5 cc 26 94 80 d0 32 c3 13 6f 92 18 c9 be 56 df 77 1d 2e ee 76 1d 02 f7 be 3b aa ec a8 6a a4 e6 21 90 37 f8 9e de cd bf f9 38 2f 98 af 65 5e 09 fa 87 c9 cb a9 Data Ascii: ;ipBqsrw} }oxJrqH4)RX\|wY;q}V')+-.{hQ954=EY%i/yu^aCqf[X\/%<=;0?1of:iF)W2;)dKfqWE&2oVw.v;j!78/e^
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 59 78 e5 6f 30 0b 87 5b 0b 03 6f 9a 2d 87 43 dc 17 e8 3e a2 e0 ae 8c 7a 70 d5 50 d4 eb 22 86 90 59 5b c1 f8 62 59 dd 66 37 bb ce 47 68 c1 ef cf d9 3f d9 29 34 00 42 45 e9 94 9c 07 03 3f c6 9c 39 ff 00 ba db da fe 81 14 a5 e1 ca 61 a3 58 d7 7a b0 7e 52 e5 cb 22 98 f1 5c 9e 45 19 57 a3 ab d1 7a fb b8 36 99 e2 c6 16 6b cd a3 29 f6 2d 59 ce 25 f8 56 ec ae 7d 33 cb 88 b9 ec 24 22 e4 74 63 fa fa fc d4 fe ec 72 f6 a6 5f 1f 28 f3 0c 42 a6 ea 8c 4c b9 53 56 40 e6 b9 cc 73 5c d7 b5 c5 ae 63 85 9c d7 0d 08 21 3a 06 e8 ad 8f f8 73 d4 ec 29 93 39 28 51 c8 55 03 49 f1 0a 72 d2 42 4c 2d da a3 b8 fc 21 c0 91 ba 01 87 33 2b b5 53 61 0a e9 b2 d9 dd 35 46 30 ce 24 8c b7 53 de e8 81 62 c3 ba 7d 16 7a 87 c6 b5 ba 18 df b6 ab 31 bf 54 42 07 20 58 61 d0 22 d1 39 34 a4 ab a1 c9 Data Ascii: Yxo0[o-C>zpP"Y[bYf7Gh?)4BE?9aXz~R"\EWz6k)-Y%V}3$"tcr_(BLSV@s\c!:s)9(QUIrBL-!3+Sa5F0$Sb}z1TB Xa"94
2024-01-10 21:51:58 UTC	667	IN	Data Raw: b1 5e 10 f7 2f 5f f8 c7 82 d4 be 7a 58 d8 c8 64 75 45 4b a9 29 63 8a b2 8a 47 cb 56 d3 18 31 64 64 e4 b0 0e da 1b c8 f0 18 3b 56 5d c3 30 be 1c fc 3b c4 35 22 90 96 36 37 cc f9 85 5d 01 a6 64 31 4a f8 25 91 f5 62 a3 b1 6b 58 f8 e4 cd 77 dd ad 63 9e 40 68 2e 5d bc 53 51 c3 cf 77 93 28 90 95 b0 1f 0c 71 2f d5 7f 75 8c 09 5e d8 e0 2f c4 b0 98 c4 ae 7f e9 5d 99 61 7d 60 bb 1e 28 ea 4b 1f e1 78 8a ed 2e 05 a4 82 e2 0e 1d a8 a7 6c 0e 9e 36 46 d9 e3 ed 69 cb 2a 69 2a 3b 48 4b 63 7b 65 b5 34 cf 2c 8d cd 95 85 ae 75 83 81 39 6f 63 6a ed 17 a1 61 3e 14 33 88 60 1b db 55 cb 91 fc 4f f5 93 ac 80 5f 9f cd 36 8e 01 71 be e1 2a e4 9f aa 47 a3 f0 d4 03 28 d3 92 9f 1b a5 69 07 45 cb 93 fe 25 fa f3 bc 52 10 1d a6 8a 7c 36 53 6d d2 ae 52 8e 8c ab 6f 4a ec b4 0c 23 42 f7 c8 Data Ascii: ^/_zXduEK)cGV1dd;V]0;5"67]d1J%bkXwc@h.]SQw(q/u^/]a}`(Kx.l6Fii;HKc{e4,u9ocja>3`UO_6q*G(iE%R\|6SmRoJ#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49807	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:58 UTC	692	OUT	GET /vi/uZFbRMRtJj0/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:58 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5874 Date: Wed, 10 Jan 2024 21:51:58 GMT Expires: Wed, 10 Jan 2024 23:51:58 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:58 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 10 12 15 10 10 12 16 15 10 10 15 10 0f 0f 10 10 15 15 15 10 0f 10 17 15 19 18 16 15 16 15 1a 1f 2b 25 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 10 0f 1d 35 1d 17 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 ff c4 00 46 10 00 01 03 02 03 05 05 03 09 03 0a 07 00 00 00 00 01 00 02 11 03 21 04 12 31 05 06 41 51 61 13 22 71 81 91 32 a1 b3 07 14 23 42 52 83 b1 c1 f0 25 Data Ascii: JFIF+%(%5%(-/222"8=70<+12/5//////////////////////////////////////////////////@"F!1AQa"q2#BR%
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: a8 e3 a3 da f7 2a 4c 32 8f 53 0f a1 71 80 7d 56 62 05 8d c4 e6 36 d1 54 01 16 a8 13 dd d3 aa 76 53 5a 50 8b 13 16 ab 42 8a 46 8a 2e 95 21 2c aa c0 a7 09 88 4d ae 97 76 43 cd da 7c 56 95 6d 16 4e 02 a4 3c 0e 76 5a d5 45 91 15 ca 70 a2 4a 70 b2 a7 5a bb b1 50 b7 17 49 cd d4 76 9f 0d cb 25 6a 6e bb 81 c5 d3 1c 7e 93 e1 b9 2f 16 75 e8 a3 1d 53 ed 7b 82 71 8b a9 f6 8f b9 41 b4 d1 05 35 c9 df 50 fd bb fe d1 f5 4e 2a 3b ed 3b d4 a4 1a 94 28 16 67 7d a3 ea 53 19 e6 7d 54 b2 95 26 b3 9a a0 50 a3 95 12 ad 2b b6 2d a9 3d 7f 52 97 64 7a 20 11 6a 62 14 df 22 e7 41 72 a3 2a 28 64 28 c2 9b 94 50 70 7b c9 fb d5 4f bb f8 6d 59 6b 4f 79 3f 7a a9 f7 7f 0d ab 2d 75 9c 79 ef 48 a0 b5 10 94 26 aa 89 b9 59 69 b0 55 9c ad 34 d8 78 24 4a 98 29 1f 14 82 53 d5 69 11 9e be e4 bc d3 Data Ascii: L2Sq}Vb6TvSZPBF.!,MvC\|VmN<vZEpJpZPIv%jn~/uS{qA5PN;;(g}S}T&P+-=Rdz jb"Ar*(d(Pp{OmYkOy?z-uyH&YiU4x$J)Si
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 79 a2 57 5f bc bb cd 89 ac c6 61 83 7b 3c d7 aa 5a 41 75 41 6c a7 9b 44 1f 35 ca bf 65 56 69 0e b8 e2 1d a4 75 95 d7 6d dd 9f 56 9d 79 2c 8a 2e 6b 72 ba 98 3d 90 a8 5a 33 90 df ab 25 bf 82 a7 89 ae 05 3c b2 24 0b 45 c7 bd 67 cf 5e 9d be 3f 8e 65 37 5d 1e e5 ed 3a b5 b0 95 a9 d7 7e 77 d0 2c 0c 71 f6 bb 33 a0 71 e3 76 ba eb 44 55 00 49 36 1c 78 2e 73 71 cf 77 14 00 b9 65 32 f7 69 07 31 ca 00 eb 73 3d 3a ad 1c 75 58 a4 f6 c1 24 b1 f1 1e 05 4b 77 ed 75 ab a4 aa 61 9e 5e 1a 5b 71 26 da 39 84 cc 8f 72 b4 ed 96 4d db 99 84 dc c4 16 93 fd d2 b1 77 3f 79 86 32 93 70 ef 63 86 23 0c 1a 1b 5d b0 58 59 a4 3b 8c db 45 d4 61 71 cc a9 00 59 ce 19 a0 91 0d e7 25 32 c7 49 32 50 66 c8 b8 2f 25 d1 a0 20 06 8f 20 a7 4b 0f 95 e7 bb 02 66 79 9b 4f e0 8b 8b da 3d 99 2d 2c 71 8e Data Ascii: yW_a{<ZAuAlD5eViumVy,.kr=Z3%<$Eg^?e7]:~w,q3qvDUI6x.sqwe2i1s=:uX$Kwua^[q&9rMw?y2pc#]XY;EaqY%2I2Pf/% KfyO=-,q
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: 9e 00 7a ac e6 45 67 b2 9b ea 02 c3 ab 5c 7b ac a5 ab bd 7a 71 2b 31 ab ab 36 b7 bd 1b f6 da ed 14 18 e7 0a 45 fd a5 57 0d 6a 7d 96 c7 d9 10 3c 4a bb b3 b7 82 8b dc d7 0a ac 70 0c 82 dc 81 85 a6 22 08 37 20 00 17 9f ed 4d 9f d9 d5 73 1a e6 b9 80 9c af 0e 04 16 f0 d3 8a 15 32 1b d5 76 98 cd 3c f7 26 e6 25 99 5c 4b 59 0c 7b 9c e6 49 b6 42 64 45 f9 42 7c 00 07 11 40 ff 00 68 cf c5 66 e1 b6 a3 e9 99 06 5b a1 6c da 38 c2 ed b6 75 31 55 8c ac ca 40 66 01 ed ca e9 8f 32 35 59 be ba b1 b7 84 60 05 d0 22 c2 7a dc 25 54 c3 db e6 a5 83 0e 39 89 6b a2 1a 3b a0 18 74 89 1e e4 5a 9b 3e a3 9c d7 36 9b c8 13 3e c8 5c 74 f4 4a 2e 18 92 f0 19 ed 70 b8 1e f3 a2 d2 3b 3b 15 62 5a 6d 36 ed 1b fc 56 6d 4a 0e a6 33 1a 6f 6d c0 97 16 c4 eb 16 f0 5b bb 37 6a 5a 1c 7b a2 d7 d5 ab Data Ascii: zEg\{zq+16EWj}<Jp"7 Ms2v<&%\KY{IBdEB\|@hf[l8u1U@f25Y`"z%T9k;tZ>6>\tJ.p;;bZm6VmJ3om[7jZ{
2024-01-10 21:51:58 UTC	1252	IN	Data Raw: c5 e0 83 05 5d 14 19 56 ad 17 3c 4b 68 97 bd c3 81 36 80 7c e3 dc 38 af 2f 9d b9 7b e3 d7 e1 26 3b 8e c2 9b 48 a7 4d ef 10 e2 19 9d bc 03 cc 4c 7b d6 c3 5a 1c 1a d9 12 60 88 e2 de 52 b1 eb 55 6f 67 00 c6 87 37 e7 e2 b5 36 53 c3 c6 6e 22 24 f3 5d 36 e6 d4 c3 34 80 07 2b 23 62 30 d9 db 75 1a 40 1d 23 aa 35 11 02 2f 0b 48 f1 6d f0 a3 93 1d 59 bc 8d 3f 7d 36 9f cd 62 42 e8 b7 f2 db 4b 10 3f c0 f8 34 d7 3b 2b 35 8d 8a dd 13 24 dd 13 22 92 09 d5 19 04 ea a0 2b 74 49 26 0b 27 84 08 2b 14 aa c7 82 ae 02 9b 4a b1 2a f8 32 9d 55 6b e1 1d 95 27 c5 69 94 d2 49 24 1c 7a 49 24 aa 19 24 e9 91 4d 2b 47 05 b4 23 ba e5 9c 99 41 d4 7c e0 11 65 54 9b aa 58 1c 4c d8 ab 8e 51 42 a8 55 77 39 15 e3 99 43 7c 79 28 a6 99 48 d3 43 0e 4e ea 88 a7 77 01 c5 75 1b 97 40 8c 65 10 1d 95 Data Ascii: ]V<Kh6\|8/{&;HML{Z`RUog76Sn"$]64+#b0u@#5/HmY?}6bBK?4;+5$"+tI&'+J*2Uk'iI$zI$$M+G#A\|eTXLQBUw9C\|y(HCNwu@e
2024-01-10 21:51:58 UTC	251	IN	Data Raw: f8 59 cd ad 2e 20 ea 09 f4 56 2a 09 54 de c8 32 14 16 8a 93 4a 13 1f 21 4c 20 98 2a 41 0e 54 da 50 4f 0d aa ab b5 a8 88 98 ba 49 2a 8c 32 92 49 2a 86 49 24 90 45 32 49 22 9d 3a 49 20 74 92 49 10 96 d6 e7 7e fd 47 ef 7e 13 d2 49 4b c6 b1 ec 7a a8 55 f1 0f 33 1c 12 49 71 7a c0 0f 39 95 c6 24 92 02 1d 02 bb b2 6b 9a b5 86 1a a4 3a 96 47 16 66 03 3d 28 1f 51 da 81 7d 12 49 5c 7a 97 8b d8 82 ea 74 83 9a e7 5b b8 e6 ba 1c ca 8d bd 9c d3 63 c9 57 da 18 0a 6f 65 6a 4e 60 c8 ca 4c a8 c1 c5 85 cc 2e 80 79 03 a7 24 92 57 e9 87 1b b1 aa 17 02 09 d0 db 9a d5 75 30 12 49 73 74 81 b9 b0 94 24 92 8a e2 77 87 f7 9a 9f 77 fe 46 ac d4 92 5d a7 1e 5c ba b2 c1 dd 08 c1 24 96 d9 24 c5 3a 48 86 09 ca 49 20 1b 82 ad 54 27 49 14 26 18 47 09 24 a0 74 ed 29 24 83 ff d9 Data Ascii: Y. VT2J!L ATPOI2II$E2I":I tI~G~IKzU3Iqz9$k:Gf=(Q}I\zt[cWoejN`L.y$Wu0Ist$wwF]\$$:HI T'I&G$t)$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49809	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:58 UTC	456	OUT	GET /vi/0nBZLHxmUd0/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6826 Date: Wed, 10 Jan 2024 21:51:58 GMT Expires: Wed, 10 Jan 2024 23:51:58 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 13 12 16 13 13 13 15 15 16 17 17 17 17 16 17 16 17 15 15 17 17 15 17 15 19 18 17 15 18 15 1d 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3d 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 25 1f 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 07 ff c4 00 41 10 00 01 03 02 04 03 05 05 05 07 01 09 01 00 00 00 01 00 02 11 03 21 04 12 31 41 05 51 61 13 22 32 71 81 06 91 a1 c1 f0 14 52 b1 d1 e1 15 23 42 62 Data Ascii: JFIF+#(%5%(-/222"8=70=+12//%//////////////////////////////////////////////////@"A!1AQa"2qR#Bb
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 92 79 a3 dd 7c 2a 61 1e f7 8c 7f b4 97 ba 72 5d da 0e 41 78 4c 77 13 ad 5d d9 aa 3d cf 3e 76 1d 00 d9 0d 3a 4a 54 69 3e 1d ae 79 28 93 ba b2 1e 1f 8f 62 29 0c 8c aa e0 36 16 20 79 4e 8b 2d 7c 65 4a 87 35 47 39 ce 26 25 c6 7d dd 35 d1 4e c1 c4 f7 be a5 5d 26 6a 3e 1c fc fa 69 ee 5a b2 9a d9 6d 02 24 73 82 9c da 42 4f 7a 39 11 eb 6b 1f 24 ec 3e 09 ce 39 40 b9 f5 8e 5d 34 6a f5 fc 1b d9 32 e0 d7 b9 b2 09 00 e6 30 5b 0d 90 72 81 a5 b7 53 bd 70 ad 3c bd 2a 64 01 3e 2f a8 3e e5 6f 12 bb 1e d3 61 9b 4f 17 51 8d b0 68 a7 02 f3 06 93 48 26 77 33 3e ab 94 ad 04 b5 a6 04 c0 08 88 23 4d 39 a1 7b 6d 72 98 d7 4f 8b 44 02 e9 ba 24 73 46 5d 23 44 c2 c0 10 3a 32 a6 14 0e 80 f3 44 6e 96 e3 a2 30 6e 90 1b 88 10 89 ae d1 28 95 05 bd 50 0c 9d ca b2 52 9a 4c 73 29 80 26 04 80 Data Ascii: y\|ar]AxLw]=>v:JTi>y(b)6 yN-\|eJ5G9&%}5N]&j>iZm$sBOz9k$>9@]4j20[rSp<d>/>oaOQhH&w3>#M9{mrOD$sF]#D:2Dn0n(PRLs)&
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: eb 6f 8e ff 00 b4 2a 87 f6 c6 26 19 a0 a5 31 a0 fd c3 17 0e 93 41 00 9b 1d 57 4f db 97 3f f6 8e 24 b6 60 9a 72 7f d1 62 e0 e6 2e 20 19 0b 68 9b 1d 0c c0 0d 54 0e 08 1d 40 00 00 2a e4 0b 04 ea 06 d2 50 82 74 42 c7 6c aa a9 20 84 8c 4e 11 64 27 90 56 cb ca 8f 9b 42 00 22 d1 be e8 da eb 18 40 00 be ea b2 d9 00 47 64 43 44 25 c2 51 b7 9a 01 9b 4a a1 cd 08 b8 51 c5 01 e5 42 e8 37 c2 b9 f0 b7 b3 c2 ad 2b a6 11 aa a6 ad c5 25 30 d5 d5 46 85 6e 32 55 b5 a8 21 23 05 5e 54 0f 29 28 e6 95 61 b9 4b 5c 74 9d 10 53 a8 01 45 9b 31 02 51 a0 7b df 2e cc 47 77 45 55 18 1c 79 37 64 b7 92 d1 92 65 03 18 4e a6 c2 c9 91 98 aa 4c 11 94 ea 97 87 69 cc 01 d0 7e 48 de 43 40 b5 e5 08 ac 4b a7 44 13 d7 f0 5a 91 84 3d 5e 7d 46 90 91 8e ae 43 63 94 9f 7a 3e 1c e8 c2 b0 73 24 9f 57 15 Data Ascii: o&1AWO?$`rb. hT@PtBl Nd'VB"@GdCD%QJQB7+%0Fn2U!#^T)(aK\tSE1Q{.GwEUy7deNLi~HC@KDZ=^}FCcz>s$W
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 2e b7 1e e5 35 5a 3d cf 13 0d 33 7d 75 bc ed 1a df 7e 89 f8 4a b3 23 90 eb 78 fc 17 2d ce bc 89 12 2d fd 3f e1 69 c2 bf ba 4c 45 89 f2 11 a4 e9 3a 7b 94 ef b8 7c c3 db fc 33 4e 3a b3 bf f1 cf a5 26 05 e6 70 d8 60 60 4a ef fb 76 09 c7 56 33 ae 4b 72 8a 4c 01 70 59 49 cc 23 f0 5d 33 84 6d a2 a6 10 b7 42 82 8b 48 36 bd ee 4a 63 eb 12 24 a5 3a b4 d9 82 39 a7 4a 53 ea db 43 3b a4 b8 12 67 41 c9 1d 2a 7d 74 dd 50 74 0c c5 20 26 b4 c1 e4 a3 9f a2 06 56 27 c8 94 6d d7 a9 48 2c 0f 8a 07 11 30 8b 3c 18 3a a8 d0 99 20 37 2a 9c df 82 8d 3a a1 94 8c 41 fb f2 55 9e 44 0d f7 42 04 92 36 4c 68 d5 04 f3 05 6d c2 1b 2c 8f 6a 76 15 cb 54 b5 8d 50 d7 d1 10 4a c5 1b 29 32 5a 9a d4 a6 26 b5 00 72 96 e2 8a 55 14 8c 74 ea 86 8b 0b f3 51 b5 b5 3b 94 b2 15 d3 8b d9 32 59 7b 9c 79 Data Ascii: .5Z=3}u~J#x--?iLE:{\|3N:&p``JvV3KrLpYI#]3mBH6Jc$:9JSC;gA}tPt &V'mH,0<: 7:AUDB6Lhm,jvTPJ)2Z&rUtQ;2Y{y
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 07 b2 9d 51 0e 6c c0 23 34 32 ed 81 b1 9e 48 d1 6d d2 06 a5 46 d2 70 7b aa c4 01 52 3b 17 b4 39 e5 ac 78 24 41 10 0f 4b 41 4b 6b 4b 5a 4d 27 51 3d f9 a9 99 ee cf 01 d2 e0 ea 42 1a 60 cc 9d 22 f2 ae a3 a5 fb 3c 39 99 86 76 12 3c 55 0b 5f d9 83 95 c2 04 4b 6d de 19 41 5c ba 55 ab 0e e3 29 d3 02 2c 4e 57 b8 e5 73 9e e9 91 2c 19 6d 04 66 b1 1b c2 9a bc 5d 9f b5 ba 4e a5 dc f6 be a2 e6 7d e8 69 52 11 33 04 dc f2 6c 44 fa e8 b9 74 2a 16 ba 4b 83 b3 5f 33 44 0e 80 36 d6 fc 82 d0 dc 68 02 34 9b 09 d4 9f 35 8a b4 f2 9e d5 d1 1f 6a a8 7e f1 60 00 9d 00 a6 d0 b8 d8 8c 39 1a 19 5d 1f 68 29 b9 f8 97 99 d4 88 fe 90 b9 d5 28 38 1d 4c 0f 8a ec c7 f8 c7 3d e4 15 18 fc b7 36 57 d9 b4 53 9d 5c 55 e2 71 25 d0 22 02 95 30 d1 05 b7 dc a6 05 86 c3 49 b9 43 5a 26 06 db a1 18 90 Data Ascii: Ql#42HmFp{R;9x$AKAKkKZM'Q=B`"<9v<U_KmA\U),NWs,mf]N}iR3lDt*K_3D6h45j~`9]h)(8L=6WS\Uq%"0ICZ&
2024-01-10 21:51:59 UTC	1203	IN	Data Raw: b1 74 e7 1d 44 1f e7 fe d3 e1 56 33 79 46 3e a2 eb a3 9f da fe 1d 0e 2b 87 6b 6b 53 27 42 72 12 3a 84 bc 67 05 04 cb 45 81 df c4 57 b6 e3 3e cd f6 b4 8b da 01 78 33 04 7f 10 d3 75 cf c1 e1 1f 56 94 92 d6 3a 25 cd d4 f2 8f e5 2b 5b 87 7e ef 1f a7 ea 7f 6c b3 c3 c4 e2 b0 bd ab dc 58 20 03 00 0e 96 ba 98 2e 20 fa 1d c3 e1 eb b7 55 df af 83 7d 1a d2 1a ea 8d 23 66 80 01 bc 4c 1b f9 af 35 c4 de f3 50 97 73 e4 00 1e 8b 0c b0 f1 5e a7 43 d4 5f 77 bb 1a ea 7d b0 b8 4b b2 d4 61 f1 37 90 fc d7 37 1b c3 32 f7 e9 f7 9a 6e 06 a4 7e 6b 1d 3c 4b 9a 64 10 57 4f 07 88 15 0c 4e 53 cb f4 59 c9 ed bf 0f 43 2e a7 ea cf 97 21 b5 61 69 a5 8c 1a 15 d9 af c2 5a e9 24 4f 51 62 b9 18 ae 17 90 da 47 c5 54 b3 2e 11 96 39 61 c8 4d 78 21 68 66 2b aa ce ec 13 c3 73 48 70 f3 82 b1 38 94 Data Ascii: tDV3yF>+kkS'Br:gEW>x3uV:%+[~lX . U}#fL5Ps^C_w}Ka772n~k<KdWONSYC.!aiZ$OQbGT.9aMx!hf+sHp8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49808	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:58 UTC	456	OUT	GET /vi/pTLtzDe0_9E/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3265 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 10 0e 0f 0f 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 11 0d 0d 0d 0d 17 15 19 18 16 15 16 15 1a 20 2b 23 1a 1e 28 1d 15 16 24 35 26 28 2d 2f 32 32 33 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 10 1d 2f 1d 1d 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 3c 3b ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 3f 10 00 02 01 02 04 01 09 04 07 05 09 00 00 00 00 00 00 01 02 03 11 04 12 21 31 05 13 22 32 41 51 61 71 81 b1 06 14 82 91 23 53 62 92 a1 b2 d1 15 33 Data Ascii: JFIF +#($5&(-/223"8=70<+12//////////////////////////////////////////////////<;@"?!1"2AQaq#Sb3
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 88 d0 b8 ae 02 61 17 16 55 c8 45 00 32 2a 45 c9 35 14 db 7d 49 5d 94 77 70 4a 79 f1 34 a2 f6 79 ef 6d ed 95 b6 4d ea 6d 75 bf 4f 21 e1 aa 7d 5c fe e3 1f ba d4 fa ba 9f 72 47 dd cb 1a f2 59 42 8d 92 9a e8 b6 9e 9a 5f 5d 6d ff 00 b7 33 a8 96 8d 2b 29 46 33 b6 f9 6f ba f9 a3 9c e7 f8 75 cb e9 ee 32 5b f9 7c 47 ba d4 fa ba 9f 71 87 ba d4 fa ba 9f 72 47 d7 5f 9e 8d ea 32 ff 00 37 c3 3f c5 f2 f8 8e 42 7f c9 3f ba c9 70 7d 8f e4 7b b8 ea d9 76 de e7 99 3a ad 9d 26 7b 66 f1 eb f2 e4 ca fb 18 65 7d 8c ea 8c 5c 9d 91 ec 60 38 6a 9d 9d bc 6e 32 e4 98 f6 b8 70 dc fa 78 31 c3 cd ed 09 bf 08 b6 6a b8 6d 77 b5 0a ef fd 19 fe 87 e8 18 1c 0c 29 e5 b2 5d e7 d0 d0 a8 95 ba 8e 1f d9 f8 7a bf a5 fe d7 e3 ff 00 b2 f1 1f e1 f1 1f ec cf f4 32 96 16 a4 5d a5 4e a4 5f 63 83 4c fd Data Ascii: aUE2*E5}I]wpJy4ymMmuO!}\rGYB_]m3+)F3ou2[\|GqrG_27?B?p}{v:&{fe}\`8jn2px1jmw)]z2]N_cL
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 29 85 75 f2 e0 eb 5f 43 85 c9 97 02 b2 d1 95 16 19 44 83 4d 40 49 8c 80 00 00 8f 28 2c 55 87 63 b3 ca 8b 05 8b b0 58 08 b0 58 d3 28 58 0c f2 85 8d 2c 2c a0 45 82 c5 e5 15 80 94 8d 69 91 62 e9 85 8d 47 4b a4 bc c9 2a 97 49 79 fa 18 57 49 4a 68 86 24 cc b6 d2 c9 e8 5d 39 e5 4e 2b b4 c5 1a d3 82 cb 29 3d db 49 12 f4 b8 cd d2 cf 67 7e b2 67 5d b5 b9 33 d0 c9 99 d3 af db d3 de f6 37 1d 1a 78 b5 4e 7d 1a f1 95 3d 76 cf bc 7f ef 79 f4 bc 67 09 b4 92 eb 3f 3b a7 9a 32 8b 86 92 52 4e 2d 6e a5 7d 0f d3 23 5f 96 a1 cf 69 d4 a6 96 7b 7f 35 8e 1c d8 fe 5e 9f a7 ce ed f3 d5 d2 82 52 9b b7 89 34 38 95 18 cb 5f c0 f3 b8 9d 4a 95 aa f2 7b 65 e8 a3 9a 1c 2e b5 fa 0d 78 99 c3 8e 6b dd 7b fc ee f5 26 df 53 ef 90 a8 af 06 9a ec ec 26 9b b6 c7 83 4b 0d 56 8c a0 be b1 37 6e ab Data Ascii: )u_CDM@I(,UcXX(X,,EibGK*IyWIJh$]9N+)=Ig~g]37xN}=vyg?;2RN-n}#_i{5^R48_J{e.xk{&S&KV7n
2024-01-10 21:51:59 UTC	146	IN	Data Raw: 14 8e 88 cd 19 ca 04 d8 76 db a7 3a 0e 51 1c d7 0b 93 c5 74 e9 75 51 3c a9 81 48 78 9a 34 ae ee 59 37 b0 9c 8a 95 4d 8a e2 13 61 92 93 15 84 d9 a1 58 b5 80 00 1a 73 48 80 0a 80 18 00 42 b8 5c 00 02 e3 00 08 0d 63 b0 00 ad 42 33 a9 b0 01 22 d6 60 00 6d cc 00 00 00 00 00 00 00 00 00 00 00 00 1e b6 07 f7 71 f8 bd 59 b3 00 38 de de 9c 7a 65 52 0a c7 2b 00 0e 90 9a 04 80 0a a6 0c 40 15 2d 82 00 0c 56 a4 48 00 8c d2 82 2e 60 05 73 7f ff d9 Data Ascii: v:QtuQ<Hx4Y7MaXsHB\cB3"`mqY8zeR+@-VH.`s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49810	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:58 UTC	456	OUT	GET /vi/C5kIQ9zpjRI/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 4835 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 13 12 15 12 13 13 15 15 15 15 15 15 17 15 15 16 15 15 16 15 15 15 17 15 19 18 16 15 17 15 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2d 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 0f 1d 2f 1d 1d 1d 2f 2f 2f 2f 2f 2f 2f 3b 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 46 10 00 01 03 02 03 04 06 06 04 0c 06 03 01 00 00 00 01 00 02 11 03 21 04 12 31 05 41 51 61 06 71 81 91 a1 f0 13 22 b1 b3 c1 d1 23 24 32 82 14 33 34 Data Ascii: JFIF+#(%5%(-/222"8=70<-12/////////;/////////////5////////////////////////////@"F!1AQaq"#$234
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 0b d9 d5 7d d7 1b 69 61 9a e2 64 0b ad 22 38 97 59 6b d7 4f 26 d0 bb 78 13 34 da b9 55 a8 65 71 0b a1 b3 aa 8c b1 cd 7d 0f 4d 6e 2d db e5 7a aa f3 5e 9c dd a8 7e 95 df 77 f9 42 d5 60 5b 5b 4c fd 2b be ef f2 85 a8 1b 2b 1c 9e 73 f7 2f 3d 75 0b d7 e0 93 94 92 37 cf 52 65 dd 8b 35 53 46 f4 9e 53 6e 8a 55 03 40 55 29 48 4b 55 00 65 53 42 08 4a 50 49 37 55 a2 86 ea a8 a0 02 a9 48 24 10 66 14 d5 16 42 c7 29 81 c6 50 50 79 48 b9 49 00 20 3e 6c 80 36 de 91 33 a0 29 86 2a b2 08 c8 52 70 01 37 39 49 72 06 1e 16 27 d5 e0 a8 34 a3 d1 73 85 44 93 22 50 d1 1b d5 e4 81 ac a9 cc 83 20 29 b6 ac 5f d8 b1 14 c8 b2 92 ee 9e 51 f6 de a1 b4 22 d2 b2 bb 1b 3b d7 24 15 80 be 4f 20 b3 7d 0f 73 b7 f8 59 58 df 89 3c 57 21 d5 88 20 49 56 6a 14 e1 d7 bd b5 56 b2 dd d8 d6 a8 c2 0b 73 Data Ascii: }iad"8YkO&x4Ueq}Mn-z^~wB`[[L++s/=u7Re5SFSnU@U)HKUeSBJPI7UH$fB)PPyHI >l63)*Rp79Ir'4sD"P )_Q";$O }sYX<W! IVjVs
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: b0 b6 ee 3e d5 e6 6c b0 f9 cc 72 8b fa a2 c3 41 be 7a fd 89 bf 11 ea 86 c0 ee 1a 69 3e d5 2e 78 b0 03 77 72 c7 98 4c f6 0e 65 07 cd 3a 61 6c 6d 5d df 8b b7 0f a2 62 e3 b9 d6 8e f5 d8 e9 68 fa f5 61 fb 3f 74 c5 c4 95 eb ae a1 84 ec e6 ca 1a 53 71 dc 15 64 55 13 99 52 49 91 cd 02 71 53 b9 32 6e 92 a0 01 22 53 94 10 a0 1a 12 29 9b 24 02 00 26 21 04 42 40 aa 33 b5 a6 6e a9 49 28 cc a0 64 a9 f3 28 ec 52 e7 14 0c 2a 21 49 08 17 45 12 94 a4 5a 9c 20 10 1a 9c 6e 48 94 0e 21 17 42 21 10 8b 4a ee f4 32 94 e3 e8 49 ff 00 73 74 fe 89 eb 88 65 76 ba 1a e8 c7 51 37 fd 27 8d 27 85 cd b5 2b 1b 7d 64 96 8d c7 91 3a ce eb 03 65 86 a8 de eb 75 dc ff 00 0e e5 57 8d 72 8d d1 3f 25 8f 20 12 75 3d 5f 09 f6 af 1b 76 ad 40 4f d9 66 62 0e a4 c0 8e ef 05 2c 7e e7 41 83 02 04 45 f4 Data Ascii: >lrAzi>.xwrLe:alm]bha?tSqdURIqS2n"S)$&!B@3nI(d(R*!IEZ nH!B!J2IstevQ7''+}d:euWr?% u=_v@Ofb,~AE
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 79 2c e5 e7 49 e5 f1 71 37 e0 bc b1 2d a6 19 00 b8 3a ef dc 39 fb 00 52 c6 de 78 92 4d 87 7a c2 da ce 87 ba 79 77 ff 00 45 6d ac 44 d8 58 7b 57 5c c2 70 f9 c7 4b 0f d7 6a fd cd 7f 66 d5 c6 2b b1 d2 b7 fd 72 a9 e3 e8 fb 3e 89 8b 8e 17 aa ba 86 33 b1 29 3d d2 a8 04 9d 75 51 0e d1 36 d8 23 2c a6 5a 82 66 55 04 9a d4 c8 40 0d 14 83 cd 53 8a 41 00 e8 43 51 50 a9 0a 86 15 48 84 81 54 e2 78 04 16 02 0f 52 32 a7 3b 94 54 42 25 3c a8 2d eb 50 22 51 94 a7 95 22 e5 43 80 91 25 20 82 88 50 9a 92 e4 22 91 28 05 54 22 50 4c 2e ff 00 42 c8 18 ea 3b ff 00 19 ee 9e b8 37 5b fb 1b 19 e8 71 14 aa 4c 06 bc 12 47 fa 7f 3b c2 57 36 d4 91 b7 d8 6a 3c c5 ec 38 49 1e c5 8b 34 68 23 db 1d ba 2d 2d 9f b6 e9 62 0f d1 3a 63 88 83 d8 16 eb 44 1b 5e 57 8d ba 1c 6f 7d ea 40 e5 26 79 59 Data Ascii: y,Iq7-:9RxMzywEmDX{W\pKjf+r>3)=uQ6#,ZfU@SACQPHTxR2;TB%<-P"Q"C% P"(T"PL.B;7[qLG;W6j<8I4h#--b:cD^Wo}@&yY
2024-01-10 21:51:59 UTC	464	IN	Data Raw: b4 65 2a e5 63 ad a1 52 56 36 e5 b5 6f e0 1f 0e 5a 0d 5b 58 73 0e 09 2e 9e fb 62 62 c8 1c 37 4f 35 eb f0 ce 90 00 f8 2f 9f 6c 6a b7 1c 3c ca f6 fb 3d d2 09 06 e7 c9 5e 4b c3 5a b0 f4 a0 c5 36 0f f9 7b 1a 63 cf 35 ce e8 be 04 b9 f9 a2 00 3a ae e6 37 02 2b 00 1f 20 34 82 23 8d ec 6d c2 4f 6a 75 30 ef 6f a3 6d 1c 94 da d7 4b e6 5c 4e 96 02 6e 35 d7 92 e3 e1 d3 b5 56 84 b4 19 dd af 77 cd 71 c8 32 ee 13 6e 7c 7b 16 ed 6c 69 de 44 5c 9b 19 31 a0 68 d0 2d 27 5c c9 68 1c 06 b1 bc c9 d2 4d b4 5c d6 3b 24 88 f3 e7 99 55 36 3e 6d bf d8 98 2a b7 6b a7 60 9d 34 5a 39 49 12 5a 10 ed 3a cd bb 3f ba cc da 7e 1f 00 b1 96 5c 6f b2 e8 7c cb a5 c6 31 95 79 e4 f7 6d 5c 60 bb 1d 2f fc b6 af dc f7 6d 5c 86 05 ea ae 98 ce d5 11 bd 04 1f ee 90 6a 73 e4 2a e4 f4 09 37 54 89 4c 1f Data Ascii: ecRV6oZ[Xs.bb7O5/lj<=^KZ6{c5:7+ 4#mOju0omK\Nn5Vwq2n\|{liD\1h-'\hM\;$U6>mk`4Z9IZ:?~\o\|1ym\`/m\js*7TL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49811	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	692	OUT	GET /vi/hEm9hUw5I7E/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6178 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 13 10 10 12 12 12 15 15 15 10 15 10 15 17 15 10 15 15 10 15 15 15 17 15 19 18 16 15 16 15 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 10 1d 2f 1f 1e 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 31 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 ff c4 00 48 10 00 01 03 01 04 06 05 07 07 0b 04 03 01 00 00 00 01 00 02 11 03 04 12 21 31 05 13 41 51 61 91 06 22 71 81 a1 23 32 52 62 83 b1 b3 07 14 33 82 Data Ascii: JFIF+#(%5%(-/222"8=70<+12/////////////////1//////////////////5///////////////@"H!1AQa"q#2Rb3
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 22 80 48 a4 02 6b ea 41 48 2b 56 18 ad ae 82 fe 72 b3 7b 6f 82 f5 89 5a a4 95 b5 d0 53 f9 4e cd ed be 0b d1 3d 8c be 35 ec 09 26 ca 52 ba 1c 42 88 40 14 82 01 c1 78 cf 4e 34 c3 ed 56 d7 30 60 d6 39 d4 98 36 43 49 04 f7 90 7c 17 b3 05 e1 b5 2c e5 fa 4e a9 a9 2d 63 2a 57 88 17 b1 04 c6 12 33 99 5c dc d9 6a 3a ba 6c 66 54 9b d0 f7 dd 9d 6c 18 c0 42 b7 d0 2d 32 eb 2d bf 53 50 9b 95 8e ad cd 68 90 1e 4f 51 f0 38 e1 de ac d8 74 a5 67 da 5b 67 80 d6 92 e1 78 8c 60 03 0e 3b 22 61 61 d7 a7 68 15 45 4d 59 d6 b2 a8 82 d6 f5 83 9a f9 04 5d c4 f9 be 3c 54 78 6e 7b fc ac 75 73 e3 c7 db f8 4b fa 7b 93 82 57 52 b2 b9 ce a5 4d d5 1b 71 ee 6b 0b 9b 9d d7 11 88 e6 a5 ba bd 0d bc ad 22 ba 95 d5 21 08 5d 4a d0 f2 5e 9b 1f ca 36 8f 65 f0 98 b0 a5 6e 74 dd 9f 94 6d 1e c7 e1 31 Data Ascii: "HkAH+Vr{oZSN=5&RB@xN4V0`96CI\|,N-c*W3\j:lfTlB-2-SPhOQ8tg[gx`;"aahEMY]<Txn{usK{WRMqk"!]J^6entm1
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: d8 47 d3 6e fd 4b d7 23 75 76 1d 03 a0 7f d4 ac c4 b8 9f a6 c3 21 f4 2f 5b 46 3d 6c b5 0b aa 6d 5a 17 11 b6 34 8c 31 51 d3 56 b2 c6 43 5f 04 e6 06 71 1e 09 9a 5f a4 14 ac e4 34 99 71 ce 31 b8 37 91 b5 60 5b ad e1 de 71 9c 24 38 41 96 9c 8a 9d cb 7e 23 77 1b 84 97 2f 1b 65 db ea 71 83 98 83 06 46 d5 d0 53 6b f5 6d d6 91 7c 06 de 23 0c 48 07 1e 38 e3 c5 56 d1 3a 30 3d cc ae f6 f5 04 96 87 66 48 f3 5c 46 51 33 c9 6a d6 a6 1c e7 b8 8c e3 dc 02 77 0d 63 ba c6 19 ef 25 6a 74 87 5b 19 c3 ef 4c b9 02 40 90 77 7e 2a 6b 30 c5 c3 86 d5 1b 9a 5a 70 cb 72 cc 6a fb 57 a9 52 70 ba 67 71 c1 66 52 37 2d 24 64 2a 36 f7 5a 04 39 b0 33 ec 23 92 d8 a8 db d8 f2 2b 27 49 55 65 37 36 a3 d8 5d 0d a8 00 69 ba 64 c0 99 e1 33 1b 61 57 e9 2f 55 b5 66 aa 1b 83 45 f3 b4 82 03 47 09 2a Data Ascii: GnK#uv!/[F=lmZ41QVC_q_4q17`[q$8A~#w/eqFSkm\|#H8V:0=fH\FQ3jwc%jt[L@w~k0ZprjWRpgqfR7-$d6Z93#+'IUe76]id3aW/UfEG*
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 8c 79 25 ae bd 23 2c 9a 48 c4 71 0b 0a 4a d3 b0 da 5e c7 35 f4 e0 bd ad 71 17 81 70 f3 4c e0 08 d9 29 65 3c 5d 0c 72 dd d5 77 36 7d 1e c6 60 cb cd e2 d7 b8 15 64 d9 f0 8b d2 77 d5 a7 4a bf 81 68 3e 2b 95 a7 a6 ad e7 1b 94 23 c9 99 2d 78 ea 3a 65 de 7e c8 53 37 4e 5b 81 83 46 89 38 08 05 e3 ac 71 02 67 68 12 a1 39 79 67 db 79 74 bc 19 7b c5 bd 56 c2 1d 13 4e 91 df 72 fd 12 7b 06 2d f0 54 2b d1 63 31 6d f6 b9 a7 16 b8 b4 c1 e0 f6 e7 c9 53 b2 f4 92 d2 e7 b0 1b 2b 08 7d c8 22 a3 9b 21 cf 14 db 9b 4f e9 10 21 3b 49 5a a4 b8 fa 45 c7 76 67 05 df d3 72 e7 96 fb be 9e 37 5f d2 f1 f1 76 ff 00 1f bb 56 f4 68 ab 69 b4 d1 a1 7d c4 3c 8b f7 4c 45 31 8b c9 23 87 89 0b d5 1c c0 04 0c 00 c0 06 e1 00 6c 5e 29 d0 bd 32 f1 a5 29 b5 af 70 6d 61 51 90 d3 00 dd 63 9c 24 f6 b7 Data Ascii: y%#,HqJ^5qpL)e<]rw6}`dwJh>+#-x:e~S7N[F8qgh9ygyt{VNr{-T+c1mS+}"!O!;IZEvgr7_vVhi}<LE1#l^)2)pmaQc$
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: d3 c8 13 f6 2a 4e 2a 5d 1f 6c 75 2a ac a8 c7 b9 8e 6d e8 73 22 f0 96 90 62 7b 7c 55 32 f3 34 96 1e 2b a4 f9 8b c3 19 81 fa 13 b0 fe b0 9d df d9 55 0d 8e a9 04 5d 33 0c 19 11 8b 9e 70 c7 82 7b 7a 61 69 1f f9 95 0f ed b2 93 bf a5 26 f4 d2 d6 32 b4 7f f2 a4 3f a1 43 f8 f2 75 77 c6 8e 8e b3 3d 8c a8 5e 08 d6 d5 21 b2 08 90 d2 5c 48 de 24 35 6c e8 8d 3b 67 b1 d0 b6 d7 79 6b eb cd 36 53 a2 08 d6 3b 03 88 19 86 cb f1 3b 9a b9 1b 57 4a eb d5 8b cf 04 8d a4 09 c8 8d dc 56 63 df 81 73 8f 12 4e 24 ab e1 3f e7 70 bf 75 c7 9f 1d bc f3 97 ea 4d 2a 5b 6a d5 a9 59 ef 73 1c 0d 57 39 ee b8 c3 12 e3 26 e8 dd 8a f7 0e 85 5a 05 4d 1b 66 80 e0 29 b4 d3 8a 98 3c 0a 6e 2c 17 bb 9a 0f 7a f1 07 da 1b b1 7a 97 c9 05 b6 f5 9a d3 4a 7e 8a a8 74 6d 0d 7b 06 cd d7 98 e5 1c e6 9d 98 d7 Data Ascii: N]lums"b{\|U24+U]3p{zai&2?Cuw=^!\H$5l;gyk6S;;WJVcsN$?puM[jYsW9&ZMf)<n,zzJ~tm{
2024-01-10 21:51:59 UTC	555	IN	Data Raw: 7a 5d 62 55 de 8c db 75 56 fb 25 57 01 0d aa c0 6e b4 37 07 75 67 01 8c 5e 94 8d f4 0d 31 80 1b 02 55 0c 60 9e d0 00 c7 fc aa d5 aa 60 b3 19 70 5f 29 da 6e b5 1a 76 6a 56 7a 95 29 be a3 9e f2 ea 0f 75 37 5d 60 88 25 a6 60 97 e5 ea af 2e 7d 67 b8 b9 d5 1c e7 3d c4 92 e7 92 e7 12 73 24 9c 49 5d 77 ca 4e 91 2f b7 1a 73 85 06 31 b1 eb 38 5f 27 93 9b c9 71 a4 aa 0f a3 1e 83 33 4e 2d 40 04 1b 7a c1 7b 56 d8 30 31 f7 95 6a 0e f5 5f 46 fd 0b 3e b7 f3 15 69 65 a8 08 5e 3b 92 28 5e 4c 8b 59 c1 20 e1 b4 23 79 03 29 93 1a dd 6a 06 a3 b0 c1 b8 2a a5 d2 83 cf 59 dd a7 de 81 c1 30 69 42 11 8c 12 48 cf b3 50 be f6 b7 79 c7 b3 6a e9 99 45 a0 00 00 1d cb 9b b2 da 2e 3e f4 4e 04 6e cd 68 9d 3d ea 78 fe 08 2a d5 85 0d ac 90 c3 77 3c 23 9a cc 3a 79 db 18 39 94 c7 e9 b7 90 45 Data Ascii: z]bUuV%Wn7ug^1U``p_)nvjVz)u7]`%`.}g=s$I]wN/s18_'q3N-@z{V01j_F>ie^;(^LY #y)jY0iBHPyjE.>Nnh=xw<#:y9E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49813	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	692	OUT	GET /vi/-1iNwmT2RVg/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 7395 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 12 10 16 10 12 12 15 15 15 16 15 15 17 15 15 15 15 17 15 12 15 15 17 15 19 18 17 17 17 15 1a 1f 2b 23 1a 1d 28 1d 15 17 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2d 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 27 20 25 2f 2f 2f 31 2f 2f 2f 2f 2f 2f 30 2f 2f 2f 2f 2f 37 30 2f 2f 30 30 2f 2f 2f 30 2f 2f 2f 35 2f 2f 2f 30 30 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 40 10 00 01 04 00 04 03 06 03 05 06 05 03 05 00 00 00 01 00 02 03 11 04 12 21 31 05 41 51 06 13 22 61 71 81 32 91 a1 14 23 42 b1 c1 07 15 52 62 72 Data Ascii: JFIF+#(%5%(-/222"8=70<-12//' %///1//////0/////70//00///0///5///00///////////////@"@!1AQ"aq2#BRbr
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 8f 7f cd 3e 4d 97 45 db 6c 28 67 11 99 ad d8 16 56 80 6f 13 0e c3 d5 73 b2 ec b1 e4 ba e0 a2 e1 aa 02 95 d1 69 6a 30 b6 61 82 42 95 22 62 1f 1a 47 04 e8 d2 b8 20 44 68 a4 ec a9 43 50 00 db 1b 2b 50 4e 42 8a 35 63 2d 72 45 0d 17 19 25 a7 b4 aa 6d 34 ac 47 20 28 1d 18 69 0a 12 20 c0 21 08 40 c1 38 24 01 2a 04 09 52 25 4c 01 08 42 00 44 21 08 02 e7 0c 3f 7a d5 ad 8c 75 34 91 fe f5 59 7c 25 b7 28 f2 0b 4b 18 74 3e df 98 40 15 f0 d8 b6 d8 bb fe 9d ad 5e 85 c6 c3 9a 40 d6 c5 1d b5 b5 a9 2f 64 e3 9a 26 be 3f 0b 88 1e eb 22 5e 0b 3c 2e a2 d2 e0 39 ac ac b1 7b 15 96 19 24 7a c7 67 38 b3 b1 38 60 49 69 78 b6 b8 fa 1d 09 f3 21 5b 92 20 37 bd ef 75 c2 fe cf 31 0f 38 99 98 e2 46 58 db a5 50 b2 e1 5f aa ef 31 2e ca 40 24 79 f3 d1 6c 83 44 2f 75 6b ae a3 6d d4 71 61 1c Data Ascii: >MEl(gVosij0aB"bG DhCP+PNB5c-rE%m4G (i !@8$*R%LBD!?zu4Y\|%(Kt>@^@/d&?"^<.9{$zg88`Iix![ 7u18FXP_1.@$ylD/ukmqa
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 3d 47 81 76 ee 16 61 a2 c3 49 1b 80 6b 5a d2 e6 9b b2 06 f5 d2 f5 5d 34 6f 64 ac 0e 89 c1 ed 22 c1 69 d3 fe 57 87 f7 a4 2e e3 f6 6b c4 89 c4 bf 0c 5d e1 7c 65 e0 7f 33 2b f4 27 e4 ab b5 12 68 ef 30 31 16 9c de aa c4 e2 3a a6 82 09 a3 e1 fa 26 77 7a 12 0e 81 46 f9 73 30 96 9d b9 ee 90 1c bc f8 99 61 c4 39 be 20 dc d6 41 1a 36 c6 ed 7f 30 7a 72 50 71 5e 24 5c c3 6e d2 8a a7 da 7f b5 f7 8d 6e 1a df 9a f3 b6 ae 8d 8a 3a ac 06 41 29 d2 62 6f 5b 1c 85 1a 5c 79 60 d3 b6 7a 78 b2 ea 8a 54 61 e2 cd 4b 7d 53 5b 76 35 57 78 ec 19 4c 75 d0 aa 01 da 81 e6 15 60 ed 1c 99 15 49 9a fc 1f 88 98 67 6b c1 d9 c2 fd 2d 7a 64 b3 54 94 1a 35 f1 5e b6 6f 55 e3 86 c3 c9 f3 3f 2b 5e ad d9 9e d0 c3 33 1b 9d bf 7a d6 35 a4 11 fc 22 b3 0f a2 d1 3a b3 9d ed 28 ac 5c 9f e4 ff 00 4d ab Data Ascii: =GvaIkZ]4od"iW.k]\|e3+'h01:&wzFs0a9 A60zrPq^$\nn:A)bo[\y`zxTaK}S[v5WxLu`Igk-zdT5^oU?+^3z5":(\M
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 03 4b 75 3b 8a 6b 5b 5e 6b 5b 84 e3 cb 07 76 d6 1b b2 76 eb ae eb 47 b4 38 41 0c 72 c9 95 a1 c4 0c c0 8d a4 3b 38 1a b6 bb 41 7d 41 5c cb 78 81 c4 78 8b c3 0b 45 96 92 18 c6 8d b4 71 dd 72 c7 23 67 a4 e0 aa 8d e3 8a 2f c4 46 f0 d2 5c 03 a3 78 6d 12 58 e2 0e b7 a7 84 b6 ef 90 25 5b ec 95 64 c4 50 0d 02 60 00 04 11 f0 0e 63 4f 92 e4 dd c7 1a d8 cc 31 e6 7b 9c 40 0f 61 cb 42 ce 6b 1f 13 89 a1 ed 75 c9 6f e0 70 f3 61 58 d8 5a f8 b3 62 27 63 5c 08 39 98 1d a7 84 03 e2 22 c5 ec bd 68 2c 92 e9 65 19 6d 5b d7 b1 c3 25 8e 19 e3 35 e7 63 4b b4 31 69 11 70 f1 17 4a 18 db ba 63 32 87 3e bc c9 3f 21 e6 bc b7 8a 42 4e 2d d2 b8 53 46 c0 f3 e4 3f 52 bb fc 66 2c be 59 5d 16 59 fb b7 18 fe f1 e5 9e 16 ea e2 d0 34 77 8c bf 98 5c 96 31 ce 97 10 1c e6 ee eb ca d0 4b 5a c6 f2 Data Ascii: Ku;k[^k[vvG8Ar;8A}A\xxEqr#g/F\xmX%[dP`cO1{@aBkuopaXZb'c\9"h,em[%5cK1ipJc2>?!BN-SF?Rf,Y]Y4w\1KZ
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: e3 d3 7a 91 f7 cd 1a 01 aa 7b 5c 77 4a 22 1d 14 33 3b f0 0e 69 c7 3d f2 29 74 db ec 2b 07 e6 a6 8e 1e 6a c6 0a 06 e5 d5 4a e2 c0 a6 dd 89 c6 9d 1c 9a 12 12 90 94 08 52 53 6d 22 10 00 84 27 35 84 ed c9 21 8d 42 10 80 15 09 10 81 0b 68 b4 89 53 02 ef 0c 71 12 69 ef e8 b5 31 e3 ee cf b7 e6 16 67 09 1f 79 ec b4 f8 8b 89 89 c2 ba 7e 61 20 32 b0 b8 47 cd 2b 61 8d b9 9e f2 1a d1 e6 57 bb e3 f8 3b 64 c0 4d 86 65 df d9 dc c6 58 3f 10 8e 81 1e a4 05 e2 dd 9a c4 3a 1c 6c 13 5b 5b 96 46 d9 7f c0 d6 9d 1c 5d fe 52 57 b3 45 db 2c 26 7d 71 31 90 77 a3 a0 3e 5a 6c b4 08 f0 ac 37 0b 9a 41 6c 89 c7 da bf 35 d4 f6 2e 3c 74 58 c8 b0 d1 b9 cc 64 b2 0e f1 ad 2d b2 d0 2d c4 9d c0 a1 d5 5f 7e 25 91 e2 66 6c 6f 0f 61 96 42 c7 0f 84 b1 ce 2e 6d 7b 1a f6 5d 0f 66 a4 60 7b 8b 49 ce Data Ascii: z{\wJ"3;i=)t+jJRSm"'5!BhSqi1gy~a 2G+aW;dMeX?:l[[F]RWE,&}q1w>Zl7Al5.<tXd--_~%floaB.m{]f`{I
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 47 07 ec f8 c4 d9 12 0f 03 5e 5c 24 19 cb bf 15 65 03 7a bd 47 45 9d 88 c1 c0 c6 b5 f7 6d 24 b3 30 0d 78 bd b5 07 cc 75 07 95 8b 5b 78 39 46 1a 47 3a 22 1c e8 c8 33 00 4d d6 6d 0d 1d 45 02 0d 73 cc 7c 93 78 86 26 38 e3 9d 91 c2 1e c9 26 ce 7f 10 64 39 1a e0 ec a2 f7 ce 5a 6e b6 e6 ab 3c 8b 43 6d 7c 2f 84 d2 fd f3 f4 25 86 49 66 50 f3 c6 a4 de de fc d5 3f 36 70 f8 f0 d6 ca e6 b6 a8 65 da eb e1 17 b9 b5 42 71 e1 70 ea 9f 8e 2d 12 b8 30 b8 0d 28 3b 71 a0 d3 db 6f 65 16 5f 72 b8 f6 f1 c1 bc a9 a9 ca f9 b6 61 b6 52 dd 16 b7 0b 89 cf b7 9d 1b d3 aa cf c5 c3 52 7a ad 38 71 ad 0c 0c 1a 2a 36 73 56 e3 e4 6d 92 79 2a 90 43 76 4a b6 f6 12 34 4c 7b 6b 6e 4b 25 d2 2b 62 f0 ba 66 0a b3 25 23 45 ae e0 1c df 55 99 34 44 72 5d 18 a4 43 2c 4b 18 4c 4e 53 e4 55 c7 b9 ae dd Data Ascii: G^\$ezGEm$0xu[x9FG:"3MmEs\|x&8&d9Zn<Cm\|/%IfP?6peBqp-0(;qoe_raRRz8q6sVmyCvJ4L{knK%+bf%#EU4Dr]C,KLNSU
2024-01-10 21:51:59 UTC	520	IN	Data Raw: b1 46 34 ed 2e 42 39 26 b2 4a 4f 86 ee 8f 6c e3 1c 0f 26 09 86 48 de 1a c7 46 0b 9a d2 65 0d 71 68 20 34 6f bd 8f 3e 4b 8a c6 63 1d 93 c1 8b 94 46 d9 72 8b 75 38 46 4d 59 68 d4 15 cc ff 00 d5 78 da 2d fb 54 b4 77 19 b4 3a dd 9f 3b e6 99 3f 69 31 52 00 1f 3b 9d 5a 78 83 4e e6 f9 8e ab 82 30 c9 1d ac ef 5d 5e 27 f3 c6 cf 44 7f 0e 12 e0 23 7b 5c 4b 1d 2b 9c 34 2d ce 45 b4 3b 5d db e0 1e 8b 5b 82 bc 06 88 cb 4d 87 12 2c 80 35 14 40 3d 57 93 bf b5 18 c2 c6 c6 71 32 65 65 e5 6d e8 db 36 6b dd 34 76 97 16 3f f7 0f f9 aa 42 2e 3c 9c b9 b3 77 1d 9d af 69 64 07 1b 20 69 db bb ff 00 4d ab 2e 52 2b 55 88 de 27 2c 87 bc 91 c5 ef 70 d5 c4 ea 6b 41 f4 00 7b 29 99 c4 dd 54 e6 da 6d 99 50 7c 8e 9f e2 56 25 d1 8d f4 54 fb d0 5d ae 96 a7 c5 ca 2b 4e 94 12 2c fc 19 c2 1b 16 Data Ascii: F4.B9&JOl&HFeqh 4o>KcFru8FMYhx-Tw:;?i1R;ZxN0]^'D#{\K+4-E;][M,5@=Wq2eem6k4v?B.<wid iM.R+U',pkA{)TmP\|V%T]+N,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49815	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	692	OUT	GET /vi/aoRJmnTyrtM/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5734 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 12 12 15 13 12 12 15 15 15 15 15 17 15 15 17 15 15 17 15 15 15 15 17 15 19 18 16 15 16 15 1a 1f 2b 25 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 1d 1f 25 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 ff c4 00 3f 10 00 01 03 02 04 03 06 04 03 06 05 04 03 00 00 00 01 00 02 11 03 21 04 12 31 51 05 41 61 06 13 22 71 81 91 32 a1 b1 f0 42 c1 e1 14 23 43 82 d1 f1 Data Ascii: JFIF+%(%5%(-/222"8=70<+12//%//////////////////////////////////////////////////@"?!1QAa"q2B#C
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 8a fa 62 0e de 88 52 a7 37 83 21 6c a7 4e f0 4f a7 35 ce d7 59 0b 49 b0 6f 26 7e 5e a9 d8 c8 30 0e 6b dc 13 30 ac c9 96 e0 4c a9 51 a0 65 3a 5f ec 15 84 2f cb cf c3 c8 1e 52 ac 61 2d b4 17 75 b2 2f a6 1c 2f 11 d7 44 ec 61 1a 1b 26 51 5c ec 57 c6 7d 3e 81 53 2a 63 dc 45 47 08 db e8 15 4c aa 57 58 ca e4 1b 3c 8a 57 5c 6c 95 b4 7a 95 15 c1 c6 44 8f 65 a1 b5 40 90 55 34 68 09 4f 51 a0 11 22 56 a3 28 4a 92 95 c2 e4 28 1e 26 25 54 9a 50 21 15 16 52 bc 97 94 ec 7e e1 10 14 85 6b 4b 3b dd 96 6a ac 9b f3 57 c2 52 13 ac e3 82 13 25 28 82 90 21 30 08 04 65 08 e1 10 92 53 35 48 ea 42 81 10 a2 68 45 04 50 94 d5 6c a6 a6 d4 f0 98 04 81 01 3d 23 04 47 dd 92 94 70 ce f1 0f 5f a2 12 f7 33 99 d5 73 71 00 17 58 5f a2 d9 8b c4 72 1a ac f4 e9 f3 4f 82 4d 68 c3 57 98 6d 59 31 Data Ascii: bR7!lNO5YIo&~^0k0LQe:_/Ra-u//Da&Q\W}>S*cEGLWX<W\lzDe@U4hOQ"V(J(&%TP!R~kK;jWR%(!0eS5HBhEPl=#Gp_3sqX_rOMhWmY1
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 34 4c 0c ba eb 76 34 fe 6b 9c ba dd aa a8 1d 8c aa 40 2d 9c 96 3a 83 dd b6 7e 6b 94 17 aa 78 f3 df 50 04 72 a8 0a 15 2a 45 c9 85 01 21 32 a4 62 59 b8 47 bf 6e e9 0b 11 01 55 df b7 40 53 b1 d0 a4 b4 08 41 0c d2 88 0a d4 84 20 11 46 10 8e c2 ab ad 56 51 21 51 de 8e 76 3e 56 52 71 49 50 28 8a d0 44 cd 08 04 e1 04 53 04 8a c0 a4 99 93 24 2d 4c 14 86 14 05 45 5b 5d 75 25 ca b9 4e ed 16 67 18 48 5d 99 69 a4 f9 59 da 15 d4 45 c2 2f 8d 4f 5b e8 c7 90 5d 1a 0d 1e cb 9d 4f 95 ac 75 0b af 46 98 31 1e 6b ce eb 1a a8 b0 44 6b 6f 54 70 78 6c a3 33 cc 91 69 e6 44 da 77 49 49 c2 5d 96 e4 6b fd 16 cc 3b dc e3 0d 66 96 be a4 f4 59 92 b5 56 92 d8 00 90 09 d2 f7 f4 5d 1c 15 20 23 35 d7 3c b4 38 83 55 90 01 b6 68 8f 71 a1 5b 0e 3e 9b 59 39 9b 1a 4c ab 30 c0 c4 31 bd e7 83 4b Data Ascii: 4Lv4k@-:~kxPr*E!2bYGnU@SA FVQ!Qv>VRqIP(DS$-LE[]u%NgH]iYE/O[]OuF1kDkoTpxl3iDwII]k;fYV] #5<8Uhq[>Y9L01K
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: b7 e1 ea 6f e7 a6 bb aa 1d 57 33 e0 09 6c c0 20 fd 47 f4 95 38 a6 2f bb 0d 39 a2 4d cb 6f 61 b8 e7 f7 aa 3b f1 ab 8e a7 ff 00 5f de 80 fc da 3a d1 a8 31 a8 3a 8d 4a d1 5a 93 8b 72 07 96 12 23 38 89 11 c8 c8 3f 73 a2 5e 15 8c a6 ea 6d 2c 32 5c 27 51 e1 eb f7 7b a5 e2 4f 71 b5 10 d2 74 00 93 ae e9 f2 39 fb 5f 20 ed c6 1c d3 e2 15 98 e7 9a 84 77 72 f3 62 66 8b 0e 9e b1 e8 b8 6d 6a ee 76 c8 3f f6 ea dd e0 87 7e ee 40 ff 00 d4 c5 c6 88 5e 89 e3 85 f4 a4 de 36 50 95 5d 5f 9a 66 09 48 17 35 4a 74 a7 92 74 cd 10 a4 57 08 f2 46 53 e5 b2 8e 6a 42 b7 b4 1e 49 05 28 e7 09 6a 66 06 45 c6 ca fa 64 10 a2 76 82 02 30 99 a1 02 14 0c 05 93 06 a2 c0 06 a9 8d 40 ac 0f 2c 11 25 06 95 21 48 ed 2a d0 15 34 da af 52 40 14 52 51 51 00 14 45 02 54 51 10 82 28 48 4a 2d 55 38 5d 58 Data Ascii: oW3l G8/9Moa;_:1:JZr#8?s^m,2\'Q{Oqt9_ wrbfmjv?~@^6P]_fH5JttWFSjBI(jfEdv0@,%!H*4R@RQQETQ(HJ-U8]X
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 53 fd 55 5a 8e c5 11 0d 0d d6 37 d0 f9 ad 5c 39 b9 1b 94 48 12 60 4c c4 de 17 21 b5 cf 78 08 36 d1 c3 cc 58 8f 5d 56 f7 e2 01 11 30 75 10 6f 3f 7c 96 2b a6 6b bf 45 a2 26 79 42 b8 11 11 b7 cd 72 cd 67 1a 63 2b 9a 1d 13 a4 89 d8 84 9f b6 bd 94 f3 3f 20 33 04 e6 86 8d 88 27 d1 65 9d 69 76 11 ae 78 71 fc 31 1e fc fe 6b 6d 5a a7 29 8d 57 37 87 63 b3 34 87 34 08 32 0c 9f 10 8d 20 85 d1 c2 4d 47 16 81 7f c2 05 e5 36 dc c1 d6 ea 8e 07 8f ab 4b 15 dd 57 00 35 cd 96 96 89 04 1d 24 93 e9 e8 ba d8 8a ef 63 73 53 00 96 dc 30 90 33 f2 2d 9e 56 95 97 14 ca 74 03 5d 59 e0 91 39 1a d0 5c 63 43 e2 d2 25 b1 62 6e 3a 23 84 c5 b2 b0 71 69 9c a2 4b 7f 13 40 3f 11 1f e5 ea 26 39 c2 ef f4 e7 f5 fb 7d 7a 73 b6 7d b2 d7 ce 7b 4f 8b ef 71 2f 7e 52 d2 43 24 1d 41 14 da 0f d1 70 49 Data Ascii: SUZ7\9H`L!x6X]V0uo?\|+kE&yBrgc+? 3'eivxq1kmZ)W7c442 MG6KW5$csS03-Vt]Y9\cC%bn:#qiK@?&9}zs}{Oq/~RC$ApI
2024-01-10 21:51:59 UTC	111	IN	Data Raw: 1a 2e 4d 6e 1c ca 15 cb 19 36 75 47 02 60 65 39 8d 33 94 34 06 82 5a 00 24 09 d6 f0 4c c5 17 d3 f9 2d 9f 0d c3 f2 c9 2f 19 1e 37 b4 e7 ff 00 d7 53 f9 3f e3 6a e4 3d 45 17 9f 8f f8 c7 97 f2 4a ec 19 41 e6 95 a6 ca 28 b4 3f 2d 2d 16 48 f6 e9 e6 a2 8a aa 7a 60 9d 9a a8 a2 15 17 a0 f5 14 50 30 d1 46 14 14 51 3f 34 2a 15 14 48 7f ff d9 Data Ascii: .Mn6uG`e934Z$L-/7S?j=EJA(?--Hz`P0FQ?4*H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49812	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	456	OUT	GET /vi/DLrpcxxGahI/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6281 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "1626433108" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0e 0a 0a 0a 0d 0a 08 0a 08 0d 0a 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 0a 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0d 09 08 0f 12 0d 0d 0d 12 12 12 12 12 12 12 12 15 12 12 12 12 15 12 12 15 12 15 12 12 12 12 12 15 15 12 12 12 12 12 12 15 15 15 15 12 15 15 12 12 15 1e 15 12 15 15 15 15 15 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 01 02 03 04 06 00 07 08 ff c4 00 3f 10 00 01 03 02 04 03 06 05 00 07 07 05 01 00 00 00 01 00 02 03 04 11 05 12 21 31 06 41 51 13 22 32 61 71 81 07 91 a1 b1 c1 14 23 42 52 72 82 d1 Data Ascii: JFIF@"?!1AQ"2aq#BRr
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: c5 03 68 18 35 10 c3 ea 8b 46 e4 0d fd fa fd 11 d8 38 6c 9b 9b 58 00 08 bf 9e c3 d5 53 c5 f0 a2 0e 83 4d 32 db f7 7f 27 fa ac 3a 5b c2 f1 e2 db 09 05 da 76 7b 46 a3 c8 8e 6b 4b 0c a1 c0 38 1b 83 b1 0b 18 cc 29 f9 46 87 4d 79 ed 6d ac ad 61 35 8e 8a 4b 1b e4 76 e0 fe c9 ea 13 63 49 71 6b 13 49 4e bd c5 d3 55 08 63 94 52 a9 9c a3 91 00 50 98 28 0a b3 32 85 ea d1 cd 97 b4 4e 09 8e 52 39 34 85 8b b3 0a 8e 45 29 51 c8 16 6d a1 29 ae 09 e9 a4 2c 3b 6e 58 d5 6d 83 45 5c 05 69 83 45 37 43 15 c6 9b 14 bc 14 dd 13 b8 c9 b7 07 fe 72 4f e0 c1 a0 f6 42 ce cf 3d 36 b1 8d 13 b2 ae 60 d1 3a c9 c8 61 6a 8c a9 1c a3 42 b4 25 92 d9 2d 93 83 50 d3 18 42 52 14 96 4d b2 20 65 92 27 90 91 0d 0e cd b2 63 94 a5 32 40 b3 29 56 c8 1a d7 38 9b 00 2e b0 18 a5 53 9e f0 e3 b5 c8 6b 4f Data Ascii: h5F8lXSM2':[v{FkK8)FMyma5KvcIqkINUcRP(2NR94E)Qm),;nXmE\iE7CrOB=6`:ajB%-PBRM e'c2@)V8.SkO
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 4d 7b f9 6d 99 e4 81 f4 2b 71 de c9 f2 3b 85 7b 94 2e 72 57 b9 57 92 45 d2 e0 36 57 28 8b 94 33 cd 64 32 ae be dc d5 25 d2 39 63 6d 15 74 a1 44 66 0b 3b 36 26 7a aa e2 b8 f5 28 79 c6 9c 55 aa cc 9a 50 5a 4c 45 15 8a 5b 84 d3 29 49 96 1a 39 ea 25 2b 94 45 14 de 89 22 9a 05 1c aa 5a 74 ae a6 6f 8b c7 75 c8 6f 07 6f ee 3e e8 b7 16 8e e9 41 f8 3b 7f 7f ca 19 29 1e 81 0e c1 38 a4 a7 f0 84 e2 11 4a a0 7a 40 9d 22 68 43 62 91 a9 1c 94 24 72 2c 45 cb 97 2c 26 a4 29 4a 42 b0 10 a8 a4 52 95 04 a5 6a d1 88 e3 46 d8 83 cf ed bf f5 41 70 a0 2e 49 f7 d7 e5 ee b4 5c 71 50 d2 e6 c7 fb 56 b9 3b f7 8d ec 3d 2d 95 66 69 1a e1 66 ec 2f aa e7 be dd 32 74 d8 47 10 0d 1f 35 4e a6 70 1d 9a dd eb 5a fd 3d 15 e8 8d e3 6f a2 a1 55 46 4a 9a 9a 06 ac c4 5e f7 65 04 8d 6c 03 7c 47 d3 Data Ascii: M{m+q;{.rWWE6W(3d2%9cmtDf;6&z(yUPZLE[)I9%+E"Ztouoo>A;)8Jz@"hCb$r,E,&)JBRjFAp.I\qPV;=-fif/2tG5NpZ=oUFJ^el\|G
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 8e 8b 9f 3b ba e9 e3 ff 00 cc 69 70 c2 04 99 00 b0 b5 9b ec 92 b7 42 80 d3 71 13 73 c6 72 b8 77 9b 7d ac 01 20 1d 7d 16 8f 16 6f 78 f4 4a a6 e2 ac 72 ab 71 48 a9 34 29 18 52 8c 58 7c 77 59 aa f0 f2 e0 3b c2 c7 71 7d 56 a2 27 29 cc ac 1e 2b 1f 2d 2e b3 7b 68 be 11 51 39 b2 35 f2 12 d8 dc 34 bf 3d 45 8a f5 cc 17 86 a2 8e 59 25 69 91 ce 91 c5 cf 2f 79 75 c9 b5 f7 f4 5e 61 43 c4 71 16 c4 cc af 66 5b 58 dd b9 5c 07 2f 25 e8 3c 3d c5 f1 10 1a ee ee c0 3b 30 3f 31 c9 6f 17 66 18 d9 3a 69 ff 00 46 ca ec c3 dc 29 9c 57 32 a1 ae 00 82 08 3b 11 a8 29 1c 12 64 12 aa d5 4b 66 b8 f2 0d 71 f9 02 57 ce 1c 45 c4 92 d5 cc 26 94 80 d0 32 c3 13 6f 92 18 c9 be 56 df 77 1d 2e ee 76 1d 02 f7 be 3b aa ec a8 6a a4 e6 21 90 37 f8 9e de cd bf f9 38 2f 98 af 65 5e 09 fa 87 c9 cb a9 Data Ascii: ;ipBqsrw} }oxJrqH4)RX\|wY;q}V')+-.{hQ954=EY%i/yu^aCqf[X\/%<=;0?1of:iF)W2;)dKfqWE&2oVw.v;j!78/e^
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 59 78 e5 6f 30 0b 87 5b 0b 03 6f 9a 2d 87 43 dc 17 e8 3e a2 e0 ae 8c 7a 70 d5 50 d4 eb 22 86 90 59 5b c1 f8 62 59 dd 66 37 bb ce 47 68 c1 ef cf d9 3f d9 29 34 00 42 45 e9 94 9c 07 03 3f c6 9c 39 ff 00 ba db da fe 81 14 a5 e1 ca 61 a3 58 d7 7a b0 7e 52 e5 cb 22 98 f1 5c 9e 45 19 57 a3 ab d1 7a fb b8 36 99 e2 c6 16 6b cd a3 29 f6 2d 59 ce 25 f8 56 ec ae 7d 33 cb 88 b9 ec 24 22 e4 74 63 fa fa fc d4 fe ec 72 f6 a6 5f 1f 28 f3 0c 42 a6 ea 8c 4c b9 53 56 40 e6 b9 cc 73 5c d7 b5 c5 ae 63 85 9c d7 0d 08 21 3a 06 e8 ad 8f f8 73 d4 ec 29 93 39 28 51 c8 55 03 49 f1 0a 72 d2 42 4c 2d da a3 b8 fc 21 c0 91 ba 01 87 33 2b b5 53 61 0a e9 b2 d9 dd 35 46 30 ce 24 8c b7 53 de e8 81 62 c3 ba 7d 16 7a 87 c6 b5 ba 18 df b6 ab 31 bf 54 42 07 20 58 61 d0 22 d1 39 34 a4 ab a1 c9 Data Ascii: Yxo0[o-C>zpP"Y[bYf7Gh?)4BE?9aXz~R"\EWz6k)-Y%V}3$"tcr_(BLSV@s\c!:s)9(QUIrBL-!3+Sa5F0$Sb}z1TB Xa"94
2024-01-10 21:51:59 UTC	667	IN	Data Raw: b1 5e 10 f7 2f 5f f8 c7 82 d4 be 7a 58 d8 c8 64 75 45 4b a9 29 63 8a b2 8a 47 cb 56 d3 18 31 64 64 e4 b0 0e da 1b c8 f0 18 3b 56 5d c3 30 be 1c fc 3b c4 35 22 90 96 36 37 cc f9 85 5d 01 a6 64 31 4a f8 25 91 f5 62 a3 b1 6b 58 f8 e4 cd 77 dd ad 63 9e 40 68 2e 5d bc 53 51 c3 cf 77 93 28 90 95 b0 1f 0c 71 2f d5 7f 75 8c 09 5e d8 e0 2f c4 b0 98 c4 ae 7f e9 5d 99 61 7d 60 bb 1e 28 ea 4b 1f e1 78 8a ed 2e 05 a4 82 e2 0e 1d a8 a7 6c 0e 9e 36 46 d9 e3 ed 69 cb 2a 69 2a 3b 48 4b 63 7b 65 b5 34 cf 2c 8d cd 95 85 ae 75 83 81 39 6f 63 6a ed 17 a1 61 3e 14 33 88 60 1b db 55 cb 91 fc 4f f5 93 ac 80 5f 9f cd 36 8e 01 71 be e1 2a e4 9f aa 47 a3 f0 d4 03 28 d3 92 9f 1b a5 69 07 45 cb 93 fe 25 fa f3 bc 52 10 1d a6 8a 7c 36 53 6d d2 ae 52 8e 8c ab 6f 4a ec b4 0c 23 42 f7 c8 Data Ascii: ^/_zXduEK)cGV1dd;V]0;5"67]d1J%bkXwc@h.]SQw(q/u^/]a}`(Kx.l6Fii;HKc{e4,u9ocja>3`UO_6q*G(iE%R\|6SmRoJ#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49816	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	456	OUT	GET /vi/uZFbRMRtJj0/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5874 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 10 12 15 10 10 12 16 15 10 10 15 10 0f 0f 10 10 15 15 15 10 0f 10 17 15 19 18 16 15 16 15 1a 1f 2b 25 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 10 0f 1d 35 1d 17 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 ff c4 00 46 10 00 01 03 02 03 05 05 03 09 03 0a 07 00 00 00 00 01 00 02 11 03 21 04 12 31 05 06 41 51 61 13 22 71 81 91 32 a1 b3 07 14 23 42 52 83 b1 c1 f0 25 Data Ascii: JFIF+%(%5%(-/222"8=70<+12/5//////////////////////////////////////////////////@"F!1AQa"q2#BR%
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: a8 e3 a3 da f7 2a 4c 32 8f 53 0f a1 71 80 7d 56 62 05 8d c4 e6 36 d1 54 01 16 a8 13 dd d3 aa 76 53 5a 50 8b 13 16 ab 42 8a 46 8a 2e 95 21 2c aa c0 a7 09 88 4d ae 97 76 43 cd da 7c 56 95 6d 16 4e 02 a4 3c 0e 76 5a d5 45 91 15 ca 70 a2 4a 70 b2 a7 5a bb b1 50 b7 17 49 cd d4 76 9f 0d cb 25 6a 6e bb 81 c5 d3 1c 7e 93 e1 b9 2f 16 75 e8 a3 1d 53 ed 7b 82 71 8b a9 f6 8f b9 41 b4 d1 05 35 c9 df 50 fd bb fe d1 f5 4e 2a 3b ed 3b d4 a4 1a 94 28 16 67 7d a3 ea 53 19 e6 7d 54 b2 95 26 b3 9a a0 50 a3 95 12 ad 2b b6 2d a9 3d 7f 52 97 64 7a 20 11 6a 62 14 df 22 e7 41 72 a3 2a 28 64 28 c2 9b 94 50 70 7b c9 fb d5 4f bb f8 6d 59 6b 4f 79 3f 7a a9 f7 7f 0d ab 2d 75 9c 79 ef 48 a0 b5 10 94 26 aa 89 b9 59 69 b0 55 9c ad 34 d8 78 24 4a 98 29 1f 14 82 53 d5 69 11 9e be e4 bc d3 Data Ascii: L2Sq}Vb6TvSZPBF.!,MvC\|VmN<vZEpJpZPIv%jn~/uS{qA5PN;;(g}S}T&P+-=Rdz jb"Ar*(d(Pp{OmYkOy?z-uyH&YiU4x$J)Si
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 79 a2 57 5f bc bb cd 89 ac c6 61 83 7b 3c d7 aa 5a 41 75 41 6c a7 9b 44 1f 35 ca bf 65 56 69 0e b8 e2 1d a4 75 95 d7 6d dd 9f 56 9d 79 2c 8a 2e 6b 72 ba 98 3d 90 a8 5a 33 90 df ab 25 bf 82 a7 89 ae 05 3c b2 24 0b 45 c7 bd 67 cf 5e 9d be 3f 8e 65 37 5d 1e e5 ed 3a b5 b0 95 a9 d7 7e 77 d0 2c 0c 71 f6 bb 33 a0 71 e3 76 ba eb 44 55 00 49 36 1c 78 2e 73 71 cf 77 14 00 b9 65 32 f7 69 07 31 ca 00 eb 73 3d 3a ad 1c 75 58 a4 f6 c1 24 b1 f1 1e 05 4b 77 ed 75 ab a4 aa 61 9e 5e 1a 5b 71 26 da 39 84 cc 8f 72 b4 ed 96 4d db 99 84 dc c4 16 93 fd d2 b1 77 3f 79 86 32 93 70 ef 63 86 23 0c 1a 1b 5d b0 58 59 a4 3b 8c db 45 d4 61 71 cc a9 00 59 ce 19 a0 91 0d e7 25 32 c7 49 32 50 66 c8 b8 2f 25 d1 a0 20 06 8f 20 a7 4b 0f 95 e7 bb 02 66 79 9b 4f e0 8b 8b da 3d 99 2d 2c 71 8e Data Ascii: yW_a{<ZAuAlD5eViumVy,.kr=Z3%<$Eg^?e7]:~w,q3qvDUI6x.sqwe2i1s=:uX$Kwua^[q&9rMw?y2pc#]XY;EaqY%2I2Pf/% KfyO=-,q
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 9e 00 7a ac e6 45 67 b2 9b ea 02 c3 ab 5c 7b ac a5 ab bd 7a 71 2b 31 ab ab 36 b7 bd 1b f6 da ed 14 18 e7 0a 45 fd a5 57 0d 6a 7d 96 c7 d9 10 3c 4a bb b3 b7 82 8b dc d7 0a ac 70 0c 82 dc 81 85 a6 22 08 37 20 00 17 9f ed 4d 9f d9 d5 73 1a e6 b9 80 9c af 0e 04 16 f0 d3 8a 15 32 1b d5 76 98 cd 3c f7 26 e6 25 99 5c 4b 59 0c 7b 9c e6 49 b6 42 64 45 f9 42 7c 00 07 11 40 ff 00 68 cf c5 66 e1 b6 a3 e9 99 06 5b a1 6c da 38 c2 ed b6 75 31 55 8c ac ca 40 66 01 ed ca e9 8f 32 35 59 be ba b1 b7 84 60 05 d0 22 c2 7a dc 25 54 c3 db e6 a5 83 0e 39 89 6b a2 1a 3b a0 18 74 89 1e e4 5a 9b 3e a3 9c d7 36 9b c8 13 3e c8 5c 74 f4 4a 2e 18 92 f0 19 ed 70 b8 1e f3 a2 d2 3b 3b 15 62 5a 6d 36 ed 1b fc 56 6d 4a 0e a6 33 1a 6f 6d c0 97 16 c4 eb 16 f0 5b bb 37 6a 5a 1c 7b a2 d7 d5 ab Data Ascii: zEg\{zq+16EWj}<Jp"7 Ms2v<&%\KY{IBdEB\|@hf[l8u1U@f25Y`"z%T9k;tZ>6>\tJ.p;;bZm6VmJ3om[7jZ{
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: c5 e0 83 05 5d 14 19 56 ad 17 3c 4b 68 97 bd c3 81 36 80 7c e3 dc 38 af 2f 9d b9 7b e3 d7 e1 26 3b 8e c2 9b 48 a7 4d ef 10 e2 19 9d bc 03 cc 4c 7b d6 c3 5a 1c 1a d9 12 60 88 e2 de 52 b1 eb 55 6f 67 00 c6 87 37 e7 e2 b5 36 53 c3 c6 6e 22 24 f3 5d 36 e6 d4 c3 34 80 07 2b 23 62 30 d9 db 75 1a 40 1d 23 aa 35 11 02 2f 0b 48 f1 6d f0 a3 93 1d 59 bc 8d 3f 7d 36 9f cd 62 42 e8 b7 f2 db 4b 10 3f c0 f8 34 d7 3b 2b 35 8d 8a dd 13 24 dd 13 22 92 09 d5 19 04 ea a0 2b 74 49 26 0b 27 84 08 2b 14 aa c7 82 ae 02 9b 4a b1 2a f8 32 9d 55 6b e1 1d 95 27 c5 69 94 d2 49 24 1c 7a 49 24 aa 19 24 e9 91 4d 2b 47 05 b4 23 ba e5 9c 99 41 d4 7c e0 11 65 54 9b aa 58 1c 4c d8 ab 8e 51 42 a8 55 77 39 15 e3 99 43 7c 79 28 a6 99 48 d3 43 0e 4e ea 88 a7 77 01 c5 75 1b 97 40 8c 65 10 1d 95 Data Ascii: ]V<Kh6\|8/{&;HML{Z`RUog76Sn"$]64+#b0u@#5/HmY?}6bBK?4;+5$"+tI&'+J*2Uk'iI$zI$$M+G#A\|eTXLQBUw9C\|y(HCNwu@e
2024-01-10 21:51:59 UTC	251	IN	Data Raw: f8 59 cd ad 2e 20 ea 09 f4 56 2a 09 54 de c8 32 14 16 8a 93 4a 13 1f 21 4c 20 98 2a 41 0e 54 da 50 4f 0d aa ab b5 a8 88 98 ba 49 2a 8c 32 92 49 2a 86 49 24 90 45 32 49 22 9d 3a 49 20 74 92 49 10 96 d6 e7 7e fd 47 ef 7e 13 d2 49 4b c6 b1 ec 7a a8 55 f1 0f 33 1c 12 49 71 7a c0 0f 39 95 c6 24 92 02 1d 02 bb b2 6b 9a b5 86 1a a4 3a 96 47 16 66 03 3d 28 1f 51 da 81 7d 12 49 5c 7a 97 8b d8 82 ea 74 83 9a e7 5b b8 e6 ba 1c ca 8d bd 9c d3 63 c9 57 da 18 0a 6f 65 6a 4e 60 c8 ca 4c a8 c1 c5 85 cc 2e 80 79 03 a7 24 92 57 e9 87 1b b1 aa 17 02 09 d0 db 9a d5 75 30 12 49 73 74 81 b9 b0 94 24 92 8a e2 77 87 f7 9a 9f 77 fe 46 ac d4 92 5d a7 1e 5c ba b2 c1 dd 08 c1 24 96 d9 24 c5 3a 48 86 09 ca 49 20 1b 82 ad 54 27 49 14 26 18 47 09 24 a0 74 ed 29 24 83 ff d9 Data Ascii: Y. VT2J!L ATPOI2II$E2I":I tI~G~IKzU3Iqz9$k:Gf=(Q}I\zt[cWoejN`L.y$Wu0Ist$wwF]\$$:HI T'I&G$t)$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49814	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	456	OUT	GET /vi/vwopEAGNrWI/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3920 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 0f 0f 0f 0d 0d 0d 0e 0e 0f 0f 0d 0d 0f 0e 0d 0d 0f 0e 11 0d 0e 10 10 17 15 19 18 16 15 17 15 1a 1f 2b 25 1a 1d 28 1d 15 16 25 35 25 34 2d 2f 32 32 32 19 22 38 3d 37 31 3d 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 0f 0f 1d 2f 1d 1d 1d 2f 2f 2f 2f 3b 2f 2f 2f 2f 2f 30 2f 2f 2f 2f 2f 2f 2f 2f 3b 2f 3b 30 2f 30 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 3b 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 03 07 ff c4 00 45 10 00 02 01 02 03 03 07 08 05 0b 03 05 00 00 00 00 00 01 02 03 11 04 12 21 05 31 41 06 13 22 51 61 71 b3 23 32 34 81 83 91 b1 b2 14 72 73 a1 f0 07 Data Ascii: JFIF+%(%5%4-/222"8=71=+12//////;/////0////////;/;0/0///////////;/////////////@"E!1A"Qaq#24rs
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 47 6f 0f be 26 5a 72 14 e4 7a a6 63 41 9e b9 8f a7 cb ca f4 b9 0e 45 33 10 e4 54 5b 30 73 3c 9c 8a b9 0a 39 7d b0 ef 8b ad fd 1f 24 4c 63 27 6a fa 4d 67 f5 3e 44 62 9e 0b ee bf 97 a2 6a 00 80 64 49 17 22 e0 a1 72 00 00 00 00 00 00 00 03 a6 00 1c 1b 00 00 48 00 08 00 04 00 01 40 00 12 6e 79 23 fb 43 0d ed 7c 29 9a 63 73 c9 0f da 18 6f 6b e1 4c 51 f4 e8 9e 88 a2 2e 8c 34 b1 64 54 90 0c e4 7f 28 0f c9 e1 7e d6 a7 ca 8e b8 e4 3f 28 4f c9 61 7e d6 a7 ca 8e de 1f 7c 67 2d 38 c8 33 d3 31 8f 19 17 cc 7d 1e 5e 7e 1e b9 8a b9 1e 6e 64 39 0e 53 85 a5 33 cd cc ac a4 52 e4 e4 e1 a1 da 4f f3 8a bf d1 f2 a3 1c f7 da 3f af a9 fd 3f 2a 31 cf 1d dd 76 f8 19 52 48 00 00 02 00 20 09 00 00 04 12 00 00 07 4e 00 38 36 00 00 90 00 10 2e 19 50 26 e4 00 00 9b 90 00 b1 ba e4 7f ed Data Ascii: Go&ZrzcAE3T[0s<9}$Lc'jMg>DbjdI"rH@ny#C\|)csokLQ.4dT(~?(Oa~\|g-831}^~nd9S3RO??*1vRH N86.P&
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: b4 ac 3c 45 5b c3 2c 53 7a 2b b5 aa de cd 5d 38 ef 96 eb b7 a7 56 a6 c6 aa a3 7d 6f 17 aa 77 8b 4a fd e5 31 db 23 13 87 59 ab 61 ab d3 a7 a3 8d 49 53 97 36 e2 f7 35 3b 59 af 59 db c3 39 c9 8b 7a 61 49 9e 53 65 9b ea 3c a4 cf 6c 72 41 29 95 b8 46 97 84 c9 ea 41 2c 83 cd 76 d4 40 00 80 41 24 00 20 92 00 90 40 02 40 00 48 20 01 d5 00 0e 0d 84 06 ca dc 0b 0b 95 b9 05 16 6c 86 40 00 41 24 00 22 e4 95 60 2e 6d f9 1f 4e 2b 69 61 67 c5 73 de 14 cd 39 ba e4 9f a7 e1 fd af 87 22 5d 11 f4 99 ce ec f3 73 2e b7 18 d2 7a 9c 5b 5f 30 8b d4 a2 64 c6 49 5e 4f 74 53 93 ee 46 a2 38 fe 50 57 e7 31 35 ae b4 84 e5 4a f7 ea 4a 36 ec dc fd ec d0 d4 9f 49 e9 7f 81 93 3a ce b4 a7 17 27 9e 72 cd 2b 25 67 29 3b b5 f7 99 18 8c 2c 79 b4 92 57 5b 9a d3 5b 5b e3 62 51 a9 9d 15 25 7b 38 Data Ascii: <E[,Sz+]8V}owJ1#YaIS65;YY9zaISe<lrA)FA,v@A$ @@H l@A$"`.mN+iags9"]s.z[_0dI^OtSF8PW15JJ6I:'r+%g);,yW[[[bQ%{8
2024-01-10 21:51:59 UTC	801	IN	Data Raw: 9a 59 5d 68 3e 8d 95 dc 3a ef 2e eb e9 a9 e9 5f 68 4e 5d 0a 31 70 4f 4d 3a 55 27 d8 df f6 5f 79 95 82 d9 f1 8f 4a aa 52 97 08 3b 4a 2b fe 59 71 97 2b c4 63 2c a4 9c d6 8f 0d b0 27 8b 51 53 6e 95 16 ef 2a 99 73 49 a5 fc 31 7b fb f7 7c 0e 97 07 80 a3 86 8b 8e 16 92 86 64 a3 3a 8e d2 ad 35 fc d3 b7 5f 05 65 d8 6d b6 7e 0e 15 73 67 9c b3 25 7e 6e 16 53 92 eb 4d e8 c5 5d af 38 4e d4 61 1a 30 83 fd 5e 55 76 ff 00 9f b4 f4 cf 1e 32 f7 db cf 96 76 fd a3 06 8e 0e 9b 4e a6 45 29 27 e6 ab 5f bd 85 55 e8 f4 59 7c dc bd 07 1e e6 b7 19 df 46 8e 27 35 4c 3f 42 aa b3 9d 16 ec b5 e3 19 7e 3d 46 2c a7 92 56 a9 04 e7 1d ef 35 9d fb 6d a3 3c 5e 5f 0e 7e bb 9e 53 ea 4b ae f8 b8 fe 3e 3f ce ff 00 2b 32 9c 49 2f a7 fe ad 29 53 bc 65 5e 12 9d f5 52 b6 49 5f aa 4d 69 2e fd e7 96 Data Ascii: Y]h>:._hN]1pOM:U'_yJR;J+Yq+c,'QSn*sI1{\|d:5_em~sg%~nSM]8Na0^Uv2vNE)'_UY\|F'5L?B~=F,V5m<^_~SK>?+2I/)Se^RI_Mi.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49817	35.84.115.54	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	789	OUT	GET /goto/?utm_source=wrtzr&utm_medium=video_downloader&utm_campaign=test2&clickID=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subID1=347207 HTTP/1.1 Host: t-y-p.site Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	640	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:51:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP; expires=Wed, 10-Jan-2024 22:51:59 GMT; Max-Age=3600; path=/ Set-Cookie: subid_1=347207; expires=Wed, 10-Jan-2024 22:51:59 GMT; Max-Age=3600; path=/ Set-Cookie: subid_2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: subid_3=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: subid_4=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
2024-01-10 21:51:59 UTC	750	IN	Data Raw: 32 65 32 0d 0a 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 72 63 6b 2e 74 2d 79 2d 70 2e 73 69 74 65 2f 70 69 78 65 6c 2f 76 3f 70 72 6f 64 75 63 74 3d 76 69 64 65 6f 5f 64 6f 77 6e 6c 6f 61 64 65 72 26 63 6c 69 63 6b 5f 69 64 3d 41 48 34 52 6e 32 56 48 54 41 55 41 57 6c 34 43 41 46 56 54 46 77 41 53 41 41 41 41 41 41 41 50 26 73 75 62 69 64 5f 31 3d 33 34 37 32 30 37 22 20 69 64 3d 22 74 72 61 63 6b 5f 69 6d 67 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 09 09 09 3c 73 63 72 69 70 74 3e 0a 09 09 09 09 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 74 72 61 63 6b 5f 69 6d 67 27 29 2e 6f 6e 6c 6f 61 64 20 3d 20 Data Ascii: 2e2<html><head><img src="https://trck.t-y-p.site/pixel/v?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207" id="track_img" style="visibility:hidden"><script>document.getElementById('track_img').onload =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49819	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	692	OUT	GET /vi/DEzbbbVsNi4/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 9070 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 12 12 15 13 13 12 17 16 15 16 18 18 17 17 17 17 18 17 18 1a 15 1d 17 15 19 19 17 15 16 17 1a 1f 2b 23 1a 1d 29 1f 16 18 25 35 26 29 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 30 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 32 26 23 29 2f 2f 2f 30 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 31 32 2f 2f 2f 32 2f 2f 2f 32 2f 2f 2f 2f 36 2f 2f 3b 2f 2f 2f 2f 30 2f 35 3b 2f 32 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 05 06 07 08 02 03 04 01 ff c4 00 48 10 00 02 01 03 02 03 04 06 06 07 05 07 04 03 00 00 01 02 03 00 04 11 12 21 05 06 31 13 22 41 51 35 61 71 74 81 b3 07 23 32 91 a1 b1 14 42 62 72 Data Ascii: JFIF+#)%5&)-/222"8=70<+1202&#)///0///////5////////12///2///2////6//;////0/5;/2//@"H!1"AQ5aqt#2Bbr
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 0a 94 52 44 8f 17 1c 92 58 51 c4 af 9c 60 e1 db a8 f8 d7 0c fc 5a 60 3f db cb ff 00 51 ff 00 ad 33 f8 6f 13 68 1b 4e 7b ad 8f 65 2e 3d c8 75 c8 aa ed e4 b6 ee 0e f7 e3 d3 e0 1e da 4f 2f b6 ff 00 d6 b1 ff 00 f3 33 1e 93 cb ff 00 51 ff 00 ad 21 b4 bb 56 11 4e 41 a9 a2 b6 3d 38 57 18 94 ec d2 b9 f6 bb 1f e7 4b d0 71 07 3f ae df f3 1a 60 da dc e1 81 1f eb 34 e7 b0 94 90 0d 51 9a 45 d8 8f cf af 73 0b 2d d4 37 13 a8 3d c9 14 4b 26 95 3f aa fa 73 81 9e 9e d0 3c 4d 32 a1 e6 5b b5 39 37 77 07 db 34 a7 f0 2d 52 d7 10 b4 13 db c9 1b 7e b2 30 fc 36 3f 03 83 50 a9 8f 38 3e aa bc 5d 95 9a e4 74 f0 ae 75 ba 46 00 cd 23 ab 1d c3 48 e7 d5 b1 27 22 b6 71 4b 8b f8 9d 9d a6 b8 11 b3 12 ac 25 90 ae 18 e4 0c 86 db af 4d a9 ad 0f 51 ed a7 d7 2a 5f 48 ce e8 f9 68 f4 ec 0e e3 39 Data Ascii: RDXQ`Z`?Q3ohN{e.=uO/3Q!VNA=8WKq?`4QEs-7=K&?s<M2[97w4-R~06?P8>]tuF#H'"qK%MQ*_Hh9
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 8d 31 64 72 b5 2e d0 d6 e9 61 89 47 26 27 71 90 9d ce 5e 8d be f7 4b 8f 90 f5 53 6a d9 73 97 a3 6f bd d2 e3 e4 3d 54 da d8 f3 82 8a 28 a0 0a 28 a2 80 28 a2 8a 00 a2 8a 28 02 ad 97 26 7a 36 c7 dd 2d fe 42 55 4d ab 65 c9 9e 8d b1 f7 4b 7f 90 94 02 d5 73 cf 61 1b 9c b2 02 7c c6 41 f6 6a 1b d7 27 1c e6 08 6c 95 1e 72 40 77 08 30 33 8d 89 2c 47 90 03 7a 61 71 0f a4 9b ae d5 d5 12 38 d5 58 80 19 4b b6 c7 62 5b 50 1b 8c 1d 87 8f 53 d6 b1 cb 2c 75 53 57 ed d9 db a6 d2 66 cd ce 3e 3d fa 24 3f ff 00 11 06 08 31 83 9f 13 92 7e 0c 4e 45 67 69 c3 62 8b 25 13 04 f5 39 24 fb 32 4f 4a 64 f0 bf a4 77 db f4 98 94 a1 38 d7 16 41 1e b2 84 9d 5f 03 f0 34 fc b7 b8 59 11 5d 18 32 b0 05 58 6e 08 3d 08 aa 63 86 06 ee 11 56 bd 97 03 53 83 51 83 8c 97 4f de d3 36 51 45 15 d2 71 0d Data Ascii: 1dr.aG&'q^KSjso=T((((&z6-BUMeKsa\|Aj'lr@w03,Gzaq8XKb[PS,uSWf>=$?1~NEgib%9$2OJdw8A_4Y]2Xn=cVSQO6QEq
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 15 67 b4 51 5e 50 80 a5 ae 5b 4c b3 7c 29 18 52 ff 00 2c 0f b6 7d 95 9e 5f d0 cd b0 2b c8 87 5d 9a 77 85 29 f1 2c 2e 23 7c f6 52 a6 8c 8f d4 6c e7 57 e2 31 ec ae 0e 1c 72 e2 94 78 b4 cc 93 43 95 06 26 52 af 91 90 30 41 1e cf 1f ba bc d8 9e ac 9d 34 33 79 b7 83 cc f7 00 a2 ea d3 1a a1 39 51 92 19 b0 46 4f 4d 25 69 00 f0 5b 81 ff 00 09 be 18 3f 91 a7 2f 16 e3 a4 39 d2 43 0f 02 41 dc 0d 87 8d 70 a7 31 91 fa 80 fc 48 ae fc 72 7b 52 3c cc b0 4e 4d 88 ad c3 a6 1d 61 93 fe 46 fe 95 83 5b b8 ea 8c 3d aa 47 f2 a7 24 7c d8 07 58 4f c1 ff 00 a8 ae a8 b9 c2 2f 14 90 7c 14 ff 00 e5 5a 6e 7e 86 5b 17 a8 cd d5 5e e6 9f 6b cd 56 c7 ed 33 0f de 42 7f 2c d6 d5 e2 b6 0f d4 c4 7f 7a 3c 7f 89 69 f3 3d 87 cb f7 1a 5c b5 fe ff 00 65 ef 56 df f7 09 56 7a a1 de 0a b6 0d 73 6e 53 Data Ascii: gQ^P[L\|)R,}_+]w),.#\|RlW1rxC&R0A43y9QFOM%i[?/9CAp1Hr{R<NMaF[=G$\|XO/\|Zn~[^kV3B,z<i=\eVVzsnS
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: df 7b a5 c7 c8 7a a9 b5 6c b9 cb d1 b7 de e9 71 f2 1e aa 6d 00 51 45 14 01 45 14 50 05 14 51 40 14 51 45 00 55 b2 e4 cf 46 d8 fb a5 bf c8 4a a9 b5 6c b9 33 d1 b6 3e e9 6f f2 12 80 dd c6 64 ce 88 fc 1b 2c de b0 b8 c2 9f 69 61 f7 53 43 8f 5c 5e 25 cd ba c4 4f 61 33 a2 48 ca a0 98 4a b9 62 7a 1d 9d 7b 99 3b 0d 3e 04 d3 b7 8b ae 1e 36 f0 21 97 e3 b3 01 f7 06 fb a9 a7 c4 f9 8e 68 e7 b7 8e 1b 37 9a 39 0e 24 90 64 08 7b fa 58 36 01 00 81 de ef 11 91 d2 be 47 5e e7 2d 73 54 9d 2e 13 aa ea fc fb f2 7a 18 d7 fc 4b fc f2 35 b8 9f 01 86 d6 4c 4d 7f 12 b1 c4 80 3e ce c3 57 da 6d fc 70 77 f5 1a 92 79 5a ec f7 e2 ce 46 35 af ab 7c 36 3d 5b 83 f1 34 8b c4 38 65 b4 c6 47 31 86 67 40 8c c7 39 c0 59 14 69 fe e9 c4 ae 32 30 7b d4 a5 ca 56 d8 72 40 ee a4 61 07 c4 8c 0c f8 ec Data Ascii: {zlqmQEEPQ@QEUFJl3>od,iaSC\^%Oa3HJbz{;>6!h79$d{X6G^-sT.zK5LM>WmpwyZF5\|6=[48eG1g@9Yi20{Vr@a
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 7c 1a 02 d6 14 20 dd 34 b9 03 d5 4b 5c 3e e8 cb 17 64 3e d0 a4 0a ec e1 2a 4c ca 14 e0 ef f9 55 26 ad 1a 63 93 4c 58 4e 17 22 30 60 46 47 ae 97 12 dd 8a f5 00 f9 56 81 75 1a fd b6 04 e3 70 37 df c7 a5 6b 3c 6b 1f ec a3 f8 b7 f4 15 c9 b5 cf b3 b7 72 c7 c2 3a da c9 b1 92 45 6c b1 d2 8d a8 b0 2e 3e c8 1e 1e 64 fa e9 38 5b 4f 39 ef 31 c7 90 d8 52 e7 0c e0 ca 83 a6 fe 35 65 8a 2b b2 8f 34 9f 06 c1 03 48 41 3d 07 41 fc cd 76 c7 69 8a d8 ca 23 1e bf 01 e7 5c 82 49 01 ce a3 bf dd f0 a3 2a 85 6e 1b 0e 27 87 f8 91 ff 00 8c 54 8d 51 a7 09 bd 63 3c 20 a8 de 48 c7 4f db 15 25 d6 b8 8c b2 05 32 f9 8f 88 34 f2 08 e1 68 84 91 48 c6 31 2a 33 6a 70 8f 1c 8b a1 59 5c ec f9 0f 16 48 e8 7a 91 4f 4a 67 f1 1e 56 ba ba 92 61 71 7d d9 5a 31 60 22 89 10 3b a1 39 02 49 d8 1c 0d db Data Ascii: \| 4K\>d>LU&cLXN"0`FGVup7k<kr:El.>d8[O91R5e+4HA=Avi#\In'TQc< HO%24hH1*3jpY\HzOJgVaq}Z1`";9I
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: f2 6d f6 4e 38 84 24 78 17 b3 05 c8 1d 35 15 94 02 71 8d c0 1e c1 4b bc 0b 81 1b 70 5a 59 bb 69 99 8b 33 e8 11 a8 ca 46 81 51 01 38 1a 62 4e a4 9e bb f8 00 3c e6 d5 cd 8c e3 f6 3f f2 15 08 f1 4b 41 a0 e4 7b 3d b5 39 f3 2a e6 d2 61 fb 3f cc 54 60 2d b0 77 19 a8 ba 2a c8 f1 ad 0f 97 e1 5d 16 dc 31 99 80 0a 77 e9 9d bf d0 a7 f8 03 fb 83 ee ad 62 20 4e ac 53 78 71 f7 13 a3 e5 81 81 df fc 3f ce bb a0 e0 e8 9e 19 34 a0 ad 59 6a aa b9 32 e9 23 08 0e 36 00 57 6a ef 8d ab 9a 34 c9 db 73 4a 31 45 81 59 b3 44 6b 11 d6 d4 5c ff 00 af e7 59 05 ac c1 1e 3f 8f 4a 82 c6 99 6d 8b 74 3f 03 f9 82 2b 95 ed c8 ea 0f fa f2 61 fc e9 4b 1e a1 5e f4 dc 6e 3f d7 4a 10 25 0d ba 6f ed ff 00 5f 8d 7b 9f 35 f8 8e 94 a0 f6 ca 7a 0c 1f d9 db e3 8e 86 b9 9a c1 87 42 1b d4 72 a7 f9 d4 51 Data Ascii: mN8$x5qKpZYi3FQ8bN<?KA{=9a?T`-w]1wb NSxq?4Yj2#6Wj4sJ1EYDk\Y?Jmt?+aK^n?J%o_{5zBrQ
2024-01-10 21:51:59 UTC	943	IN	Data Raw: 2e 64 11 c2 86 47 3e 0b e1 eb 63 d1 47 ac d4 f4 ca 08 c1 19 07 a8 3e 35 8c 50 2a 0c 22 85 1e 4a 00 fc ab 9a 7a 7d d2 dd 67 b3 a7 f8 ab c3 85 63 51 b6 ba 77 fc 0d ee 4f e5 05 b1 42 ce 43 ce e3 0e e3 a2 8e bd 9a 67 c3 cc f8 91 ea 00 39 31 5e d1 5d 11 8a 8a a4 79 59 72 cb 2c 9c e6 ed b0 a2 8a 2a 4c cd 32 5a 46 c7 2d 1a b1 f3 2a 09 fb cd 6c 55 00 60 0c 01 e0 2b 2a 2a aa 29 3b 48 9b 62 77 1f 90 2d ac ac 7a 05 24 fc 37 a8 d0 f1 86 91 a3 58 82 86 63 de 07 a8 00 82 48 27 62 31 9f 5d 49 bc 70 66 da 50 7a 15 fe 62 a3 db 1e 13 14 27 28 09 6c 63 53 12 4e 3d 5e 02 b3 c8 a4 da a3 ab 04 f0 c2 32 73 57 2f 1e 9e 7b 3a bf 4c 50 51 48 21 9e 47 8b 6d 38 05 52 49 43 1d 4c 3b ad 1c 79 18 ce e0 8f 1a da f3 00 09 27 18 04 ef 9f 02 06 00 1e 3d e1 e4 3d 75 8e d9 07 03 21 b5 03 81 Data Ascii: .dG>cG>5P"Jz}gcQwOBCg91^]yYr,L2ZF-lU`+*);Hbw-z$7XcH'b1]IpfPzb'(lcSN=^2sW/{:LPQH!Gm8RICL;y'==u!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49821	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	692	OUT	GET /vi/TCUuPHQEM_w/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 4596 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 20:11:54 GMT Expires: Wed, 10 Jan 2024 22:11:54 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 6005 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	604	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 12 10 15 10 10 10 15 15 10 15 15 15 15 15 15 15 15 11 15 15 16 15 17 15 19 18 16 15 16 15 1a 1f 2b 23 1a 1d 28 1d 15 16 24 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 10 0f 1d 2f 1d 1f 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 07 ff c4 00 41 10 00 02 01 02 04 03 04 06 07 06 04 07 00 00 00 00 00 01 02 03 11 04 12 21 31 05 41 51 22 61 81 a1 06 13 71 91 b1 f0 32 72 82 b2 c1 d1 e1 15 23 33 Data Ascii: JFIF+#($5%(-/222"8=70<+12////////////////////////////////////////////////////@"A!1AQ"aq2r#3
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: f9 b9 da e3 7c 3b 2b db bd 1c be 17 3e db a6 de fa 2f 6f 2f 85 bc 4d e6 5b 9b 70 e5 86 b2 d5 73 d4 52 d1 2b 2b bd 3b db bb f3 b9 19 a3 1e 92 ab 2b 77 7b ec ae 67 65 c4 eb 40 91 9e 68 d0 c5 4d 0c a9 0c 17 11 96 2a c0 92 fd 59 71 83 e4 fc c6 65 05 a7 f3 a0 02 e5 42 ee f7 69 fb 34 29 e1 e5 d1 3f 23 44 6a 75 f3 fc f6 0d 49 7e a0 5a 62 54 a5 fc be 68 8a 84 9f 45 e2 bf 03 65 ca ee f9 f9 d0 63 41 83 ca ac b6 ee fc ca 6f b8 8e 3a fe 45 49 a0 3d 18 82 40 a0 91 21 1c 7e 75 0e 31 05 0d 8a 03 12 21 69 11 88 cb 60 30 e5 21 52 f9 d0 00 27 31 12 af d0 2a 9a 0a 50 e7 d3 e2 54 4d 48 a6 de bf a2 be df 3d c0 d7 a7 96 da 69 df bf 89 a6 82 71 be cf e3 b0 75 e1 99 6f 67 ca e3 4e 98 2c 6d c3 56 cd 52 2d ab b5 7e d3 b6 6b 65 7a 36 b7 32 2e f4 3f 08 bb 6b ed 7d d6 21 23 d1 f0 da Data Ascii: \|;+>/o/M[psR++;+w{ge@hMYqeBi4)?#DjuI~ZbThEecAo:EI=@!~u1!i`0!R'1PTMH=iquogN,mVR-~kez62.?k}!#
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: c9 63 5f 0a fe 3c 3c 7e eb 15 e9 53 b7 af a7 47 3b 8a 67 4e ad 25 18 59 69 dc 61 c0 be d1 d7 cb 99 58 e5 b5 d9 8c 79 2e 23 c4 25 09 5a 10 bc 9f 53 91 c5 a3 51 54 8b ad 51 d4 a7 28 ed 99 c6 37 77 52 8a e8 d5 d3 57 5e f3 db 56 e0 30 93 cc ee 9f 55 f9 12 3c 1a 29 eb 39 b5 f6 7f 23 4c 72 91 19 78 b2 c9 e5 3d 15 69 62 61 52 51 fd cc 29 b8 cb 4b a6 92 b2 57 e7 27 2b bf 7e c9 58 eb d4 c1 46 ac ae 96 48 2b db 2f d2 6a fa 6b cb c3 43 b5 1e 19 4e f7 b3 76 db 33 6e de ce 86 a5 86 8c 56 da 95 72 e0 fc 7e 0d 57 3a 70 d1 74 5b 5f 5f 32 b0 bb df bc 75 77 71 30 d0 88 df 4d b5 a9 de 3e 07 9b a9 49 29 3b ad 2e 7a 45 52 e8 e1 e3 21 69 36 54 2c e7 1b 5d 0c 17 38 49 ae ed fe 21 4f 87 b7 f4 a4 fd d1 fc 82 c1 3e f3 b1 1a 77 41 b1 8e 12 be 67 c7 69 e5 c4 d4 8a d6 d9 7c e1 16 61 Data Ascii: c_<<~SG;gN%YiaXy.#%ZSQTQ(7wRW^V0U<)9#Lrx=ibaRQ)KW'+~XFH+/jkCNv3nVr~W:pt[__2uwq0M>I);.zER!i6T,]8I!O>wAgi\|a
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 96 02 08 4a 12 08 04 1a 60 a5 97 70 4b 03 15 cb 01 16 30 2b 8b c4 c3 34 5c 5f 3b 75 ea ba 6a 1a 63 28 51 94 e4 a1 09 e4 9b bd a5 6b da c9 bf c2 de 22 d8 a4 61 78 45 48 da 70 84 53 5b 7a cb c9 a7 dc 97 c5 fe a7 7f 83 4a a4 34 aa d3 6d dd 5b 45 ae fe 77 7e 27 9a c7 61 71 31 9a 8d 67 39 46 ea ce 12 72 5e 1d 1f b4 6a e3 18 8a 4d 46 ac 3b 31 b6 92 85 9d 97 46 ac b6 e6 45 de 49 c6 fa 6b e9 38 7a d7 46 b8 54 3c f7 0d c7 a9 45 49 3b c5 ab a7 dc ce 9c 31 28 c6 c7 a5 86 73 4d 18 8d 8e 66 22 9e 86 f7 57 31 cf c5 4a c1 8d d3 4d b8 f5 61 18 49 e5 49 37 bd 92 b3 d4 e0 d5 c6 7a dc 5a a8 f6 4e 2a 29 74 8d b4 ee be af c4 ed 71 6a b9 61 74 9b 6d d9 25 bd df 43 5f 09 f4 1d 59 56 aa e4 a5 ca 0a 4a d1 f1 b5 db 37 96 77 5c 9e 4c 7d 79 49 8c fd ba 78 1e 23 57 d5 c5 45 45 25 aa Data Ascii: J`pK0+4\_;ujc(Qk"axEHpS[zJ4m[Ew~'aq1g9Fr^jMF;1FEIk8zFT<EI;1(sMf"W1JMaII7zZN*)tqjatm%C_YVJ7w\L}yIx#WEE%
2024-01-10 21:51:59 UTC	236	IN	Data Raw: e5 dc 84 20 15 58 59 08 32 a6 44 62 21 00 41 96 51 04 a5 96 59 04 68 42 10 66 a0 27 5a 50 ed c2 4e 32 5b 34 42 00 bd 3d 37 02 e2 93 af 49 ca 6a 37 57 5d 94 d6 de 27 5b 06 af 56 fc d4 1f e0 42 1c f9 c9 32 e1 78 5d bd 2f 09 9b 4a cb 96 c7 7a 8c ef 16 d9 08 45 75 4e 95 88 8a f5 72 7c ec cf 84 fa 4f 8b 9d 4a ef 3c 9b b2 b2 e8 b5 7c 88 43 5f 17 6c 3f 91 ed 73 38 72 ed bf aa fe 28 f5 3e 8a e2 65 4e b7 61 db 67 f8 10 86 b9 b0 f0 be a7 87 96 64 ae 4a ab 75 c8 84 39 6b bd e6 b8 de 16 2d 3b ad 95 d7 b5 1e 4e ab 21 0d 31 e9 cf 9f 6f 39 56 a3 72 93 7d 5f c6 c0 dc 84 3a 67 4c 42 4b 90 80 4a 25 c8 41 15 15 48 24 3a 94 15 88 40 45 0c a0 9c 97 b4 64 d9 08 04 cb 37 d9 f0 39 a9 90 83 84 75 2d cd 31 21 06 d3 17 ff d9 Data Ascii: XY2Db!AQYhBf'ZPN2[4B=7Ij7W]'[VB2x]/JzEuNr\|OJ<\|C_l?s8r(>eNagdJu9k-;N!1o9Vr}_:gLBKJ%AH$:@Ed79u-1!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49820	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	456	OUT	GET /vi/-1iNwmT2RVg/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 7395 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 12 10 16 10 12 12 15 15 15 16 15 15 17 15 15 15 15 17 15 12 15 15 17 15 19 18 17 17 17 15 1a 1f 2b 23 1a 1d 28 1d 15 17 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2d 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 27 20 25 2f 2f 2f 31 2f 2f 2f 2f 2f 2f 30 2f 2f 2f 2f 2f 37 30 2f 2f 30 30 2f 2f 2f 30 2f 2f 2f 35 2f 2f 2f 30 30 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 40 10 00 01 04 00 04 03 06 03 05 06 05 03 05 00 00 00 01 00 02 03 11 04 12 21 31 05 41 51 06 13 22 61 71 81 32 91 a1 14 23 42 b1 c1 07 15 52 62 72 Data Ascii: JFIF+#(%5%(-/222"8=70<-12//' %///1//////0/////70//00///0///5///00///////////////@"@!1AQ"aq2#BRbr
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 8f 7f cd 3e 4d 97 45 db 6c 28 67 11 99 ad d8 16 56 80 6f 13 0e c3 d5 73 b2 ec b1 e4 ba e0 a2 e1 aa 02 95 d1 69 6a 30 b6 61 82 42 95 22 62 1f 1a 47 04 e8 d2 b8 20 44 68 a4 ec a9 43 50 00 db 1b 2b 50 4e 42 8a 35 63 2d 72 45 0d 17 19 25 a7 b4 aa 6d 34 ac 47 20 28 1d 18 69 0a 12 20 c0 21 08 40 c1 38 24 01 2a 04 09 52 25 4c 01 08 42 00 44 21 08 02 e7 0c 3f 7a d5 ad 8c 75 34 91 fe f5 59 7c 25 b7 28 f2 0b 4b 18 74 3e df 98 40 15 f0 d8 b6 d8 bb fe 9d ad 5e 85 c6 c3 9a 40 d6 c5 1d b5 b5 a9 2f 64 e3 9a 26 be 3f 0b 88 1e eb 22 5e 0b 3c 2e a2 d2 e0 39 ac ac b1 7b 15 96 19 24 7a c7 67 38 b3 b1 38 60 49 69 78 b6 b8 fa 1d 09 f3 21 5b 92 20 37 bd ef 75 c2 fe cf 31 0f 38 99 98 e2 46 58 db a5 50 b2 e1 5f aa ef 31 2e ca 40 24 79 f3 d1 6c 83 44 2f 75 6b ae a3 6d d4 71 61 1c Data Ascii: >MEl(gVosij0aB"bG DhCP+PNB5c-rE%m4G (i !@8$*R%LBD!?zu4Y\|%(Kt>@^@/d&?"^<.9{$zg88`Iix![ 7u18FXP_1.@$ylD/ukmqa
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 3d 47 81 76 ee 16 61 a2 c3 49 1b 80 6b 5a d2 e6 9b b2 06 f5 d2 f5 5d 34 6f 64 ac 0e 89 c1 ed 22 c1 69 d3 fe 57 87 f7 a4 2e e3 f6 6b c4 89 c4 bf 0c 5d e1 7c 65 e0 7f 33 2b f4 27 e4 ab b5 12 68 ef 30 31 16 9c de aa c4 e2 3a a6 82 09 a3 e1 fa 26 77 7a 12 0e 81 46 f9 73 30 96 9d b9 ee 90 1c bc f8 99 61 c4 39 be 20 dc d6 41 1a 36 c6 ed 7f 30 7a 72 50 71 5e 24 5c c3 6e d2 8a a7 da 7f b5 f7 8d 6e 1a df 9a f3 b6 ae 8d 8a 3a ac 06 41 29 d2 62 6f 5b 1c 85 1a 5c 79 60 d3 b6 7a 78 b2 ea 8a 54 61 e2 cd 4b 7d 53 5b 76 35 57 78 ec 19 4c 75 d0 aa 01 da 81 e6 15 60 ed 1c 99 15 49 9a fc 1f 88 98 67 6b c1 d9 c2 fd 2d 7a 64 b3 54 94 1a 35 f1 5e b6 6f 55 e3 86 c3 c9 f3 3f 2b 5e ad d9 9e d0 c3 33 1b 9d bf 7a d6 35 a4 11 fc 22 b3 0f a2 d1 3a b3 9d ed 28 ac 5c 9f e4 ff 00 4d ab Data Ascii: =GvaIkZ]4od"iW.k]\|e3+'h01:&wzFs0a9 A60zrPq^$\nn:A)bo[\y`zxTaK}S[v5WxLu`Igk-zdT5^oU?+^3z5":(\M
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 03 4b 75 3b 8a 6b 5b 5e 6b 5b 84 e3 cb 07 76 d6 1b b2 76 eb ae eb 47 b4 38 41 0c 72 c9 95 a1 c4 0c c0 8d a4 3b 38 1a b6 bb 41 7d 41 5c cb 78 81 c4 78 8b c3 0b 45 96 92 18 c6 8d b4 71 dd 72 c7 23 67 a4 e0 aa 8d e3 8a 2f c4 46 f0 d2 5c 03 a3 78 6d 12 58 e2 0e b7 a7 84 b6 ef 90 25 5b ec 95 64 c4 50 0d 02 60 00 04 11 f0 0e 63 4f 92 e4 dd c7 1a d8 cc 31 e6 7b 9c 40 0f 61 cb 42 ce 6b 1f 13 89 a1 ed 75 c9 6f e0 70 f3 61 58 d8 5a f8 b3 62 27 63 5c 08 39 98 1d a7 84 03 e2 22 c5 ec bd 68 2c 92 e9 65 19 6d 5b d7 b1 c3 25 8e 19 e3 35 e7 63 4b b4 31 69 11 70 f1 17 4a 18 db ba 63 32 87 3e bc c9 3f 21 e6 bc b7 8a 42 4e 2d d2 b8 53 46 c0 f3 e4 3f 52 bb fc 66 2c be 59 5d 16 59 fb b7 18 fe f1 e5 9e 16 ea e2 d0 34 77 8c bf 98 5c 96 31 ce 97 10 1c e6 ee eb ca d0 4b 5a c6 f2 Data Ascii: Ku;k[^k[vvG8Ar;8A}A\xxEqr#g/F\xmX%[dP`cO1{@aBkuopaXZb'c\9"h,em[%5cK1ipJc2>?!BN-SF?Rf,Y]Y4w\1KZ
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: e3 d3 7a 91 f7 cd 1a 01 aa 7b 5c 77 4a 22 1d 14 33 3b f0 0e 69 c7 3d f2 29 74 db ec 2b 07 e6 a6 8e 1e 6a c6 0a 06 e5 d5 4a e2 c0 a6 dd 89 c6 9d 1c 9a 12 12 90 94 08 52 53 6d 22 10 00 84 27 35 84 ed c9 21 8d 42 10 80 15 09 10 81 0b 68 b4 89 53 02 ef 0c 71 12 69 ef e8 b5 31 e3 ee cf b7 e6 16 67 09 1f 79 ec b4 f8 8b 89 89 c2 ba 7e 61 20 32 b0 b8 47 cd 2b 61 8d b9 9e f2 1a d1 e6 57 bb e3 f8 3b 64 c0 4d 86 65 df d9 dc c6 58 3f 10 8e 81 1e a4 05 e2 dd 9a c4 3a 1c 6c 13 5b 5b 96 46 d9 7f c0 d6 9d 1c 5d fe 52 57 b3 45 db 2c 26 7d 71 31 90 77 a3 a0 3e 5a 6c b4 08 f0 ac 37 0b 9a 41 6c 89 c7 da bf 35 d4 f6 2e 3c 74 58 c8 b0 d1 b9 cc 64 b2 0e f1 ad 2d b2 d0 2d c4 9d c0 a1 d5 5f 7e 25 91 e2 66 6c 6f 0f 61 96 42 c7 0f 84 b1 ce 2e 6d 7b 1a f6 5d 0f 66 a4 60 7b 8b 49 ce Data Ascii: z{\wJ"3;i=)t+jJRSm"'5!BhSqi1gy~a 2G+aW;dMeX?:l[[F]RWE,&}q1w>Zl7Al5.<tXd--_~%floaB.m{]f`{I
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 47 07 ec f8 c4 d9 12 0f 03 5e 5c 24 19 cb bf 15 65 03 7a bd 47 45 9d 88 c1 c0 c6 b5 f7 6d 24 b3 30 0d 78 bd b5 07 cc 75 07 95 8b 5b 78 39 46 1a 47 3a 22 1c e8 c8 33 00 4d d6 6d 0d 1d 45 02 0d 73 cc 7c 93 78 86 26 38 e3 9d 91 c2 1e c9 26 ce 7f 10 64 39 1a e0 ec a2 f7 ce 5a 6e b6 e6 ab 3c 8b 43 6d 7c 2f 84 d2 fd f3 f4 25 86 49 66 50 f3 c6 a4 de de fc d5 3f 36 70 f8 f0 d6 ca e6 b6 a8 65 da eb e1 17 b9 b5 42 71 e1 70 ea 9f 8e 2d 12 b8 30 b8 0d 28 3b 71 a0 d3 db 6f 65 16 5f 72 b8 f6 f1 c1 bc a9 a9 ca f9 b6 61 b6 52 dd 16 b7 0b 89 cf b7 9d 1b d3 aa cf c5 c3 52 7a ad 38 71 ad 0c 0c 1a 2a 36 73 56 e3 e4 6d 92 79 2a 90 43 76 4a b6 f6 12 34 4c 7b 6b 6e 4b 25 d2 2b 62 f0 ba 66 0a b3 25 23 45 ae e0 1c df 55 99 34 44 72 5d 18 a4 43 2c 4b 18 4c 4e 53 e4 55 c7 b9 ae dd Data Ascii: G^\$ezGEm$0xu[x9FG:"3MmEs\|x&8&d9Zn<Cm\|/%IfP?6peBqp-0(;qoe_raRRz8q6sVmyCvJ4L{knK%+bf%#EU4Dr]C,KLNSU
2024-01-10 21:51:59 UTC	520	IN	Data Raw: b1 46 34 ed 2e 42 39 26 b2 4a 4f 86 ee 8f 6c e3 1c 0f 26 09 86 48 de 1a c7 46 0b 9a d2 65 0d 71 68 20 34 6f bd 8f 3e 4b 8a c6 63 1d 93 c1 8b 94 46 d9 72 8b 75 38 46 4d 59 68 d4 15 cc ff 00 d5 78 da 2d fb 54 b4 77 19 b4 3a dd 9f 3b e6 99 3f 69 31 52 00 1f 3b 9d 5a 78 83 4e e6 f9 8e ab 82 30 c9 1d ac ef 5d 5e 27 f3 c6 cf 44 7f 0e 12 e0 23 7b 5c 4b 1d 2b 9c 34 2d ce 45 b4 3b 5d db e0 1e 8b 5b 82 bc 06 88 cb 4d 87 12 2c 80 35 14 40 3d 57 93 bf b5 18 c2 c6 c6 71 32 65 65 e5 6d e8 db 36 6b dd 34 76 97 16 3f f7 0f f9 aa 42 2e 3c 9c b9 b3 77 1d 9d af 69 64 07 1b 20 69 db bb ff 00 4d ab 2e 52 2b 55 88 de 27 2c 87 bc 91 c5 ef 70 d5 c4 ea 6b 41 f4 00 7b 29 99 c4 dd 54 e6 da 6d 99 50 7c 8e 9f e2 56 25 d1 8d f4 54 fb d0 5d ae 96 a7 c5 ca 2b 4e 94 12 2c fc 19 c2 1b 16 Data Ascii: F4.B9&JOl&HFeqh 4o>KcFru8FMYhx-Tw:;?i1R;ZxN0]^'D#{\K+4-E;][M,5@=Wq2eem6k4v?B.<wid iM.R+U',pkA{)TmP\|V%T]+N,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49823	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	692	OUT	GET /vi/4ev_Arx-tZU/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6454 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "1639382404" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 10 12 16 13 12 12 15 15 15 17 17 15 15 15 15 17 15 16 15 15 17 15 17 15 19 18 16 17 16 15 1a 1f 2b 23 1a 1d 28 1d 15 17 25 35 26 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 25 22 25 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 3b 2f 30 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 00 02 05 01 06 07 ff c4 00 44 10 00 01 03 02 03 04 07 04 05 0a 06 03 01 00 00 00 01 00 02 11 03 21 04 12 31 05 41 51 81 06 13 22 32 61 71 91 a1 b1 c1 d1 14 23 42 b3 f0 24 34 52 Data Ascii: JFIF+#(%5&(-/222"8=70<+12//%"%////////////5////////////////////////;/0//////////@"D!1AQ"2aq#B$4R
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: fb a6 2c 55 d0 72 90 22 00 aa c0 ae a4 b2 28 a2 85 00 54 a1 d5 74 04 42 96 c4 39 00 2b 51 b2 e2 8b 54 76 39 21 54 74 38 f2 46 a9 dc e4 90 0b d1 30 51 40 ba 15 2d 51 da 2e 80 67 4e 9c 90 a9 5c 84 57 77 4f 92 ad 16 dc 20 07 94 51 45 b1 91 00 56 85 50 ae 90 15 21 54 84 45 21 14 00 2a 25 9c 9c a8 d4 9b 92 19 da 5a a2 a1 52 d5 15 20 11 c4 77 8a 0c 23 e2 07 68 a1 14 14 17 0c d5 eb 3a 1b 54 37 1b 44 9d 3b 7f 76 e5 e6 29 61 cc 70 5b 3d 14 a4 e1 8c a4 67 4e b2 6e 6f f5 6e dc 93 2c fb 2b 42 68 b5 63 e0 31 5f 64 f2 3f 04 86 39 f5 6a 54 ae 1b 8e fa 39 65 7a 6c 19 ba bc 82 9b 99 4a 64 12 08 33 50 99 bc c4 5b 55 2a 36 cb c7 8f bd d5 d1 e9 a1 48 5e 50 36 a7 54 ef fc 9b fa db 89 22 8e 56 bc 00 ec 8e 68 71 87 41 ca 6e 60 e9 28 14 7a fa b4 e8 bd bb 4c d3 2f a4 d7 3d ae 14 Data Ascii: ,Ur"(TtB9+QTv9!Tt8F0Q@-Q.gN\WwO QEVP!TE!%ZR w#h:T7D;v)ap[=gNnon,+Bhc1_d?9jT9ezlJd3P[U6H^P6T"VhqAn`(zL/=
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 49 81 56 6a af 91 51 9a a3 29 19 ca 42 e7 92 33 42 55 d5 72 3c 13 a4 5d 31 4e b3 5d dd 32 a5 9a 45 f0 14 2d 6e 8a 3b f2 da 5f bc fb a7 ac 89 5b 1d 13 fc f2 97 ed fd db 92 43 3e 93 40 5c a0 ed 36 fd 5b 91 e8 77 95 76 83 65 8e f2 41 27 9d a2 c2 1a 6a 13 66 4b 88 de 43 44 a4 87 4b a8 9f b0 ff 00 e5 f9 ad 3a 0d 9a 55 47 83 bf a5 78 11 4e 5c 1a 37 92 a5 97 14 99 eb 4f 4a a9 7e ad ff 00 cb f3 4b bb a5 c0 d9 b4 bd 5f f0 84 6d 97 d0 61 51 82 a5 57 b9 b2 24 35 bb 87 89 e2 b3 3a 45 d1 d7 61 21 ed 71 7b 77 13 12 de 20 91 a8 4a d3 e1 32 ff 00 0d ae 5a 3d 26 c9 da 3f 48 04 1a 65 a4 00 ef 02 09 20 16 f8 58 ac fc 4b 63 1e df 2a 43 91 6a 27 45 2b 17 89 20 0f aa 60 11 c0 54 a9 af 32 51 31 74 ff 00 2e 69 ff 00 6d 13 ec 84 22 1f 07 af c4 56 14 da 5c e3 00 5c ae 60 41 a8 d0 Data Ascii: IVjQ)B3BUr<]1N]2E-n;_[C>@\6[wveA'jfKCDK:UGxN\7OJ~K_maQW$5:Ea!q{w J2Z=&?He XKc*Cj'E+ `T2Q1t.im"V\\`A
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: e9 66 d7 14 70 cf 70 6e 60 32 82 d9 cb 20 b8 0c b3 ba 65 7a 9a ad ec c4 71 5e 5f a4 9b 33 af a0 28 81 de 73 49 f2 6b 83 be 0b 04 f9 56 77 3b ae 04 fa 1f 8c 35 8b 9c 46 52 e0 4e 5f d1 05 c2 07 8c 0d eb db 51 10 20 2f 31 d1 5d 91 d4 07 19 26 4c c9 f7 0f 0d 57 a5 6b a0 a2 4e df 06 71 8d 2b 7b 0a fa 90 bc 56 2f 68 75 d8 ac df 64 10 1b e4 26 fc d7 a0 da f5 e2 93 c0 37 ca 7d 17 8e c3 b4 9a 80 80 48 11 24 02 40 f3 4e bf 28 9b e6 8d 1a 5d a3 4b c1 95 7d ad fe c9 cd 94 4f 67 f6 7f ee b3 a9 53 14 cc fd 61 b1 1d d6 98 10 45 af e2 9d c0 62 03 45 83 f5 1a b4 6e 9f 1f 12 94 41 9e 5b a5 a7 f2 da bf b1 f7 6d 58 ab 53 a4 66 71 55 0d cc e5 37 d7 b8 d5 96 ba 16 8e 57 b2 24 f1 2f 93 09 a7 15 9e e5 64 b2 ae 5c 6a 8e 5c 6a 4c 10 6f b3 c9 4a 6f 03 55 c0 7b 3c 95 4b 4f 05 25 1d Data Ascii: fppn`2 ezq^_3(sIkVw;5FRN_Q /1]&LWkNq+{V/hud&7}H$@N(]K}OgSaEbEnA[mXSfqU7W$/d\j\jLoJoU{<KO%
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: be 3c 4a 3f 9a 5c b2 52 64 08 41 da 34 eb 16 1e a1 cd 63 f7 17 37 30 fe de d4 2d a5 d2 0a 18 60 65 d9 9c 24 65 6d cc 80 0c 13 a0 d4 6b c5 78 bc 77 49 2b e2 2a 53 39 8d 30 1e 0b 5a c3 00 45 ee 7e d5 84 5f 8e 8b 38 62 75 dd e1 1d 11 8b 97 3e 07 f6 8e 2a b3 98 c6 d6 ef b2 5a e7 58 17 38 44 ba d6 83 e0 91 c5 d7 ed 1b ff 00 a0 f3 ce 4c 2e 63 71 25 e4 17 99 27 31 27 9b 56 66 2b 12 4b 9d e3 4b fe c3 fb ae 59 ca d8 92 b1 0d ae 66 a9 ff 00 e6 9f dd b5 20 e4 ee d3 74 d4 3f fc d3 fb b6 a4 1e 57 7c 3d 28 e1 9e d9 10 a8 50 9b 94 46 84 c3 1a a9 92 91 c0 21 2f 8a c5 86 78 93 a0 de 89 8a ab 95 b3 e8 b1 f0 ce cd 50 bc df 28 27 e4 84 86 d8 e3 f1 4e cd 13 c3 4e 3b d4 94 b5 33 ea 6d f3 4c c8 4e 5c 12 b9 24 85 d0 42 e8 70 e0 a6 7f 05 36 3a 26 60 ba 1c 17 0d 55 d1 53 c1 16 14 Data Ascii: <J?\RdA4c70-`e$emkxwI+S90ZE~_8bu>ZX8DL.cq%'1'Vf+KKYf t?W\|=(PF!/xP('NN;3mLN\$Bp6:&`US
2024-01-10 21:51:59 UTC	840	IN	Data Raw: 40 bd cc ba b8 f7 3b 7c 78 0b 20 d3 2e 0e 91 33 3a ad c6 d0 68 d1 a0 72 56 2c 55 65 f7 24 0b ae b2 0e 65 6a ad 82 aa 0a 96 66 77 37 82 ec ae 4a 92 90 1d 95 c2 c0 77 05 01 5d 84 00 06 53 de 74 e1 f3 50 15 5a 8e 24 16 b7 d5 72 95 1c 80 02 54 e4 5c 58 07 6a 53 32 69 a9 4d fc d4 62 f2 29 0e d1 a7 22 f6 1c 38 f9 a3 b4 01 a0 40 a6 c2 e1 a9 03 c1 14 61 5b e2 79 95 a9 45 dc f0 35 28 2e 25 f6 16 6e f3 bc f8 22 8a 2d e0 ae 80 17 70 cb 0b 98 67 66 73 8f 21 e4 8b 55 b2 12 58 37 e5 74 14 0c d2 55 21 74 15 0a 04 50 84 6c 1b a2 a0 3e 7e e2 86 54 63 cb 48 23 88 f6 98 51 35 71 68 a4 f9 1b c6 5e 1d 22 c6 7f 1c 74 44 c1 6d 57 d0 71 0c 7b 99 03 be 3e d3 2d 00 ce a4 4f b1 2d 89 ae d9 b9 02 0c 79 9f c7 c3 8a ab 6b 80 d7 4c 38 0b 8f 1e 03 d7 de b3 86 3e d8 d6 c8 9c ae 56 3d 4f Data Ascii: @;\|x .3:hrV,Ue$ejfw7Jw]StPZ$rT\XjS2iMb)"8@a[yE5(.%n"-pgfs!UX7tU!tPl>~TcH#Q5qh^"tDmWq{>-O-ykL8>V=O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49822	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	456	OUT	GET /vi/hEm9hUw5I7E/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6178 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 13 10 10 12 12 12 15 15 15 10 15 10 15 17 15 10 15 15 10 15 15 15 17 15 19 18 16 15 16 15 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 10 1d 2f 1f 1e 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 31 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 ff c4 00 48 10 00 01 03 01 04 06 05 07 07 0b 04 03 01 00 00 00 01 00 02 11 03 04 12 21 31 05 13 41 51 61 91 06 22 71 81 a1 23 32 52 62 83 b1 b3 07 14 33 82 Data Ascii: JFIF+#(%5%(-/222"8=70<+12/////////////////1//////////////////5///////////////@"H!1AQa"q#2Rb3
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 22 80 48 a4 02 6b ea 41 48 2b 56 18 ad ae 82 fe 72 b3 7b 6f 82 f5 89 5a a4 95 b5 d0 53 f9 4e cd ed be 0b d1 3d 8c be 35 ec 09 26 ca 52 ba 1c 42 88 40 14 82 01 c1 78 cf 4e 34 c3 ed 56 d7 30 60 d6 39 d4 98 36 43 49 04 f7 90 7c 17 b3 05 e1 b5 2c e5 fa 4e a9 a9 2d 63 2a 57 88 17 b1 04 c6 12 33 99 5c dc d9 6a 3a ba 6c 66 54 9b d0 f7 dd 9d 6c 18 c0 42 b7 d0 2d 32 eb 2d bf 53 50 9b 95 8e ad cd 68 90 1e 4f 51 f0 38 e1 de ac d8 74 a5 67 da 5b 67 80 d6 92 e1 78 8c 60 03 0e 3b 22 61 61 d7 a7 68 15 45 4d 59 d6 b2 a8 82 d6 f5 83 9a f9 04 5d c4 f9 be 3c 54 78 6e 7b fc ac 75 73 e3 c7 db f8 4b fa 7b 93 82 57 52 b2 b9 ce a5 4d d5 1b 71 ee 6b 0b 9b 9d d7 11 88 e6 a5 ba bd 0d bc ad 22 ba 95 d5 21 08 5d 4a d0 f2 5e 9b 1f ca 36 8f 65 f0 98 b0 a5 6e 74 dd 9f 94 6d 1e c7 e1 31 Data Ascii: "HkAH+Vr{oZSN=5&RB@xN4V0`96CI\|,N-c*W3\j:lfTlB-2-SPhOQ8tg[gx`;"aahEMY]<Txn{usK{WRMqk"!]J^6entm1
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: d8 47 d3 6e fd 4b d7 23 75 76 1d 03 a0 7f d4 ac c4 b8 9f a6 c3 21 f4 2f 5b 46 3d 6c b5 0b aa 6d 5a 17 11 b6 34 8c 31 51 d3 56 b2 c6 43 5f 04 e6 06 71 1e 09 9a 5f a4 14 ac e4 34 99 71 ce 31 b8 37 91 b5 60 5b ad e1 de 71 9c 24 38 41 96 9c 8a 9d cb 7e 23 77 1b 84 97 2f 1b 65 db ea 71 83 98 83 06 46 d5 d0 53 6b f5 6d d6 91 7c 06 de 23 0c 48 07 1e 38 e3 c5 56 d1 3a 30 3d cc ae f6 f5 04 96 87 66 48 f3 5c 46 51 33 c9 6a d6 a6 1c e7 b8 8c e3 dc 02 77 0d 63 ba c6 19 ef 25 6a 74 87 5b 19 c3 ef 4c b9 02 40 90 77 7e 2a 6b 30 c5 c3 86 d5 1b 9a 5a 70 cb 72 cc 6a fb 57 a9 52 70 ba 67 71 c1 66 52 37 2d 24 64 2a 36 f7 5a 04 39 b0 33 ec 23 92 d8 a8 db d8 f2 2b 27 49 55 65 37 36 a3 d8 5d 0d a8 00 69 ba 64 c0 99 e1 33 1b 61 57 e9 2f 55 b5 66 aa 1b 83 45 f3 b4 82 03 47 09 2a Data Ascii: GnK#uv!/[F=lmZ41QVC_q_4q17`[q$8A~#w/eqFSkm\|#H8V:0=fH\FQ3jwc%jt[L@w~k0ZprjWRpgqfR7-$d6Z93#+'IUe76]id3aW/UfEG*
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 8c 79 25 ae bd 23 2c 9a 48 c4 71 0b 0a 4a d3 b0 da 5e c7 35 f4 e0 bd ad 71 17 81 70 f3 4c e0 08 d9 29 65 3c 5d 0c 72 dd d5 77 36 7d 1e c6 60 cb cd e2 d7 b8 15 64 d9 f0 8b d2 77 d5 a7 4a bf 81 68 3e 2b 95 a7 a6 ad e7 1b 94 23 c9 99 2d 78 ea 3a 65 de 7e c8 53 37 4e 5b 81 83 46 89 38 08 05 e3 ac 71 02 67 68 12 a1 39 79 67 db 79 74 bc 19 7b c5 bd 56 c2 1d 13 4e 91 df 72 fd 12 7b 06 2d f0 54 2b d1 63 31 6d f6 b9 a7 16 b8 b4 c1 e0 f6 e7 c9 53 b2 f4 92 d2 e7 b0 1b 2b 08 7d c8 22 a3 9b 21 cf 14 db 9b 4f e9 10 21 3b 49 5a a4 b8 fa 45 c7 76 67 05 df d3 72 e7 96 fb be 9e 37 5f d2 f1 f1 76 ff 00 1f bb 56 f4 68 ab 69 b4 d1 a1 7d c4 3c 8b f7 4c 45 31 8b c9 23 87 89 0b d5 1c c0 04 0c 00 c0 06 e1 00 6c 5e 29 d0 bd 32 f1 a5 29 b5 af 70 6d 61 51 90 d3 00 dd 63 9c 24 f6 b7 Data Ascii: y%#,HqJ^5qpL)e<]rw6}`dwJh>+#-x:e~S7N[F8qgh9ygyt{VNr{-T+c1mS+}"!O!;IZEvgr7_vVhi}<LE1#l^)2)pmaQc$
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: d3 c8 13 f6 2a 4e 2a 5d 1f 6c 75 2a ac a8 c7 b9 8e 6d e8 73 22 f0 96 90 62 7b 7c 55 32 f3 34 96 1e 2b a4 f9 8b c3 19 81 fa 13 b0 fe b0 9d df d9 55 0d 8e a9 04 5d 33 0c 19 11 8b 9e 70 c7 82 7b 7a 61 69 1f f9 95 0f ed b2 93 bf a5 26 f4 d2 d6 32 b4 7f f2 a4 3f a1 43 f8 f2 75 77 c6 8e 8e b3 3d 8c a8 5e 08 d6 d5 21 b2 08 90 d2 5c 48 de 24 35 6c e8 8d 3b 67 b1 d0 b6 d7 79 6b eb cd 36 53 a2 08 d6 3b 03 88 19 86 cb f1 3b 9a b9 1b 57 4a eb d5 8b cf 04 8d a4 09 c8 8d dc 56 63 df 81 73 8f 12 4e 24 ab e1 3f e7 70 bf 75 c7 9f 1d bc f3 97 ea 4d 2a 5b 6a d5 a9 59 ef 73 1c 0d 57 39 ee b8 c3 12 e3 26 e8 dd 8a f7 0e 85 5a 05 4d 1b 66 80 e0 29 b4 d3 8a 98 3c 0a 6e 2c 17 bb 9a 0f 7a f1 07 da 1b b1 7a 97 c9 05 b6 f5 9a d3 4a 7e 8a a8 74 6d 0d 7b 06 cd d7 98 e5 1c e6 9d 98 d7 Data Ascii: N]lums"b{\|U24+U]3p{zai&2?Cuw=^!\H$5l;gyk6S;;WJVcsN$?puM[jYsW9&ZMf)<n,zzJ~tm{
2024-01-10 21:51:59 UTC	555	IN	Data Raw: 7a 5d 62 55 de 8c db 75 56 fb 25 57 01 0d aa c0 6e b4 37 07 75 67 01 8c 5e 94 8d f4 0d 31 80 1b 02 55 0c 60 9e d0 00 c7 fc aa d5 aa 60 b3 19 70 5f 29 da 6e b5 1a 76 6a 56 7a 95 29 be a3 9e f2 ea 0f 75 37 5d 60 88 25 a6 60 97 e5 ea af 2e 7d 67 b8 b9 d5 1c e7 3d c4 92 e7 92 e7 12 73 24 9c 49 5d 77 ca 4e 91 2f b7 1a 73 85 06 31 b1 eb 38 5f 27 93 9b c9 71 a4 aa 0f a3 1e 83 33 4e 2d 40 04 1b 7a c1 7b 56 d8 30 31 f7 95 6a 0e f5 5f 46 fd 0b 3e b7 f3 15 69 65 a8 08 5e 3b 92 28 5e 4c 8b 59 c1 20 e1 b4 23 79 03 29 93 1a dd 6a 06 a3 b0 c1 b8 2a a5 d2 83 cf 59 dd a7 de 81 c1 30 69 42 11 8c 12 48 cf b3 50 be f6 b7 79 c7 b3 6a e9 99 45 a0 00 00 1d cb 9b b2 da 2e 3e f4 4e 04 6e cd 68 9d 3d ea 78 fe 08 2a d5 85 0d ac 90 c3 77 3c 23 9a cc 3a 79 db 18 39 94 c7 e9 b7 90 45 Data Ascii: z]bUuV%Wn7ug^1U``p_)nvjVz)u7]`%`.}g=s$I]wN/s18_'q3N-@z{V01j_F>ie^;(^LY #y)jY0iBHPyjE.>Nnh=xw<#:y9E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49824	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	456	OUT	GET /vi/aoRJmnTyrtM/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:51:59 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5734 Date: Wed, 10 Jan 2024 21:51:59 GMT Expires: Wed, 10 Jan 2024 23:51:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:51:59 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 12 12 15 13 12 12 15 15 15 15 15 17 15 15 17 15 15 17 15 15 15 15 17 15 19 18 16 15 16 15 1a 1f 2b 25 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 1d 1f 25 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 ff c4 00 3f 10 00 01 03 02 04 03 06 04 03 06 05 04 03 00 00 00 01 00 02 11 03 21 04 12 31 51 05 41 61 06 13 22 71 81 91 32 a1 b1 f0 42 c1 e1 14 23 43 82 d1 f1 Data Ascii: JFIF+%(%5%(-/222"8=70<+12//%//////////////////////////////////////////////////@"?!1QAa"q2B#C
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 8a fa 62 0e de 88 52 a7 37 83 21 6c a7 4e f0 4f a7 35 ce d7 59 0b 49 b0 6f 26 7e 5e a9 d8 c8 30 0e 6b dc 13 30 ac c9 96 e0 4c a9 51 a0 65 3a 5f ec 15 84 2f cb cf c3 c8 1e 52 ac 61 2d b4 17 75 b2 2f a6 1c 2f 11 d7 44 ec 61 1a 1b 26 51 5c ec 57 c6 7d 3e 81 53 2a 63 dc 45 47 08 db e8 15 4c aa 57 58 ca e4 1b 3c 8a 57 5c 6c 95 b4 7a 95 15 c1 c6 44 8f 65 a1 b5 40 90 55 34 68 09 4f 51 a0 11 22 56 a3 28 4a 92 95 c2 e4 28 1e 26 25 54 9a 50 21 15 16 52 bc 97 94 ec 7e e1 10 14 85 6b 4b 3b dd 96 6a ac 9b f3 57 c2 52 13 ac e3 82 13 25 28 82 90 21 30 08 04 65 08 e1 10 92 53 35 48 ea 42 81 10 a2 68 45 04 50 94 d5 6c a6 a6 d4 f0 98 04 81 01 3d 23 04 47 dd 92 94 70 ce f1 0f 5f a2 12 f7 33 99 d5 73 71 00 17 58 5f a2 d9 8b c4 72 1a ac f4 e9 f3 4f 82 4d 68 c3 57 98 6d 59 31 Data Ascii: bR7!lNO5YIo&~^0k0LQe:_/Ra-u//Da&Q\W}>S*cEGLWX<W\lzDe@U4hOQ"V(J(&%TP!R~kK;jWR%(!0eS5HBhEPl=#Gp_3sqX_rOMhWmY1
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 34 4c 0c ba eb 76 34 fe 6b 9c ba dd aa a8 1d 8c aa 40 2d 9c 96 3a 83 dd b6 7e 6b 94 17 aa 78 f3 df 50 04 72 a8 0a 15 2a 45 c9 85 01 21 32 a4 62 59 b8 47 bf 6e e9 0b 11 01 55 df b7 40 53 b1 d0 a4 b4 08 41 0c d2 88 0a d4 84 20 11 46 10 8e c2 ab ad 56 51 21 51 de 8e 76 3e 56 52 71 49 50 28 8a d0 44 cd 08 04 e1 04 53 04 8a c0 a4 99 93 24 2d 4c 14 86 14 05 45 5b 5d 75 25 ca b9 4e ed 16 67 18 48 5d 99 69 a4 f9 59 da 15 d4 45 c2 2f 8d 4f 5b e8 c7 90 5d 1a 0d 1e cb 9d 4f 95 ac 75 0b af 46 98 31 1e 6b ce eb 1a a8 b0 44 6b 6f 54 70 78 6c a3 33 cc 91 69 e6 44 da 77 49 49 c2 5d 96 e4 6b fd 16 cc 3b dc e3 0d 66 96 be a4 f4 59 92 b5 56 92 d8 00 90 09 d2 f7 f4 5d 1c 15 20 23 35 d7 3c b4 38 83 55 90 01 b6 68 8f 71 a1 5b 0e 3e 9b 59 39 9b 1a 4c ab 30 c0 c4 31 bd e7 83 4b Data Ascii: 4Lv4k@-:~kxPr*E!2bYGnU@SA FVQ!Qv>VRqIP(DS$-LE[]u%NgH]iYE/O[]OuF1kDkoTpxl3iDwII]k;fYV] #5<8Uhq[>Y9L01K
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: b7 e1 ea 6f e7 a6 bb aa 1d 57 33 e0 09 6c c0 20 fd 47 f4 95 38 a6 2f bb 0d 39 a2 4d cb 6f 61 b8 e7 f7 aa 3b f1 ab 8e a7 ff 00 5f de 80 fc da 3a d1 a8 31 a8 3a 8d 4a d1 5a 93 8b 72 07 96 12 23 38 89 11 c8 c8 3f 73 a2 5e 15 8c a6 ea 6d 2c 32 5c 27 51 e1 eb f7 7b a5 e2 4f 71 b5 10 d2 74 00 93 ae e9 f2 39 fb 5f 20 ed c6 1c d3 e2 15 98 e7 9a 84 77 72 f3 62 66 8b 0e 9e b1 e8 b8 6d 6a ee 76 c8 3f f6 ea dd e0 87 7e ee 40 ff 00 d4 c5 c6 88 5e 89 e3 85 f4 a4 de 36 50 95 5d 5f 9a 66 09 48 17 35 4a 74 a7 92 74 cd 10 a4 57 08 f2 46 53 e5 b2 8e 6a 42 b7 b4 1e 49 05 28 e7 09 6a 66 06 45 c6 ca fa 64 10 a2 76 82 02 30 99 a1 02 14 0c 05 93 06 a2 c0 06 a9 8d 40 ac 0f 2c 11 25 06 95 21 48 ed 2a d0 15 34 da af 52 40 14 52 51 51 00 14 45 02 54 51 10 82 28 48 4a 2d 55 38 5d 58 Data Ascii: oW3l G8/9Moa;_:1:JZr#8?s^m,2\'Q{Oqt9_ wrbfmjv?~@^6P]_fH5JttWFSjBI(jfEdv0@,%!H*4R@RQQETQ(HJ-U8]X
2024-01-10 21:51:59 UTC	1252	IN	Data Raw: 53 fd 55 5a 8e c5 11 0d 0d d6 37 d0 f9 ad 5c 39 b9 1b 94 48 12 60 4c c4 de 17 21 b5 cf 78 08 36 d1 c3 cc 58 8f 5d 56 f7 e2 01 11 30 75 10 6f 3f 7c 96 2b a6 6b bf 45 a2 26 79 42 b8 11 11 b7 cd 72 cd 67 1a 63 2b 9a 1d 13 a4 89 d8 84 9f b6 bd 94 f3 3f 20 33 04 e6 86 8d 88 27 d1 65 9d 69 76 11 ae 78 71 fc 31 1e fc fe 6b 6d 5a a7 29 8d 57 37 87 63 b3 34 87 34 08 32 0c 9f 10 8d 20 85 d1 c2 4d 47 16 81 7f c2 05 e5 36 dc c1 d6 ea 8e 07 8f ab 4b 15 dd 57 00 35 cd 96 96 89 04 1d 24 93 e9 e8 ba d8 8a ef 63 73 53 00 96 dc 30 90 33 f2 2d 9e 56 95 97 14 ca 74 03 5d 59 e0 91 39 1a d0 5c 63 43 e2 d2 25 b1 62 6e 3a 23 84 c5 b2 b0 71 69 9c a2 4b 7f 13 40 3f 11 1f e5 ea 26 39 c2 ef f4 e7 f5 fb 7d 7a 73 b6 7d b2 d7 ce 7b 4f 8b ef 71 2f 7e 52 d2 43 24 1d 41 14 da 0f d1 70 49 Data Ascii: SUZ7\9H`L!x6X]V0uo?\|+kE&yBrgc+? 3'eivxq1kmZ)W7c442 MG6KW5$csS03-Vt]Y9\cC%bn:#qiK@?&9}zs}{Oq/~RC$ApI
2024-01-10 21:51:59 UTC	111	IN	Data Raw: 1a 2e 4d 6e 1c ca 15 cb 19 36 75 47 02 60 65 39 8d 33 94 34 06 82 5a 00 24 09 d6 f0 4c c5 17 d3 f9 2d 9f 0d c3 f2 c9 2f 19 1e 37 b4 e7 ff 00 d7 53 f9 3f e3 6a e4 3d 45 17 9f 8f f8 c7 97 f2 4a ec 19 41 e6 95 a6 ca 28 b4 3f 2d 2d 16 48 f6 e9 e6 a2 8a aa 7a 60 9d 9a a8 a2 15 17 a0 f5 14 50 30 d1 46 14 14 51 3f 34 2a 15 14 48 7f ff d9 Data Ascii: .Mn6uG`e934Z$L-/7S?j=EJA(?--Hz`P0FQ?4*H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49825	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	692	OUT	GET /vi/rUrNqJhIp_g/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 8497 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "1703670634" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 08 ff c4 00 46 10 00 02 01 03 02 02 06 07 05 05 04 09 05 00 00 00 01 02 03 00 04 11 12 21 05 31 06 07 13 22 41 51 14 23 52 61 71 91 a1 15 32 42 53 Data Ascii: JFIFC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;@"F!1"AQ#Raq2BS
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 29 15 a3 dd b7 07 b4 ec 12 19 a6 2e 2f db 1a 62 20 37 fb 2f 33 b7 9d 4c e0 1d 25 6e 35 c4 78 85 8c 96 91 c3 25 89 50 cd 14 e6 45 62 73 91 ba ae e0 8c 72 a7 78 a6 93 7e 5e c2 2c 91 6e 8b ea 28 a2 a4 50 28 a2 8a 00 28 a2 8a 00 f1 4e b0 7f b6 fc 43 f7 7f cb 5a cd d5 a7 59 52 ce 3a c0 e2 88 92 95 00 45 81 81 8f d9 25 65 e3 ba b9 31 96 69 41 f2 da 93 5a ba 15 ca 8b 4a 41 82 36 39 d3 8f 86 d5 55 2f 12 9d 5b 4a 9d e9 03 89 5c 67 bd 27 d0 56 39 45 f2 62 c8 5c ac 68 9b aa e0 f9 d2 aa a3 d3 e7 20 62 4f 8e c2 ba 38 9b ef a9 8f e8 2b 63 28 f0 0e 7e 25 b5 15 5c 97 8f 20 c8 7f d3 6a 5f a4 4b ed fd 2a ca 37 ba 13 bd 12 75 15 07 d2 25 f6 fe 94 7a 44 be df d2 8d 0c ce fc 49 d4 54 1f 48 97 db fa 51 e9 12 fb 7f 4a 34 30 ef c4 9d 45 41 f4 89 7d bf a5 1e 91 2f b7 f4 a3 43 0e Data Ascii: )./b 7/3L%n5x%PEbsrx~^,n(P((NCZYR:E%e1iAZJA69U/[J\g'V9Eb\h bO8+c(~%\ j_K*7u%zDITHQJ40EA}/C
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 47 24 58 34 c5 d1 5c a2 a8 20 c4 c4 3b e8 3b 60 67 e3 4d 2a 46 91 92 49 04 d3 52 12 97 24 9e 79 f3 cd 38 62 0c c1 59 ce 31 9a e3 9b b9 0c 83 56 5b 00 82 07 8f be 98 24 a3 86 27 39 a7 5c 24 40 e9 39 19 a6 24 6c 91 4a 30 e1 93 48 21 73 49 5d 6c c0 95 38 3b 6f 4b 85 81 84 af 2c 1c 93 4e bc fb 85 03 34 58 58 83 a5 81 3f 8a b5 9d 57 a1 5e b0 38 69 f0 f5 b9 ff 00 09 eb 20 84 6a 21 bc 6b 5f d5 8c 85 ba c1 e1 4a 01 c7 ad cf f8 4f 5b 1a b4 6a ab 3e 80 a2 8a 2b a8 a9 c6 60 aa 59 88 0a 06 49 27 61 4c 59 71 0b 2e 23 0f 6d 63 79 05 d4 59 c6 b8 24 0e b9 f8 83 55 5d 28 e0 bc 43 8c c2 91 59 5d 24 28 62 9a 29 51 de 45 0e 1e 32 a0 f7 4e 92 01 39 c3 29 f7 15 c6 f5 f7 5d 1a e9 14 cf 7a d0 f1 e5 84 dc 26 50 81 26 51 bd 66 14 e1 86 c3 b4 5c 32 e9 fd 98 ca 9c 9a 00 d4 2d cc 0d Data Ascii: G$X4\ ;;`gM*FIR$y8bY1V[$'9\$@9$lJ0H!sI]l8;oK,N4XX?W^8i j!k_JO[j>+`YI'aLYq.#mcyY$U](CY]$(b)QE2N9)]z&P&Qf\2-
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 1a 6c cd 34 c4 9c 7b c6 6a 2b 5e 1b 79 56 08 a2 11 60 16 09 9d c1 dc e0 93 f1 fa 52 7e d1 50 e5 96 28 de eb fd d8 e6 79 e7 6e 7f f6 ad 6e 5e 66 db 26 4f 7f 78 ef d9 fa 6d d2 40 9d e6 31 4a ea 5b ea 70 37 15 d6 e2 37 f0 c0 92 5b 71 0b b7 7e d0 0c 3c b9 0c 31 93 cb e1 51 19 dd 2f 53 4a 32 4a eb de 88 c9 93 9c 1c 83 9f 0d aa 45 a4 0d 19 60 da 04 b1 1c eb d1 93 f0 0d 4d 1c 93 8b b4 d9 95 76 99 75 67 c5 a5 bb 8c 1f 49 91 64 fc 49 da 93 fa 8d f9 54 9f 49 b8 ff 00 e4 4b fc 66 b2 36 e1 19 e6 ed 19 ed 91 18 e0 a3 0c 03 93 e3 e5 9a d3 a6 7b 35 d4 72 70 33 8a fa 8f b3 fa cf 88 4e 32 5b af dc f1 ba ac 2f 13 b8 bd 99 e6 7d 32 91 e4 e9 5d e6 a6 2c 49 8f 25 8e 49 ee 2d 67 9d 5c ca 4e c4 8d f9 d5 ff 00 4c b4 0e 94 5e 1c ee 02 12 3f e4 5a cf 19 86 09 1c f9 57 1e 6f f9 25 Data Ascii: l4{j+^yV`R~P(ynn^f&Oxm@1J[p77[q~<1Q/SJ2JE`MvugIdITIKf6{5rp3N2[/}2],I%I-g\NL^?ZWo%
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 40 79 9e 58 a5 09 f8 2c b7 0c 62 8d 64 95 c8 31 62 06 ca 9c 73 3e 7b d7 a1 d0 f4 b3 8b d6 e6 a3 f3 3a 70 f4 72 c5 92 f3 e2 72 4b d2 d7 fd 19 0e 28 6e ae 78 bc 8d 78 ec d3 38 56 66 6e 7f 74 63 e9 51 fd 12 42 09 5f 91 ab 8e 39 10 3c 6e 76 66 39 01 36 f2 ee 8a 86 5f 4e d9 de ba 72 e1 71 93 22 f2 41 bb 5b 5f d1 10 63 86 45 73 95 3b 73 f7 52 db 43 ae 42 ef 9d ea 42 05 46 69 32 77 d8 8a 8a f1 15 62 51 b3 be 45 45 45 b0 d4 90 14 52 58 a9 d8 78 52 bb 34 5c 10 c7 34 c6 a6 42 46 0e 4e d5 c1 29 ed 01 6d c0 ac a3 55 0f 47 39 0a 07 30 0d 2c 20 92 30 e7 25 98 ef 49 33 2c 6a dc b3 9e 54 df a4 6c 74 ec 36 ac a0 a2 4b a4 08 40 19 ce 33 bf 8d 46 05 c1 0d be 3d f4 f1 25 ca b2 f2 f3 a7 33 a9 79 53 28 b6 e9 1a 44 9a 46 d2 57 04 12 77 f8 54 7a b2 60 15 09 c6 e0 53 70 30 99 49 Data Ascii: @yX,bd1bs>{:prrK(nxx8VfntcQB_9<nvf96_Nrq"A[_cEs;sRCBBFi2wbQEEERXxR4\4BFN)mUG90, 0%I3,jTlt6K@3F=%3yS(DFWwTz`Sp0I
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 91 a8 ee 6b 9a df da 34 b6 ec 90 e0 a9 cf c6 94 52 30 ba 8a ed f1 a2 ce 8d 50 f2 19 d6 d9 ce a3 4e c6 c9 a0 86 c0 f3 f7 d0 a8 92 03 a4 63 df 9a 4c b6 ac 83 56 ac 83 4d 1d d8 93 58 e7 1a e0 4b ca a4 61 14 01 e6 45 21 65 65 f0 1f 2a e1 46 1e 14 9a 67 63 42 18 d2 a4 4a 5b cd b7 4f 91 a5 8b c8 fd 96 15 0a 8a 65 36 8d 78 60 c9 fe 93 09 18 27 e6 2b 82 78 23 1d cc 6f e5 50 6b a0 16 38 03 26 9b bb 26 27 62 28 99 e9 08 fb 31 18 34 a4 18 07 1c a9 a8 60 0b de 6d cd 3c 00 03 02 a9 05 26 ed 90 c8 e2 b6 88 ec 60 47 18 41 c8 54 74 b4 0a 49 62 0e f4 e5 19 af 37 bd 27 b1 34 d8 e3 8d 71 32 1e 64 62 a3 c1 03 c7 9d 45 70 7d f4 b2 ea 06 49 a8 13 4e d2 9e 64 2f 80 a7 8c e7 23 63 1b 54 58 e8 3e 62 8e cc f9 8a aa 0c 47 22 47 c2 a4 41 72 46 11 ce de 06 a9 ab 22 e1 9a b1 69 76 89 Data Ascii: k4R0PNcLVMXKaE!ee*FgcBJ[Oe6x`'+x#oPk8&&'b(14`m<&`GATtIb7'4q2dbEp}INd/#cTX>bG"GArF"iv
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 55 41 42 28 aa 48 6e 71 ea 5b 15 08 c6 c1 03 95 21 4f 23 e7 53 dc 64 63 c2 97 62 7d 60 86 45 05 54 12 84 d3 0f 12 14 56 53 cc 09 54 c0 1c f3 b5 3c f6 06 11 13 6e c4 9e f0 c7 2a b9 da a2 4c a1 23 55 2e 58 83 cc d4 dc b6 1a 4a 91 1c 20 a6 67 74 8d 97 58 c8 e7 fa d3 e4 e0 12 06 6a 19 b7 9e e2 5d 52 77 45 4a 0f 7b 6c e7 8b de ce db 4b 30 b9 ed d7 60 4e ff 00 0a b5 96 58 d8 29 62 72 46 46 9f 1a 89 25 b8 b7 86 32 99 6c f3 14 d0 63 af ee b0 07 e9 5d 3a 54 d5 a3 ae 31 b8 d9 25 dc bb 16 34 9a 3f 5a 31 ef ae 17 c9 c4 db 6f 72 55 a4 98 04 39 cb 67 9f 98 ad 6f 57 44 8e 9e f0 d0 ab 95 3d ae 48 3c bd 53 d6 36 35 c0 0d 9c 1a d5 75 6b a8 75 87 c3 3b c7 07 b5 db f7 4f 54 86 4d d2 3a b4 b5 0b 67 be d5 27 14 e0 57 97 f7 32 4b 17 14 92 04 7c 61 14 b0 c7 77 18 18 3e 7b fc 4f Data Ascii: UAB(Hnq[!O#Sdcb}`ETVST<n*L#U.XJ gtXj]RwEJ{lK0`NX)brFF%2lc]:T1%4?Z1orU9goWD=H<S65uku;OTM:g'W2K\|aw>{O
2024-01-10 21:52:00 UTC	379	IN	Data Raw: c4 e4 02 f6 8a a6 9f 81 4e e9 a2 1e 23 24 23 59 61 8d 44 af ed 39 77 b9 8e d1 71 e1 dc 1b 79 2e c3 83 dc d9 dd a4 f2 71 39 66 50 9a 5a 23 ab 49 39 38 23 2c 70 7b c7 e3 b7 90 c0 05 b5 14 51 40 05 14 51 40 1f 3c 75 a5 ff 00 b8 dc 53 f7 3f c9 4a c9 69 38 ce 2b d0 ba c5 b3 82 5e 9d f1 19 1d 32 c7 b2 c9 cf fb a4 ac cf d9 f6 c7 f0 1f e2 34 01 46 79 d7 2a f3 ec db 5f cb 3f c4 68 fb 36 d7 f2 cf f1 1a 9c a2 db 19 3a 28 e8 ab d1 c3 ad 47 fb 3f a9 a3 ec fb 6f cb fa 9a 5d 0c db 28 ab ba 4f 95 5e 7d 9f 6d f9 7f 53 5d fb 3e db d8 fa 9a 34 30 d4 8a 60 2a 43 b6 80 82 ac 7d 02 db f2 fe a6 ba d6 36 ed cd 3e a6 a9 04 e2 9f 98 92 fb cd 15 73 73 04 6e 08 a6 c3 81 e1 57 06 c6 dc 80 0a 6c 3d e6 b9 f6 7d b7 e5 fd 4d 2e 58 6b 76 64 62 92 a6 55 03 9e 54 a5 38 24 fb aa cc 58 5b 0e Data Ascii: N#$#YaD9wqy.q9fPZ#I98#,p{Q@Q@<uS?Ji8+^24Fy_?h6:(G?o](O^}mS]>40`C}6>ssnWl=}M.XkvdbUT8$X[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49827	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	692	OUT	GET /vi/XIm6YA4O6Xw/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5548 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 12 10 10 10 0f 0f 0f 10 10 10 0f 10 10 0f 0f 10 0f 11 10 0f 0f 10 17 15 19 18 16 15 16 16 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 26 28 2d 2f 32 32 32 19 22 38 3d 37 30 3d 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 10 10 1d 2f 1d 1d 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 43 10 00 02 01 02 04 02 06 06 05 0a 05 05 00 00 00 00 01 02 00 03 11 04 12 21 31 05 41 06 13 22 51 61 71 23 32 81 a1 b1 b3 14 42 83 91 c1 24 25 33 34 Data Ascii: JFIF+#(%5&(-/222"8=70=+12////////////////////////////////////////////////////@"C!1A"Qaq#2B$%34
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: a4 18 ce a9 3d 0d ae 87 8b 2a 0b c9 e9 b4 61 1e 21 66 6d 69 a9 88 da 65 d6 97 8a 32 57 8e 88 44 59 b4 73 e4 91 76 91 b4 78 32 33 29 10 08 f5 88 92 58 85 a7 ae d2 0a 9b c9 c1 12 07 de 15 18 f6 e9 c0 d3 d9 1a c2 3f fa 46 99 cb 5e 82 a3 8d e5 2a 9b cb d5 25 37 de 34 9a 04 d5 c3 25 94 4c fc 3d 3b b0 9a a0 46 70 42 10 90 a3 58 42 2c 22 02 04 c2 32 b1 d2 30 6d 3d 4d e6 cf 46 7f 5c a3 f6 9f 2d a6 3d 31 a4 d8 e8 d7 eb 94 7e d3 e5 b4 9b d1 bd 05 1e 3a 44 05 a2 f5 93 92 8d 24 bc 49 19 a9 18 d5 fc 62 d8 4f 78 f5 7d 44 a0 d8 9f 19 15 4e 24 89 ab 30 51 e2 6d 09 b3 56 6a 4e 18 d9 6a 1d 4e d4 c0 e7 df 23 ab c3 1d f9 57 1f 6a 14 44 6e 93 d1 cc 57 36 c2 f7 1b 19 2d 2e 3b 4d b6 71 e4 4d a6 9f b7 f1 1a 88 9b a3 c0 9b 9a 6a 76 d5 eb 39 e5 dc 23 97 a3 4b fb 38 75 fe 42 df 19 Data Ascii: =a!fmie2WDYsvx23)X?F^%74%L=;FpBXB,"20m=MF\-=1~:D$IbOx}DN$0QmVjNjN#WjDnW6-.;MqMjv9#K8uB
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 6b a1 32 06 1a cb 94 96 c2 20 92 11 21 03 04 c8 ef 1d 52 22 24 46 78 81 30 8c aa 74 80 47 b9 92 ac 89 24 c2 20 59 b5 d0 ea 21 f1 f8 75 61 70 7a db 8f 2a 4e 7f 09 8b 37 7a 12 7f 39 61 be db e4 bc 2f 47 8f 6e b3 a5 58 35 54 21 45 81 cb a7 2b de 5f e8 76 07 ab c3 97 23 5a ad 71 fb ab a0 fc 65 3e 93 66 7a eb 48 6d 65 00 77 b1 33 aa a3 40 22 22 2e c8 a1 47 b0 4c 2d d6 2e 9c 67 ec 8d 93 b5 7f 0b 7f 7e e9 1d 43 7a 8a a3 ea 82 c7 db a0 fc 64 c8 2f 73 e3 21 c3 8b b3 b7 79 b0 f2 1a 7f 59 ce de 55 4c 7e 21 54 d9 80 25 bd 50 76 27 c6 73 1c 4b 02 4d 44 3e 88 07 5b b6 55 ca 69 91 c8 f7 ce 9b 89 60 05 50 79 15 d8 cc 43 80 6b f6 db 41 df 2a 51 31 d9 78 3b 80 8d 71 a0 20 03 28 71 45 ed bd b3 10 a0 b1 b3 5a e3 c2 74 2d 85 51 4d 55 06 97 f7 c8 2b 60 97 46 3a 37 2f 18 6f db Data Ascii: k2 !R"$Fx0tG$ Y!uapzN7z9a/GnX5T!E+_v#Zqe>fzHmew3@"".GL-.g~Czd/s!yYUL~!T%Pv'sKMD>[Ui`PyCkAQ1x;q (qEZt-QMU+`F:7/o
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: ee ef fa b9 35 34 6d 7a 97 d0 4a 15 65 80 fa 83 e3 2e 56 c1 0a 80 15 36 36 8e 15 63 c2 58 ab 82 65 e5 79 01 12 f6 8a 23 5f 68 eb 46 b4 64 8a 24 7d a2 5a 52 4c b4 2d 1d 68 5a 32 36 d0 8e b4 4b 40 3b 08 45 10 9c cd c9 08 42 23 10 84 20 04 21 08 01 08 42 20 21 08 46 08 67 45 d0 25 fc e5 86 fb 6f 92 f3 9e bc e8 fa 08 df 9c b0 df 6d f2 5e 14 7d bd 78 88 b6 8a 60 27 3b a0 85 64 6c 92 72 64 4e e2 2d 09 55 6a a0 b6 5b db 35 c7 8c e5 f1 38 4c 95 19 7c 6e 3c 8e a2 74 58 87 50 69 54 ce aa e4 80 2f fb 04 eb ee b4 ce e2 3c 22 aa 5e a5 fa c0 2e 5a c2 d6 52 74 d3 db 17 8b 49 c9 ef 4c 87 a5 76 07 31 16 e5 ca 37 12 6c a6 da 9e 51 e5 c6 b6 3e 60 e8 44 9a 86 1b 39 4f d9 24 e6 6b dc b5 8f b8 4c dd 17 29 a4 bc 37 87 e5 a3 73 98 7d 7b ea 0e 6e 46 6a 8c 1d 36 23 ad 55 eb 02 16 Data Ascii: 54mzJe.V66cXey#_hFd$}ZRL-hZ26K@;EB# !B !FgE%om^}x`';dlrdN-Uj[58L\|n<tXPiT/<"^.ZRtILv17lQ>`D9O$kL)7s}{nFj6#U
2024-01-10 21:52:00 UTC	1177	IN	Data Raw: 08 a4 05 a7 d6 dc 68 a0 f2 b7 be 53 e9 0d 0c f4 33 aa e6 23 20 b8 26 fa ca d7 b4 db a4 29 89 7a 08 19 69 b3 1b 35 da fd 90 6f 61 7f 09 4f 07 55 9e b5 9f d6 75 62 49 16 24 ef a7 b0 cb fc 3b 04 c2 88 b0 04 e6 be 57 24 aa db 43 61 cc 1b 5e d3 43 0f 49 7a a7 08 99 5a e6 f7 39 74 37 d7 5d b7 31 fa 29 6d f6 cb 5c 29 a3 53 38 17 0d 70 4f d5 03 bb ce 6a 51 5b 9a 8c ba 58 22 96 71 61 a5 c9 3e f8 94 f0 e4 d0 55 cc 0d ec d7 b6 fa f3 8e c7 61 1a a5 02 94 cf 6e f7 3d ab 02 77 37 99 5c 66 f6 de e5 74 a7 8c c6 26 1d 46 76 cf 54 02 29 01 6c ca 0f d6 27 ba 63 55 c7 b5 62 6e 32 83 bd 8e a6 57 a7 84 25 89 aa 72 80 48 39 8e b7 8d c5 e2 80 19 29 0b 77 b5 b5 3e 5d d3 69 8c 18 ff 00 6a 4c 4f 14 ca 9d 5d 21 6e 45 87 e1 32 19 99 8d 85 c9 32 7a 74 4b 1d a6 c5 3c 12 2f 6a 9d 36 5f Data Ascii: hS3# &)zi5oaOUubI$;W$Ca^CIzZ9t7]1)m\)S8pOjQ[X"qa>Uan=w7\ft&FvT)l'cUbn2W%rH9)w>]ijLO]!nE22ztK</j6_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49826	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:51:59 UTC	456	OUT	GET /vi/DEzbbbVsNi4/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 9070 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 21:16:32 GMT Expires: Wed, 10 Jan 2024 23:16:32 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 2128 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	604	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 12 12 15 13 13 12 17 16 15 16 18 18 17 17 17 17 18 17 18 1a 15 1d 17 15 19 19 17 15 16 17 1a 1f 2b 23 1a 1d 29 1f 16 18 25 35 26 29 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 30 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 32 26 23 29 2f 2f 2f 30 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 31 32 2f 2f 2f 32 2f 2f 2f 32 2f 2f 2f 2f 36 2f 2f 3b 2f 2f 2f 2f 30 2f 35 3b 2f 32 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 05 06 07 08 02 03 04 01 ff c4 00 48 10 00 02 01 03 02 03 04 06 06 07 05 07 04 03 00 00 01 02 03 00 04 11 12 21 05 06 31 13 22 41 51 35 61 71 74 81 b3 07 23 32 91 a1 b1 14 42 62 72 Data Ascii: JFIF+#)%5&)-/222"8=70<+1202&#)///0///////5////////12///2///2////6//;////0/5;/2//@"H!1"AQ5aqt#2Bbr
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 0f ff 00 21 50 2c 73 8c 60 ef 9f 0a 94 52 44 8f 17 1c 92 58 51 c4 af 9c 60 e1 db a8 f8 d7 0c fc 5a 60 3f db cb ff 00 51 ff 00 ad 33 f8 6f 13 68 1b 4e 7b ad 8f 65 2e 3d c8 75 c8 aa ed e4 b6 ee 0e f7 e3 d3 e0 1e da 4f 2f b6 ff 00 d6 b1 ff 00 f3 33 1e 93 cb ff 00 51 ff 00 ad 21 b4 bb 56 11 4e 41 a9 a2 b6 3d 38 57 18 94 ec d2 b9 f6 bb 1f e7 4b d0 71 07 3f ae df f3 1a 60 da dc e1 81 1f eb 34 e7 b0 94 90 0d 51 9a 45 d8 8f cf af 73 0b 2d d4 37 13 a8 3d c9 14 4b 26 95 3f aa fa 73 81 9e 9e d0 3c 4d 32 a1 e6 5b b5 39 37 77 07 db 34 a7 f0 2d 52 d7 10 b4 13 db c9 1b 7e b2 30 fc 36 3f 03 83 50 a9 8f 38 3e aa bc 5d 95 9a e4 74 f0 ae 75 ba 46 00 cd 23 ab 1d c3 48 e7 d5 b1 27 22 b6 71 4b 8b f8 9d 9d a6 b8 11 b3 12 ac 25 90 ae 18 e4 0c 86 db af 4d a9 ad 0f 51 ed a7 d7 2a Data Ascii: !P,s`RDXQ`Z`?Q3ohN{e.=uO/3Q!VNA=8WKq?`4QEs-7=K&?s<M2[97w4-R~06?P8>]tuF#H'"qK%MQ*
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 31 4b 8c 76 88 8f 8f 2d 4a 1b 1f 8d 31 64 72 b5 2e d0 d6 e9 61 89 47 26 27 71 90 9d ce 5e 8d be f7 4b 8f 90 f5 53 6a d9 73 97 a3 6f bd d2 e3 e4 3d 54 da d8 f3 82 8a 28 a0 0a 28 a2 80 28 a2 8a 00 a2 8a 28 02 ad 97 26 7a 36 c7 dd 2d fe 42 55 4d ab 65 c9 9e 8d b1 f7 4b 7f 90 94 02 d5 73 cf 61 1b 9c b2 02 7c c6 41 f6 6a 1b d7 27 1c e6 08 6c 95 1e 72 40 77 08 30 33 8d 89 2c 47 90 03 7a 61 71 0f a4 9b ae d5 d5 12 38 d5 58 80 19 4b b6 c7 62 5b 50 1b 8c 1d 87 8f 53 d6 b1 cb 2c 75 53 57 ed d9 db a6 d2 66 cd ce 3e 3d fa 24 3f ff 00 11 06 08 31 83 9f 13 92 7e 0c 4e 45 67 69 c3 62 8b 25 13 04 f5 39 24 fb 32 4f 4a 64 f0 bf a4 77 db f4 98 94 a1 38 d7 16 41 1e b2 84 9d 5f 03 f0 34 fc b7 b8 59 11 5d 18 32 b0 05 58 6e 08 3d 08 aa 63 86 06 ee 11 56 bd 97 03 53 83 51 83 8c Data Ascii: 1Kv-J1dr.aG&'q^KSjso=T((((&z6-BUMeKsa\|Aj'lr@w03,Gzaq8XKb[PS,uSWf>=$?1~NEgib%9$2OJdw8A_4Y]2Xn=cVSQ
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: d2 37 a2 6f 3f 84 7f 31 55 b6 a5 15 67 b4 51 5e 50 80 a5 ae 5b 4c b3 7c 29 18 52 ff 00 2c 0f b6 7d 95 9e 5f d0 cd b0 2b c8 87 5d 9a 77 85 29 f1 2c 2e 23 7c f6 52 a6 8c 8f d4 6c e7 57 e2 31 ec ae 0e 1c 72 e2 94 78 b4 cc 93 43 95 06 26 52 af 91 90 30 41 1e cf 1f ba bc d8 9e ac 9d 34 33 79 b7 83 cc f7 00 a2 ea d3 1a a1 39 51 92 19 b0 46 4f 4d 25 69 00 f0 5b 81 ff 00 09 be 18 3f 91 a7 2f 16 e3 a4 39 d2 43 0f 02 41 dc 0d 87 8d 70 a7 31 91 fa 80 fc 48 ae fc 72 7b 52 3c cc b0 4e 4d 88 ad c3 a6 1d 61 93 fe 46 fe 95 83 5b b8 ea 8c 3d aa 47 f2 a7 24 7c d8 07 58 4f c1 ff 00 a8 ae a8 b9 c2 2f 14 90 7c 14 ff 00 e5 5a 6e 7e 86 5b 17 a8 cd d5 5e e6 9f 6b cd 56 c7 ed 33 0f de 42 7f 2c d6 d5 e2 b6 0f d4 c4 7f 7a 3c 7f 89 69 f3 3d 87 cb f7 1a 5c b5 fe ff 00 65 ef 56 df f7 Data Ascii: 7o?1UgQ^P[L\|)R,}_+]w),.#\|RlW1rxC&R0A43y9QFOM%i[?/9CAp1Hr{R<NMaF[=G$\|XO/\|Zn~[^kV3B,z<i=\eV
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: e9 d0 74 e9 d3 c2 80 48 e7 2f 46 df 7b a5 c7 c8 7a a9 b5 6c b9 cb d1 b7 de e9 71 f2 1e aa 6d 00 51 45 14 01 45 14 50 05 14 51 40 14 51 45 00 55 b2 e4 cf 46 d8 fb a5 bf c8 4a a9 b5 6c b9 33 d1 b6 3e e9 6f f2 12 80 dd c6 64 ce 88 fc 1b 2c de b0 b8 c2 9f 69 61 f7 53 43 8f 5c 5e 25 cd ba c4 4f 61 33 a2 48 ca a0 98 4a b9 62 7a 1d 9d 7b 99 3b 0d 3e 04 d3 b7 8b ae 1e 36 f0 21 97 e3 b3 01 f7 06 fb a9 a7 c4 f9 8e 68 e7 b7 8e 1b 37 9a 39 0e 24 90 64 08 7b fa 58 36 01 00 81 de ef 11 91 d2 be 47 5e e7 2d 73 54 9d 2e 13 aa ea fc fb f2 7a 18 d7 fc 4b fc f2 35 b8 9f 01 86 d6 4c 4d 7f 12 b1 c4 80 3e ce c3 57 da 6d fc 70 77 f5 1a 92 79 5a ec f7 e2 ce 46 35 af ab 7c 36 3d 5b 83 f1 34 8b c4 38 65 b4 c6 47 31 86 67 40 8c c7 39 c0 59 14 69 fe e9 c4 ae 32 30 7b d4 a5 ca 56 d8 Data Ascii: tH/F{zlqmQEEPQ@QEUFJl3>od,iaSC\^%Oa3HJbz{;>6!h79$d{X6G^-sT.zK5LM>WmpwyZF5\|6=[48eG1g@9Yi20{V
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 96 43 47 36 28 a0 d1 56 20 2b 24 7c 1a 02 d6 14 20 dd 34 b9 03 d5 4b 5c 3e e8 cb 17 64 3e d0 a4 0a ec e1 2a 4c ca 14 e0 ef f9 55 26 ad 1a 63 93 4c 58 4e 17 22 30 60 46 47 ae 97 12 dd 8a f5 00 f9 56 81 75 1a fd b6 04 e3 70 37 df c7 a5 6b 3c 6b 1f ec a3 f8 b7 f4 15 c9 b5 cf b3 b7 72 c7 c2 3a da c9 b1 92 45 6c b1 d2 8d a8 b0 2e 3e c8 1e 1e 64 fa e9 38 5b 4f 39 ef 31 c7 90 d8 52 e7 0c e0 ca 83 a6 fe 35 65 8a 2b b2 8f 34 9f 06 c1 03 48 41 3d 07 41 fc cd 76 c7 69 8a d8 ca 23 1e bf 01 e7 5c 82 49 01 ce a3 bf dd f0 a3 2a 85 6e 1b 0e 27 87 f8 91 ff 00 8c 54 8d 51 a7 09 bd 63 3c 20 a8 de 48 c7 4f db 15 25 d6 b8 8c b2 05 32 f9 8f 88 34 f2 08 e1 68 84 91 48 c6 31 2a 33 6a 70 8f 1c 8b a1 59 5c ec f9 0f 16 48 e8 7a 91 4f 4a 67 f1 1e 56 ba ba 92 61 71 7d d9 5a 31 60 22 Data Ascii: CG6(V +$\| 4K\>d>LU&cLXN"0`FGVup7k<kr:El.>d8[O91R5e+4HA=Avi#\In'TQc< HO%24hH1*3jpY\HzOJgVaq}Z1`"
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 83 23 31 01 54 03 21 db 39 27 43 f2 6d f6 4e 38 84 24 78 17 b3 05 c8 1d 35 15 94 02 71 8d c0 1e c1 4b bc 0b 81 1b 70 5a 59 bb 69 99 8b 33 e8 11 a8 ca 46 81 51 01 38 1a 62 4e a4 9e bb f8 00 3c e6 d5 cd 8c e3 f6 3f f2 15 08 f1 4b 41 a0 e4 7b 3d b5 39 f3 2a e6 d2 61 fb 3f cc 54 60 2d b0 77 19 a8 ba 2a c8 f1 ad 0f 97 e1 5d 16 dc 31 99 80 0a 77 e9 9d bf d0 a7 f8 03 fb 83 ee ad 62 20 4e ac 53 78 71 f7 13 a3 e5 81 81 df fc 3f ce bb a0 e0 e8 9e 19 34 a0 ad 59 6a aa b9 32 e9 23 08 0e 36 00 57 6a ef 8d ab 9a 34 c9 db 73 4a 31 45 81 59 b3 44 6b 11 d6 d4 5c ff 00 af e7 59 05 ac c1 1e 3f 8f 4a 82 c6 99 6d 8b 74 3f 03 f9 82 2b 95 ed c8 ea 0f fa f2 61 fc e9 4b 1e a1 5e f4 dc 6e 3f d7 4a 10 25 0d ba 6f ed ff 00 5f 8d 7b 9f 35 f8 8e 94 a0 f6 ca 7a 0c 1f d9 db e3 8e 86 b9 Data Ascii: #1T!9'CmN8$x5qKpZYi3FQ8bN<?KA{=9a?T`-w]1wb NSxq?4Yj2#6Wj4sJ1EYDk\Y?Jmt?+aK^n?J%o_{5z
2024-01-10 21:52:00 UTC	954	IN	Data Raw: 2d 9d fc b5 0c 7f cb 4c 6b 6b 69 2e 64 11 c2 86 47 3e 0b e1 eb 63 d1 47 ac d4 f4 ca 08 c1 19 07 a8 3e 35 8c 50 2a 0c 22 85 1e 4a 00 fc ab 9a 7a 7d d2 dd 67 b3 a7 f8 ab c3 85 63 51 b6 ba 77 fc 0d ee 4f e5 05 b1 42 ce 43 ce e3 0e e3 a2 8e bd 9a 67 c3 cc f8 91 ea 00 39 31 5e d1 5d 11 8a 8a a4 79 59 72 cb 2c 9c e6 ed b0 a2 8a 2a 4c cd 32 5a 46 c7 2d 1a b1 f3 2a 09 fb cd 6c 55 00 60 0c 01 e0 2b 2a 2a aa 29 3b 48 9b 62 77 1f 90 2d ac ac 7a 05 24 fc 37 a8 d0 f1 86 91 a3 58 82 86 63 de 07 a8 00 82 48 27 62 31 9f 5d 49 bc 70 66 da 50 7a 15 fe 62 a3 db 1e 13 14 27 28 09 6c 63 53 12 4e 3d 5e 02 b3 c8 a4 da a3 ab 04 f0 c2 32 73 57 2f 1e 9e 7b 3a bf 4c 50 51 48 21 9e 47 8b 6d 38 05 52 49 43 1d 4c 3b ad 1c 79 18 ce e0 8f 1a da f3 00 09 27 18 04 ef 9f 02 06 00 1e 3d e1 Data Ascii: -Lkki.dG>cG>5P"Jz}gcQwOBCg91^]yYr,L2ZF-lU`+*);Hbw-z$7XcH'b1]IpfPzb'(lcSN=^2sW/{:LPQH!Gm8RICL;y'=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49829	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	692	OUT	GET /vi/Z-LvPIt1qm4/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6215 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 12 12 10 0f 12 10 0f 10 15 10 15 15 15 10 0f 10 0f 15 0f 10 0f 15 17 15 19 18 16 15 17 15 1a 1f 2b 23 1a 1d 28 1d 15 17 25 35 25 28 2d 2f 32 32 32 19 23 38 3d 37 30 3c 2b 31 32 31 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 1d 1d 27 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 30 2f 2f 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 42 10 00 01 04 00 04 02 07 04 05 0a 06 03 01 00 00 00 01 00 02 03 11 04 12 21 31 05 41 06 13 22 51 61 71 91 32 81 a1 c1 23 62 72 b1 d1 07 14 16 42 Data Ascii: JFIF+#(%5%(-/222#8=70<+121/'////////////////0/////////5//////////5////////////@"B!1A"Qaq2#brB
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: be 78 3c 8f e8 c7 ef bf 87 fd 48 fd 18 fd f7 f0 ff 00 a9 7d 0f 17 c3 0c f8 b9 f0 8d 8e 28 04 32 cd 95 fd 58 8c 86 e6 cb 1b 1d 55 60 bb 20 04 eb db e7 b2 e6 63 78 63 63 86 19 4b dc 1f 28 0e ea 5c cc a6 b3 c8 c7 11 ad e8 63 1b 81 79 c5 6c 53 79 f3 2e ff 00 b1 38 fc 33 c3 25 49 c2 a4 eb 6b 93 e7 75 c3 f6 47 95 83 a1 92 49 7d 59 7c 95 be 48 0b eb d0 aa 66 e8 b9 66 6b 90 82 d0 6d a6 2c a4 50 d8 eb a2 fb 8f 47 f0 67 a8 80 c2 e6 06 75 5a b7 aa cc 5c f2 07 6c bb 30 e6 46 95 ae ab ca 7e 50 61 0d ea f3 16 ba 5e ad fd 63 9a ce af 30 ae c9 2d b3 5c f9 ae 68 75 dd 43 92 b5 51 7c 3a ff 00 87 97 8b 07 41 97 3c b0 ac 55 57 5e 67 7b 7b ab 3e 36 84 21 7b c7 ca 1a b0 c3 43 e6 ae a5 56 13 d9 3e 7f 20 ae 50 f9 19 29 37 f4 51 4e 92 48 02 93 49 08 01 a1 24 26 00 52 a4 21 00 24 Data Ascii: x<H}(2XU` cxccK(\cylSy.83%IkuGI}Y\|Hffkm,PGguZ\l0F~Pa^c0-\huCQ\|:A<UW^g{{>6!{CV> P)7QNHI$&R!$
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 26 0c 8d 8d ad af 55 85 54 2b 39 e5 b5 ba 54 b6 63 06 8d 3d eb 2a 86 34 3a 48 85 3a 45 29 2a 8a f2 a3 22 b2 90 80 22 1a 85 24 52 40 40 a5 4a dc a8 ca 80 2a a4 e9 59 91 3c a8 02 aa 4c 2b 32 a4 42 00 8a df c1 e4 2d 90 96 d7 b2 77 17 cc 2c 05 6c e1 6d 25 e4 7d 53 f7 84 3e 37 04 e9 da 3b e7 1e 7b 96 39 b1 0e 72 b9 b0 29 75 3c 96 3b 1a 3c 92 7c 98 84 7d ea c8 e3 5b 46 18 6e 7d c1 0e 8f b8 26 66 50 05 23 2a bb aa 49 c1 47 70 29 72 18 db d5 58 c8 2c d9 d9 58 5b dc 13 74 05 59 7d ff 00 24 83 55 84 28 96 f7 21 0c a5 c1 50 f0 ba d8 1e 15 24 a4 65 8e 47 0e 65 8c cd 97 d6 87 ba c2 d1 8d e8 e4 b1 d9 cb 9d a0 59 2d 04 39 a3 eb 30 ea 3e 23 c5 5a 42 67 90 c7 0e d0 f2 f9 95 9d 6e e2 ec ca f6 8f aa 3e f2 b0 d2 e8 8e e8 87 c8 88 4a 94 c0 52 ea d0 e2 34 ca a9 49 91 93 b0 5a Data Ascii: &UT+9Tc=4:H:E)""$R@@JY<L+2B-w,lm%}S>7;{9r)u<;<\|}[Fn}&fP#IGp)rX,X[tY}$U(!P$eGeY-90>#ZBgn>JR4IZ
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: f9 c3 8d d9 59 b9 94 6d 64 e0 d9 1b 37 72 a9 c4 e2 af 46 9d 0e e5 51 9b 43 e3 ba 55 b2 97 30 12 60 20 a6 b3 6c 64 0a 6d 49 09 b0 25 6a 40 a8 20 29 01 b8 a4 76 08 25 08 10 c3 54 da 92 59 90 03 21 01 a9 f2 4c 20 0a c8 48 a9 39 0d 4c 68 8e 55 e9 ba 05 06 6c 53 c1 76 5f a1 71 06 af 50 f6 72 e6 b8 2d 95 a1 74 f8 04 85 92 f5 8d 75 16 8b b0 77 ed 0d 13 52 d3 e6 09 2d 8f 51 c7 38 4b a2 39 83 48 63 cd 93 bb 01 b1 a3 4f 76 b6 16 4c 23 4d 58 22 83 83 49 3a f6 8e 8d d3 b8 ed e6 be 87 85 6c 78 ac 2b e0 94 80 c7 47 d6 47 29 d9 80 0c d7 ee fb 97 81 e8 be 25 98 89 1c e0 d2 f6 64 78 63 2f 2b 65 91 85 ce 66 6e 60 ba c1 1c f4 4a 5d 24 65 92 d7 0f 73 8b 24 e5 18 59 dd 8f 0c d3 19 73 5c d0 ea 05 cd 04 d8 24 77 72 d9 72 78 96 08 87 b0 07 36 57 10 4b a3 63 73 b9 94 2c 8f 1d 8f Data Ascii: Ymd7rFQCU0` ldmI%j@ )v%TY!L H9LhUlSv_qPr-tuwR-Q8K9HcOvL#MX"I:lx+GG)%dxc/+efn`J]$es$Ys\$wrrx6WKcs,
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: e6 77 76 bb 05 ab 88 63 30 f8 18 73 68 f7 93 4c 6f f9 9d de 55 38 ce 20 dc 3c 64 b8 64 19 b3 16 82 73 4a ea 15 bf 2a ab f2 2b c0 f1 2e 28 f9 a4 32 3c 8d 35 6b 79 35 b7 b2 bc b9 e3 86 3a 60 bf d1 b4 17 77 c9 e6 7a 61 8e 7c f8 9e b6 43 65 cc 15 e0 33 3a 87 92 e0 95 d2 e2 98 b6 cb 25 b7 50 d1 97 37 23 44 9d 3c 35 58 a8 77 2c e1 19 4a 29 be 4d ca 54 80 52 a4 52 d6 31 a0 04 14 ca 8a 53 9f 60 44 4e e9 92 a4 06 b6 a2 e5 83 28 02 2d 46 d3 03 42 80 18 72 8d a0 84 26 03 72 8a 95 a8 94 c0 bd ba 58 3c 92 69 57 3d b9 bc c7 c5 67 b4 4a 2d 30 44 9d ba 89 28 b5 12 54 01 20 52 0a 39 94 82 60 36 9d 54 d4 72 ea 14 93 10 d5 ad 8c 15 9c 9d 69 5f 09 a3 75 6a d4 46 99 2c 95 d9 34 3c 6b 55 4b d6 fc 4c 8c 73 41 e6 b9 e5 32 c5 d7 16 ec bd 07 42 38 81 8b 12 f7 86 f5 9d 64 2f 64 80 Data Ascii: wvc0shLoU8 <ddsJ*+.(2<5ky5:`wza\|Ce3:%P7#D<5Xw,J)MTRR1S`DN(-FBr&rX<iW=gJ-0D(T R9`6Tri_ujF,4<kUKLsA2B8d/d
2024-01-10 21:52:00 UTC	592	IN	Data Raw: f0 d8 da c7 3d 87 da 89 f9 2d d4 e2 fc b6 00 d3 50 41 37 af 25 ca c3 71 e6 42 5a 1d 13 a4 6c 4c 01 81 ae cb da 3a b9 c7 97 eb 11 e8 ad c5 f1 88 da 58 e8 dc f9 4b 18 03 5b 91 cc 68 24 d9 f6 80 db 2b 75 e6 2d 79 b7 4a f3 b3 48 27 ef 59 e5 cb e7 4e f6 2a 09 a8 9d 3e 31 c5 3a f3 98 31 cd 04 7b 24 e7 7d 0b d2 eb 4f 72 e0 3d b1 93 ab 5d 75 7e f0 87 c3 28 70 76 63 ee d6 bd 55 d9 de 2c 12 e7 6f c8 34 7a 05 19 72 4e 49 38 b1 a8 99 a4 9e c1 ab 39 76 e7 62 b7 f5 5c f9 d8 d9 63 7b 08 a0 4e fb 90 75 aa f5 f8 2e a7 55 42 f2 ea a8 7c 06 8d 02 0d ec b9 54 34 f6 35 4c f3 10 e1 5d 18 73 1d de 6b c4 50 d5 64 72 ed f1 16 53 eb ea fc ca e3 3a 3a 5d f7 71 4c b2 17 49 1e ef 7a 91 6d a4 35 d5 64 51 00 dd 09 55 11 f1 5a 32 e8 ab ab 09 8c 71 1d 08 f0 51 0c b0 14 fb be 28 ad 10 d8 Data Ascii: =-PA7%qBZlL:XK[h$+u-yJH'YN*>1:1{$}Or=]u~(pvcU,o4zrNI89vb\c{Nu.UB\|T45L]skPdrS::]qLIzm5dQUZ2qQ(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49828	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	456	OUT	GET /vi/TCUuPHQEM_w/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 4596 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 21:14:38 GMT Expires: Wed, 10 Jan 2024 23:14:38 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 2242 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	604	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 12 10 15 10 10 10 15 15 10 15 15 15 15 15 15 15 15 11 15 15 16 15 17 15 19 18 16 15 16 15 1a 1f 2b 23 1a 1d 28 1d 15 16 24 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 10 0f 1d 2f 1d 1f 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 07 ff c4 00 41 10 00 02 01 02 04 03 04 06 07 06 04 07 00 00 00 00 00 01 02 03 11 04 12 21 31 05 41 51 22 61 81 a1 06 13 71 91 b1 f0 32 72 82 b2 c1 d1 e1 15 23 33 Data Ascii: JFIF+#($5%(-/222"8=70<+12////////////////////////////////////////////////////@"A!1AQ"aq2r#3
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: f9 b9 da e3 7c 3b 2b db bd 1c be 17 3e db a6 de fa 2f 6f 2f 85 bc 4d e6 5b 9b 70 e5 86 b2 d5 73 d4 52 d1 2b 2b bd 3b db bb f3 b9 19 a3 1e 92 ab 2b 77 7b ec ae 67 65 c4 eb 40 91 9e 68 d0 c5 4d 0c a9 0c 17 11 96 2a c0 92 fd 59 71 83 e4 fc c6 65 05 a7 f3 a0 02 e5 42 ee f7 69 fb 34 29 e1 e5 d1 3f 23 44 6a 75 f3 fc f6 0d 49 7e a0 5a 62 54 a5 fc be 68 8a 84 9f 45 e2 bf 03 65 ca ee f9 f9 d0 63 41 83 ca ac b6 ee fc ca 6f b8 8e 3a fe 45 49 a0 3d 18 82 40 a0 91 21 1c 7e 75 0e 31 05 0d 8a 03 12 21 69 11 88 cb 60 30 e5 21 52 f9 d0 00 27 31 12 af d0 2a 9a 0a 50 e7 d3 e2 54 4d 48 a6 de bf a2 be df 3d c0 d7 a7 96 da 69 df bf 89 a6 82 71 be cf e3 b0 75 e1 99 6f 67 ca e3 4e 98 2c 6d c3 56 cd 52 2d ab b5 7e d3 b6 6b 65 7a 36 b7 32 2e f4 3f 08 bb 6b ed 7d d6 21 23 d1 f0 da Data Ascii: \|;+>/o/M[psR++;+w{ge@hMYqeBi4)?#DjuI~ZbThEecAo:EI=@!~u1!i`0!R'1PTMH=iquogN,mVR-~kez62.?k}!#
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: c9 63 5f 0a fe 3c 3c 7e eb 15 e9 53 b7 af a7 47 3b 8a 67 4e ad 25 18 59 69 dc 61 c0 be d1 d7 cb 99 58 e5 b5 d9 8c 79 2e 23 c4 25 09 5a 10 bc 9f 53 91 c5 a3 51 54 8b ad 51 d4 a7 28 ed 99 c6 37 77 52 8a e8 d5 d3 57 5e f3 db 56 e0 30 93 cc ee 9f 55 f9 12 3c 1a 29 eb 39 b5 f6 7f 23 4c 72 91 19 78 b2 c9 e5 3d 15 69 62 61 52 51 fd cc 29 b8 cb 4b a6 92 b2 57 e7 27 2b bf 7e c9 58 eb d4 c1 46 ac ae 96 48 2b db 2f d2 6a fa 6b cb c3 43 b5 1e 19 4e f7 b3 76 db 33 6e de ce 86 a5 86 8c 56 da 95 72 e0 fc 7e 0d 57 3a 70 d1 74 5b 5f 5f 32 b0 bb df bc 75 77 71 30 d0 88 df 4d b5 a9 de 3e 07 9b a9 49 29 3b ad 2e 7a 45 52 e8 e1 e3 21 69 36 54 2c e7 1b 5d 0c 17 38 49 ae ed fe 21 4f 87 b7 f4 a4 fd d1 fc 82 c1 3e f3 b1 1a 77 41 b1 8e 12 be 67 c7 69 e5 c4 d4 8a d6 d9 7c e1 16 61 Data Ascii: c_<<~SG;gN%YiaXy.#%ZSQTQ(7wRW^V0U<)9#Lrx=ibaRQ)KW'+~XFH+/jkCNv3nVr~W:pt[__2uwq0M>I);.zER!i6T,]8I!O>wAgi\|a
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 96 02 08 4a 12 08 04 1a 60 a5 97 70 4b 03 15 cb 01 16 30 2b 8b c4 c3 34 5c 5f 3b 75 ea ba 6a 1a 63 28 51 94 e4 a1 09 e4 9b bd a5 6b da c9 bf c2 de 22 d8 a4 61 78 45 48 da 70 84 53 5b 7a cb c9 a7 dc 97 c5 fe a7 7f 83 4a a4 34 aa d3 6d dd 5b 45 ae fe 77 7e 27 9a c7 61 71 31 9a 8d 67 39 46 ea ce 12 72 5e 1d 1f b4 6a e3 18 8a 4d 46 ac 3b 31 b6 92 85 9d 97 46 ac b6 e6 45 de 49 c6 fa 6b e9 38 7a d7 46 b8 54 3c f7 0d c7 a9 45 49 3b c5 ab a7 dc ce 9c 31 28 c6 c7 a5 86 73 4d 18 8d 8e 66 22 9e 86 f7 57 31 cf c5 4a c1 8d d3 4d b8 f5 61 18 49 e5 49 37 bd 92 b3 d4 e0 d5 c6 7a dc 5a a8 f6 4e 2a 29 74 8d b4 ee be af c4 ed 71 6a b9 61 74 9b 6d d9 25 bd df 43 5f 09 f4 1d 59 56 aa e4 a5 ca 0a 4a d1 f1 b5 db 37 96 77 5c 9e 4c 7d 79 49 8c fd ba 78 1e 23 57 d5 c5 45 45 25 aa Data Ascii: J`pK0+4\_;ujc(Qk"axEHpS[zJ4m[Ew~'aq1g9Fr^jMF;1FEIk8zFT<EI;1(sMf"W1JMaII7zZN*)tqjatm%C_YVJ7w\L}yIx#WEE%
2024-01-10 21:52:00 UTC	236	IN	Data Raw: e5 dc 84 20 15 58 59 08 32 a6 44 62 21 00 41 96 51 04 a5 96 59 04 68 42 10 66 a0 27 5a 50 ed c2 4e 32 5b 34 42 00 bd 3d 37 02 e2 93 af 49 ca 6a 37 57 5d 94 d6 de 27 5b 06 af 56 fc d4 1f e0 42 1c f9 c9 32 e1 78 5d bd 2f 09 9b 4a cb 96 c7 7a 8c ef 16 d9 08 45 75 4e 95 88 8a f5 72 7c ec cf 84 fa 4f 8b 9d 4a ef 3c 9b b2 b2 e8 b5 7c 88 43 5f 17 6c 3f 91 ed 73 38 72 ed bf aa fe 28 f5 3e 8a e2 65 4e b7 61 db 67 f8 10 86 b9 b0 f0 be a7 87 96 64 ae 4a ab 75 c8 84 39 6b bd e6 b8 de 16 2d 3b ad 95 d7 b5 1e 4e ab 21 0d 31 e9 cf 9f 6f 39 56 a3 72 93 7d 5f c6 c0 dc 84 3a 67 4c 42 4b 90 80 4a 25 c8 41 15 15 48 24 3a 94 15 88 40 45 0c a0 9c 97 b4 64 d9 08 04 cb 37 d9 f0 39 a9 90 83 84 75 2d cd 31 21 06 d3 17 ff d9 Data Ascii: XY2Db!AQYhBf'ZPN2[4B=7Ij7W]'[VB2x]/JzEuNr\|OJ<\|C_l?s8r(>eNagdJu9k-;N!1o9Vr}_:gLBKJ%AH$:@Ed79u-1!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49830	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	456	OUT	GET /vi/4ev_Arx-tZU/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6454 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "1639382404" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 10 12 16 13 12 12 15 15 15 17 17 15 15 15 15 17 15 16 15 15 17 15 17 15 19 18 16 17 16 15 1a 1f 2b 23 1a 1d 28 1d 15 17 25 35 26 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 25 22 25 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 3b 2f 30 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 00 02 05 01 06 07 ff c4 00 44 10 00 01 03 02 03 04 07 04 05 0a 06 03 01 00 00 00 01 00 02 11 03 21 04 12 31 05 41 51 81 06 13 22 32 61 71 91 a1 b1 c1 d1 14 23 42 b3 f0 24 34 52 Data Ascii: JFIF+#(%5&(-/222"8=70<+12//%"%////////////5////////////////////////;/0//////////@"D!1AQ"2aq#B$4R
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: fb a6 2c 55 d0 72 90 22 00 aa c0 ae a4 b2 28 a2 85 00 54 a1 d5 74 04 42 96 c4 39 00 2b 51 b2 e2 8b 54 76 39 21 54 74 38 f2 46 a9 dc e4 90 0b d1 30 51 40 ba 15 2d 51 da 2e 80 67 4e 9c 90 a9 5c 84 57 77 4f 92 ad 16 dc 20 07 94 51 45 b1 91 00 56 85 50 ae 90 15 21 54 84 45 21 14 00 2a 25 9c 9c a8 d4 9b 92 19 da 5a a2 a1 52 d5 15 20 11 c4 77 8a 0c 23 e2 07 68 a1 14 14 17 0c d5 eb 3a 1b 54 37 1b 44 9d 3b 7f 76 e5 e6 29 61 cc 70 5b 3d 14 a4 e1 8c a4 67 4e b2 6e 6f f5 6e dc 93 2c fb 2b 42 68 b5 63 e0 31 5f 64 f2 3f 04 86 39 f5 6a 54 ae 1b 8e fa 39 65 7a 6c 19 ba bc 82 9b 99 4a 64 12 08 33 50 99 bc c4 5b 55 2a 36 cb c7 8f bd d5 d1 e9 a1 48 5e 50 36 a7 54 ef fc 9b fa db 89 22 8e 56 bc 00 ec 8e 68 71 87 41 ca 6e 60 e9 28 14 7a fa b4 e8 bd bb 4c d3 2f a4 d7 3d ae 14 Data Ascii: ,Ur"(TtB9+QTv9!Tt8F0Q@-Q.gN\WwO QEVP!TE!%ZR w#h:T7D;v)ap[=gNnon,+Bhc1_d?9jT9ezlJd3P[U6H^P6T"VhqAn`(zL/=
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 49 81 56 6a af 91 51 9a a3 29 19 ca 42 e7 92 33 42 55 d5 72 3c 13 a4 5d 31 4e b3 5d dd 32 a5 9a 45 f0 14 2d 6e 8a 3b f2 da 5f bc fb a7 ac 89 5b 1d 13 fc f2 97 ed fd db 92 43 3e 93 40 5c a0 ed 36 fd 5b 91 e8 77 95 76 83 65 8e f2 41 27 9d a2 c2 1a 6a 13 66 4b 88 de 43 44 a4 87 4b a8 9f b0 ff 00 e5 f9 ad 3a 0d 9a 55 47 83 bf a5 78 11 4e 5c 1a 37 92 a5 97 14 99 eb 4f 4a a9 7e ad ff 00 cb f3 4b bb a5 c0 d9 b4 bd 5f f0 84 6d 97 d0 61 51 82 a5 57 b9 b2 24 35 bb 87 89 e2 b3 3a 45 d1 d7 61 21 ed 71 7b 77 13 12 de 20 91 a8 4a d3 e1 32 ff 00 0d ae 5a 3d 26 c9 da 3f 48 04 1a 65 a4 00 ef 02 09 20 16 f8 58 ac fc 4b 63 1e df 2a 43 91 6a 27 45 2b 17 89 20 0f aa 60 11 c0 54 a9 af 32 51 31 74 ff 00 2e 69 ff 00 6d 13 ec 84 22 1f 07 af c4 56 14 da 5c e3 00 5c ae 60 41 a8 d0 Data Ascii: IVjQ)B3BUr<]1N]2E-n;_[C>@\6[wveA'jfKCDK:UGxN\7OJ~K_maQW$5:Ea!q{w J2Z=&?He XKc*Cj'E+ `T2Q1t.im"V\\`A
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: e9 66 d7 14 70 cf 70 6e 60 32 82 d9 cb 20 b8 0c b3 ba 65 7a 9a ad ec c4 71 5e 5f a4 9b 33 af a0 28 81 de 73 49 f2 6b 83 be 0b 04 f9 56 77 3b ae 04 fa 1f 8c 35 8b 9c 46 52 e0 4e 5f d1 05 c2 07 8c 0d eb db 51 10 20 2f 31 d1 5d 91 d4 07 19 26 4c c9 f7 0f 0d 57 a5 6b a0 a2 4e df 06 71 8d 2b 7b 0a fa 90 bc 56 2f 68 75 d8 ac df 64 10 1b e4 26 fc d7 a0 da f5 e2 93 c0 37 ca 7d 17 8e c3 b4 9a 80 80 48 11 24 02 40 f3 4e bf 28 9b e6 8d 1a 5d a3 4b c1 95 7d ad fe c9 cd 94 4f 67 f6 7f ee b3 a9 53 14 cc fd 61 b1 1d d6 98 10 45 af e2 9d c0 62 03 45 83 f5 1a b4 6e 9f 1f 12 94 41 9e 5b a5 a7 f2 da bf b1 f7 6d 58 ab 53 a4 66 71 55 0d cc e5 37 d7 b8 d5 96 ba 16 8e 57 b2 24 f1 2f 93 09 a7 15 9e e5 64 b2 ae 5c 6a 8e 5c 6a 4c 10 6f b3 c9 4a 6f 03 55 c0 7b 3c 95 4b 4f 05 25 1d Data Ascii: fppn`2 ezq^_3(sIkVw;5FRN_Q /1]&LWkNq+{V/hud&7}H$@N(]K}OgSaEbEnA[mXSfqU7W$/d\j\jLoJoU{<KO%
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: be 3c 4a 3f 9a 5c b2 52 64 08 41 da 34 eb 16 1e a1 cd 63 f7 17 37 30 fe de d4 2d a5 d2 0a 18 60 65 d9 9c 24 65 6d cc 80 0c 13 a0 d4 6b c5 78 bc 77 49 2b e2 2a 53 39 8d 30 1e 0b 5a c3 00 45 ee 7e d5 84 5f 8e 8b 38 62 75 dd e1 1d 11 8b 97 3e 07 f6 8e 2a b3 98 c6 d6 ef b2 5a e7 58 17 38 44 ba d6 83 e0 91 c5 d7 ed 1b ff 00 a0 f3 ce 4c 2e 63 71 25 e4 17 99 27 31 27 9b 56 66 2b 12 4b 9d e3 4b fe c3 fb ae 59 ca d8 92 b1 0d ae 66 a9 ff 00 e6 9f dd b5 20 e4 ee d3 74 d4 3f fc d3 fb b6 a4 1e 57 7c 3d 28 e1 9e d9 10 a8 50 9b 94 46 84 c3 1a a9 92 91 c0 21 2f 8a c5 86 78 93 a0 de 89 8a ab 95 b3 e8 b1 f0 ce cd 50 bc df 28 27 e4 84 86 d8 e3 f1 4e cd 13 c3 4e 3b d4 94 b5 33 ea 6d f3 4c c8 4e 5c 12 b9 24 85 d0 42 e8 70 e0 a6 7f 05 36 3a 26 60 ba 1c 17 0d 55 d1 53 c1 16 14 Data Ascii: <J?\RdA4c70-`e$emkxwI+S90ZE~_8bu>ZX8DL.cq%'1'Vf+KKYf t?W\|=(PF!/xP('NN;3mLN\$Bp6:&`US
2024-01-10 21:52:00 UTC	840	IN	Data Raw: 40 bd cc ba b8 f7 3b 7c 78 0b 20 d3 2e 0e 91 33 3a ad c6 d0 68 d1 a0 72 56 2c 55 65 f7 24 0b ae b2 0e 65 6a ad 82 aa 0a 96 66 77 37 82 ec ae 4a 92 90 1d 95 c2 c0 77 05 01 5d 84 00 06 53 de 74 e1 f3 50 15 5a 8e 24 16 b7 d5 72 95 1c 80 02 54 e4 5c 58 07 6a 53 32 69 a9 4d fc d4 62 f2 29 0e d1 a7 22 f6 1c 38 f9 a3 b4 01 a0 40 a6 c2 e1 a9 03 c1 14 61 5b e2 79 95 a9 45 dc f0 35 28 2e 25 f6 16 6e f3 bc f8 22 8a 2d e0 ae 80 17 70 cb 0b 98 67 66 73 8f 21 e4 8b 55 b2 12 58 37 e5 74 14 0c d2 55 21 74 15 0a 04 50 84 6c 1b a2 a0 3e 7e e2 86 54 63 cb 48 23 88 f6 98 51 35 71 68 a4 f9 1b c6 5e 1d 22 c6 7f 1c 74 44 c1 6d 57 d0 71 0c 7b 99 03 be 3e d3 2d 00 ce a4 4f b1 2d 89 ae d9 b9 02 0c 79 9f c7 c3 8a ab 6b 80 d7 4c 38 0b 8f 1e 03 d7 de b3 86 3e d8 d6 c8 9c ae 56 3d 4f Data Ascii: @;\|x .3:hrV,Ue$ejfw7Jw]StPZ$rT\XjS2iMb)"8@a[yE5(.%n"-pgfs!UX7tU!tPl>~TcH#Q5qh^"tDmWq{>-O-ykL8>V=O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49832	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	692	OUT	GET /vi/Ts9OpnZDo2Y/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5962 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "1639814864" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 10 13 12 10 10 10 10 0f 0f 10 0f 10 0f 0f 0f 10 0f 0f 15 0f 0f 0f 0f 17 15 19 18 16 15 16 15 1a 1f 2b 23 1a 1d 28 1f 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 0f 0f 15 2f 1d 16 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 44 10 00 02 02 01 02 03 05 03 08 06 08 06 03 00 00 00 01 02 00 03 11 04 12 05 21 31 06 13 41 51 71 22 61 81 23 32 91 a1 b1 b2 b3 c1 14 33 42 72 82 Data Ascii: JFIF+#(%5%(-/222"8=70<+12////////////////////////////////////////////////////@"D!1AQq"a#23Br
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 7e aa b7 50 a8 aa 8a 5f 27 19 e7 93 d4 81 d4 c9 0f a3 af ba 65 dc 19 f9 b2 86 e6 c3 97 82 98 01 6b f8 86 a0 d9 51 08 5a 93 90 bc ce 59 71 d7 97 49 63 fd 75 8d b5 e1 9e ac 7b 5d e3 ef 28 de fc f5 13 35 a8 d2 6a 4d 62 ea cd 47 69 01 48 60 96 01 8f da 19 c1 31 8a 9a c0 bb 6d 2e 87 70 0c 76 67 70 6f da 19 88 35 fa 0d 5b d8 ca cc 10 0d ac 40 53 9c 0f 29 4a bc 01 19 b6 d9 68 e6 6c 70 b5 2e e7 60 cc 48 03 76 00 3c fc e4 cd 2d 8c aa c7 72 39 5a ed 03 19 00 e0 72 24 7b e5 1e a7 8a 77 81 3b d2 d5 ec ce d6 ac e4 06 e9 8c 45 69 a9 fb 51 a0 15 b0 09 4e a6 b5 c6 7e 5c 29 24 7f 98 14 e5 8f 8c ac af a0 f4 9b 44 e2 75 f7 18 45 15 dc 3e 6d 89 52 77 4e 3c 43 78 e4 fa 4c d6 bb 48 51 85 8e bb ea b3 2c 0a b0 0c 7c f9 78 45 df f4 7d 41 b3 e6 9f 48 e6 9d 88 03 07 1c 87 d9 18 ba Data Ascii: ~P_'ekQZYqIcu{](5jMbGiH`1m.pvgpo5[@S)Jhlp.`Hv<-r9Zr${w;EiQN~\)$DuE>mRwN<CxLHQ,\|xE}AH
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 8c 58 63 ed 23 d8 23 04 66 2d 62 00 8e 28 8c 1d 58 e2 98 d8 8b 58 03 90 66 16 61 13 02 06 31 19 86 4c 28 04 ee 0e 3e 5a bf e2 fb a6 6a 4d 67 c0 66 65 f8 2f eb eb cf fd 7f 70 cd ad 2c 31 f0 99 6f fc 9a e7 c6 5c 6e cb 7a 99 61 a0 63 e7 09 d4 73 f3 24 c5 e8 2a 39 9a 49 f8 5d 5e 55 a2 ae c5 db 62 2b a9 ea 18 64 4a bd 6f 60 74 96 64 d6 5e 86 f0 20 ee 4f 8a 99 a1 d3 26 00 89 d4 de 16 32 8e 65 c4 bb 21 75 16 2a bb a1 ad b9 ad 8b d0 8f 4f 03 23 f1 2e 10 95 ae ea df 7e 00 de 0f 51 ef 13 a2 71 7a 12 da 89 71 8d 81 98 1f 2e 53 1b c4 75 ea da 73 58 50 36 8d bb 87 ed 0c f2 e7 33 b6 f5 be 73 38 af d3 6a 81 4d ac 7c 31 91 e1 2d 78 36 92 cb 4a d7 41 0c d6 1d a3 27 1c fc f3 33 35 1e 53 4f d9 2e 21 5a d8 95 5a 36 93 91 5b 64 a9 dc 7c 09 10 bc f6 89 2d bc 9e b6 1a 7e 17 a9 Data Ascii: Xc##f-b(XXfa1L(>ZjMgfe/p,1o\nzacs$9I]^Ub+dJo`td^ O&2e!uO#.~Qqzq.SusXP63s8jM\|1-x6JA'35SO.!ZZ6[d\|-~
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: b0 b8 c1 f9 ac 58 f8 f5 cc eb bd 90 e1 d6 55 a0 d3 26 a5 2a 72 03 75 b1 81 41 b8 e1 39 0c 72 93 3f 7c 57 f8 a5 f6 9c 13 a3 a8 94 ee ca 5a 01 41 d0 72 61 ca 62 6d e7 37 3d a2 6c e8 ed 4d 8a a2 b3 5b 0d b6 6f 38 dc 3c e6 05 ee c4 e4 fb e7 9a 5e 2f e2 83 8a 37 ca b7 a2 fd 93 1d c5 8f cb d9 fc 1f 74 4d 3f 13 73 de bf c3 ec 99 6e 24 7e 59 ff 00 87 ee 89 af c9 1f 43 bc 2a ed ae 3d fd 66 80 df 32 d4 be 08 33 53 4b 29 50 4e 33 89 d0 c8 0e ac 45 2d 80 f8 43 01 3c 84 50 0a 3c a0 41 70 f6 4f a4 a5 32 ed 88 20 fa 4a 56 eb 23 4a 82 82 16 60 cc 83 03 22 5a 79 c9 2c 64 4b 7a c7 00 a0 89 82 52 5a 16 91 2d 32 63 48 97 09 69 43 73 18 b2 3e f2 3d 91 18 eb 8e 18 d2 45 13 18 0c c5 a1 8d 47 12 32 48 58 b8 85 8b 80 1c 49 8a 89 30 0b fe c0 ff 00 c4 b4 df eb fe 05 93 55 da b2 81 Data Ascii: XU&ruA9r?\|WZArabm7=lM[o8<^/7tM?sn$~YC=f23SK)PN3E-C<P<ApO2 JV#J`"Zy,dKzRZ-2cHiCs>=EG2HXI0U
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 41 5c 1e a0 4d 62 2c 49 de be 22 32 d7 55 e7 11 65 d9 24 48 4e a3 26 57 f4 9e 26 1b 53 c0 c8 d6 b0 cc 6b 11 26 4d d7 55 21 79 84 4c 4e 61 66 66 63 87 b6 25 63 e0 46 0d ed 85 b6 3d b6 0d b1 85 85 92 35 92 53 ac 8e f5 cb 42 0d c2 45 32 7d b4 99 15 b4 e6 00 ce 62 eb 30 fb 83 1d 4a a0 65 a0 8e 81 09 56 2f 11 90 c4 10 8c 2c c0 09 8c 69 8c 53 c6 e0 1a 0e c1 59 b7 88 e9 9b cb bf fc 17 9d 8d b5 c4 f4 13 8b 76 45 f6 eb b4 e7 cb bd fc 27 9d 46 ad 7f 3e 7d 22 b0 e2 d1 b5 cf e1 89 59 aa e2 b7 0e 84 0f 80 8e d9 ac 40 33 99 55 a9 d7 ae 4f 22 41 f2 04 fd 92 6c 8a 22 de 35 a9 3f e2 63 d1 40 91 87 15 d4 e7 3d eb fa 67 94 66 db d7 c9 bf d8 7f 94 ae e2 3a b7 54 2d 59 20 a9 04 e5 4f 4f 8c ce ae 41 71 da aa b2 d1 aa d5 2b 36 10 21 ad 0e c1 63 0c ed 24 e0 f9 ca df eb c7 b1 ea Data Ascii: A\Mb,I"2Ue$HN&W&Sk&MU!yLNaffc%cF=5SBE2}b0JeV/,iSYvE'F>}"Y@3UO"Al"5?c@=gf:T-Y OOAq+6!c$
2024-01-10 21:52:00 UTC	348	IN	Data Raw: 52 24 ba 3b 2b 77 8b a2 fd 26 74 a3 a6 4f 18 d9 d1 57 1f 03 23 c3 7b 39 4a 86 ef cd 8e d8 f9 36 a9 c2 6c 3e f5 20 ee fa 62 75 1a 4d 3e 9f e5 c3 d8 1e b2 19 77 2f 22 7c ba 4d 77 e8 75 fb e2 bb a4 c6 36 82 3c 88 cc 5c 39 ae 28 78 66 b3 4f ab b8 35 8a b7 01 59 23 72 14 c7 ae 3a cb ba f8 36 90 74 a5 3e 39 3f 6c 5e d5 e8 14 0f 41 88 00 31 cf c2 b7 a7 93 47 48 e9 5d 63 d1 04 90 aa a3 a0 03 d0 48 58 68 ac bf 9c 07 56 01 cf 9c e2 7f d2 17 3e 27 aa f1 fe ef f8 15 ce be b9 f3 33 90 f6 de a6 3c 47 53 c8 9f d4 7e 0a 4a 81 9d 09 25 69 28 dc 7d d1 55 e8 98 fb a5 8d 14 05 18 12 92 09 40 11 5b 22 e0 81 12 22 8b 41 06 20 05 0a 2a 14 00 a0 87 0b 30 20 82 08 20 12 21 18 20 8c 0a 08 20 80 08 20 82 00 22 4c 10 40 0a 14 38 20 09 31 0a 79 c1 04 03 45 d9 63 ff 00 cb a7 fd 4f c3 Data Ascii: R$;+w&tOW#{9J6l> buM>w/"\|Mwu6<\9(xfO5Y#r:6t>9?l^A1GH]cHXhV>'3<GS~J%i(}U@[""A *0 ! "L@8 1yEcO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49833	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	692	OUT	GET /vi/vlCCdHvzQiM/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 9123 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 13 12 15 12 12 13 17 16 16 17 17 17 15 18 15 15 15 15 15 15 15 15 17 15 1a 18 16 15 16 17 1a 1f 2b 23 1a 1d 28 1d 16 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3f 37 30 3d 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 1f 1d 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 00 07 ff c4 00 48 10 00 02 02 01 03 03 02 03 05 05 05 03 09 09 01 00 01 02 03 11 00 04 12 21 05 31 41 22 51 06 13 61 07 14 71 81 91 32 42 52 a1 b1 15 23 33 b3 c1 62 Data Ascii: JFIF+#(%5%(-/222"8?70=+12////////////////////////////////////////////////////@"H!1A"Qaq2BR#3b
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 03 84 af 58 5e ad 29 ed 5c e4 51 7c 42 cf 7b 58 1a 34 78 ae d9 82 ea df 10 93 a6 d3 0d 33 5e e5 06 c5 8d ad 44 51 f2 a0 51 ef 94 7f 0f 75 09 e5 98 69 f6 9b 91 d0 7e d1 01 37 02 db bf 0a 1e 7c 91 83 87 ad 1e bb 20 c6 ff 00 6f c9 90 6a b4 fb 01 2c 68 28 e4 9f eb 83 44 c8 cd b5 5a cf 3c 51 f1 df 06 87 ff 00 6f 49 ef 9d fd bd 27 be 04 d1 56 33 66 17 4b 01 d7 64 f7 c7 c5 d7 a4 b0 32 b3 6e 3e 25 e4 60 60 7e da da f5 b0 b7 9f ba a7 f9 b2 e7 9d ac 85 c6 d1 9b df b6 c9 2b 5d 00 ff 00 e1 23 ff 00 3a 6c f3 e8 27 ab a1 ce 47 59 d0 81 a6 65 1d f1 b3 bf 61 59 d1 eb 3f 8b 8c 58 e1 2e 6f c6 41 1a 40 4f 03 3a 2d 38 ba 73 58 54 12 53 55 67 1d 20 e5 9b f4 c2 a3 3a 50 1b bd 83 db 08 86 94 9a c8 50 5a d8 f1 db 39 94 9e 70 0a 79 16 ac e0 2e 80 0c 8d 11 8d f7 ac e6 5e 38 c2 27 Data Ascii: X^)\Q\|B{X4x3^DQQui~7\| oj,h(DZ<QoI'V3fKd2n>%``~+]#:l'GYeaY?X.oA@O:-8sXTSUg :PPZ9py.^8'
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 54 1f 95 b1 9c 59 5e 17 7e de db fb d8 ed c0 ed 79 58 cb 95 29 e9 8c a7 e5 86 f9 8e 4d ee 05 98 06 15 45 99 8f 36 0d df 6f 6c af eb 72 b4 41 14 80 d2 5d bb 82 6c 00 46 d5 5e 7d 03 92 3b 79 f3 97 f3 74 36 92 56 1f 37 e5 ab a5 84 8c 5e d6 4e 00 2e 28 ed fd a3 db fa 64 e1 e2 86 42 a7 61 47 12 06 52 80 30 7d 9c 6e 63 cd 77 f7 bb ca e7 af b9 32 ab a9 76 8a 3d ff 00 36 89 aa 54 1b 1b d5 54 e6 80 e5 94 5f 72 6c df 7c 5d 43 ea a6 2c c1 4b 47 fb ca a4 b2 f1 c1 69 00 ef 46 b9 3d b8 c2 35 dd 2a 30 47 ad 95 88 dd b9 1c 15 25 47 ab c7 bd 73 c7 7e d9 6b d2 ba 43 7d d5 a3 32 2a 82 eb ea a5 0e 77 2f a8 f6 b2 28 01 5f 8f d6 c6 a3 39 a0 85 26 db 15 bf cc 51 b5 55 9c a0 17 dd d3 f4 e4 1a 1c e6 9e 2e 8b a6 50 4a 99 09 08 bd dc 6c ba 15 60 71 65 ab bf 7c 37 49 a0 81 63 8d 42 Data Ascii: TY^~yX)ME6olrA]lF^};yt6V7^N.(dBaGR0}ncw2v=6TT_rl\|]C,KGiF=50G%Gs~kC}2w/(_9&QU.PJl`qe\|7IcB
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 7a ea 30 7f d9 23 ff 00 3a 6c c6 69 75 48 14 fd 73 7b f6 cb d3 9e 5d 64 2e 84 58 d2 a0 da 7e 92 ca 7f d7 3c ba 44 65 25 58 51 cc ba 58 3f 4d ab 00 9b 3c 73 83 6a 0a ef e0 f0 70 5c 40 70 69 3c c0 13 e9 c9 b4 e7 67 3f 5b c1 97 0c 4a 65 af 38 4a 2e 5e a2 d2 80 02 ed 03 b9 27 22 33 30 e6 bd 3e f8 22 ea 3d 25 48 c9 b4 7a a1 b0 a3 7b 71 80 3c 8c a7 b0 ce 85 fc 01 cf d3 22 ac 33 41 19 07 77 8c 08 c6 95 c7 a8 f1 85 f0 cb 47 c6 26 a2 53 b4 f1 e7 19 a5 21 bf 3c 22 58 26 08 38 ac 23 4d 38 7c ab 9a 1d 8f 57 c6 58 69 e4 1e 30 21 11 ee 36 72 39 9c 01 c7 8c 59 9a 85 13 58 33 2f 1c 1b c0 95 25 bc 8a 46 e7 1b b8 8e 31 6c 60 31 8e 1b d2 e6 6b da 3c e4 31 85 e6 cf 8c 7f 4b 94 06 27 0b 07 c8 a1 6c f9 c8 74 2f b8 9b e2 b1 35 53 73 81 c0 cc 5b 8f cf f0 c0 b1 d4 af 81 95 46 72 Data Ascii: z0#:liuHs{]d.X~<De%XQX?M<sjp\@pi<g?[Je8J.^'"30>"=%Hz{q<"3AwG&S!<"X&8#M8\|WXi0!6r9YX3/%F1l`1k<1K'lt/5Ss[Fr
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: d6 2d 0c ea ac a4 89 4e d0 8a 76 92 d1 2d 96 af da 03 81 5f 8e 52 ea 0a 34 77 b6 cd ed e0 82 c7 dd 8b 57 6b e0 7e 39 17 4f d1 cd f3 10 e9 22 25 d4 ef da dc 9f 4d de e0 78 db f8 91 9d 2b c7 84 6a b5 1a d7 93 55 a4 83 4d 4a d2 b2 a3 47 61 ca 06 03 79 6a fd 92 06 e3 57 e3 37 5a 5e 9a 9a 79 64 98 50 44 06 2d 3c 60 00 b1 a7 79 1e bc b3 35 db 1e 78 3c f3 94 ff 00 02 f4 e3 24 af d4 a6 d8 08 8c 45 1a ad fa 24 6b 32 96 bf de 0b b4 7f de 39 3f c5 dd 5d 62 85 de c7 63 43 dc d7 03 38 e7 77 74 fa 5f e3 e3 ac 7d a8 ad 6f 58 37 a5 99 5a d5 67 01 b9 ee b3 23 44 08 ff 00 be e9 94 5f 68 3a bd dd 57 a5 1f 3b 94 1f c1 a6 51 5f cc e3 ba 64 8a 3a 74 6f 2f 17 12 d7 e2 14 51 1f 5b 19 9d f8 8b aa 99 fa b6 8e 40 29 57 e5 6d 07 dc 48 58 91 f9 e4 8e 99 f5 b7 a0 7c 3f ad 54 57 8c 1a Data Ascii: -Nv-_R4wWk~9O"%Mx+jUMJGayjW7Z^ydPD-<`y5x<$E$k29?]bcC8wt_}oX7Zg#D_h:W;Q_d:to/Q[@)WmHX\|?TW
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 35 34 87 b9 03 e9 fe 99 a6 d0 74 51 0a ec d3 f5 ed 22 8f 17 b9 48 bf 6b 06 b0 18 fe cf a6 25 8a 75 1e 9d 26 ee ff 00 ff 00 a8 86 6b f2 77 27 7c b8 cd 39 f9 b3 f7 93 40 f4 1a a6 61 22 36 9f ef 2b 19 da 5f e6 3b fa c9 2a 1d 56 f9 b0 a3 81 e1 70 e6 9e 0f 94 53 e5 94 70 54 8f 5b 52 10 5a d0 03 67 6d 57 04 9a c3 ba 57 c1 1d 53 4e 5b e4 49 a6 60 cb 5e 8d 4c 4d e6 c1 1b ab 9f af d7 13 53 f6 7f d4 7d 2e 34 ce f2 b3 ef 72 b3 69 8a 73 65 aa 9e ee ff 00 2a cd bc 9e ba aa 2d 43 13 b6 c9 3c 79 ef 56 72 35 17 87 f5 be 9d 3c 12 04 d4 44 d1 39 50 c1 58 a9 25 4b 30 0d e9 24 55 83 fa 65 7a 1c c5 7a 71 e8 6c 59 98 ea d0 ed 99 bd 8f 23 34 d1 1c a7 f8 8a 2f d9 6f cb 06 40 91 53 8e 30 95 88 ed 20 af a4 f6 ca a5 35 96 09 d4 48 00 1e 6b 34 e5 a4 0b 0f 35 8e 3a 70 4d 73 78 67 cf Data Ascii: 54tQ"Hk%u&kw'\|9@a"6+_;VpSpT[RZgmWWSN[I`^LMS}.4rise-C<yVr5<D9PX%K0$UezzqlY#4/o@S0 5Hk45:pMsxg
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 9b ec f2 07 97 55 20 4f 92 59 60 76 03 50 fb 23 34 f1 8a bf 7b 3f c8 e5 2e a3 a3 b7 83 78 67 c3 fd 3d 92 57 f9 8a 08 31 91 cd 11 fb 4b e3 f2 ca 9c 6b 96 fa 4e 89 d6 85 8d 31 d2 c6 1d 8b 3f dd a4 82 eb d8 6e 1d b2 87 59 f6 7d d6 a5 66 f9 cb 34 82 ec 13 32 3a 9f 73 5b f8 f1 e3 03 fe ca 8c 8d a8 aa 79 bd c1 40 23 e9 7d f1 23 84 a5 85 76 07 fd 99 1d 7f a1 cc 5a f4 61 e3 dc dc a6 2f d9 f7 50 43 ce 92 50 07 90 bb bb 7d 01 ca 9f 89 7a 44 d0 08 be 74 52 46 5b e6 57 cc 46 4b a2 2f 6d 8e 7f 68 76 f7 19 a8 87 57 32 81 b7 51 3d ff 00 da 26 ff 00 cd 99 cf 8b ba 84 f2 3c 6b 3c d2 4b b0 36 df 98 c5 b6 86 22 ea fd e8 7e 83 13 b6 b3 f6 f5 e7 5a 67 4e 76 28 38 99 a7 9d d9 7d a0 94 ac 08 b5 64 b3 30 1e de 2f f9 65 0e 7a 24 3d 52 28 e2 82 23 d3 34 8e ca 88 a6 42 d2 23 b1 0b Data Ascii: U OY`vP#4{?.xg=W1KkN1?nY}f42:s[y@#}#vZa/PCP}zDtRF[WFK/mhvW2Q=&<k<K6"~ZgNv(8}d0/ez$=R(#4B#
2024-01-10 21:52:00 UTC	996	IN	Data Raw: d0 63 0e 9e 13 fb ab 83 4c cc 4d 93 09 73 40 34 10 9f dd 18 bf d9 50 ff 00 0e 12 c5 1a 80 32 09 89 6c e9 5b db 38 49 80 b1 27 8c 47 51 7d b2 58 5b 22 67 e7 23 5f 0e 5e 3c e3 24 7c e6 38 8a 46 54 d1 02 de 2f ca c7 6e c7 86 18 4b 11 98 4e 23 03 55 cd 7f 4c 9f 75 e7 30 e3 09 03 c3 11 27 8c 98 e9 4e 45 1c a5 49 03 1c ce 4f 7c 36 89 d6 ab f1 cd a7 c3 ba d1 3c 8d 1c 6a c4 88 8b 1e 3b 00 54 1e df 8e 62 25 cd 77 d9 86 aa 48 f5 72 b4 4c 55 be ee fc a8 b3 5f 32 3e 3f a6 22 5e 86 36 80 06 25 85 73 c0 3d ff 00 3c 78 81 aa c0 00 7d 3b e6 ba 5e b9 ae 27 fc 40 d6 78 57 8e 36 ff 00 f1 bc 84 fc 41 33 7a 5b 4b 03 fb ef 81 05 fd 7b 65 db 13 1c 7f 6c c4 6e bc 2b 31 02 fc 72 73 29 f1 49 1f 7b 92 ae bd 15 7d eb e5 ae 7a 96 9f ab c4 0d b6 8b 4d f5 2a 8c 83 db b8 6c f3 af 8f 50 Data Ascii: cLMs@4P2l[8I'GQ}X["g#_^<$\|8FT/nKN#ULu0'NEIO\|6<j;Tb%wHrLU_2>?"^6%s=<x};^'@xW6A3z[K{eln+1rs)I{}zM*lP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49831	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	692	OUT	GET /vi/AJTcpNBXAL8/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5680 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 12 12 12 12 12 10 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 10 17 15 19 18 17 15 16 15 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 1d 1d 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 3b 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 3b 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 ff c4 00 47 10 00 01 03 02 03 04 06 06 07 03 0a 07 00 00 00 00 01 00 02 11 03 21 04 12 31 05 06 41 51 13 22 61 71 81 91 23 32 83 a1 b3 c1 07 14 35 52 72 b1 Data Ascii: JFIF+#(%5%(-/222"8=70<+12///////////////////;///////5////////////////;///////@"G!1AQ"aq#25Rr
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 56 1c ab 12 aa 20 aa 2e 11 39 3b 99 26 52 72 20 42 74 c1 3a 0b 03 12 3b 42 42 b0 e6 3c 95 3f 04 a4 22 b4 e8 53 0e 04 fe 4a 7a 8e ca 15 5d 9c f8 07 bd 5b a9 04 15 16 40 b1 f2 14 85 57 a3 c5 4e 8b 4e 81 c8 d0 90 88 cd ac 6e 7b d4 15 8e 83 cd 15 6a 99 5c e9 d6 6c 81 a3 9a cd 6e 2c d1 72 9a 14 2d 0a 60 e5 1b 0b 8a d7 dd 4a 93 8c a2 3b 5d fc 0e 58 d5 16 d6 e7 30 7d 72 8f f6 e7 ff 00 5b 95 9d b3 95 e1 ea f8 26 02 6f af b8 88 b8 ec 2a cd 7a 10 7c e7 5e fe 3e 2a 9b 44 2b 55 2b d4 96 b6 6c 45 cf 1c b1 a2 65 b9 94 ac e3 ab 8d 95 77 01 4f a8 7b fe 41 4a e6 21 c0 d5 68 19 26 1c ec c4 0e 60 65 04 fb c2 3c 3d 6c e3 93 81 2d 70 e4 e1 aa db 12 70 80 d2 8d 34 e5 fa 72 51 39 80 fe 8a f1 6a 8a a5 29 44 50 73 61 09 56 9e c2 35 f3 fd 54 7d 0a bb 45 62 53 4a b2 fa 36 b2 ac 6d Data Ascii: V .9;&Rr Bt:;BB<?"SJz][@WNNn{j\ln,r-`J;]X0}r[&oz\|^>D+U+lEewO{AJ!h&`e<=l-pp4rQ9j)DPsaV5T}EbSJ6m
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: a1 29 4c 80 98 aa c2 37 a8 4a 99 ea 25 50 05 46 f5 21 40 f4 0c 13 c2 40 22 01 11 34 25 08 8a 65 15 36 15 b7 f0 56 1c ab e1 df 07 bd 58 45 20 2c 94 24 e2 9c 20 41 24 93 14 0e 82 a8 b4 a3 4c e1 36 41 59 b8 86 9b 27 75 3e 46 ca 9b a9 43 88 56 1a f2 00 e4 ae 93 61 bc c2 d5 d8 c4 32 bd 37 39 b9 80 cd 2d 06 27 aa 78 aa 6c cb aa d1 d8 83 36 22 98 fc 5f c0 e4 4a f4 4d d3 c4 31 ce ac ea 72 d7 35 a3 aa 48 87 4e 6b 4f 80 5d 2d 1a d9 da d7 46 a2 61 73 9b ab 48 0a ce 04 6a c9 1f 89 a4 7c 9c 57 4c ca 79 64 01 6e 00 7e 4b 49 35 a7 0b bc d5 ff 00 68 75 36 d9 c4 34 47 1c 8e d5 dd 9f bc 3c 4f 25 30 63 1a c6 e5 6f 16 90 c0 63 ad 33 73 de b7 36 de c0 6d 47 b2 b1 30 5a de b4 71 00 93 ee 0e 72 c6 1b 21 e2 a4 8a 92 c7 09 68 1f af 11 e2 b8 65 85 de de bf 1e 72 62 e9 36 4e 28 bd Data Ascii: )L7J%PF!@@"4%e6VXE ,$ A$L6AY'u>FCVa279-'xl6"_JM1r5HNkO]-FasHj\|WLydn~KI5hu64G<O%0coc3s6mG0Zqr!herb6N(
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 54 fd 56 d4 a8 c1 24 b8 e5 6b dd c4 dc 9d 57 91 d5 d9 bb 43 30 19 ab d4 24 35 d2 d7 d6 73 44 89 02 4e 87 4e e5 e8 fb 9d b3 6b b7 0d 96 ab 9c 2a 74 85 dd 79 9b f0 92 49 71 d4 cf f4 bb 17 4d 38 ca dc c7 9f 54 f1 82 39 58 d8 7b e3 cd 65 e2 69 07 80 5c 61 c4 16 9b 82 07 60 1d 91 ef 2b 47 69 52 3d 1b da 5c 1d 98 44 68 42 e6 68 61 6a d2 70 cc 67 34 96 8c d7 24 73 3e 5c 55 85 bc cb 5d 56 c1 74 bc 83 36 b0 ee 6c 79 a6 df cd a5 d0 60 2b 38 18 73 fd 13 7b de 08 31 da 1b 98 f8 2c cd 8d 8e 75 1c e4 33 31 24 b6 73 00 d0 e9 eb 5a 75 b0 5c 9f d2 5e f0 54 a9 d0 d0 70 68 03 35 52 04 eb 76 36 7c 9f e6 b3 26 f2 6b 3c ff 00 1e 1c 45 47 05 52 a1 4a a5 55 03 9e bd 0f 3e 30 62 a6 4f 48 69 87 81 d5 21 da 4b 81 8f c8 f9 2e c3 75 76 a6 66 16 64 0c 02 e0 34 5b 2f 1f 79 5c 6d 40 e7 Data Ascii: TV$kWC0$5sDNNk*tyIqM8T9X{ei\a`+GiR=\DhBhajpg4$s>\U]Vt6ly`+8s{1,u31$sZu\^Tph5Rv6\|&k<EGRJU>0bOHi!K.uvfd4[/y\m@
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 52 ca 1a a2 45 d0 d8 33 88 42 da dc 15 37 34 8b 4a 42 a2 a9 6f 2b 65 eb 77 73 5d fb 75 0f 69 f0 9e b9 d0 e5 d0 6e 61 3f 5d a1 17 3e 92 07 b2 7f 62 8d 5d 3d 1f 6a b5 ee a4 e0 c6 93 71 a7 2f f7 0b 87 da 0c 2c a8 e6 9d 41 d7 98 ec 5e 8c dc 0d 47 fa c6 3b ed f9 c9 fc 90 bf 75 a8 3e f5 47 48 7f ba 3c c5 fd ea cc ac bf e3 8f 93 c1 8e 73 7b e5 e5 26 9b 9e 72 b1 ae 73 8e 8d 68 2e 27 c0 5c ad 2d 9b b8 18 ca 84 b9 ed 6d 16 93 3d 73 2e 8e c6 0f c8 c2 f5 4c 36 02 9d 21 96 95 36 b0 7f 45 a0 4f 7f 35 2e 45 bb 97 f4 c6 3e 09 3b 66 6c cd 88 da 34 69 d3 cc 4e 46 81 30 04 91 a9 8e d2 a9 d1 dc ac 05 3a 8e ac ec 3f 4d 51 ef 73 cb ab 1c e3 33 9c 5d 66 1e a8 b9 e4 ba 10 13 54 6d 96 37 63 d1 a8 83 a7 00 40 6e 50 38 0b 05 1b f1 2a 5c 88 1d 86 07 fd 2c 9b 34 e7 76 ce 2c c3 84 c4 Data Ascii: RE3B74JBo+ews]uina?]>b]=jq/,A^G;u>GH<s{&rsh.'\-m=s.L6!6EO5.E>;fl4iNF0:?MQs3]fTm7c@nP8*\,4v,
2024-01-10 21:52:00 UTC	57	IN	Data Raw: 92 32 e8 1b a0 48 94 c9 2c 34 96 83 64 ab 61 24 95 08 a8 1c 53 24 91 60 29 7a c5 1d 41 64 92 55 a5 27 8b a9 e8 0b 24 92 e7 8f 64 f9 1b 6c 48 e0 a7 cb a2 49 2d d4 af ff d9 Data Ascii: 2H,4da$S$`)zAdU'$dlHI-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49834	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	692	OUT	GET /vi/-CweIttZ6Sc/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6314 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 13 12 15 12 13 12 15 15 15 15 16 15 15 15 15 15 15 15 15 15 15 15 18 15 19 18 17 15 16 15 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 25 1d 25 2f 31 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 ff c4 00 43 10 00 01 03 02 04 03 05 04 06 07 07 05 01 00 00 00 01 00 02 11 03 21 04 12 31 41 05 51 61 06 13 22 71 81 32 91 a1 b1 14 23 42 b3 c1 f0 07 33 52 Data Ascii: JFIF+#(%5%(-/222"8=70<+12//%%/1////////////////////////////////////////////////@"C!1AQa"q2#B3R
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 03 1b 70 ae 38 58 84 69 d3 08 24 3d d6 67 81 cc 8f 9a d4 c4 3b c4 1b c9 ae 3f 25 5f 0f 4f c4 0a 92 a1 f1 92 74 cb 09 35 15 24 c8 f3 ba b5 5c f8 fc c2 a4 f6 92 44 0d 15 ac 60 32 d2 39 0f 92 46 cf cc 94 a6 23 2b 49 1c 9a 81 29 02 80 48 27 26 14 19 c0 a9 19 52 14 40 23 08 09 db 55 17 10 a0 00 a7 14 11 af 4c 05 4a d6 12 0a 5d c2 0d 7b 86 36 5d 9b 90 5d 47 62 71 7d df 13 c3 90 2f f5 ba e9 fa 97 8f c5 73 fc 36 9c 30 f3 5a 7c 0e a1 66 2e 93 80 b8 2e 8f 56 38 7e 2b 15 69 db 1b 5e e1 53 b4 52 c6 91 e1 74 f8 84 4d 86 a4 f2 4c a1 da 38 32 f7 02 39 08 b0 e9 75 c8 e1 b1 a0 e7 7b 40 30 03 40 9b 08 22 7c 89 0e f8 28 be 90 d3 19 4d 86 a0 1b 1f 16 d6 13 aa c4 b9 6d cd f9 1e 95 83 e2 14 ea 89 63 81 e6 37 1e 61 4c ea 80 5c 90 3c ca f3 2c 1f 13 a9 4d c7 28 73 43 b3 b5 c2 3c Data Ascii: p8Xi$=g;?%_Ot5$\D`29F#+I)H'&R@#ULJ]{6]]Gbq}/s60Z\|f..V8~+i^SRtML829u{@0@"\|(Mmc7aL\<,M(sC<
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 68 10 2e dd 42 e3 74 f1 d5 20 94 39 3d b5 49 50 ec 8e 68 d1 06 7b 9d 75 1b aa 14 ea 6d d1 26 d3 32 4f 21 01 00 fe fc a7 f7 bc d5 42 23 dc 85 4b 18 9d 90 36 b4 fa d6 e8 97 78 ab b8 da 12 20 c4 f3 46 86 d6 59 5b e0 b4 69 00 5b b0 f5 58 ac 37 57 68 e3 58 df ea 96 9b c6 af 3a 9b 0e ad 0a 17 60 69 9d 04 79 29 a1 24 b6 b7 4c 67 e2 30 05 b7 6d c7 c5 50 a8 ba 00 42 a5 8a e1 c1 c6 5b e1 f9 27 b4 f2 e3 65 32 a2 04 ab e7 84 b8 68 e0 ab d7 c0 d4 6d c8 91 d1 3d b1 d1 50 03 29 cf 36 4d 06 13 a2 d0 9b 3a 35 b2 53 a9 8f 82 34 dd 68 8b a4 da 97 88 08 07 2b 9c 32 90 73 b3 1d 95 0a b5 07 25 a5 c2 44 30 9e 65 2a d6 33 ba dd 6a 9a aa 38 4c 51 ef 9b 1a 0c df ed 2a 6a a3 39 cb 31 6b 94 b0 98 46 53 a8 d7 dc c6 a2 79 88 fc 51 14 e4 df 4d 69 e1 5d 72 dd 26 48 23 73 3a 22 ca 85 cc Data Ascii: h.Bt 9=IPh{um&2O!B#K6x FY[i[X7WhX:`iy)$Lg0mPB['e2hm=P)6M:5S4h+2s%D0e3j8LQj91kFSyQMi]r&H#s:"
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: d4 cc 01 a6 a4 1e b0 45 d5 07 d4 f6 2e dd cb 44 8b 66 33 f8 2b 5c 25 9a af 32 f2 6a f6 8d 3c 4e 25 c6 ab 8b 59 f5 64 cb 5a 05 98 d7 6b ed 6b 03 79 d9 58 e1 b8 1c d9 dc 58 59 4e 1a 5c 48 f6 88 83 e1 00 db 7f 4f 55 9f 5f 1a 5b 93 eb 1b 0e bf b4 36 24 19 85 30 e2 0d 69 ca 6a 01 27 29 93 23 9c c8 e8 45 ca 57 7a d4 4e 67 77 e1 ae de 10 01 02 20 4c b3 47 b6 03 64 4f 23 0e 8b fc 75 33 56 c3 66 73 69 91 0c a6 c6 38 43 49 2e 7b 5e e7 80 60 d8 78 8c c4 dc ac 1a f8 d6 53 cc 59 5d b6 93 bd cc 8d af b4 7f a4 a0 fe 31 92 1f df 03 e2 d1 a6 4d a3 e7 7b a5 65 53 1e 4d 7c 39 ce d4 b4 8c 65 59 69 6c 96 bb 29 99 19 98 d3 bd c6 ba 2c a5 ad da 7e 27 f4 9c 5d 4a f1 19 c5 3b 7e ed 26 37 90 fd 95 92 88 ad 04 52 48 26 43 08 a5 29 b2 80 25 04 f7 42 62 01 24 82 52 80 28 c2 2d 44 20 Data Ascii: E.Df3+\%2j<N%YdZkkyXXYN\HOU_[6$0ij')#EWzNgw LGdO#u3Vfsi8CI.{^`xSY]1M{eSM\|9eYil),~']J;~&7RH&C)%Bb$R(-D
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 87 48 a0 53 49 43 3a 0c 48 4d 4f 40 84 19 04 a1 04 d2 50 0e 84 21 36 52 05 20 45 c9 a5 c0 ea 9c 53 08 48 cf 85 b1 d9 17 e5 c6 d2 77 2c ff 00 76 e5 8a c2 b6 fb 29 ff 00 59 4b fc ff 00 76 e4 af 86 f0 f7 47 a4 8a c1 e6 c3 e2 9f 51 cd 03 f9 02 aa d4 3b 8f 86 ab 3f 88 62 9e c6 97 65 31 04 83 78 9d b3 74 50 ea 7a 3d 3a 9b ad 27 62 9a d1 3a 9d 80 dc f5 50 1a f1 77 12 4f 29 86 8f 20 b3 70 e4 c0 73 9d e2 eb f8 46 89 e7 10 77 3f 8a c6 56 a9 8c 8d 16 e2 01 06 f1 d0 a6 de e7 50 06 fa 2c fa 78 96 cd ce a7 6d 7c ae ac 1a a5 d0 d6 fa db 68 bc ac b4 d1 0e 80 06 d6 b6 83 e1 f2 56 a9 b8 40 db ca c1 66 e1 ea 66 1a cc 18 fc 6f ef 56 da 02 be dc fa 58 7b 07 4f 9c fa a6 86 88 88 04 19 04 1b 82 39 41 17 08 e5 b0 f9 a4 e9 d8 fa 2c d6 bf c5 79 27 6e 78 13 30 b8 80 69 b0 32 95 56 Data Ascii: HSIC:HMO@P!6R ESHw,v)YKvGQ;?be1xtPz=:'b:PwO) psFw?VP,xm\|hV@ffoVX{O9A,y'nx0i2V
2024-01-10 21:52:00 UTC	691	IN	Data Raw: 6e 04 b3 c4 0c b7 e4 b6 33 26 56 6e 66 96 f3 1f 15 a9 58 cb 17 3a 92 73 d8 45 88 82 9a b4 e6 b0 12 49 24 c1 24 92 48 04 92 49 20 3a a8 4d 73 53 03 93 b3 ac 3a cd 4a 12 94 52 05 08 c2 50 92 00 42 09 da 26 20 12 21 20 9c 48 09 19 a6 ca 33 5f 92 05 d2 9c d4 19 02 4e ab 6b b2 66 31 94 8f ef fd db 96 36 65 b1 d9 18 76 36 90 3f e3 fb b7 2c df 0d e1 ee 8f 4c 35 b9 7b d0 63 89 b1 b8 f8 a2 fc 30 8d 6c 8d 3a 7b 28 e9 e9 6f 69 7b 88 04 85 8f 88 2d ef 0b 09 33 ac 74 3b 82 b5 81 85 97 5e 89 2f a8 e1 1a 01 7d 00 de fe 49 e3 7b b1 c9 8d b2 69 c3 56 ac 29 e2 2a 17 66 70 ce ed 3d 96 c9 fe a9 f8 ae 3e c6 88 63 8c 9e 50 63 d7 65 95 c4 45 43 5e b8 3b 55 78 9d b5 22 63 64 cc 26 02 48 0d b9 26 27 f9 2b cc 67 cb 8a f2 65 e3 16 c7 08 63 7c 55 5c 74 b8 d8 0d c9 3b 93 75 00 a4 1c Data Ascii: n3&VnfX:sEI$$HI :MsS:JRPB& ! H3_Nkf16ev6?,L5{c0l:{(oi{-3t;^/}I{iV)*fp=>cPceEC^;Ux"cd&H&'+gec\|U\t;u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49836	172.253.63.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	692	OUT	GET /vi/DNwvbf0kZBE/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 7078 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 12 12 15 10 10 10 16 15 12 17 10 15 15 10 15 15 0f 15 10 15 15 10 17 15 19 18 16 15 16 15 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 1f 1f 25 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 08 ff c4 00 42 10 00 02 01 03 02 03 05 06 03 05 05 08 03 01 00 00 01 02 00 03 04 11 12 21 05 31 41 06 13 22 51 71 32 61 81 91 a1 b1 23 42 c1 07 33 52 62 b2 14 Data Ascii: JFIF+#(%5%(-/222"8=70<+12//%//////////////////////////////////////////////////@"B!1A"Qq2a#B3Rb
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 7e 13 25 ee 41 e9 89 72 8d 88 c1 70 63 4b b5 c7 5a 65 b9 0f a4 6f 86 45 4c a2 75 b6 9d 8e 37 36 8b 75 42 a6 73 b3 29 fc ac 36 20 9f 5f bc e7 2b da 95 19 22 74 bd 82 e3 3d db 3d a3 e4 d3 ab e2 5c 36 0a d5 03 9f c4 7d 84 aa 71 d6 83 25 c4 1f fd 9c 69 7e 13 73 00 67 d4 8c fe b2 15 2d 01 13 77 8c 6f 5d ce 3f 87 fa 44 cd ae 70 25 1b 2c 4e cc b6 b8 a8 1b bb e7 e5 33 ee ae 1b 24 18 55 4a d9 a9 91 03 bc f6 b3 1e 21 65 0b 2d 12 b5 8e cd 2e 2b 19 da 42 28 e0 42 01 c0 92 02 30 92 12 30 8e 44 65 8e d2 2b 14 81 b4 0c 2f be c0 82 d1 12 f7 4d a2 b1 4b d0 64 41 ee a5 8b 57 10 6b ba b9 da 02 40 04 c9 28 8e 16 48 08 c3 b1 05 8c c2 4f 31 8c 01 43 62 43 3b c4 ef 22 23 04 62 63 47 88 42 41 48 99 33 20 64 03 23 37 3b 1a 80 df 51 0d cb 2f 9f fa 6d 31 0c d8 ec 95 60 97 b4 5c f2 Data Ascii: ~%ArpcKZeoELu76uBs)6 _+"t==\6}q%i~sg-wo]?Dp%,N3$UJ!e-.+B(B00De+/MKdAWk@(HO1CbC;"#bcGBAH3 d#7;Q/m1`\
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 47 90 64 58 82 26 12 54 c4 76 58 a3 90 6e 52 22 4d 86 d2 b1 08 ac 22 9a e6 10 a0 88 25 2a 98 33 52 93 86 11 58 a5 4b 51 50 6d b9 94 d4 b9 f3 92 36 60 f5 95 9b 33 d0 7c e0 02 07 7a 99 91 12 e7 b6 22 43 4c 36 31 18 f8 92 c4 69 06 42 12 0c 65 86 52 4c 28 23 e6 36 62 8d 08 05 14 51 42 01 43 38 4d 1d 75 95 47 93 7d 10 9f d2 07 36 fb 1a a0 df 51 04 64 7e 26 47 ff 00 53 c0 fa 03 e8 7a 79 a9 50 28 24 53 5c 05 18 c6 73 92 5b 13 62 e2 f8 5b a0 54 3e 26 cb 36 0e 08 e7 81 f5 96 f6 89 00 a8 19 86 97 72 cd b1 03 08 00 44 1f 21 f5 33 9f af 4c 00 5b 25 98 9d c9 39 f9 4a 75 3e cb d2 7e 02 2a f1 52 da 14 f3 07 53 7c 06 14 7c f2 60 1c 56 ae b0 0f 93 63 e4 a3 3f 52 64 40 d2 32 79 99 4d 73 b0 1e bf 33 2e 8c 15 e8 59 a6 a3 b3 bf fd 93 f1 62 82 a5 12 7c 24 82 07 bf ac f4 96 a9 Data Ascii: GdX&TvXnR"M"%3RXKQPm6`3\|z"CL61iBeRL(#6bQBC8MuG}6Qd~&GSzyP($S\s[b[T>&6rD!3L[%9Ju>~RS\|\|`Vc?Rd@2yMs3.Yb\|$
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: f0 9c e7 0e 27 56 e2 6c 5d f0 be fa 9e c7 a4 cb 28 45 35 65 9c a5 e0 e3 b8 a7 15 a9 72 fa ea 63 6f 65 47 20 20 ba 61 fc 57 84 b5 02 a0 f2 60 48 f8 63 3f 79 5a d2 f0 6b f2 6c 3f a1 e4 47 d6 74 57 1e 3a e8 cf 1b b7 7d 9a 1c 01 73 a8 1f 2d fd 20 f5 a8 14 77 46 1b 83 b7 a4 be cf 34 6a ab 8d d1 87 cd 4f 31 36 6f ed 96 b2 86 42 35 81 e1 f3 2b e4 7c e5 12 95 48 ba d4 95 1c 55 d0 f1 9f 87 da 55 88 4d e5 32 1c ea 18 3d 7e 52 82 25 88 cb 25 b2 31 e3 47 cc 84 43 c5 24 ab 98 c4 62 41 c6 c4 52 6a 33 22 cb 01 0b 28 9d e1 85 7a cc f5 30 fa 0f 91 15 85 32 5a 75 0c 75 81 54 a7 83 0d c4 6a 8b ab d6 2a 20 10 88 c7 61 89 1c c7 00 f5 29 c7 a2 37 86 bd 09 0a 54 25 3c b4 68 e3 b2 6a 90 7a cb 93 0f 2b 85 30 0a 27 24 c1 10 4c a5 84 81 32 ca bc e5 52 e4 66 1e 38 89 64 f1 25 8e 89 Data Ascii: 'Vl](E5ercoeG aW`Hc?yZkl?GtW:}s- wF4jO16oB5+\|HUUM2=~R%%1GC$bARj3"(z02ZuuTj* a)7T%<hjz+0'$L2Rf8d%
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 01 37 63 81 cd 9b 1e ca 0f 69 b1 1f 8a 76 b6 ce d2 85 36 a0 ea d8 aa 9a b1 82 74 16 c3 b7 bc 80 73 f0 95 c6 ee d1 7c 7e b5 68 d4 e0 14 28 da a1 b7 4a 69 4c 20 42 c8 00 d5 87 0d 86 63 cd 89 d2 db 9f 28 b8 b7 0a a1 59 1b bb 03 75 3b 1c 1c 37 98 9c 73 f6 a5 6e ae 2a 25 12 c1 cd 35 d0 d8 18 73 4c b1 00 7c 2a bc d6 e0 5d fa 53 d2 e4 6a 3c f3 be 21 dd ec 8e 35 ee e8 f3 5e 24 07 7a c0 74 20 7c 40 00 fd 44 1c 09 ad da ba 7a 6f 2a 82 41 3e 0c e0 69 19 34 d4 f2 f8 cc 90 66 d8 74 8c 53 76 db 31 ef 13 15 0c a5 84 33 8a 26 e1 a0 cb b8 9a a2 f4 50 c6 59 75 23 28 06 5c b2 32 22 35 56 3a 89 36 1b 48 a4 51 cb 01 c8 95 15 96 48 b4 80 63 09 25 69 5e 62 d5 08 a3 ba f5 12 ca 55 ba 19 5e a9 18 28 74 74 89 ca 26 11 a8 72 96 15 98 8b db d8 0d ef b3 33 2d cf 39 a9 7c bb 4c 9a 67 Data Ascii: 7civ6ts\|~h(JiL Bc(Yu;7sn%5sL\|]Sj<!5^$zt \|@Dzo*A>i4ftSv13&PYu#(\2"5V:6HQHc%i^bU^(tt&r3-9\|Lg
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 80 33 63 23 27 38 ff 00 39 c6 52 9e 5f 52 d5 e9 33 b1 51 8e 1d 2d d1 c9 d7 3e de 46 0f 84 e3 c8 93 bf a1 d8 cb ae 2f 7f 06 93 67 c4 a3 46 fb ec 01 18 f9 62 5b 75 c3 eb b5 66 a4 ca 16 a3 32 eb f1 65 29 22 8c 05 2d b8 db 38 e7 d3 12 56 dd 9a b8 bd ac 69 59 51 2f 4e 9f 85 aa 63 4d 3c 8e 64 b1 db 3e ee 73 af 27 1a b6 72 16 39 72 6d 1d 9f ec c6 c8 3a 97 3b ee 49 cf 2e 73 67 b6 7d 8a a3 72 cb 5e 86 12 e0 10 2a 00 06 2a 26 36 24 7f 10 f3 f2 85 f6 6f b3 06 c2 8e 82 da 9b 1e 32 36 f1 7b bd d3 9b e3 bc 49 ad ef 28 dd 8d 44 53 7c 56 50 4f 8a 89 d9 c6 3a ec 67 1a 0a 53 c9 29 c5 d6 ce c6 49 fc a9 78 45 55 3b 4d 56 c6 ad 24 af e2 a1 a8 2d 5c ae 19 57 38 d4 08 e7 8f 29 d3 76 b7 b3 14 eb d0 62 84 00 ca 1c 69 df c5 cf 23 dc 66 57 6c 2d ad ea 04 ac d9 6a 55 14 62 a2 f8 80 Data Ascii: 3c#'89R_R3Q->F/gFb[uf2e)"-8ViYQ/NcM<d>s'r9rm:;I.sg}r^**&6$o26{I(DS\|VPO:gS)IxEU;MV$-\W8)vbi#fWl-jUb
2024-01-10 21:52:00 UTC	203	IN	Data Raw: d7 e2 95 7f 8a 34 53 91 28 45 e4 95 af 27 ad c3 fb 31 fc 22 35 38 c5 50 09 0d f4 99 f5 aa b5 4a 7d eb bb 33 6a 23 73 b0 03 07 61 f1 8a 29 76 28 45 6d 23 37 a9 93 5d 00 da dc 32 d5 46 07 71 51 48 f5 0c 08 9e 99 c4 e9 80 75 0e 67 9c 51 45 f5 7a a3 1e 06 da 76 51 47 71 2e bd aa 7b 9d 3d 09 df 6f 2d e3 c5 31 c5 bb 2e 68 e0 52 a1 c3 b6 77 6c ea 99 17 bc c7 a4 78 a7 5f 12 d9 97 d5 fc 80 86 34 51 4d 47 2d 9a b6 5f bb 1f 1f b9 97 c5 14 a1 f6 5a 89 09 31 14 52 10 ae e0 f8 4c a6 d2 88 c6 71 bc 78 a4 1d 04 53 39 85 b2 80 23 c5 00 58 f4 1b 2b f1 8e 4c 51 42 56 c7 56 92 26 28 a4 14 83 4c 9b bd 8c 51 48 58 8f ff d9 Data Ascii: 4S(E'1"58PJ}3j#sa)v(Em#7]2FqQHugQEzvQGq.{=o-1.hRwlx_4QMG-_Z1RLqxS9#X+LQBVV&(LQHX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49835	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	456	OUT	GET /vi/rUrNqJhIp_g/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 8497 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "1703670634" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 08 ff c4 00 46 10 00 02 01 03 02 02 06 07 05 05 04 09 05 00 00 00 01 02 03 00 04 11 12 21 05 31 06 07 13 22 41 51 14 23 52 61 71 91 a1 15 32 42 53 Data Ascii: JFIFC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;@"F!1"AQ#Raq2BS
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 29 15 a3 dd b7 07 b4 ec 12 19 a6 2e 2f db 1a 62 20 37 fb 2f 33 b7 9d 4c e0 1d 25 6e 35 c4 78 85 8c 96 91 c3 25 89 50 cd 14 e6 45 62 73 91 ba ae e0 8c 72 a7 78 a6 93 7e 5e c2 2c 91 6e 8b ea 28 a2 a4 50 28 a2 8a 00 28 a2 8a 00 f1 4e b0 7f b6 fc 43 f7 7f cb 5a cd d5 a7 59 52 ce 3a c0 e2 88 92 95 00 45 81 81 8f d9 25 65 e3 ba b9 31 96 69 41 f2 da 93 5a ba 15 ca 8b 4a 41 82 36 39 d3 8f 86 d5 55 2f 12 9d 5b 4a 9d e9 03 89 5c 67 bd 27 d0 56 39 45 f2 62 c8 5c ac 68 9b aa e0 f9 d2 aa a3 d3 e7 20 62 4f 8e c2 ba 38 9b ef a9 8f e8 2b 63 28 f0 0e 7e 25 b5 15 5c 97 8f 20 c8 7f d3 6a 5f a4 4b ed fd 2a ca 37 ba 13 bd 12 75 15 07 d2 25 f6 fe 94 7a 44 be df d2 8d 0c ce fc 49 d4 54 1f 48 97 db fa 51 e9 12 fb 7f 4a 34 30 ef c4 9d 45 41 f4 89 7d bf a5 1e 91 2f b7 f4 a3 43 0e Data Ascii: )./b 7/3L%n5x%PEbsrx~^,n(P((NCZYR:E%e1iAZJA69U/[J\g'V9Eb\h bO8+c(~%\ j_K*7u%zDITHQJ40EA}/C
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 47 24 58 34 c5 d1 5c a2 a8 20 c4 c4 3b e8 3b 60 67 e3 4d 2a 46 91 92 49 04 d3 52 12 97 24 9e 79 f3 cd 38 62 0c c1 59 ce 31 9a e3 9b b9 0c 83 56 5b 00 82 07 8f be 98 24 a3 86 27 39 a7 5c 24 40 e9 39 19 a6 24 6c 91 4a 30 e1 93 48 21 73 49 5d 6c c0 95 38 3b 6f 4b 85 81 84 af 2c 1c 93 4e bc fb 85 03 34 58 58 83 a5 81 3f 8a b5 9d 57 a1 5e b0 38 69 f0 f5 b9 ff 00 09 eb 20 84 6a 21 bc 6b 5f d5 8c 85 ba c1 e1 4a 01 c7 ad cf f8 4f 5b 1a b4 6a ab 3e 80 a2 8a 2b a8 a9 c6 60 aa 59 88 0a 06 49 27 61 4c 59 71 0b 2e 23 0f 6d 63 79 05 d4 59 c6 b8 24 0e b9 f8 83 55 5d 28 e0 bc 43 8c c2 91 59 5d 24 28 62 9a 29 51 de 45 0e 1e 32 a0 f7 4e 92 01 39 c3 29 f7 15 c6 f5 f7 5d 1a e9 14 cf 7a d0 f1 e5 84 dc 26 50 81 26 51 bd 66 14 e1 86 c3 b4 5c 32 e9 fd 98 ca 9c 9a 00 d4 2d cc 0d Data Ascii: G$X4\ ;;`gM*FIR$y8bY1V[$'9\$@9$lJ0H!sI]l8;oK,N4XX?W^8i j!k_JO[j>+`YI'aLYq.#mcyY$U](CY]$(b)QE2N9)]z&P&Qf\2-
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 1a 6c cd 34 c4 9c 7b c6 6a 2b 5e 1b 79 56 08 a2 11 60 16 09 9d c1 dc e0 93 f1 fa 52 7e d1 50 e5 96 28 de eb fd d8 e6 79 e7 6e 7f f6 ad 6e 5e 66 db 26 4f 7f 78 ef d9 fa 6d d2 40 9d e6 31 4a ea 5b ea 70 37 15 d6 e2 37 f0 c0 92 5b 71 0b b7 7e d0 0c 3c b9 0c 31 93 cb e1 51 19 dd 2f 53 4a 32 4a eb de 88 c9 93 9c 1c 83 9f 0d aa 45 a4 0d 19 60 da 04 b1 1c eb d1 93 f0 0d 4d 1c 93 8b b4 d9 95 76 99 75 67 c5 a5 bb 8c 1f 49 91 64 fc 49 da 93 fa 8d f9 54 9f 49 b8 ff 00 e4 4b fc 66 b2 36 e1 19 e6 ed 19 ed 91 18 e0 a3 0c 03 93 e3 e5 9a d3 a6 7b 35 d4 72 70 33 8a fa 8f b3 fa cf 88 4e 32 5b af dc f1 ba ac 2f 13 b8 bd 99 e6 7d 32 91 e4 e9 5d e6 a6 2c 49 8f 25 8e 49 ee 2d 67 9d 5c ca 4e c4 8d f9 d5 ff 00 4c b4 0e 94 5e 1c ee 02 12 3f e4 5a cf 19 86 09 1c f9 57 1e 6f f9 25 Data Ascii: l4{j+^yV`R~P(ynn^f&Oxm@1J[p77[q~<1Q/SJ2JE`MvugIdITIKf6{5rp3N2[/}2],I%I-g\NL^?ZWo%
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 40 79 9e 58 a5 09 f8 2c b7 0c 62 8d 64 95 c8 31 62 06 ca 9c 73 3e 7b d7 a1 d0 f4 b3 8b d6 e6 a3 f3 3a 70 f4 72 c5 92 f3 e2 72 4b d2 d7 fd 19 0e 28 6e ae 78 bc 8d 78 ec d3 38 56 66 6e 7f 74 63 e9 51 fd 12 42 09 5f 91 ab 8e 39 10 3c 6e 76 66 39 01 36 f2 ee 8a 86 5f 4e d9 de ba 72 e1 71 93 22 f2 41 bb 5b 5f d1 10 63 86 45 73 95 3b 73 f7 52 db 43 ae 42 ef 9d ea 42 05 46 69 32 77 d8 8a 8a f1 15 62 51 b3 be 45 45 45 b0 d4 90 14 52 58 a9 d8 78 52 bb 34 5c 10 c7 34 c6 a6 42 46 0e 4e d5 c1 29 ed 01 6d c0 ac a3 55 0f 47 39 0a 07 30 0d 2c 20 92 30 e7 25 98 ef 49 33 2c 6a dc b3 9e 54 df a4 6c 74 ec 36 ac a0 a2 4b a4 08 40 19 ce 33 bf 8d 46 05 c1 0d be 3d f4 f1 25 ca b2 f2 f3 a7 33 a9 79 53 28 b6 e9 1a 44 9a 46 d2 57 04 12 77 f8 54 7a b2 60 15 09 c6 e0 53 70 30 99 49 Data Ascii: @yX,bd1bs>{:prrK(nxx8VfntcQB_9<nvf96_Nrq"A[_cEs;sRCBBFi2wbQEEERXxR4\4BFN)mUG90, 0%I3,jTlt6K@3F=%3yS(DFWwTz`Sp0I
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 91 a8 ee 6b 9a df da 34 b6 ec 90 e0 a9 cf c6 94 52 30 ba 8a ed f1 a2 ce 8d 50 f2 19 d6 d9 ce a3 4e c6 c9 a0 86 c0 f3 f7 d0 a8 92 03 a4 63 df 9a 4c b6 ac 83 56 ac 83 4d 1d d8 93 58 e7 1a e0 4b ca a4 61 14 01 e6 45 21 65 65 f0 1f 2a e1 46 1e 14 9a 67 63 42 18 d2 a4 4a 5b cd b7 4f 91 a5 8b c8 fd 96 15 0a 8a 65 36 8d 78 60 c9 fe 93 09 18 27 e6 2b 82 78 23 1d cc 6f e5 50 6b a0 16 38 03 26 9b bb 26 27 62 28 99 e9 08 fb 31 18 34 a4 18 07 1c a9 a8 60 0b de 6d cd 3c 00 03 02 a9 05 26 ed 90 c8 e2 b6 88 ec 60 47 18 41 c8 54 74 b4 0a 49 62 0e f4 e5 19 af 37 bd 27 b1 34 d8 e3 8d 71 32 1e 64 62 a3 c1 03 c7 9d 45 70 7d f4 b2 ea 06 49 a8 13 4e d2 9e 64 2f 80 a7 8c e7 23 63 1b 54 58 e8 3e 62 8e cc f9 8a aa 0c 47 22 47 c2 a4 41 72 46 11 ce de 06 a9 ab 22 e1 9a b1 69 76 89 Data Ascii: k4R0PNcLVMXKaE!ee*FgcBJ[Oe6x`'+x#oPk8&&'b(14`m<&`GATtIb7'4q2dbEp}INd/#cTX>bG"GArF"iv
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 55 41 42 28 aa 48 6e 71 ea 5b 15 08 c6 c1 03 95 21 4f 23 e7 53 dc 64 63 c2 97 62 7d 60 86 45 05 54 12 84 d3 0f 12 14 56 53 cc 09 54 c0 1c f3 b5 3c f6 06 11 13 6e c4 9e f0 c7 2a b9 da a2 4c a1 23 55 2e 58 83 cc d4 dc b6 1a 4a 91 1c 20 a6 67 74 8d 97 58 c8 e7 fa d3 e4 e0 12 06 6a 19 b7 9e e2 5d 52 77 45 4a 0f 7b 6c e7 8b de ce db 4b 30 b9 ed d7 60 4e ff 00 0a b5 96 58 d8 29 62 72 46 46 9f 1a 89 25 b8 b7 86 32 99 6c f3 14 d0 63 af ee b0 07 e9 5d 3a 54 d5 a3 ae 31 b8 d9 25 dc bb 16 34 9a 3f 5a 31 ef ae 17 c9 c4 db 6f 72 55 a4 98 04 39 cb 67 9f 98 ad 6f 57 44 8e 9e f0 d0 ab 95 3d ae 48 3c bd 53 d6 36 35 c0 0d 9c 1a d5 75 6b a8 75 87 c3 3b c7 07 b5 db f7 4f 54 86 4d d2 3a b4 b5 0b 67 be d5 27 14 e0 57 97 f7 32 4b 17 14 92 04 7c 61 14 b0 c7 77 18 18 3e 7b fc 4f Data Ascii: UAB(Hnq[!O#Sdcb}`ETVST<n*L#U.XJ gtXj]RwEJ{lK0`NX)brFF%2lc]:T1%4?Z1orU9goWD=H<S65uku;OTM:g'W2K\|aw>{O
2024-01-10 21:52:00 UTC	379	IN	Data Raw: c4 e4 02 f6 8a a6 9f 81 4e e9 a2 1e 23 24 23 59 61 8d 44 af ed 39 77 b9 8e d1 71 e1 dc 1b 79 2e c3 83 dc d9 dd a4 f2 71 39 66 50 9a 5a 23 ab 49 39 38 23 2c 70 7b c7 e3 b7 90 c0 05 b5 14 51 40 05 14 51 40 1f 3c 75 a5 ff 00 b8 dc 53 f7 3f c9 4a c9 69 38 ce 2b d0 ba c5 b3 82 5e 9d f1 19 1d 32 c7 b2 c9 cf fb a4 ac cf d9 f6 c7 f0 1f e2 34 01 46 79 d7 2a f3 ec db 5f cb 3f c4 68 fb 36 d7 f2 cf f1 1a 9c a2 db 19 3a 28 e8 ab d1 c3 ad 47 fb 3f a9 a3 ec fb 6f cb fa 9a 5d 0c db 28 ab ba 4f 95 5e 7d 9f 6d f9 7f 53 5d fb 3e db d8 fa 9a 34 30 d4 8a 60 2a 43 b6 80 82 ac 7d 02 db f2 fe a6 ba d6 36 ed cd 3e a6 a9 04 e2 9f 98 92 fb cd 15 73 73 04 6e 08 a6 c3 81 e1 57 06 c6 dc 80 0a 6c 3d e6 b9 f6 7d b7 e5 fd 4d 2e 58 6b 76 64 62 92 a6 55 03 9e 54 a5 38 24 fb aa cc 58 5b 0e Data Ascii: N#$#YaD9wqy.q9fPZ#I98#,p{Q@Q@<uS?Ji8+^24Fy_?h6:(G?o](O^}mS]>40`C}6>ssnWl=}M.XkvdbUT8$X[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49837	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	456	OUT	GET /vi/XIm6YA4O6Xw/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5548 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 12 10 10 10 0f 0f 0f 10 10 10 0f 10 10 0f 0f 10 0f 11 10 0f 0f 10 17 15 19 18 16 15 16 16 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 26 28 2d 2f 32 32 32 19 22 38 3d 37 30 3d 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 10 10 1d 2f 1d 1d 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 43 10 00 02 01 02 04 02 06 06 05 0a 05 05 00 00 00 00 01 02 00 03 11 04 12 21 31 05 41 06 13 22 51 61 71 23 32 81 a1 b1 b3 14 42 83 91 c1 24 25 33 34 Data Ascii: JFIF+#(%5&(-/222"8=70=+12////////////////////////////////////////////////////@"C!1A"Qaq#2B$%34
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: a4 18 ce a9 3d 0d ae 87 8b 2a 0b c9 e9 b4 61 1e 21 66 6d 69 a9 88 da 65 d6 97 8a 32 57 8e 88 44 59 b4 73 e4 91 76 91 b4 78 32 33 29 10 08 f5 88 92 58 85 a7 ae d2 0a 9b c9 c1 12 07 de 15 18 f6 e9 c0 d3 d9 1a c2 3f fa 46 99 cb 5e 82 a3 8d e5 2a 9b cb d5 25 37 de 34 9a 04 d5 c3 25 94 4c fc 3d 3b b0 9a a0 46 70 42 10 90 a3 58 42 2c 22 02 04 c2 32 b1 d2 30 6d 3d 4d e6 cf 46 7f 5c a3 f6 9f 2d a6 3d 31 a4 d8 e8 d7 eb 94 7e d3 e5 b4 9b d1 bd 05 1e 3a 44 05 a2 f5 93 92 8d 24 bc 49 19 a9 18 d5 fc 62 d8 4f 78 f5 7d 44 a0 d8 9f 19 15 4e 24 89 ab 30 51 e2 6d 09 b3 56 6a 4e 18 d9 6a 1d 4e d4 c0 e7 df 23 ab c3 1d f9 57 1f 6a 14 44 6e 93 d1 cc 57 36 c2 f7 1b 19 2d 2e 3b 4d b6 71 e4 4d a6 9f b7 f1 1a 88 9b a3 c0 9b 9a 6a 76 d5 eb 39 e5 dc 23 97 a3 4b fb 38 75 fe 42 df 19 Data Ascii: =a!fmie2WDYsvx23)X?F^%74%L=;FpBXB,"20m=MF\-=1~:D$IbOx}DN$0QmVjNjN#WjDnW6-.;MqMjv9#K8uB
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 6b a1 32 06 1a cb 94 96 c2 20 92 11 21 03 04 c8 ef 1d 52 22 24 46 78 81 30 8c aa 74 80 47 b9 92 ac 89 24 c2 20 59 b5 d0 ea 21 f1 f8 75 61 70 7a db 8f 2a 4e 7f 09 8b 37 7a 12 7f 39 61 be db e4 bc 2f 47 8f 6e b3 a5 58 35 54 21 45 81 cb a7 2b de 5f e8 76 07 ab c3 97 23 5a ad 71 fb ab a0 fc 65 3e 93 66 7a eb 48 6d 65 00 77 b1 33 aa a3 40 22 22 2e c8 a1 47 b0 4c 2d d6 2e 9c 67 ec 8d 93 b5 7f 0b 7f 7e e9 1d 43 7a 8a a3 ea 82 c7 db a0 fc 64 c8 2f 73 e3 21 c3 8b b3 b7 79 b0 f2 1a 7f 59 ce de 55 4c 7e 21 54 d9 80 25 bd 50 76 27 c6 73 1c 4b 02 4d 44 3e 88 07 5b b6 55 ca 69 91 c8 f7 ce 9b 89 60 05 50 79 15 d8 cc 43 80 6b f6 db 41 df 2a 51 31 d9 78 3b 80 8d 71 a0 20 03 28 71 45 ed bd b3 10 a0 b1 b3 5a e3 c2 74 2d 85 51 4d 55 06 97 f7 c8 2b 60 97 46 3a 37 2f 18 6f db Data Ascii: k2 !R"$Fx0tG$ Y!uapzN7z9a/GnX5T!E+_v#Zqe>fzHmew3@"".GL-.g~Czd/s!yYUL~!T%Pv'sKMD>[Ui`PyCkAQ1x;q (qEZt-QMU+`F:7/o
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: ee ef fa b9 35 34 6d 7a 97 d0 4a 15 65 80 fa 83 e3 2e 56 c1 0a 80 15 36 36 8e 15 63 c2 58 ab 82 65 e5 79 01 12 f6 8a 23 5f 68 eb 46 b4 64 8a 24 7d a2 5a 52 4c b4 2d 1d 68 5a 32 36 d0 8e b4 4b 40 3b 08 45 10 9c cd c9 08 42 23 10 84 20 04 21 08 01 08 42 20 21 08 46 08 67 45 d0 25 fc e5 86 fb 6f 92 f3 9e bc e8 fa 08 df 9c b0 df 6d f2 5e 14 7d bd 78 88 b6 8a 60 27 3b a0 85 64 6c 92 72 64 4e e2 2d 09 55 6a a0 b6 5b db 35 c7 8c e5 f1 38 4c 95 19 7c 6e 3c 8e a2 74 58 87 50 69 54 ce aa e4 80 2f fb 04 eb ee b4 ce e2 3c 22 aa 5e a5 fa c0 2e 5a c2 d6 52 74 d3 db 17 8b 49 c9 ef 4c 87 a5 76 07 31 16 e5 ca 37 12 6c a6 da 9e 51 e5 c6 b6 3e 60 e8 44 9a 86 1b 39 4f d9 24 e6 6b dc b5 8f b8 4c dd 17 29 a4 bc 37 87 e5 a3 73 98 7d 7b ea 0e 6e 46 6a 8c 1d 36 23 ad 55 eb 02 16 Data Ascii: 54mzJe.V66cXey#_hFd$}ZRL-hZ26K@;EB# !B !FgE%om^}x`';dlrdN-Uj[58L\|n<tXPiT/<"^.ZRtILv17lQ>`D9O$kL)7s}{nFj6#U
2024-01-10 21:52:00 UTC	1177	IN	Data Raw: 08 a4 05 a7 d6 dc 68 a0 f2 b7 be 53 e9 0d 0c f4 33 aa e6 23 20 b8 26 fa ca d7 b4 db a4 29 89 7a 08 19 69 b3 1b 35 da fd 90 6f 61 7f 09 4f 07 55 9e b5 9f d6 75 62 49 16 24 ef a7 b0 cb fc 3b 04 c2 88 b0 04 e6 be 57 24 aa db 43 61 cc 1b 5e d3 43 0f 49 7a a7 08 99 5a e6 f7 39 74 37 d7 5d b7 31 fa 29 6d f6 cb 5c 29 a3 53 38 17 0d 70 4f d5 03 bb ce 6a 51 5b 9a 8c ba 58 22 96 71 61 a5 c9 3e f8 94 f0 e4 d0 55 cc 0d ec d7 b6 fa f3 8e c7 61 1a a5 02 94 cf 6e f7 3d ab 02 77 37 99 5c 66 f6 de e5 74 a7 8c c6 26 1d 46 76 cf 54 02 29 01 6c ca 0f d6 27 ba 63 55 c7 b5 62 6e 32 83 bd 8e a6 57 a7 84 25 89 aa 72 80 48 39 8e b7 8d c5 e2 80 19 29 0b 77 b5 b5 3e 5d d3 69 8c 18 ff 00 6a 4c 4f 14 ca 9d 5d 21 6e 45 87 e1 32 19 99 8d 85 c9 32 7a 74 4b 1d a6 c5 3c 12 2f 6a 9d 36 5f Data Ascii: hS3# &)zi5oaOUubI$;W$Ca^CIzZ9t7]1)m\)S8pOjQ[X"qa>Uan=w7\ft&FvT)l'cUbn2W%rH9)w>]ijLO]!nE22ztK</j6_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49838	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	456	OUT	GET /vi/Z-LvPIt1qm4/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:00 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6215 Date: Wed, 10 Jan 2024 21:52:00 GMT Expires: Wed, 10 Jan 2024 23:52:00 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:00 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 12 12 10 0f 12 10 0f 10 15 10 15 15 15 10 0f 10 0f 15 0f 10 0f 15 17 15 19 18 16 15 17 15 1a 1f 2b 23 1a 1d 28 1d 15 17 25 35 25 28 2d 2f 32 32 32 19 23 38 3d 37 30 3c 2b 31 32 31 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 1d 1d 27 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 30 2f 2f 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 42 10 00 01 04 00 04 02 07 04 05 0a 06 03 01 00 00 00 01 00 02 03 11 04 12 21 31 05 41 06 13 22 51 61 71 91 32 81 a1 c1 23 62 72 b1 d1 07 14 16 42 Data Ascii: JFIF+#(%5%(-/222#8=70<+121/'////////////////0/////////5//////////5////////////@"B!1A"Qaq2#brB
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: be 78 3c 8f e8 c7 ef bf 87 fd 48 fd 18 fd f7 f0 ff 00 a9 7d 0f 17 c3 0c f8 b9 f0 8d 8e 28 04 32 cd 95 fd 58 8c 86 e6 cb 1b 1d 55 60 bb 20 04 eb db e7 b2 e6 63 78 63 63 86 19 4b dc 1f 28 0e ea 5c cc a6 b3 c8 c7 11 ad e8 63 1b 81 79 c5 6c 53 79 f3 2e ff 00 b1 38 fc 33 c3 25 49 c2 a4 eb 6b 93 e7 75 c3 f6 47 95 83 a1 92 49 7d 59 7c 95 be 48 0b eb d0 aa 66 e8 b9 66 6b 90 82 d0 6d a6 2c a4 50 d8 eb a2 fb 8f 47 f0 67 a8 80 c2 e6 06 75 5a b7 aa cc 5c f2 07 6c bb 30 e6 46 95 ae ab ca 7e 50 61 0d ea f3 16 ba 5e ad fd 63 9a ce af 30 ae c9 2d b3 5c f9 ae 68 75 dd 43 92 b5 51 7c 3a ff 00 87 97 8b 07 41 97 3c b0 ac 55 57 5e 67 7b 7b ab 3e 36 84 21 7b c7 ca 1a b0 c3 43 e6 ae a5 56 13 d9 3e 7f 20 ae 50 f9 19 29 37 f4 51 4e 92 48 02 93 49 08 01 a1 24 26 00 52 a4 21 00 24 Data Ascii: x<H}(2XU` cxccK(\cylSy.83%IkuGI}Y\|Hffkm,PGguZ\l0F~Pa^c0-\huCQ\|:A<UW^g{{>6!{CV> P)7QNHI$&R!$
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: 26 0c 8d 8d ad af 55 85 54 2b 39 e5 b5 ba 54 b6 63 06 8d 3d eb 2a 86 34 3a 48 85 3a 45 29 2a 8a f2 a3 22 b2 90 80 22 1a 85 24 52 40 40 a5 4a dc a8 ca 80 2a a4 e9 59 91 3c a8 02 aa 4c 2b 32 a4 42 00 8a df c1 e4 2d 90 96 d7 b2 77 17 cc 2c 05 6c e1 6d 25 e4 7d 53 f7 84 3e 37 04 e9 da 3b e7 1e 7b 96 39 b1 0e 72 b9 b0 29 75 3c 96 3b 1a 3c 92 7c 98 84 7d ea c8 e3 5b 46 18 6e 7d c1 0e 8f b8 26 66 50 05 23 2a bb aa 49 c1 47 70 29 72 18 db d5 58 c8 2c d9 d9 58 5b dc 13 74 05 59 7d ff 00 24 83 55 84 28 96 f7 21 0c a5 c1 50 f0 ba d8 1e 15 24 a4 65 8e 47 0e 65 8c cd 97 d6 87 ba c2 d1 8d e8 e4 b1 d9 cb 9d a0 59 2d 04 39 a3 eb 30 ea 3e 23 c5 5a 42 67 90 c7 0e d0 f2 f9 95 9d 6e e2 ec ca f6 8f aa 3e f2 b0 d2 e8 8e e8 87 c8 88 4a 94 c0 52 ea d0 e2 34 ca a9 49 91 93 b0 5a Data Ascii: &UT+9Tc=4:H:E)""$R@@JY<L+2B-w,lm%}S>7;{9r)u<;<\|}[Fn}&fP#IGp)rX,X[tY}$U(!P$eGeY-90>#ZBgn>JR4IZ
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: f9 c3 8d d9 59 b9 94 6d 64 e0 d9 1b 37 72 a9 c4 e2 af 46 9d 0e e5 51 9b 43 e3 ba 55 b2 97 30 12 60 20 a6 b3 6c 64 0a 6d 49 09 b0 25 6a 40 a8 20 29 01 b8 a4 76 08 25 08 10 c3 54 da 92 59 90 03 21 01 a9 f2 4c 20 0a c8 48 a9 39 0d 4c 68 8e 55 e9 ba 05 06 6c 53 c1 76 5f a1 71 06 af 50 f6 72 e6 b8 2d 95 a1 74 f8 04 85 92 f5 8d 75 16 8b b0 77 ed 0d 13 52 d3 e6 09 2d 8f 51 c7 38 4b a2 39 83 48 63 cd 93 bb 01 b1 a3 4f 76 b6 16 4c 23 4d 58 22 83 83 49 3a f6 8e 8d d3 b8 ed e6 be 87 85 6c 78 ac 2b e0 94 80 c7 47 d6 47 29 d9 80 0c d7 ee fb 97 81 e8 be 25 98 89 1c e0 d2 f6 64 78 63 2f 2b 65 91 85 ce 66 6e 60 ba c1 1c f4 4a 5d 24 65 92 d7 0f 73 8b 24 e5 18 59 dd 8f 0c d3 19 73 5c d0 ea 05 cd 04 d8 24 77 72 d9 72 78 96 08 87 b0 07 36 57 10 4b a3 63 73 b9 94 2c 8f 1d 8f Data Ascii: Ymd7rFQCU0` ldmI%j@ )v%TY!L H9LhUlSv_qPr-tuwR-Q8K9HcOvL#MX"I:lx+GG)%dxc/+efn`J]$es$Ys\$wrrx6WKcs,
2024-01-10 21:52:00 UTC	1252	IN	Data Raw: e6 77 76 bb 05 ab 88 63 30 f8 18 73 68 f7 93 4c 6f f9 9d de 55 38 ce 20 dc 3c 64 b8 64 19 b3 16 82 73 4a ea 15 bf 2a ab f2 2b c0 f1 2e 28 f9 a4 32 3c 8d 35 6b 79 35 b7 b2 bc b9 e3 86 3a 60 bf d1 b4 17 77 c9 e6 7a 61 8e 7c f8 9e b6 43 65 cc 15 e0 33 3a 87 92 e0 95 d2 e2 98 b6 cb 25 b7 50 d1 97 37 23 44 9d 3c 35 58 a8 77 2c e1 19 4a 29 be 4d ca 54 80 52 a4 52 d6 31 a0 04 14 ca 8a 53 9f 60 44 4e e9 92 a4 06 b6 a2 e5 83 28 02 2d 46 d3 03 42 80 18 72 8d a0 84 26 03 72 8a 95 a8 94 c0 bd ba 58 3c 92 69 57 3d b9 bc c7 c5 67 b4 4a 2d 30 44 9d ba 89 28 b5 12 54 01 20 52 0a 39 94 82 60 36 9d 54 d4 72 ea 14 93 10 d5 ad 8c 15 9c 9d 69 5f 09 a3 75 6a d4 46 99 2c 95 d9 34 3c 6b 55 4b d6 fc 4c 8c 73 41 e6 b9 e5 32 c5 d7 16 ec bd 07 42 38 81 8b 12 f7 86 f5 9d 64 2f 64 80 Data Ascii: wvc0shLoU8 <ddsJ*+.(2<5ky5:`wza\|Ce3:%P7#D<5Xw,J)MTRR1S`DN(-FBr&rX<iW=gJ-0D(T R9`6Tri_ujF,4<kUKLsA2B8d/d
2024-01-10 21:52:00 UTC	592	IN	Data Raw: f0 d8 da c7 3d 87 da 89 f9 2d d4 e2 fc b6 00 d3 50 41 37 af 25 ca c3 71 e6 42 5a 1d 13 a4 6c 4c 01 81 ae cb da 3a b9 c7 97 eb 11 e8 ad c5 f1 88 da 58 e8 dc f9 4b 18 03 5b 91 cc 68 24 d9 f6 80 db 2b 75 e6 2d 79 b7 4a f3 b3 48 27 ef 59 e5 cb e7 4e f6 2a 09 a8 9d 3e 31 c5 3a f3 98 31 cd 04 7b 24 e7 7d 0b d2 eb 4f 72 e0 3d b1 93 ab 5d 75 7e f0 87 c3 28 70 76 63 ee d6 bd 55 d9 de 2c 12 e7 6f c8 34 7a 05 19 72 4e 49 38 b1 a8 99 a4 9e c1 ab 39 76 e7 62 b7 f5 5c f9 d8 d9 63 7b 08 a0 4e fb 90 75 aa f5 f8 2e a7 55 42 f2 ea a8 7c 06 8d 02 0d ec b9 54 34 f6 35 4c f3 10 e1 5d 18 73 1d de 6b c4 50 d5 64 72 ed f1 16 53 eb ea fc ca e3 3a 3a 5d f7 71 4c b2 17 49 1e ef 7a 91 6d a4 35 d5 64 51 00 dd 09 55 11 f1 5a 32 e8 ab ab 09 8c 71 1d 08 f0 51 0c b0 14 fb be 28 ad 10 d8 Data Ascii: =-PA7%qBZlL:XK[h$+u-yJH'YN*>1:1{$}Or=]u~(pvcU,o4zrNI89vb\c{Nu.UB\|T45L]skPdrS::]qLIzm5dQUZ2qQ(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49840	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	456	OUT	GET /vi/Ts9OpnZDo2Y/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:01 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5962 Date: Wed, 10 Jan 2024 21:52:01 GMT Expires: Wed, 10 Jan 2024 23:52:01 GMT Cache-Control: public, max-age=7200 ETag: "1639814864" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:01 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 10 13 12 10 10 10 10 0f 0f 10 0f 10 0f 0f 0f 10 0f 0f 15 0f 0f 0f 0f 17 15 19 18 16 15 16 15 1a 1f 2b 23 1a 1d 28 1f 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 0f 0f 15 2f 1d 16 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 44 10 00 02 02 01 02 03 05 03 08 06 08 06 03 00 00 00 01 02 00 03 11 04 12 05 21 31 06 13 41 51 71 22 61 81 23 32 91 a1 b1 b2 b3 c1 14 33 42 72 82 Data Ascii: JFIF+#(%5%(-/222"8=70<+12////////////////////////////////////////////////////@"D!1AQq"a#23Br
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 7e aa b7 50 a8 aa 8a 5f 27 19 e7 93 d4 81 d4 c9 0f a3 af ba 65 dc 19 f9 b2 86 e6 c3 97 82 98 01 6b f8 86 a0 d9 51 08 5a 93 90 bc ce 59 71 d7 97 49 63 fd 75 8d b5 e1 9e ac 7b 5d e3 ef 28 de fc f5 13 35 a8 d2 6a 4d 62 ea cd 47 69 01 48 60 96 01 8f da 19 c1 31 8a 9a c0 bb 6d 2e 87 70 0c 76 67 70 6f da 19 88 35 fa 0d 5b d8 ca cc 10 0d ac 40 53 9c 0f 29 4a bc 01 19 b6 d9 68 e6 6c 70 b5 2e e7 60 cc 48 03 76 00 3c fc e4 cd 2d 8c aa c7 72 39 5a ed 03 19 00 e0 72 24 7b e5 1e a7 8a 77 81 3b d2 d5 ec ce d6 ac e4 06 e9 8c 45 69 a9 fb 51 a0 15 b0 09 4e a6 b5 c6 7e 5c 29 24 7f 98 14 e5 8f 8c ac af a0 f4 9b 44 e2 75 f7 18 45 15 dc 3e 6d 89 52 77 4e 3c 43 78 e4 fa 4c d6 bb 48 51 85 8e bb ea b3 2c 0a b0 0c 7c f9 78 45 df f4 7d 41 b3 e6 9f 48 e6 9d 88 03 07 1c 87 d9 18 ba Data Ascii: ~P_'ekQZYqIcu{](5jMbGiH`1m.pvgpo5[@S)Jhlp.`Hv<-r9Zr${w;EiQN~\)$DuE>mRwN<CxLHQ,\|xE}AH
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 8c 58 63 ed 23 d8 23 04 66 2d 62 00 8e 28 8c 1d 58 e2 98 d8 8b 58 03 90 66 16 61 13 02 06 31 19 86 4c 28 04 ee 0e 3e 5a bf e2 fb a6 6a 4d 67 c0 66 65 f8 2f eb eb cf fd 7f 70 cd ad 2c 31 f0 99 6f fc 9a e7 c6 5c 6e cb 7a 99 61 a0 63 e7 09 d4 73 f3 24 c5 e8 2a 39 9a 49 f8 5d 5e 55 a2 ae c5 db 62 2b a9 ea 18 64 4a bd 6f 60 74 96 64 d6 5e 86 f0 20 ee 4f 8a 99 a1 d3 26 00 89 d4 de 16 32 8e 65 c4 bb 21 75 16 2a bb a1 ad b9 ad 8b d0 8f 4f 03 23 f1 2e 10 95 ae ea df 7e 00 de 0f 51 ef 13 a2 71 7a 12 da 89 71 8d 81 98 1f 2e 53 1b c4 75 ea da 73 58 50 36 8d bb 87 ed 0c f2 e7 33 b6 f5 be 73 38 af d3 6a 81 4d ac 7c 31 91 e1 2d 78 36 92 cb 4a d7 41 0c d6 1d a3 27 1c fc f3 33 35 1e 53 4f d9 2e 21 5a d8 95 5a 36 93 91 5b 64 a9 dc 7c 09 10 bc f6 89 2d bc 9e b6 1a 7e 17 a9 Data Ascii: Xc##f-b(XXfa1L(>ZjMgfe/p,1o\nzacs$9I]^Ub+dJo`td^ O&2e!uO#.~Qqzq.SusXP63s8jM\|1-x6JA'35SO.!ZZ6[d\|-~
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: b0 b8 c1 f9 ac 58 f8 f5 cc eb bd 90 e1 d6 55 a0 d3 26 a5 2a 72 03 75 b1 81 41 b8 e1 39 0c 72 93 3f 7c 57 f8 a5 f6 9c 13 a3 a8 94 ee ca 5a 01 41 d0 72 61 ca 62 6d e7 37 3d a2 6c e8 ed 4d 8a a2 b3 5b 0d b6 6f 38 dc 3c e6 05 ee c4 e4 fb e7 9a 5e 2f e2 83 8a 37 ca b7 a2 fd 93 1d c5 8f cb d9 fc 1f 74 4d 3f 13 73 de bf c3 ec 99 6e 24 7e 59 ff 00 87 ee 89 af c9 1f 43 bc 2a ed ae 3d fd 66 80 df 32 d4 be 08 33 53 4b 29 50 4e 33 89 d0 c8 0e ac 45 2d 80 f8 43 01 3c 84 50 0a 3c a0 41 70 f6 4f a4 a5 32 ed 88 20 fa 4a 56 eb 23 4a 82 82 16 60 cc 83 03 22 5a 79 c9 2c 64 4b 7a c7 00 a0 89 82 52 5a 16 91 2d 32 63 48 97 09 69 43 73 18 b2 3e f2 3d 91 18 eb 8e 18 d2 45 13 18 0c c5 a1 8d 47 12 32 48 58 b8 85 8b 80 1c 49 8a 89 30 0b fe c0 ff 00 c4 b4 df eb fe 05 93 55 da b2 81 Data Ascii: XU&ruA9r?\|WZArabm7=lM[o8<^/7tM?sn$~YC=f23SK)PN3E-C<P<ApO2 JV#J`"Zy,dKzRZ-2cHiCs>=EG2HXI0U
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 41 5c 1e a0 4d 62 2c 49 de be 22 32 d7 55 e7 11 65 d9 24 48 4e a3 26 57 f4 9e 26 1b 53 c0 c8 d6 b0 cc 6b 11 26 4d d7 55 21 79 84 4c 4e 61 66 66 63 87 b6 25 63 e0 46 0d ed 85 b6 3d b6 0d b1 85 85 92 35 92 53 ac 8e f5 cb 42 0d c2 45 32 7d b4 99 15 b4 e6 00 ce 62 eb 30 fb 83 1d 4a a0 65 a0 8e 81 09 56 2f 11 90 c4 10 8c 2c c0 09 8c 69 8c 53 c6 e0 1a 0e c1 59 b7 88 e9 9b cb bf fc 17 9d 8d b5 c4 f4 13 8b 76 45 f6 eb b4 e7 cb bd fc 27 9d 46 ad 7f 3e 7d 22 b0 e2 d1 b5 cf e1 89 59 aa e2 b7 0e 84 0f 80 8e d9 ac 40 33 99 55 a9 d7 ae 4f 22 41 f2 04 fd 92 6c 8a 22 de 35 a9 3f e2 63 d1 40 91 87 15 d4 e7 3d eb fa 67 94 66 db d7 c9 bf d8 7f 94 ae e2 3a b7 54 2d 59 20 a9 04 e5 4f 4f 8c ce ae 41 71 da aa b2 d1 aa d5 2b 36 10 21 ad 0e c1 63 0c ed 24 e0 f9 ca df eb c7 b1 ea Data Ascii: A\Mb,I"2Ue$HN&W&Sk&MU!yLNaffc%cF=5SBE2}b0JeV/,iSYvE'F>}"Y@3UO"Al"5?c@=gf:T-Y OOAq+6!c$
2024-01-10 21:52:01 UTC	348	IN	Data Raw: 52 24 ba 3b 2b 77 8b a2 fd 26 74 a3 a6 4f 18 d9 d1 57 1f 03 23 c3 7b 39 4a 86 ef cd 8e d8 f9 36 a9 c2 6c 3e f5 20 ee fa 62 75 1a 4d 3e 9f e5 c3 d8 1e b2 19 77 2f 22 7c ba 4d 77 e8 75 fb e2 bb a4 c6 36 82 3c 88 cc 5c 39 ae 28 78 66 b3 4f ab b8 35 8a b7 01 59 23 72 14 c7 ae 3a cb ba f8 36 90 74 a5 3e 39 3f 6c 5e d5 e8 14 0f 41 88 00 31 cf c2 b7 a7 93 47 48 e9 5d 63 d1 04 90 aa a3 a0 03 d0 48 58 68 ac bf 9c 07 56 01 cf 9c e2 7f d2 17 3e 27 aa f1 fe ef f8 15 ce be b9 f3 33 90 f6 de a6 3c 47 53 c8 9f d4 7e 0a 4a 81 9d 09 25 69 28 dc 7d d1 55 e8 98 fb a5 8d 14 05 18 12 92 09 40 11 5b 22 e0 81 12 22 8b 41 06 20 05 0a 2a 14 00 a0 87 0b 30 20 82 08 20 12 21 18 20 8c 0a 08 20 80 08 20 82 00 22 4c 10 40 0a 14 38 20 09 31 0a 79 c1 04 03 45 d9 63 ff 00 cb a7 fd 4f c3 Data Ascii: R$;+w&tOW#{9J6l> buM>w/"\|Mwu6<\9(xfO5Y#r:6t>9?l^A1GH]cHXhV>'3<GS~J%i(}U@[""A *0 ! "L@8 1yEcO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49841	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:00 UTC	456	OUT	GET /vi/AJTcpNBXAL8/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:01 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5680 Date: Wed, 10 Jan 2024 21:52:01 GMT Expires: Wed, 10 Jan 2024 23:52:01 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:01 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 12 12 12 12 12 10 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 10 17 15 19 18 17 15 16 15 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 1d 1d 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 3b 2f 2f 2f 2f 2f 2f 2f 35 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 3b 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 ff c4 00 47 10 00 01 03 02 03 04 06 06 07 03 0a 07 00 00 00 00 01 00 02 11 03 21 04 12 31 05 06 41 51 13 22 61 71 81 91 23 32 83 a1 b3 c1 07 14 35 52 72 b1 Data Ascii: JFIF+#(%5%(-/222"8=70<+12///////////////////;///////5////////////////;///////@"G!1AQ"aq#25Rr
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 56 1c ab 12 aa 20 aa 2e 11 39 3b 99 26 52 72 20 42 74 c1 3a 0b 03 12 3b 42 42 b0 e6 3c 95 3f 04 a4 22 b4 e8 53 0e 04 fe 4a 7a 8e ca 15 5d 9c f8 07 bd 5b a9 04 15 16 40 b1 f2 14 85 57 a3 c5 4e 8b 4e 81 c8 d0 90 88 cd ac 6e 7b d4 15 8e 83 cd 15 6a 99 5c e9 d6 6c 81 a3 9a cd 6e 2c d1 72 9a 14 2d 0a 60 e5 1b 0b 8a d7 dd 4a 93 8c a2 3b 5d fc 0e 58 d5 16 d6 e7 30 7d 72 8f f6 e7 ff 00 5b 95 9d b3 95 e1 ea f8 26 02 6f af b8 88 b8 ec 2a cd 7a 10 7c e7 5e fe 3e 2a 9b 44 2b 55 2b d4 96 b6 6c 45 cf 1c b1 a2 65 b9 94 ac e3 ab 8d 95 77 01 4f a8 7b fe 41 4a e6 21 c0 d5 68 19 26 1c ec c4 0e 60 65 04 fb c2 3c 3d 6c e3 93 81 2d 70 e4 e1 aa db 12 70 80 d2 8d 34 e5 fa 72 51 39 80 fe 8a f1 6a 8a a5 29 44 50 73 61 09 56 9e c2 35 f3 fd 54 7d 0a bb 45 62 53 4a b2 fa 36 b2 ac 6d Data Ascii: V .9;&Rr Bt:;BB<?"SJz][@WNNn{j\ln,r-`J;]X0}r[&oz\|^>D+U+lEewO{AJ!h&`e<=l-pp4rQ9j)DPsaV5T}EbSJ6m
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: a1 29 4c 80 98 aa c2 37 a8 4a 99 ea 25 50 05 46 f5 21 40 f4 0c 13 c2 40 22 01 11 34 25 08 8a 65 15 36 15 b7 f0 56 1c ab e1 df 07 bd 58 45 20 2c 94 24 e2 9c 20 41 24 93 14 0e 82 a8 b4 a3 4c e1 36 41 59 b8 86 9b 27 75 3e 46 ca 9b a9 43 88 56 1a f2 00 e4 ae 93 61 bc c2 d5 d8 c4 32 bd 37 39 b9 80 cd 2d 06 27 aa 78 aa 6c cb aa d1 d8 83 36 22 98 fc 5f c0 e4 4a f4 4d d3 c4 31 ce ac ea 72 d7 35 a3 aa 48 87 4e 6b 4f 80 5d 2d 1a d9 da d7 46 a2 61 73 9b ab 48 0a ce 04 6a c9 1f 89 a4 7c 9c 57 4c ca 79 64 01 6e 00 7e 4b 49 35 a7 0b bc d5 ff 00 68 75 36 d9 c4 34 47 1c 8e d5 dd 9f bc 3c 4f 25 30 63 1a c6 e5 6f 16 90 c0 63 ad 33 73 de b7 36 de c0 6d 47 b2 b1 30 5a de b4 71 00 93 ee 0e 72 c6 1b 21 e2 a4 8a 92 c7 09 68 1f af 11 e2 b8 65 85 de de bf 1e 72 62 e9 36 4e 28 bd Data Ascii: )L7J%PF!@@"4%e6VXE ,$ A$L6AY'u>FCVa279-'xl6"_JM1r5HNkO]-FasHj\|WLydn~KI5hu64G<O%0coc3s6mG0Zqr!herb6N(
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 54 fd 56 d4 a8 c1 24 b8 e5 6b dd c4 dc 9d 57 91 d5 d9 bb 43 30 19 ab d4 24 35 d2 d7 d6 73 44 89 02 4e 87 4e e5 e8 fb 9d b3 6b b7 0d 96 ab 9c 2a 74 85 dd 79 9b f0 92 49 71 d4 cf f4 bb 17 4d 38 ca dc c7 9f 54 f1 82 39 58 d8 7b e3 cd 65 e2 69 07 80 5c 61 c4 16 9b 82 07 60 1d 91 ef 2b 47 69 52 3d 1b da 5c 1d 98 44 68 42 e6 68 61 6a d2 70 cc 67 34 96 8c d7 24 73 3e 5c 55 85 bc cb 5d 56 c1 74 bc 83 36 b0 ee 6c 79 a6 df cd a5 d0 60 2b 38 18 73 fd 13 7b de 08 31 da 1b 98 f8 2c cd 8d 8e 75 1c e4 33 31 24 b6 73 00 d0 e9 eb 5a 75 b0 5c 9f d2 5e f0 54 a9 d0 d0 70 68 03 35 52 04 eb 76 36 7c 9f e6 b3 26 f2 6b 3c ff 00 1e 1c 45 47 05 52 a1 4a a5 55 03 9e bd 0f 3e 30 62 a6 4f 48 69 87 81 d5 21 da 4b 81 8f c8 f9 2e c3 75 76 a6 66 16 64 0c 02 e0 34 5b 2f 1f 79 5c 6d 40 e7 Data Ascii: TV$kWC0$5sDNNk*tyIqM8T9X{ei\a`+GiR=\DhBhajpg4$s>\U]Vt6ly`+8s{1,u31$sZu\^Tph5Rv6\|&k<EGRJU>0bOHi!K.uvfd4[/y\m@
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 52 ca 1a a2 45 d0 d8 33 88 42 da dc 15 37 34 8b 4a 42 a2 a9 6f 2b 65 eb 77 73 5d fb 75 0f 69 f0 9e b9 d0 e5 d0 6e 61 3f 5d a1 17 3e 92 07 b2 7f 62 8d 5d 3d 1f 6a b5 ee a4 e0 c6 93 71 a7 2f f7 0b 87 da 0c 2c a8 e6 9d 41 d7 98 ec 5e 8c dc 0d 47 fa c6 3b ed f9 c9 fc 90 bf 75 a8 3e f5 47 48 7f ba 3c c5 fd ea cc ac bf e3 8f 93 c1 8e 73 7b e5 e5 26 9b 9e 72 b1 ae 73 8e 8d 68 2e 27 c0 5c ad 2d 9b b8 18 ca 84 b9 ed 6d 16 93 3d 73 2e 8e c6 0f c8 c2 f5 4c 36 02 9d 21 96 95 36 b0 7f 45 a0 4f 7f 35 2e 45 bb 97 f4 c6 3e 09 3b 66 6c cd 88 da 34 69 d3 cc 4e 46 81 30 04 91 a9 8e d2 a9 d1 dc ac 05 3a 8e ac ec 3f 4d 51 ef 73 cb ab 1c e3 33 9c 5d 66 1e a8 b9 e4 ba 10 13 54 6d 96 37 63 d1 a8 83 a7 00 40 6e 50 38 0b 05 1b f1 2a 5c 88 1d 86 07 fd 2c 9b 34 e7 76 ce 2c c3 84 c4 Data Ascii: RE3B74JBo+ews]uina?]>b]=jq/,A^G;u>GH<s{&rsh.'\-m=s.L6!6EO5.E>;fl4iNF0:?MQs3]fTm7c@nP8*\,4v,
2024-01-10 21:52:01 UTC	57	IN	Data Raw: 92 32 e8 1b a0 48 94 c9 2c 34 96 83 64 ab 61 24 95 08 a8 1c 53 24 91 60 29 7a c5 1d 41 64 92 55 a5 27 8b a9 e8 0b 24 92 e7 8f 64 f9 1b 6c 48 e0 a7 cb a2 49 2d d4 af ff d9 Data Ascii: 2H,4da$S$`)zAdU'$dlHI-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49843	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:01 UTC	456	OUT	GET /vi/DNwvbf0kZBE/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:01 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 7078 Date: Wed, 10 Jan 2024 21:52:01 GMT Expires: Wed, 10 Jan 2024 23:52:01 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:01 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 12 12 15 10 10 10 16 15 12 17 10 15 15 10 15 15 0f 15 10 15 15 10 17 15 19 18 16 15 16 15 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 1f 1f 25 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 08 ff c4 00 42 10 00 02 01 03 02 03 05 06 03 05 05 08 03 01 00 00 01 02 00 03 04 11 12 21 05 31 41 06 13 22 51 71 32 61 81 91 a1 b1 23 42 c1 07 33 52 62 b2 14 Data Ascii: JFIF+#(%5%(-/222"8=70<+12//%//////////////////////////////////////////////////@"B!1A"Qq2a#B3Rb
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 7e 13 25 ee 41 e9 89 72 8d 88 c1 70 63 4b b5 c7 5a 65 b9 0f a4 6f 86 45 4c a2 75 b6 9d 8e 37 36 8b 75 42 a6 73 b3 29 fc ac 36 20 9f 5f bc e7 2b da 95 19 22 74 bd 82 e3 3d db 3d a3 e4 d3 ab e2 5c 36 0a d5 03 9f c4 7d 84 aa 71 d6 83 25 c4 1f fd 9c 69 7e 13 73 00 67 d4 8c fe b2 15 2d 01 13 77 8c 6f 5d ce 3f 87 fa 44 cd ae 70 25 1b 2c 4e cc b6 b8 a8 1b bb e7 e5 33 ee ae 1b 24 18 55 4a d9 a9 91 03 bc f6 b3 1e 21 65 0b 2d 12 b5 8e cd 2e 2b 19 da 42 28 e0 42 01 c0 92 02 30 92 12 30 8e 44 65 8e d2 2b 14 81 b4 0c 2f be c0 82 d1 12 f7 4d a2 b1 4b d0 64 41 ee a5 8b 57 10 6b ba b9 da 02 40 04 c9 28 8e 16 48 08 c3 b1 05 8c c2 4f 31 8c 01 43 62 43 3b c4 ef 22 23 04 62 63 47 88 42 41 48 99 33 20 64 03 23 37 3b 1a 80 df 51 0d cb 2f 9f fa 6d 31 0c d8 ec 95 60 97 b4 5c f2 Data Ascii: ~%ArpcKZeoELu76uBs)6 _+"t==\6}q%i~sg-wo]?Dp%,N3$UJ!e-.+B(B00De+/MKdAWk@(HO1CbC;"#bcGBAH3 d#7;Q/m1`\
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 47 90 64 58 82 26 12 54 c4 76 58 a3 90 6e 52 22 4d 86 d2 b1 08 ac 22 9a e6 10 a0 88 25 2a 98 33 52 93 86 11 58 a5 4b 51 50 6d b9 94 d4 b9 f3 92 36 60 f5 95 9b 33 d0 7c e0 02 07 7a 99 91 12 e7 b6 22 43 4c 36 31 18 f8 92 c4 69 06 42 12 0c 65 86 52 4c 28 23 e6 36 62 8d 08 05 14 51 42 01 43 38 4d 1d 75 95 47 93 7d 10 9f d2 07 36 fb 1a a0 df 51 04 64 7e 26 47 ff 00 53 c0 fa 03 e8 7a 79 a9 50 28 24 53 5c 05 18 c6 73 92 5b 13 62 e2 f8 5b a0 54 3e 26 cb 36 0e 08 e7 81 f5 96 f6 89 00 a8 19 86 97 72 cd b1 03 08 00 44 1f 21 f5 33 9f af 4c 00 5b 25 98 9d c9 39 f9 4a 75 3e cb d2 7e 02 2a f1 52 da 14 f3 07 53 7c 06 14 7c f2 60 1c 56 ae b0 0f 93 63 e4 a3 3f 52 64 40 d2 32 79 99 4d 73 b0 1e bf 33 2e 8c 15 e8 59 a6 a3 b3 bf fd 93 f1 62 82 a5 12 7c 24 82 07 bf ac f4 96 a9 Data Ascii: GdX&TvXnR"M"%3RXKQPm6`3\|z"CL61iBeRL(#6bQBC8MuG}6Qd~&GSzyP($S\s[b[T>&6rD!3L[%9Ju>~RS\|\|`Vc?Rd@2yMs3.Yb\|$
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: f0 9c e7 0e 27 56 e2 6c 5d f0 be fa 9e c7 a4 cb 28 45 35 65 9c a5 e0 e3 b8 a7 15 a9 72 fa ea 63 6f 65 47 20 20 ba 61 fc 57 84 b5 02 a0 f2 60 48 f8 63 3f 79 5a d2 f0 6b f2 6c 3f a1 e4 47 d6 74 57 1e 3a e8 cf 1b b7 7d 9a 1c 01 73 a8 1f 2d fd 20 f5 a8 14 77 46 1b 83 b7 a4 be cf 34 6a ab 8d d1 87 cd 4f 31 36 6f ed 96 b2 86 42 35 81 e1 f3 2b e4 7c e5 12 95 48 ba d4 95 1c 55 d0 f1 9f 87 da 55 88 4d e5 32 1c ea 18 3d 7e 52 82 25 88 cb 25 b2 31 e3 47 cc 84 43 c5 24 ab 98 c4 62 41 c6 c4 52 6a 33 22 cb 01 0b 28 9d e1 85 7a cc f5 30 fa 0f 91 15 85 32 5a 75 0c 75 81 54 a7 83 0d c4 6a 8b ab d6 2a 20 10 88 c7 61 89 1c c7 00 f5 29 c7 a2 37 86 bd 09 0a 54 25 3c b4 68 e3 b2 6a 90 7a cb 93 0f 2b 85 30 0a 27 24 c1 10 4c a5 84 81 32 ca bc e5 52 e4 66 1e 38 89 64 f1 25 8e 89 Data Ascii: 'Vl](E5ercoeG aW`Hc?yZkl?GtW:}s- wF4jO16oB5+\|HUUM2=~R%%1GC$bARj3"(z02ZuuTj* a)7T%<hjz+0'$L2Rf8d%
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 01 37 63 81 cd 9b 1e ca 0f 69 b1 1f 8a 76 b6 ce d2 85 36 a0 ea d8 aa 9a b1 82 74 16 c3 b7 bc 80 73 f0 95 c6 ee d1 7c 7e b5 68 d4 e0 14 28 da a1 b7 4a 69 4c 20 42 c8 00 d5 87 0d 86 63 cd 89 d2 db 9f 28 b8 b7 0a a1 59 1b bb 03 75 3b 1c 1c 37 98 9c 73 f6 a5 6e ae 2a 25 12 c1 cd 35 d0 d8 18 73 4c b1 00 7c 2a bc d6 e0 5d fa 53 d2 e4 6a 3c f3 be 21 dd ec 8e 35 ee e8 f3 5e 24 07 7a c0 74 20 7c 40 00 fd 44 1c 09 ad da ba 7a 6f 2a 82 41 3e 0c e0 69 19 34 d4 f2 f8 cc 90 66 d8 74 8c 53 76 db 31 ef 13 15 0c a5 84 33 8a 26 e1 a0 cb b8 9a a2 f4 50 c6 59 75 23 28 06 5c b2 32 22 35 56 3a 89 36 1b 48 a4 51 cb 01 c8 95 15 96 48 b4 80 63 09 25 69 5e 62 d5 08 a3 ba f5 12 ca 55 ba 19 5e a9 18 28 74 74 89 ca 26 11 a8 72 96 15 98 8b db d8 0d ef b3 33 2d cf 39 a9 7c bb 4c 9a 67 Data Ascii: 7civ6ts\|~h(JiL Bc(Yu;7sn%5sL\|]Sj<!5^$zt \|@Dzo*A>i4ftSv13&PYu#(\2"5V:6HQHc%i^bU^(tt&r3-9\|Lg
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 80 33 63 23 27 38 ff 00 39 c6 52 9e 5f 52 d5 e9 33 b1 51 8e 1d 2d d1 c9 d7 3e de 46 0f 84 e3 c8 93 bf a1 d8 cb ae 2f 7f 06 93 67 c4 a3 46 fb ec 01 18 f9 62 5b 75 c3 eb b5 66 a4 ca 16 a3 32 eb f1 65 29 22 8c 05 2d b8 db 38 e7 d3 12 56 dd 9a b8 bd ac 69 59 51 2f 4e 9f 85 aa 63 4d 3c 8e 64 b1 db 3e ee 73 af 27 1a b6 72 16 39 72 6d 1d 9f ec c6 c8 3a 97 3b ee 49 cf 2e 73 67 b6 7d 8a a3 72 cb 5e 86 12 e0 10 2a 00 06 2a 26 36 24 7f 10 f3 f2 85 f6 6f b3 06 c2 8e 82 da 9b 1e 32 36 f1 7b bd d3 9b e3 bc 49 ad ef 28 dd 8d 44 53 7c 56 50 4f 8a 89 d9 c6 3a ec 67 1a 0a 53 c9 29 c5 d6 ce c6 49 fc a9 78 45 55 3b 4d 56 c6 ad 24 af e2 a1 a8 2d 5c ae 19 57 38 d4 08 e7 8f 29 d3 76 b7 b3 14 eb d0 62 84 00 ca 1c 69 df c5 cf 23 dc 66 57 6c 2d ad ea 04 ac d9 6a 55 14 62 a2 f8 80 Data Ascii: 3c#'89R_R3Q->F/gFb[uf2e)"-8ViYQ/NcM<d>s'r9rm:;I.sg}r^**&6$o26{I(DS\|VPO:gS)IxEU;MV$-\W8)vbi#fWl-jUb
2024-01-10 21:52:01 UTC	203	IN	Data Raw: d7 e2 95 7f 8a 34 53 91 28 45 e4 95 af 27 ad c3 fb 31 fc 22 35 38 c5 50 09 0d f4 99 f5 aa b5 4a 7d eb bb 33 6a 23 73 b0 03 07 61 f1 8a 29 76 28 45 6d 23 37 a9 93 5d 00 da dc 32 d5 46 07 71 51 48 f5 0c 08 9e 99 c4 e9 80 75 0e 67 9c 51 45 f5 7a a3 1e 06 da 76 51 47 71 2e bd aa 7b 9d 3d 09 df 6f 2d e3 c5 31 c5 bb 2e 68 e0 52 a1 c3 b6 77 6c ea 99 17 bc c7 a4 78 a7 5f 12 d9 97 d5 fc 80 86 34 51 4d 47 2d 9a b6 5f bb 1f 1f b9 97 c5 14 a1 f6 5a 89 09 31 14 52 10 ae e0 f8 4c a6 d2 88 c6 71 bc 78 a4 1d 04 53 39 85 b2 80 23 c5 00 58 f4 1b 2b f1 8e 4c 51 42 56 c7 56 92 26 28 a4 14 83 4c 9b bd 8c 51 48 58 8f ff d9 Data Ascii: 4S(E'1"58PJ}3j#sa)v(Em#7]2FqQHugQEzvQGq.{=o-1.hRwlx_4QMG-_Z1RLqxS9#X+LQBVV&(LQHX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49844	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:01 UTC	456	OUT	GET /vi/vlCCdHvzQiM/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:01 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 9123 Date: Wed, 10 Jan 2024 21:52:01 GMT Expires: Wed, 10 Jan 2024 23:52:01 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:01 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 13 13 12 15 12 12 13 17 16 16 17 17 17 15 18 15 15 15 15 15 15 15 15 17 15 1a 18 16 15 16 17 1a 1f 2b 23 1a 1d 28 1d 16 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3f 37 30 3d 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 1f 1d 1d 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 00 07 ff c4 00 48 10 00 02 02 01 03 03 02 03 05 05 05 03 09 09 01 00 01 02 03 11 00 04 12 21 05 31 41 22 51 06 13 61 07 14 71 81 91 32 42 52 a1 b1 15 23 33 b3 c1 62 Data Ascii: JFIF+#(%5%(-/222"8?70=+12////////////////////////////////////////////////////@"H!1A"Qaq2BR#3b
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 03 84 af 58 5e ad 29 ed 5c e4 51 7c 42 cf 7b 58 1a 34 78 ae d9 82 ea df 10 93 a6 d3 0d 33 5e e5 06 c5 8d ad 44 51 f2 a0 51 ef 94 7f 0f 75 09 e5 98 69 f6 9b 91 d0 7e d1 01 37 02 db bf 0a 1e 7c 91 83 87 ad 1e bb 20 c6 ff 00 6f c9 90 6a b4 fb 01 2c 68 28 e4 9f eb 83 44 c8 cd b5 5a cf 3c 51 f1 df 06 87 ff 00 6f 49 ef 9d fd bd 27 be 04 d1 56 33 66 17 4b 01 d7 64 f7 c7 c5 d7 a4 b0 32 b3 6e 3e 25 e4 60 60 7e da da f5 b0 b7 9f ba a7 f9 b2 e7 9d ac 85 c6 d1 9b df b6 c9 2b 5d 00 ff 00 e1 23 ff 00 3a 6c f3 e8 27 ab a1 ce 47 59 d0 81 a6 65 1d f1 b3 bf 61 59 d1 eb 3f 8b 8c 58 e1 2e 6f c6 41 1a 40 4f 03 3a 2d 38 ba 73 58 54 12 53 55 67 1d 20 e5 9b f4 c2 a3 3a 50 1b bd 83 db 08 86 94 9a c8 50 5a d8 f1 db 39 94 9e 70 0a 79 16 ac e0 2e 80 0c 8d 11 8d f7 ac e6 5e 38 c2 27 Data Ascii: X^)\Q\|B{X4x3^DQQui~7\| oj,h(DZ<QoI'V3fKd2n>%``~+]#:l'GYeaY?X.oA@O:-8sXTSUg :PPZ9py.^8'
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 54 1f 95 b1 9c 59 5e 17 7e de db fb d8 ed c0 ed 79 58 cb 95 29 e9 8c a7 e5 86 f9 8e 4d ee 05 98 06 15 45 99 8f 36 0d df 6f 6c af eb 72 b4 41 14 80 d2 5d bb 82 6c 00 46 d5 5e 7d 03 92 3b 79 f3 97 f3 74 36 92 56 1f 37 e5 ab a5 84 8c 5e d6 4e 00 2e 28 ed fd a3 db fa 64 e1 e2 86 42 a7 61 47 12 06 52 80 30 7d 9c 6e 63 cd 77 f7 bb ca e7 af b9 32 ab a9 76 8a 3d ff 00 36 89 aa 54 1b 1b d5 54 e6 80 e5 94 5f 72 6c df 7c 5d 43 ea a6 2c c1 4b 47 fb ca a4 b2 f1 c1 69 00 ef 46 b9 3d b8 c2 35 dd 2a 30 47 ad 95 88 dd b9 1c 15 25 47 ab c7 bd 73 c7 7e d9 6b d2 ba 43 7d d5 a3 32 2a 82 eb ea a5 0e 77 2f a8 f6 b2 28 01 5f 8f d6 c6 a3 39 a0 85 26 db 15 bf cc 51 b5 55 9c a0 17 dd d3 f4 e4 1a 1c e6 9e 2e 8b a6 50 4a 99 09 08 bd dc 6c ba 15 60 71 65 ab bf 7c 37 49 a0 81 63 8d 42 Data Ascii: TY^~yX)ME6olrA]lF^};yt6V7^N.(dBaGR0}ncw2v=6TT_rl\|]C,KGiF=50G%Gs~kC}2w/(_9&QU.PJl`qe\|7IcB
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 7a ea 30 7f d9 23 ff 00 3a 6c c6 69 75 48 14 fd 73 7b f6 cb d3 9e 5d 64 2e 84 58 d2 a0 da 7e 92 ca 7f d7 3c ba 44 65 25 58 51 cc ba 58 3f 4d ab 00 9b 3c 73 83 6a 0a ef e0 f0 70 5c 40 70 69 3c c0 13 e9 c9 b4 e7 67 3f 5b c1 97 0c 4a 65 af 38 4a 2e 5e a2 d2 80 02 ed 03 b9 27 22 33 30 e6 bd 3e f8 22 ea 3d 25 48 c9 b4 7a a1 b0 a3 7b 71 80 3c 8c a7 b0 ce 85 fc 01 cf d3 22 ac 33 41 19 07 77 8c 08 c6 95 c7 a8 f1 85 f0 cb 47 c6 26 a2 53 b4 f1 e7 19 a5 21 bf 3c 22 58 26 08 38 ac 23 4d 38 7c ab 9a 1d 8f 57 c6 58 69 e4 1e 30 21 11 ee 36 72 39 9c 01 c7 8c 59 9a 85 13 58 33 2f 1c 1b c0 95 25 bc 8a 46 e7 1b b8 8e 31 6c 60 31 8e 1b d2 e6 6b da 3c e4 31 85 e6 cf 8c 7f 4b 94 06 27 0b 07 c8 a1 6c f9 c8 74 2f b8 9b e2 b1 35 53 73 81 c0 cc 5b 8f cf f0 c0 b1 d4 af 81 95 46 72 Data Ascii: z0#:liuHs{]d.X~<De%XQX?M<sjp\@pi<g?[Je8J.^'"30>"=%Hz{q<"3AwG&S!<"X&8#M8\|WXi0!6r9YX3/%F1l`1k<1K'lt/5Ss[Fr
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: d6 2d 0c ea ac a4 89 4e d0 8a 76 92 d1 2d 96 af da 03 81 5f 8e 52 ea 0a 34 77 b6 cd ed e0 82 c7 dd 8b 57 6b e0 7e 39 17 4f d1 cd f3 10 e9 22 25 d4 ef da dc 9f 4d de e0 78 db f8 91 9d 2b c7 84 6a b5 1a d7 93 55 a4 83 4d 4a d2 b2 a3 47 61 ca 06 03 79 6a fd 92 06 e3 57 e3 37 5a 5e 9a 9a 79 64 98 50 44 06 2d 3c 60 00 b1 a7 79 1e bc b3 35 db 1e 78 3c f3 94 ff 00 02 f4 e3 24 af d4 a6 d8 08 8c 45 1a ad fa 24 6b 32 96 bf de 0b b4 7f de 39 3f c5 dd 5d 62 85 de c7 63 43 dc d7 03 38 e7 77 74 fa 5f e3 e3 ac 7d a8 ad 6f 58 37 a5 99 5a d5 67 01 b9 ee b3 23 44 08 ff 00 be e9 94 5f 68 3a bd dd 57 a5 1f 3b 94 1f c1 a6 51 5f cc e3 ba 64 8a 3a 74 6f 2f 17 12 d7 e2 14 51 1f 5b 19 9d f8 8b aa 99 fa b6 8e 40 29 57 e5 6d 07 dc 48 58 91 f9 e4 8e 99 f5 b7 a0 7c 3f ad 54 57 8c 1a Data Ascii: -Nv-_R4wWk~9O"%Mx+jUMJGayjW7Z^ydPD-<`y5x<$E$k29?]bcC8wt_}oX7Zg#D_h:W;Q_d:to/Q[@)WmHX\|?TW
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 35 34 87 b9 03 e9 fe 99 a6 d0 74 51 0a ec d3 f5 ed 22 8f 17 b9 48 bf 6b 06 b0 18 fe cf a6 25 8a 75 1e 9d 26 ee ff 00 ff 00 a8 86 6b f2 77 27 7c b8 cd 39 f9 b3 f7 93 40 f4 1a a6 61 22 36 9f ef 2b 19 da 5f e6 3b fa c9 2a 1d 56 f9 b0 a3 81 e1 70 e6 9e 0f 94 53 e5 94 70 54 8f 5b 52 10 5a d0 03 67 6d 57 04 9a c3 ba 57 c1 1d 53 4e 5b e4 49 a6 60 cb 5e 8d 4c 4d e6 c1 1b ab 9f af d7 13 53 f6 7f d4 7d 2e 34 ce f2 b3 ef 72 b3 69 8a 73 65 aa 9e ee ff 00 2a cd bc 9e ba aa 2d 43 13 b6 c9 3c 79 ef 56 72 35 17 87 f5 be 9d 3c 12 04 d4 44 d1 39 50 c1 58 a9 25 4b 30 0d e9 24 55 83 fa 65 7a 1c c5 7a 71 e8 6c 59 98 ea d0 ed 99 bd 8f 23 34 d1 1c a7 f8 8a 2f d9 6f cb 06 40 91 53 8e 30 95 88 ed 20 af a4 f6 ca a5 35 96 09 d4 48 00 1e 6b 34 e5 a4 0b 0f 35 8e 3a 70 4d 73 78 67 cf Data Ascii: 54tQ"Hk%u&kw'\|9@a"6+_;VpSpT[RZgmWWSN[I`^LMS}.4rise-C<yVr5<D9PX%K0$UezzqlY#4/o@S0 5Hk45:pMsxg
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 9b ec f2 07 97 55 20 4f 92 59 60 76 03 50 fb 23 34 f1 8a bf 7b 3f c8 e5 2e a3 a3 b7 83 78 67 c3 fd 3d 92 57 f9 8a 08 31 91 cd 11 fb 4b e3 f2 ca 9c 6b 96 fa 4e 89 d6 85 8d 31 d2 c6 1d 8b 3f dd a4 82 eb d8 6e 1d b2 87 59 f6 7d d6 a5 66 f9 cb 34 82 ec 13 32 3a 9f 73 5b f8 f1 e3 03 fe ca 8c 8d a8 aa 79 bd c1 40 23 e9 7d f1 23 84 a5 85 76 07 fd 99 1d 7f a1 cc 5a f4 61 e3 dc dc a6 2f d9 f7 50 43 ce 92 50 07 90 bb bb 7d 01 ca 9f 89 7a 44 d0 08 be 74 52 46 5b e6 57 cc 46 4b a2 2f 6d 8e 7f 68 76 f7 19 a8 87 57 32 81 b7 51 3d ff 00 da 26 ff 00 cd 99 cf 8b ba 84 f2 3c 6b 3c d2 4b b0 36 df 98 c5 b6 86 22 ea fd e8 7e 83 13 b6 b3 f6 f5 e7 5a 67 4e 76 28 38 99 a7 9d d9 7d a0 94 ac 08 b5 64 b3 30 1e de 2f f9 65 0e 7a 24 3d 52 28 e2 82 23 d3 34 8e ca 88 a6 42 d2 23 b1 0b Data Ascii: U OY`vP#4{?.xg=W1KkN1?nY}f42:s[y@#}#vZa/PCP}zDtRF[WFK/mhvW2Q=&<k<K6"~ZgNv(8}d0/ez$=R(#4B#
2024-01-10 21:52:01 UTC	996	IN	Data Raw: d0 63 0e 9e 13 fb ab 83 4c cc 4d 93 09 73 40 34 10 9f dd 18 bf d9 50 ff 00 0e 12 c5 1a 80 32 09 89 6c e9 5b db 38 49 80 b1 27 8c 47 51 7d b2 58 5b 22 67 e7 23 5f 0e 5e 3c e3 24 7c e6 38 8a 46 54 d1 02 de 2f ca c7 6e c7 86 18 4b 11 98 4e 23 03 55 cd 7f 4c 9f 75 e7 30 e3 09 03 c3 11 27 8c 98 e9 4e 45 1c a5 49 03 1c ce 4f 7c 36 89 d6 ab f1 cd a7 c3 ba d1 3c 8d 1c 6a c4 88 8b 1e 3b 00 54 1e df 8e 62 25 cd 77 d9 86 aa 48 f5 72 b4 4c 55 be ee fc a8 b3 5f 32 3e 3f a6 22 5e 86 36 80 06 25 85 73 c0 3d ff 00 3c 78 81 aa c0 00 7d 3b e6 ba 5e b9 ae 27 fc 40 d6 78 57 8e 36 ff 00 f1 bc 84 fc 41 33 7a 5b 4b 03 fb ef 81 05 fd 7b 65 db 13 1c 7f 6c c4 6e bc 2b 31 02 fc 72 73 29 f1 49 1f 7b 92 ae bd 15 7d eb e5 ae 7a 96 9f ab c4 0d b6 8b 4d f5 2a 8c 83 db b8 6c f3 af 8f 50 Data Ascii: cLMs@4P2l[8I'GQ}X["g#_^<$\|8FT/nKN#ULu0'NEIO\|6<j;Tb%wHrLU_2>?"^6%s=<x};^'@xW6A3z[K{eln+1rs)I{}zM*lP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49842	54.190.82.3	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:01 UTC	657	OUT	GET /pixel/v?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207 HTTP/1.1 Host: trck.t-y-p.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t-y-p.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:01 UTC	159	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:01 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close
2024-01-10 21:52:01 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49845	142.251.163.119	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:01 UTC	456	OUT	GET /vi/-CweIttZ6Sc/mqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:01 UTC	637	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6314 Date: Wed, 10 Jan 2024 21:52:01 GMT Expires: Wed, 10 Jan 2024 23:52:01 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:01 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 07 12 13 12 15 12 13 12 15 15 15 15 16 15 15 15 15 15 15 15 15 15 15 15 18 15 19 18 17 15 16 15 1a 1f 2b 23 1a 1d 28 1d 15 16 25 35 25 28 2d 2f 32 32 32 19 22 38 3d 37 30 3c 2b 31 32 2f 01 0a 0b 0b 0f 0e 0f 1d 11 11 1d 2f 25 1d 25 2f 31 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 ff c4 00 43 10 00 01 03 02 04 03 05 04 06 07 07 05 01 00 00 00 01 00 02 11 03 21 04 12 31 41 05 51 61 06 13 22 71 81 32 91 a1 b1 14 23 42 b3 c1 f0 07 33 52 Data Ascii: JFIF+#(%5%(-/222"8=70<+12//%%/1////////////////////////////////////////////////@"C!1AQa"q2#B3R
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 03 1b 70 ae 38 58 84 69 d3 08 24 3d d6 67 81 cc 8f 9a d4 c4 3b c4 1b c9 ae 3f 25 5f 0f 4f c4 0a 92 a1 f1 92 74 cb 09 35 15 24 c8 f3 ba b5 5c f8 fc c2 a4 f6 92 44 0d 15 ac 60 32 d2 39 0f 92 46 cf cc 94 a6 23 2b 49 1c 9a 81 29 02 80 48 27 26 14 19 c0 a9 19 52 14 40 23 08 09 db 55 17 10 a0 00 a7 14 11 af 4c 05 4a d6 12 0a 5d c2 0d 7b 86 36 5d 9b 90 5d 47 62 71 7d df 13 c3 90 2f f5 ba e9 fa 97 8f c5 73 fc 36 9c 30 f3 5a 7c 0e a1 66 2e 93 80 b8 2e 8f 56 38 7e 2b 15 69 db 1b 5e e1 53 b4 52 c6 91 e1 74 f8 84 4d 86 a4 f2 4c a1 da 38 32 f7 02 39 08 b0 e9 75 c8 e1 b1 a0 e7 7b 40 30 03 40 9b 08 22 7c 89 0e f8 28 be 90 d3 19 4d 86 a0 1b 1f 16 d6 13 aa c4 b9 6d cd f9 1e 95 83 e2 14 ea 89 63 81 e6 37 1e 61 4c ea 80 5c 90 3c ca f3 2c 1f 13 a9 4d c7 28 73 43 b3 b5 c2 3c Data Ascii: p8Xi$=g;?%_Ot5$\D`29F#+I)H'&R@#ULJ]{6]]Gbq}/s60Z\|f..V8~+i^SRtML829u{@0@"\|(Mmc7aL\<,M(sC<
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 68 10 2e dd 42 e3 74 f1 d5 20 94 39 3d b5 49 50 ec 8e 68 d1 06 7b 9d 75 1b aa 14 ea 6d d1 26 d3 32 4f 21 01 00 fe fc a7 f7 bc d5 42 23 dc 85 4b 18 9d 90 36 b4 fa d6 e8 97 78 ab b8 da 12 20 c4 f3 46 86 d6 59 5b e0 b4 69 00 5b b0 f5 58 ac 37 57 68 e3 58 df ea 96 9b c6 af 3a 9b 0e ad 0a 17 60 69 9d 04 79 29 a1 24 b6 b7 4c 67 e2 30 05 b7 6d c7 c5 50 a8 ba 00 42 a5 8a e1 c1 c6 5b e1 f9 27 b4 f2 e3 65 32 a2 04 ab e7 84 b8 68 e0 ab d7 c0 d4 6d c8 91 d1 3d b1 d1 50 03 29 cf 36 4d 06 13 a2 d0 9b 3a 35 b2 53 a9 8f 82 34 dd 68 8b a4 da 97 88 08 07 2b 9c 32 90 73 b3 1d 95 0a b5 07 25 a5 c2 44 30 9e 65 2a d6 33 ba dd 6a 9a aa 38 4c 51 ef 9b 1a 0c df ed 2a 6a a3 39 cb 31 6b 94 b0 98 46 53 a8 d7 dc c6 a2 79 88 fc 51 14 e4 df 4d 69 e1 5d 72 dd 26 48 23 73 3a 22 ca 85 cc Data Ascii: h.Bt 9=IPh{um&2O!B#K6x FY[i[X7WhX:`iy)$Lg0mPB['e2hm=P)6M:5S4h+2s%D0e3j8LQj91kFSyQMi]r&H#s:"
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: d4 cc 01 a6 a4 1e b0 45 d5 07 d4 f6 2e dd cb 44 8b 66 33 f8 2b 5c 25 9a af 32 f2 6a f6 8d 3c 4e 25 c6 ab 8b 59 f5 64 cb 5a 05 98 d7 6b ed 6b 03 79 d9 58 e1 b8 1c d9 dc 58 59 4e 1a 5c 48 f6 88 83 e1 00 db 7f 4f 55 9f 5f 1a 5b 93 eb 1b 0e bf b4 36 24 19 85 30 e2 0d 69 ca 6a 01 27 29 93 23 9c c8 e8 45 ca 57 7a d4 4e 67 77 e1 ae de 10 01 02 20 4c b3 47 b6 03 64 4f 23 0e 8b fc 75 33 56 c3 66 73 69 91 0c a6 c6 38 43 49 2e 7b 5e e7 80 60 d8 78 8c c4 dc ac 1a f8 d6 53 cc 59 5d b6 93 bd cc 8d af b4 7f a4 a0 fe 31 92 1f df 03 e2 d1 a6 4d a3 e7 7b a5 65 53 1e 4d 7c 39 ce d4 b4 8c 65 59 69 6c 96 bb 29 99 19 98 d3 bd c6 ba 2c a5 ad da 7e 27 f4 9c 5d 4a f1 19 c5 3b 7e ed 26 37 90 fd 95 92 88 ad 04 52 48 26 43 08 a5 29 b2 80 25 04 f7 42 62 01 24 82 52 80 28 c2 2d 44 20 Data Ascii: E.Df3+\%2j<N%YdZkkyXXYN\HOU_[6$0ij')#EWzNgw LGdO#u3Vfsi8CI.{^`xSY]1M{eSM\|9eYil),~']J;~&7RH&C)%Bb$R(-D
2024-01-10 21:52:01 UTC	1252	IN	Data Raw: 87 48 a0 53 49 43 3a 0c 48 4d 4f 40 84 19 04 a1 04 d2 50 0e 84 21 36 52 05 20 45 c9 a5 c0 ea 9c 53 08 48 cf 85 b1 d9 17 e5 c6 d2 77 2c ff 00 76 e5 8a c2 b6 fb 29 ff 00 59 4b fc ff 00 76 e4 af 86 f0 f7 47 a4 8a c1 e6 c3 e2 9f 51 cd 03 f9 02 aa d4 3b 8f 86 ab 3f 88 62 9e c6 97 65 31 04 83 78 9d b3 74 50 ea 7a 3d 3a 9b ad 27 62 9a d1 3a 9d 80 dc f5 50 1a f1 77 12 4f 29 86 8f 20 b3 70 e4 c0 73 9d e2 eb f8 46 89 e7 10 77 3f 8a c6 56 a9 8c 8d 16 e2 01 06 f1 d0 a6 de e7 50 06 fa 2c fa 78 96 cd ce a7 6d 7c ae ac 1a a5 d0 d6 fa db 68 bc ac b4 d1 0e 80 06 d6 b6 83 e1 f2 56 a9 b8 40 db ca c1 66 e1 ea 66 1a cc 18 fc 6f ef 56 da 02 be dc fa 58 7b 07 4f 9c fa a6 86 88 88 04 19 04 1b 82 39 41 17 08 e5 b0 f9 a4 e9 d8 fa 2c d6 bf c5 79 27 6e 78 13 30 b8 80 69 b0 32 95 56 Data Ascii: HSIC:HMO@P!6R ESHw,v)YKvGQ;?be1xtPz=:'b:PwO) psFw?VP,xm\|hV@ffoVX{O9A,y'nx0i2V
2024-01-10 21:52:01 UTC	691	IN	Data Raw: 6e 04 b3 c4 0c b7 e4 b6 33 26 56 6e 66 96 f3 1f 15 a9 58 cb 17 3a 92 73 d8 45 88 82 9a b4 e6 b0 12 49 24 c1 24 92 48 04 92 49 20 3a a8 4d 73 53 03 93 b3 ac 3a cd 4a 12 94 52 05 08 c2 50 92 00 42 09 da 26 20 12 21 20 9c 48 09 19 a6 ca 33 5f 92 05 d2 9c d4 19 02 4e ab 6b b2 66 31 94 8f ef fd db 96 36 65 b1 d9 18 76 36 90 3f e3 fb b7 2c df 0d e1 ee 8f 4c 35 b9 7b d0 63 89 b1 b8 f8 a2 fc 30 8d 6c 8d 3a 7b 28 e9 e9 6f 69 7b 88 04 85 8f 88 2d ef 0b 09 33 ac 74 3b 82 b5 81 85 97 5e 89 2f a8 e1 1a 01 7d 00 de fe 49 e3 7b b1 c9 8d b2 69 c3 56 ac 29 e2 2a 17 66 70 ce ed 3d 96 c9 fe a9 f8 ae 3e c6 88 63 8c 9e 50 63 d7 65 95 c4 45 43 5e b8 3b 55 78 9d b5 22 63 64 cc 26 02 48 0d b9 26 27 f9 2b cc 67 cb 8a f2 65 e3 16 c7 08 63 7c 55 5c 74 b8 d8 0d c9 3b 93 75 00 a4 1c Data Ascii: n3&VnfX:sEI$$HI :MsS:JRPB& ! H3_Nkf16ev6?,L5{c0l:{(oi{-3t;^/}I{iV)*fp=>cPceEC^;Ux"cd&H&'+gec\|U\t;u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49848	54.190.82.3	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:01 UTC	428	OUT	GET /pixel/v?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207 HTTP/1.1 Host: trck.t-y-p.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:02 UTC	159	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:02 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close
2024-01-10 21:52:02 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49863	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:03 UTC	1147	OUT	GET /kJmHNz9SMV9mA7haNYe-gObnCz_344f7lrABB4xrSRDHBx_N01lEC1vMGl7J5qkdBBYqQ1pTc7pbROnbzbp6vZwF=s275-w275-h175 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:03 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 33350 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 21:44:49 GMT Expires: Thu, 11 Jan 2024 21:44:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 434 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:03 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 13 00 00 00 af 08 02 00 00 00 51 b4 ad 55 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 20 00 49 44 41 54 78 9c d4 bd 77 dc 25 55 91 3e fe 54 77 df f4 de 37 4f 0e 84 21 67 14 c1 51 04 54 14 c5 b0 22 b8 0a c6 fd 1a 58 58 71 0d 3f 77 15 b3 2b 2a 20 98 c3 8a 01 41 c4 80 2c 41 41 01 41 91 24 19 24 67 06 86 19 18 26 bd e1 be 37 df ae df 1f 7d 42 d5 e9 1e 76 f5 a3 bb da 1f 98 f7 f6 e9 13 aa ea 54 3d 55 27 f4 69 ba fb 45 5b 11 00 30 00 10 dc 45 d9 ff ec 12 99 b2 64 62 40 67 2b 2c 0b 80 58 14 17 cf 7d 85 64 ca 66 15 fb 0a d8 b6 0d b2 f9 a0 9e ba fc a4 6f 45 86 c2 6a 89 c0 4c 64 19 61 b8 3a 88 54 bb ba 2c cb 86 34 af d9 13 26 12 05 33 aa c9 51 52 48 a4 a8 99 40 d0 52 25 80 0d 4d 92 1d f2 6d 2b 11 05 34 Data Ascii: PNGIHDRQUsBITO IDATxw%U>Tw7O!gQT"XXq?w+* A,AAA$$g&7}BvT=U'iE[0Edb@g+,X}dfoEjLda:T,4&3QRH@R%Mm+4
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 94 c4 02 81 77 5c b6 b0 47 0d b2 ec 04 dd ee 4c 55 41 91 a3 d6 1a 8f 90 b0 6d c0 04 11 3a 0c 97 b4 9a a7 a2 c7 72 52 f1 00 ed 55 0f 16 3e 04 9d 96 6b 4f 46 08 74 16 9a ad 36 33 5b 93 11 f1 50 70 ef 7e 4b f0 13 4d 8b 64 6b 39 26 47 e0 cf b4 38 1d 52 38 0b 61 0b 37 85 da 29 2a 50 3d 61 a1 d9 81 8a f1 8f e4 9f b2 ce a1 ad c1 d8 34 33 2b f4 27 f9 0f 15 d8 a9 66 84 32 65 0d 72 90 72 dc 1e 61 a5 34 0b 01 22 eb 27 66 b0 0f 85 6d 18 2b 11 7d 0b b2 62 af ff 21 d9 81 89 b3 85 38 7f e3 72 fa ca 38 0b bb 58 09 8e 44 b9 8c 13 62 e8 11 1a bc 1f 13 98 21 a0 09 96 05 eb f4 00 37 04 b6 1a e2 1d 61 d0 e7 e1 4f d1 a8 a4 cc 24 18 dc 21 12 23 66 d2 c3 32 1f 5f 04 72 65 f9 83 84 e4 5d be 5c 8a 44 44 e1 d8 c3 98 dd 9a a8 b7 1c a3 a4 06 e7 ac 23 71 56 ae bb 4b 9b be 05 1b f2 e4 Data Ascii: w\GLUAm:rRU>kOFt63[Pp~KMdk9&G8R8a7)*P=a43+'f2erra4"'fm+}b!8r8XDb!7aO$!#f2_re]\DD#qVK
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 4d 41 26 39 77 51 04 66 92 62 25 3e 22 2a 1a c6 d8 42 3a 1a 23 e7 f3 35 37 ca 13 38 05 cb cf 13 32 d4 92 8e d4 93 b0 fb 91 eb 45 29 1b 56 b7 a1 e7 c9 b5 ab e4 40 16 93 a9 90 e9 82 6a 0c b6 48 d5 62 0f df b6 d7 42 c1 78 20 76 6b c4 32 87 d5 55 b7 5b 22 20 40 71 24 cc 58 83 0f 98 29 44 01 27 51 5f 7f 04 90 05 24 d6 44 00 0a e4 84 2d 1a 9f 20 50 59 75 52 b0 7d 83 7c af 38 e7 e6 17 3d 24 c5 56 35 42 98 11 fd 2e 2c 4a 1b 9e 99 ba 15 38 6a 6a f0 2e ab c0 12 73 e2 81 0f 79 43 a4 d0 24 6d 81 44 9b d7 f8 32 b1 7a 60 f6 cb 65 70 eb dd a3 71 83 81 4b cf 0d 0f 7c cd 12 0b c8 d6 10 90 e4 fc 98 a6 4a 9b 12 79 b6 4c 9d d6 b5 b2 9d 1e d7 8e ab c8 7c fc da 15 dc d2 87 d0 51 72 62 e7 50 fa 5e 38 d2 ff 28 a7 a1 ed 90 5d cd 62 49 3f b7 5c 60 d3 8b dc a4 5d ba ca db 9a bd 31 Data Ascii: MA&9wQfb%>"*B:#5782E)V@jHbBx vk2U[" @q$X)D'Q_$D- PYuR}\|8=$V5B.,J8jj.syC$mD2z`epqK\|JyL\|QrbP^8(]bI?\`]1
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 24 9b a2 c2 90 23 96 71 0b 89 64 5b 56 6c 66 f3 36 66 86 43 45 9d 22 d5 41 b0 69 82 40 b1 dd db d5 a9 00 cf ea 99 a4 d3 29 ba 18 f6 d8 b1 58 ce 96 ac 32 14 28 9a d7 58 21 26 89 86 0e b3 c8 66 d0 61 bf b8 21 4f 4f b0 df c0 96 52 5d 2f 26 97 54 a3 79 36 89 c4 9b 6d c6 17 67 c3 43 0e 4c 4d 58 8a 6b cf 2d f9 93 9f f0 91 73 32 41 47 13 29 59 49 de 34 55 a2 61 3d 78 0a 3b 80 a8 40 c3 55 5d aa 1a 5f 95 d0 85 b0 5f 89 cc 36 50 3d 90 55 8a cd f9 d4 82 40 45 3f 25 4f 3f 3b 8a f3 ac 9b bc 21 5c a8 e1 a5 d0 0d 0e 7f a8 41 93 57 ae 9c 35 93 e9 e1 d0 17 49 0b b7 81 13 07 22 62 0e a6 85 b2 54 72 98 e5 45 21 5c 07 6c 9d 0a dc 05 03 2c f1 8a e4 72 26 f9 b2 24 e4 e0 99 b6 71 21 15 be 36 47 6e 5a cd dc 4a 38 b0 c1 b7 69 95 43 94 f0 dd 11 48 2a f2 b0 25 d3 41 08 df 9a 14 c0 Data Ascii: $#qd[Vlf6fCE"Ai@)X2(X!&fa!OOR]/&Ty6mgCLMXk-s2AG)YI4Ua=x;@U]__6P=U@E?%O?;!\AW5I"bTrE!\l,r&$q!6GnZJ8iCH*%A
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 1e b3 60 dd 91 bf 75 19 73 aa aa 0d 20 87 ca ce 78 0a 5c 8f 1e b1 08 4f c8 ee 8f 79 c4 62 d2 3c b4 8c 7c 7f b3 62 40 d8 49 a6 43 e4 ef a4 a2 b3 c8 16 74 4a d6 9b 2c a6 ef d8 2a a3 ea a1 22 19 bb 6a 09 1c e8 83 fd 2d df 8f d4 75 b2 9c 27 07 10 e9 99 3f 59 09 32 1c 2c 8e 37 cc 1f 2f 50 92 67 de 05 78 07 29 17 31 7f 50 d8 cd 32 33 e7 9a ce 18 d3 4e 55 dc e4 d4 42 31 e7 8f ed 32 0f 95 b6 14 60 84 c5 18 85 e5 0e 5c c4 5c 99 0f de ac 2f 12 99 f5 ac b7 6b a2 70 ea 99 e5 ad ed aa 00 75 65 b5 aa ac 82 5f a1 fd 41 bd 81 2d ea e6 90 23 d6 c2 a1 ad dc 15 97 62 56 6d 16 f4 af cf e9 fe e8 97 a1 0b b2 15 e8 9d 6d cc ec fd b3 36 cd 8a 41 31 8b 9c 8f 42 a5 ea e4 96 ec 94 48 c9 5a a9 4d 61 40 cc 46 46 c1 34 7f 81 dc e4 e0 39 ec 6c 37 0a 64 0e 76 70 7a e2 0a c5 17 22 b8 bf Data Ascii: `us x\Oyb<\|b@ICtJ,*"j-u'?Y2,7/Pgx)1P23NUB12`\\/kpue_A-#bVmm6A1BHZMa@FF49l7dvpz"
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 6a 1a c2 76 10 03 ee d0 5d f2 1b 47 25 77 9a 5a 46 76 10 ab 17 91 89 b1 15 a8 db 1a d9 f5 96 15 84 8a 84 55 73 ca fb 10 b1 fe 5a a3 75 68 0a dc b3 dc 96 c8 9c c5 b1 d7 7c 75 27 8a 4b ea 0c 92 48 27 6a db 62 67 d0 a1 37 60 2f 59 92 ac 38 66 99 25 75 21 b3 f6 3b 08 ae 32 b2 1d 29 62 68 e5 9e 84 a6 59 f7 e0 24 cb 89 ca e9 ea ca cb 46 56 e4 46 f6 42 53 04 18 10 c0 68 3c 51 d9 fb 95 c3 2b 5f 9c cc 5f 04 e6 c1 ec 54 eb ce 9b ba 8f de 3d 78 ea 36 66 a2 64 3e 92 8a a0 c8 69 bd 55 7c d7 89 64 c5 45 76 91 5d b0 68 37 72 09 3d 85 13 9e 4c 11 0b f4 fe 22 b6 0a 62 ee b2 97 1a d2 2e 0d a6 40 88 c6 b6 2d ef 74 68 79 c7 67 c5 f3 17 03 c4 b3 53 73 57 9d df 7f f4 4a c4 93 a0 d8 57 28 62 66 2f 01 79 fe 94 93 a8 e7 4b ac da 7b da fd 7a 8a a0 51 ab a1 85 28 d2 39 32 43 14 03 Data Ascii: jv]G%wZFvUsZuh\|u'KH'jbg7`/Y8f%u!;2)bhY$FVFBSh<Q+__T=x6fd>iU\|dEv]h7r=L"b.@-thygSsWJW(bf/yK{zQ(92C
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 28 a8 b2 d6 28 b5 97 70 d9 1c c6 b9 fc 5b 70 3b f0 05 73 cf a5 43 b0 06 98 57 06 33 c7 a3 87 b5 a2 66 1f c8 85 f1 bf 0f 58 10 80 88 b4 0e 41 79 e2 47 43 ce e2 6c 66 17 33 98 f5 36 47 aa ec 03 71 31 80 74 40 63 3b fb 83 41 fe db 2b ca a6 c5 19 49 b9 b2 62 d7 ea 76 bb 8d 1f 72 78 7f e6 73 73 b7 5e db bc f9 f7 ad 9b 2f 49 d7 3f 8a 08 54 5f 44 51 62 df b0 0d d7 e5 6c 34 63 c3 12 41 1a 53 44 dc e5 e6 46 ea 83 e6 2f ab ec fd c6 e1 17 be ba ba c7 73 4b f3 16 46 d5 21 06 10 c5 86 80 3f 81 e6 38 1a 1a c9 86 da 84 70 62 2a f3 7f 00 b8 b1 61 f8 cd 9f 1f 3b ea 38 00 cd 1b 7f bb f9 63 87 63 fe 3c 3b f9 62 05 d8 de 54 39 e4 83 e3 47 1f 4f a5 4a eb fa cb a7 de 76 c4 e4 8f bf 16 4f 2c 00 10 2f 58 b2 e9 3d 2f a4 85 8e 91 ec 78 0a db ed bd a9 f2 5e af 19 ff b7 6f 47 23 a3 Data Ascii: ((p[p;sCW3fXAyGClf36Gq1t@c;A+Ibvrxss^/I?T_DQbl4cASDF/sKF!?8pb*a;8cc<;bT9GOJvO,/X=/x^oG#
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 64 01 52 e6 b5 ac 49 01 5b b2 f5 3f 91 9a 99 40 86 3f 1d 00 00 20 00 49 44 41 54 5f ff a4 7d d5 2f 69 e1 42 87 d9 b2 33 55 1b d5 72 eb da 8b d3 ff f7 a1 68 6c 01 80 f2 92 e5 c9 3e af ed 3f 70 01 4a f3 00 80 fb 54 c1 d0 be 07 1a d6 da 73 cd 6b ae 40 05 c9 ee af 1c 7e cd d1 69 a7 3d f7 f3 6f a4 1b ae a3 78 02 83 0e cf cc 55 5e f6 ee f2 5e 07 45 95 84 7b 69 eb c2 93 7a 0f de aa b0 da 5d dd 69 2a a1 72 e8 47 4a bb 3e 27 1e aa 22 4d 7b 1b 36 f5 6e b8 b0 77 f3 f9 34 52 e2 a8 66 17 f2 5b 68 76 e3 6d 77 29 1f 72 7c b2 60 92 92 38 9d 6b 0e 9e 5a db f9 af f7 a5 ad 1e d5 87 65 1c e5 3b a2 a0 bd 80 67 e3 f2 c8 47 4d 4e 35 38 18 9a c3 19 4f 58 89 ac 56 c4 35 aa ed 7c ec 69 7e 7a 55 d4 46 ae a5 55 a0 0c ac da 84 75 98 05 c1 78 66 af 09 00 bd 96 e8 4d dc d8 91 8d 85 39 Data Ascii: dRI[?@? IDAT_}/iB3Urhl>?pJTsk@~i=oxU^^E{iz]i*rGJ>'"M{6nw4Rf[hvmw)r\|`8kZe;gGMN58OXV5\|i~zUFUuxfM9
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 5b 5c 96 b1 4c 16 b2 53 40 a8 1c 3c f8 7f b5 d6 91 4f dc 42 5c 23 a6 04 10 9e 1e ea dc 9b 1a 59 08 0a 6c d5 80 7d e5 ce ab be 20 46 db c3 96 11 9d b7 98 cd 86 70 ca 72 28 e7 70 0c 49 05 eb 39 41 95 96 52 ca 6a 21 00 88 2b bd 0d 8f 3d f5 c5 7f 1b cc 4e 6f 91 c2 bf 83 8b d1 ed 6c fe e1 29 fd 55 0f 70 3c e2 93 29 f4 ba 19 a4 b2 1e 0e d2 10 9a 37 df c0 9d 66 76 57 db e7 00 22 70 33 ad bc f4 5f e3 b1 49 00 18 74 1b bf fd 35 4d 14 b5 dc 45 c5 1a 43 da 9a 6b 7c f1 18 5a 54 a7 a1 09 5a 32 da bd e2 3b ed db af 73 04 72 a7 55 79 d5 d7 28 4e 00 70 73 7a f0 f4 63 e5 c3 df 50 5e f9 a6 f2 f3 de 54 7a c9 61 bd fb af cf 32 96 f7 3a 20 de 1f c9 a2 65 a6 fa 3b af 19 ac 01 d5 47 51 1a a5 05 23 cd e3 3f e4 5a ae 1c fc 56 9e 2e 0a cb 09 6e e5 4d 08 c2 8b ca eb 26 59 0c a1 5c Data Ascii: [\LS@<OB\#Yl} Fpr(pI9ARj!+=Nol)Up<)7fvW"p3_It5MECk\|ZTZ2;srUy(NpszcP^Tza2: e;GQ#?ZV.nM&Y\
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: a4 70 e5 cd 46 2f 93 6f 0c 73 37 5e 8b 41 0f 40 32 6f 91 0b d5 1a 37 5e cb 9b c1 54 d1 e0 65 aa c6 d6 98 bb f1 1a 73 1f 97 e6 7d ea dc f2 f3 df 40 fd 46 69 fb 03 27 3e 71 79 3c b9 d8 67 4e ca 9d 5f 7e 23 9d d9 9c e5 1c 7b db fb 68 21 78 1d 78 1d 90 62 ec 8b 97 0c bf ee d8 ea 9e fb 0e 1d f6 76 7e 0a ad ab 2f 30 a5 46 e6 8d 5e 78 26 66 da e9 c3 33 f1 c2 ad c6 4e bd c7 55 d8 ba f4 47 54 87 55 d0 2c d0 b0 cc 2a dd d7 6b e8 6e b4 1c da 09 89 62 e2 57 10 ed 1b d5 66 b1 c6 10 bc 93 6d c6 2b 2e a6 92 fa 6c 63 2a 3f 6f 2e 9f c1 9e 8a ea df f0 52 35 5b 8a 85 41 aa c8 5c b8 ab ec 87 7f b3 cd bd c9 ae 9b 83 b7 26 f9 f2 4f 7e 7d 57 97 f3 3b ff 32 62 cb a3 9d 7b 7e 3f 75 d9 05 0b df 72 1c 55 6b 7f 07 63 9e 6e a7 71 c5 79 9d 3f 5e 47 63 0b 73 01 2d 3c fe 19 9d 30 01 b2 Data Ascii: pF/os7^A@2o7^Tes}@Fi'>qy<gN_~#{h!xxbv~/0F^x&f3NUGTU,knbWfm+.lc?o.R5[A\&O~}W;2b{~?urUkcnqy?^Gcs-<0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49862	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:03 UTC	1139	OUT	GET /5iqSydGWCwZl180kxxi8cYBGJrxCQtwj4qCWGTRfQ_3LX_W3qCiA1pS47bT-sMA4aC7QiBjZwHvq21u9vgo_8znj7Qo=s60 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:03 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1377 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 19:37:20 GMT Expires: Thu, 11 Jan 2024 19:37:20 GMT Cache-Control: public, max-age=86400, no-transform Age: 8083 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:03 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 05 18 49 44 41 54 68 81 e5 9a cd 6b 1b 47 18 c6 7f 96 1c b0 e5 d2 14 63 8c 91 8a 41 58 07 d7 08 87 24 27 35 a4 04 43 62 68 02 ca 5f 60 50 c0 60 6c e8 c9 2c 4d 20 47 41 4e 09 29 f8 0f 30 e4 e8 93 0e c5 49 ee b5 6f 4d 1c 2d 2d ed b2 86 a4 92 82 e3 0f a9 71 13 48 24 4d 0f eb f5 47 22 4b 3b b3 b3 b6 d4 3e f0 62 1b ef 3c f3 3e f3 b1 f3 ee 3b 6f 17 6a 18 07 be 07 be 05 be 01 86 80 2f 14 b9 bc e2 1f a0 08 fc 0e ac 00 cb c0 af 41 76 18 03 1e 00 65 40 b4 89 55 80 7b 40 54 a7 d0 08 f0 b0 0d c4 b5 b2 fb 40 8f 5f b1 13 c0 46 1b 88 f1 6a af 81 cb aa 62 8d 36 10 a0 6a f3 b2 62 ef b6 81 d3 7e ed ae 57 b1 f3 6d e0 ac 2e Data Ascii: PNGIHDR<<:rsBIT\|dIDAThkGcAX$'5Cbh_`P`l,M GAN)0IoM--qH$MG"K;>b<>;oj/Ave@U{@T@_Fjb6jb~Wm.
2024-01-10 21:52:03 UTC	656	IN	Data Raw: d2 30 3d d4 10 a1 50 88 97 2f 5f 7a 7a 76 78 78 98 95 95 95 fd 6f 65 2f e8 ed ed f5 fc ec 61 48 8d 50 a5 52 91 3e 37 0b 85 42 53 ce 48 24 22 de bc 79 23 cd 5b a9 54 4e e6 1c 96 45 34 1a a5 54 2a d1 d3 f3 f9 d5 4f 22 91 e0 d5 ab 57 0c 0c 0c 9c 84 2b 80 e4 08 95 cb 65 e9 99 38 3c d3 83 83 83 fb 5c 63 63 63 4a f1 b4 8b 72 b9 1c 7c 68 a9 1a 52 1e 16 0d 88 68 34 ea 4b ac 10 42 14 8b 45 69 c1 d2 c7 52 3e 9f 57 0e 2b c1 59 de 5b 5b 5b 84 c3 61 ce 9e 3d ab cc 03 b0 b6 b6 26 dd 46 7a 0f 5b 96 25 dd c9 a7 e8 ef ef f7 2d 16 60 7d 7d 5d ba 4d 17 7b eb da 2b 92 c9 24 cf 9e 3d 6b 1a f8 6f 6f 6f f3 e8 d1 23 76 76 76 a4 8e 19 00 21 04 7d 7d 7d dc ba 75 8b fe fe fe 63 9f ab d7 eb 5c ba 74 49 29 ad 2b bd 0f 5a 65 25 af 5c b9 a2 f2 32 39 62 17 2f 5e 6c da 87 8f ec 87 7c 23 Data Ascii: 0=P/_zzvxxoe/aHPR>7BSH$"y#[TNE4T*O"W+e8<\cccJr\|hRh4KBEiR>W+Y[[[a=&Fz[%-`}}]M{+$=kooo#vvv!}}}uc\tI)+Ze%\29b/^l\|#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49861	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:03 UTC	1109	OUT	GET /a-/ALV-UjWZquHmjVP-Z8z4VuSw8GFcDixrYN9Cf8lSEZqtHWXKig=s48-w48-h48 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:03 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v7" Expires: Thu, 11 Jan 2024 21:52:03 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 21:52:03 GMT Server: fife Content-Length: 2722 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:03 UTC	731	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 01 03 04 04 05 04 05 0a 06 05 0a 0f 0e 0b 0e 13 13 14 13 11 10 15 12 14 15 15 0f 0f 15 10 12 10 10 14 10 0f 10 10 0f 15 10 10 12 10 0f 12 12 0f 10 10 10 15 10 14 10 12 10 15 0f 13 10 11 10 15 12 ff c0 00 11 08 00 30 00 30 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 01 00 03 01 00 00 00 00 00 00 00 00 00 00 07 06 08 03 04 09 05 ff c4 00 2d 10 00 02 01 03 03 Data Ascii: JFIFExifII1Google00-
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 25 8a b2 9a 7a 9b 64 70 4c c8 49 01 d5 b3 96 3b 94 f2 9c 0f cf cf 4e ab f3 34 f6 59 61 d3 10 1a bc 09 ac 12 2f 62 c4 6c 70 47 4e a2 34 cb e8 da cb ad 75 2c 41 2b a9 29 22 9d e4 a9 ad 4a 39 57 c0 3c 60 c5 89 36 6c 01 64 50 4b 97 1b 77 9c f0 32 08 ac 96 26 d3 2d 09 2c a6 2d d0 b3 a4 b5 c5 8c 5d 29 57 43 26 81 4b 98 84 f8 a4 32 7e 20 6e e5 c9 4e ad 4e 52 58 0d 37 d2 08 dd c6 bb 9a a2 bf 58 dc 6b 25 ba 52 d5 d4 30 f3 47 24 20 80 fb 70 cb 22 63 87 dc 08 24 2f 21 89 c0 2b cf 59 c5 77 03 9c 95 a7 c3 b1 5e 53 61 9b 13 73 8e 9b 72 e4 d1 e1 55 48 9b 2e 59 4b 29 78 04 80 c1 da ee 6c 2c 73 1c b4 f6 eb 7d 7c 49 51 42 d4 d5 55 7f 59 2d 5d 34 d4 d1 89 5e 36 da fb 82 b6 46 41 cb 8c 93 82 09 5e 73 83 a7 d3 48 57 80 84 85 5c 00 1f b0 6f 58 b9 d0 7e 1a a9 a6 94 17 50 02 26 Data Ascii: %zdpLI;N4Ya/blpGN4u,A+)"J9W<`6ldPKw2&-,-])WC&K2~ nNNRX7Xk%R0G$ p"c$/!+Yw^SasrUH.YK)xl,s}\|IQBUY-]4^6FA^sHW\oX~P&
2024-01-10 21:52:03 UTC	739	IN	Data Raw: 2c 6c 37 70 73 7b 8b e0 3b de e4 1c 41 12 e7 d8 cc 24 b7 2e d8 c5 ad d2 29 b4 85 e2 cf 6e d7 b6 8d 2f a8 6d 95 34 f5 17 e9 e3 a4 9a e9 0c c9 24 d4 ab 24 d1 a0 38 65 d8 5b 7a 9d e3 00 80 ce 06 73 b5 57 2a aa b4 78 32 94 a4 b5 82 ad 72 30 e1 c8 62 fb 1d 58 c0 30 e1 55 45 32 54 bb a1 44 12 d8 74 9f a1 6c 6f 6d a1 f7 54 f7 16 eb ab 59 de b1 d2 04 90 f9 1a 92 8d 99 61 67 ff 00 22 a4 fc fe cf 3f ef ab 90 80 fc 39 68 2c 8c 0e 79 f7 ed a2 66 ae ef e0 b7 9a 78 e9 e1 cb b1 67 9c a9 69 48 fc 2e 4f 0a bf f2 01 3f 92 7a 73 ac 74 17 89 0b ee a3 b6 5a 6a 2d 91 57 cc 63 92 e1 59 0d ba 96 25 8c c8 f2 cd 2b 84 45 55 00 9f 96 1c fc 0c f3 d3 13 a6 a2 52 4a 8e c0 fa 07 8e 29 61 39 8e df 7e 35 b4 97 6d 31 a9 74 9c 74 f0 2d e6 d3 5d 6f a5 7a a2 54 f9 16 46 59 4a 00 79 61 1b 6d Data Ascii: ,l7ps{;A$.)n/m4$$8e[zsW*x2r0bX0UE2TDtlomTYag"?9h,yfxgiH.O?zstZj-WcY%+EURJ)a9~5m1tt-]ozTFYJyam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49858	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:03 UTC	1109	OUT	GET /a-/ALV-UjVALLA0UFG505w94odPuKiSx0lMN9-g3gh2_ykUwU6oXQ=s48-w48-h48 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:03 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v7" Expires: Thu, 11 Jan 2024 21:52:03 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 21:52:03 GMT Server: fife Content-Length: 2000 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:03 UTC	731	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0e 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 01 03 04 04 06 05 06 0a 06 06 0a 0f 0d 0b 0e 10 11 0e 10 10 10 0d 0d 0f 0e 0f 10 0f 10 0e 0f 10 10 0d 10 0d 14 0f 0d 11 0f 0f 10 0f 0f 10 0f 10 10 10 0e 0d 0d 10 0f 0e 10 0d 0e 0f 0d 0e 10 0d 0d ff c0 00 11 08 00 30 00 30 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 07 08 09 06 05 04 00 ff c4 00 33 10 00 01 03 03 03 Data Ascii: JFIFExifII1Google003
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 10 c3 c2 e7 90 d6 8d 4a 08 5a fd 82 d4 df b1 d2 d3 d5 74 43 ac 20 a9 d4 06 12 54 92 ac f9 72 72 38 03 81 9f 4d 04 3c 61 a5 de 10 69 1e 6f 06 76 5a 24 25 5e f0 b3 2e 4b 5e b7 50 a0 dc 4d be b6 8b c5 b5 b7 2c 7c cf 65 27 8c a7 3e ca d1 e6 62 1b 23 41 6a 03 26 1d d1 38 b5 cb 77 db 87 59 5f e8 5f 51 a9 b5 07 92 b7 28 ad 94 c5 5b aa 29 75 e8 8c 15 61 e2 82 e0 3e 40 82 0f d4 04 10 9c 6f 56 ab 2c 6e 71 28 1e 2d af b2 35 85 e2 32 0c 2c 98 09 5c e3 13 bc 4d 68 3a 09 07 d2 48 b0 68 ec 69 c2 ac 3c b5 e5 a0 2b 14 c2 9b 99 0d 2f b2 a4 ad a7 52 16 85 24 f0 41 e4 1d 6f 72 58 0b 87 7d d4 0b 14 e7 08 38 38 3a 89 4e 56 5a 88 c5 b9 24 bd 3c ad d3 1d ee 1a a5 71 57 5c 71 0d 29 0e c6 62 40 61 6e b6 8c ba 12 92 b5 24 10 d8 21 b0 80 55 81 96 d5 cf 3a 58 c6 35 f2 45 95 bd 6f 7f Data Ascii: JZtC Trr8M<aiovZ$%^.K^PM,\|e'>b#Aj&8wY__Q([)ua>@oV,nq(-52,\Mh:Hhi<+/R$AorX}88:NVZ$<qW\q)b@an$!U:X5Eo
2024-01-10 21:52:03 UTC	17	IN	Data Raw: 41 c7 a8 e3 20 8f 50 40 b2 23 6d 59 67 14 e5 ff d9 Data Ascii: A P@#mYg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49860	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:03 UTC	1109	OUT	GET /a-/ALV-UjVSDHkImE4olo4yAK6fOhp4cmKcFAo0e8m5hdL8BW1y_w=s48-w48-h48 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:03 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v7" Expires: Thu, 11 Jan 2024 21:52:03 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 21:52:03 GMT Server: fife Content-Length: 1966 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:03 UTC	731	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 01 03 04 04 06 05 06 0a 06 06 0a 0e 0e 0b 0e 10 13 0f 10 0f 0e 0e 10 0f 13 10 0d 0f 0f 0f 10 0f 10 15 0f 15 0d 10 11 0e 0d 0e 0d 10 0f 10 10 0e 0e 0d 0f 0d 0d 0d 10 0f 0f 0d 10 0d 0d 0d 10 0d 0f ff c0 00 11 08 00 30 00 30 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 06 08 05 07 03 04 09 02 ff c4 00 32 10 00 02 01 03 Data Ascii: JFIFExifII1Google002
2024-01-10 21:52:03 UTC	1235	IN	Data Raw: df 0d 14 50 d5 5d 2e 4d 0d ba e3 49 76 2c ef 47 5d 4d 1c d2 c7 0d 44 b1 a6 ce aa a2 81 2c 7b 64 56 d8 dd b2 b8 24 8c e7 38 ea 0f 6c bd 92 4c 69 7f fb cf a6 c4 c5 a5 31 96 ea f9 d1 fa 92 ae f7 53 43 4d 25 d6 b2 2a eb 1c ab 2c b5 75 10 c8 eb 54 b2 3c 88 76 3c 68 aa 4b 98 90 14 da 0a 88 4e 41 12 23 1d 06 0c f1 da 1b 56 41 b6 ba c9 de de c7 41 ac 80 8a ca 90 3e e6 cf b0 e7 fa 95 40 7f 11 2e 66 da ff 00 96 9a 62 d1 1d d6 8a b2 be ab 53 35 da 1b 7c 4a 56 58 62 8a 92 68 0c 8e a4 02 8b d4 9b b6 7d 7b e3 b0 cf 17 15 1b 0d 0c 04 7a 77 45 a8 ea 6e 26 1a 41 11 7d c6 51 fa 4b 67 29 b9 2d 64 d5 d0 52 5d 35 eb d5 41 15 c4 09 68 e9 fe 23 a0 9d 22 70 24 94 a9 0e 37 7a 82 70 aa 0a 82 73 c5 5d 5a cf 6c b6 8c 69 7d fc 8f 72 ac 30 f8 5a 64 66 af 3a db 6f 7d f5 f6 f5 57 6e b5 Data Ascii: P].MIv,G]MD,{dV$8lLi1SCM%*,uT<v<hKNA#VAA>@.fbS5\|JVXbh}{zwEn&A}QKg)-dR]5Ah#"p$7zps]Zli}r0Zdf:o}Wn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49859	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:03 UTC	1139	OUT	GET /03vIBKzhpPXUL7H1n02AqMiIUKUoitg9NOm4elO82eazDr4DZWjcYZetCI3wyIk8yamt69XHopC_6zZUrgKcS8mA-ws=s60 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:03 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 527 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 20:47:15 GMT Expires: Thu, 11 Jan 2024 20:47:15 GMT Cache-Control: public, max-age=86400, no-transform Age: 3888 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:03 UTC	527	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff dd 01 00 de 2d 28 dd 2c 28 ff 31 2c dd 2c 28 e7 2d 29 ff 31 2b ff 31 2d fd f1 f1 db 00 00 dd 24 1f fc ed ec f0 b4 b3 e1 4a 47 dc 16 0e ff f9 f9 f6 cd cd f9 de de e5 6a 68 eb 93 92 e7 7a 78 b6 95 46 d9 00 00 00 0a 74 52 4e 53 00 ff ff ff f9 76 ff df 47 a0 fb a3 0b 9d 00 00 01 60 49 44 41 54 48 89 dd d7 db b2 83 20 0c 05 50 03 36 a8 14 2c 5e fa ff 9f 5a bc 1f 6b 60 30 3c 9d f2 d4 ce 74 0d 1b 0d 29 14 c5 3c aa 5a 95 98 38 4a 55 57 c5 31 2a 25 a5 4c b5 88 fe c7 6a e7 0f bc 21 57 8f 0f b6 9d c6 ac 2b 9e 45 9c 92 2b a6 95 ca 4f cc b4 5e 57 45 cd c7 35 3b f5 9c 3b b9 36 ae a3 2c Data Ascii: PNGIHDR<<")@sBITOEPLTEGpL-(,(1,,(-)1+1-$JGjhzxFtRNSvG`IDATH P6,^Zk`0<t)<Z8JUW1*%Lj!W+E+O^WE5;;6,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49864	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:03 UTC	1149	OUT	GET /sJloPKX06Y6OBg_AEBt5kXaXEp36d6M27Pj1pcUmxJTTrXeQxLOAmupGl0sqmoModna2xEsXFXJU0o3_t37J64xhww=s275-w275-h175 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:03 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 16590 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 19:31:21 GMT Expires: Thu, 11 Jan 2024 19:31:21 GMT Cache-Control: public, max-age=86400, no-transform Age: 8442 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:03 UTC	719	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 0a 0a 08 08 0b 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0f 0e 0b 0e 10 0d 0e 0f 0f 10 0d 0d 0d 10 10 10 0f 0d 0d 0d 0f 10 10 0f 0d 0d 0d 0f 10 10 10 0f 0f 0f 0f 0d 0d 0f 0f 10 0f 0d 0f 0f 0e 0f 0f 0d 0d 0d 0e 0f 0d 0d ff c0 00 11 08 00 af 01 13 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 05 03 04 02 09 01 06 08 07 ff c4 00 50 10 00 02 01 03 03 01 06 02 06 05 06 0a 07 09 00 00 01 02 11 00 03 21 04 12 31 05 13 22 32 41 51 61 06 07 08 23 42 52 71 81 09 14 33 62 91 15 Data Ascii: JFIFP!1"2AQa#BRq3b
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: fe 2a 7b e3 db 7f a0 a4 1e cb a7 23 eb 97 cb c1 5c 5c 29 f4 ec ac 15 9a 0b 26 36 f9 dd ff 00 b3 00 79 c1 ee b7 ee 01 54 74 b6 40 c0 e7 bb 7f cc 71 52 20 e3 f9 a8 ae 59 00 96 ba 49 62 64 a2 91 ba 4e 4e f3 c2 7e 02 5b d8 55 83 89 11 4c 5b 7e 5d db fd 38 a8 36 c5 43 a8 d5 16 81 00 2a ce d5 1c 09 e7 26 49 27 cc 92 69 8d 66 cf 35 04 ca 82 98 aa 8a 10 8a 10 9c 74 6d 76 d5 69 32 14 af 76 06 24 f8 e6 41 80 d1 89 10 48 32 32 6b 0d 7a 7b 4e 1c 67 f2 eb c1 39 8e 80 a5 d5 d9 b8 ed b2 da e1 3e d0 90 06 e1 11 30 00 04 18 85 12 de af 82 6a c2 c6 0d a7 9c 7e 1d 77 70 52 64 98 0a 86 af 56 36 8b 6a 64 0f 11 da 06 e2 09 23 cb 77 76 48 92 44 8f b2 3c f4 31 87 68 bc f7 5e 63 e1 7e 8a 59 36 80 a8 d6 85 44 50 84 50 84 50 84 50 84 db e1 c8 de d8 24 c2 c4 7b 5c 43 3c 19 88 dc 47 Data Ascii: {#\\)&6yTt@qR YIbdNN~[UL[~]86C&I'if5tmvi2v$AH22kz{Ng9>0j~wpRdV6jd#wvHD<1h^c~Y6DPPPP${\C<G
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: a0 28 7d 54 cc 18 8e 39 04 66 08 c1 e4 82 08 20 90 45 69 a7 50 3c 71 4b 73 61 55 a7 2a 22 84 22 84 2c 83 9c 89 c1 e7 de 38 a8 8c d4 ac 6a 54 29 b4 ba 62 ec 14 62 79 27 80 39 24 fb 01 9a a3 dd b2 d2 55 80 95 9f 50 d2 04 6d a0 93 80 60 88 65 9f 26 82 44 c4 1c 1f 31 c6 40 a5 37 ed b6 50 e1 05 56 a7 2a a2 84 22 84 22 84 22 84 22 84 26 3a 5e 8c 48 dc e4 5b 4f bc dc 9f c0 73 fc 79 f2 dd 59 9f 5c 03 b2 db 94 c0 cc ce 0a ff 00 52 e8 aa 2d ca 0c ae 4e 64 b0 00 6e 93 c6 3c a0 0f 09 c7 79 6b 35 2a e4 bb b4 71 eb ae 7c 0a bb 98 22 cb af d7 24 90 8a 10 8a 10 ae 5b 2a ea 03 30 52 98 04 82 65 4f d9 80 09 25 4f 03 18 63 91 b6 90 65 ae 90 24 1f 5f aa bd 88 ba ca ef 52 fb b3 30 07 68 c6 6e 40 10 20 f0 82 3e ee 7f 78 d4 0a 5f ee f0 18 7d 7a b2 0b b7 2a 26 9e aa 8a 95 08 a1 Data Ascii: (}T9f EiP<qKsaU"",8jT)bby'9$UPm`e&D1@7PV""""&:^H[OsyY\R-Ndn<yk5q\|"$[0ReO%Oce$_R0hn@ >x_}z*&
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: ed 05 20 b4 02 09 80 76 9d e4 d7 10 66 9b 88 cf 7f c7 bf a3 65 aa ce 09 0d ab d7 7b 51 82 ce b2 36 8e 23 82 a2 20 2a 9f 51 03 ce b9 02 da 7e ef 70 39 f5 9a 40 26 78 a6 df 10 5d 4d 85 58 f7 e6 54 08 90 7d 4c 18 00 cb 4f 1c 8f 14 03 58 f4 70 ed a9 18 75 d7 c9 36 a4 44 2e b3 5c aa cc 8a 10 8a 10 b9 06 a1 0b b2 2d c5 61 de 54 dc 55 6e 31 51 00 89 91 93 b7 71 0d cc 90 03 62 5e 36 d7 19 0e 69 ec 93 17 03 ae bb b1 5a 6c 71 4b 86 a1 dd b7 f8 6d 83 12 c6 04 44 32 6e 00 1e f0 99 4b 63 cc f7 6b 46 cb 58 36 71 3d 5e 38 6f 3e 29 72 4d f2 55 3a 86 a4 33 12 00 0a 3b ab c8 25 57 0a 4c 93 98 81 cf 90 a7 d3 69 6b 60 e3 8f 7e 6a 8e 32 55 6a 6a aa 28 42 28 42 28 42 ce d5 a2 c4 28 c9 24 00 3f 1a a9 20 09 2a 62 53 7e a5 70 5b b6 b6 d6 09 23 9e e9 ee cf 79 d5 81 26 2f 10 30 78 Data Ascii: vfe{Q6# Q~p9@&x]MXT}LOXpu6D.\-aTUn1Qqb^6iZlqKmD2nKckFX6q=^8o>)rMU:3;%WLik`~j2Ujj(B(B(B($? bS~p[#y&/0x
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 3c 61 77 4b ff 00 45 3f 86 98 10 7a 1f 4c 13 e6 ba 4b 48 df 93 22 ab 0f c4 11 5c 23 7d ad d7 4d 33 fa 65 5e fa 8e 3e 44 90 b5 bb 40 d1 88 83 4d be 01 7c e3 e2 ef d1 e1 f0 ee a1 5b f5 7b 7a ad 05 c6 c8 7b 1a ab d7 54 1f fb ad 5b ea 2d 85 fd d4 08 23 8d a7 23 b3 68 7f 69 1a e2 89 1e f9 cc aa 06 4e 63 5b e7 4c 34 cf 13 3c 65 71 f5 75 26 8a f1 0d 05 bc 89 f8 ca f2 77 ce bf a0 9f 58 e9 4a f7 f4 df fb d3 48 b9 2d a6 b6 e3 57 6c 49 13 73 46 37 b3 aa 88 25 ec 3d d8 ef 12 96 d5 49 af 5d d4 7e df 6a fd 64 45 2a df b1 a8 72 71 1b 07 93 ed 07 70 70 1b 81 24 c2 eb 3a 66 a7 ad a3 8d a6 76 c7 01 71 cc 7a 91 ce 21 7c 2f 41 a5 41 05 46 f3 dd 2c ed 01 55 1c 11 bd 01 3b 65 1b 07 7c 99 04 40 cc 77 ca 8f 71 b1 b6 36 e2 32 39 dc 6e 5c 3b 63 11 e2 8b da 82 32 15 ae 39 da 4b ed Data Ascii: <awKE?zLKH"\#}M3e^>D@M\|[{z{T[-##hiNc[L4<equ&wXJH-WlIsF7%=I]~jdE*rqpp$:fvqz!\|/AAF,U;e\|@wq629n\;c29K
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 6c 9d e7 76 e0 47 85 31 0c 01 fb 5b b1 30 00 ee 82 0b 55 9a 09 76 d4 40 f5 f9 47 8d d4 1b 08 54 e9 ea 88 a1 08 a1 09 8f 47 20 ee 46 07 6b 00 49 04 0d a1 67 26 4a f7 73 3c f2 06 0f 15 96 b4 88 70 c7 e7 e2 98 cd c5 33 d6 6a c5 b0 4c 93 22 13 72 ee e0 00 79 e2 79 6d c7 33 fb 3f 33 95 8c db 31 1c f2 cf a8 f5 4c 71 d9 eb ae b2 55 7f 5d 26 db 1b 9b a0 c8 45 90 37 49 90 64 82 cd d9 90 b0 78 02 44 f2 29 be ec 07 80 cc 73 e1 f2 95 5d ab 5f af c9 25 ad c9 4b 27 48 24 7a 63 04 11 fc 46 0f e5 40 32 10 b1 a9 50 8a 10 8a 10 ad 74 cb 41 ae 20 31 13 90 78 30 09 83 ec 62 29 35 49 0c 24 2b b4 49 84 f4 5c 63 70 82 61 77 2c 30 64 4d db 73 70 ed 3c a3 93 b9 c8 1e 43 90 b0 30 43 43 2d 8d f2 27 1c 2f bc 64 9d 79 eb bf ea a3 b4 ab 69 95 60 4b 15 1e 17 92 4d c1 99 3f 56 55 54 f7 Data Ascii: lvG1[0Uv@GTG FkIg&Js<p3jL"ryym3?31LqU]&E7IdxD)s]_%K'H$zcF@2PtA 1x0b)5I$+I\cpaw,0dMsp<C0CC-'/dyi`KM?VUT
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 89 26 3d 17 33 59 1c c7 c1 33 13 13 1e 13 d7 8a 68 23 9a 8b a8 2a bb 49 30 c4 06 56 3e 07 53 c7 fd db 0e 08 f0 c8 23 bb 56 a7 2d 6c 45 b0 3b c1 f8 fa f3 50 eb 94 a8 56 b4 b4 54 a8 45 08 45 08 45 08 59 d9 ba 54 86 1c 82 08 fc aa ae 68 70 82 a4 18 4f dd c5 d5 ee 30 53 1b 76 ed 04 85 22 08 9f 18 10 02 ee 4d db 80 12 01 99 e3 80 34 9d da 13 9c cf 43 b8 c4 65 29 e7 b4 2c a7 bc ea 87 75 c2 37 07 dc 40 93 26 20 9b 6a 4c f0 21 64 2a 82 41 dc d0 00 58 0e 7d 98 2d 11 f9 fc 73 ca 02 93 02 e5 2b d7 f5 e6 6c 27 71 62 30 7b d0 38 13 c0 00 62 14 0e 32 5b 9a d9 4f 47 0d bb ae 7a ea fe 49 6e 79 38 25 55 ad 29 7b cb f4 66 7c ca ee f5 0e 8f 71 8c ab 0e a1 a6 05 a7 ba e1 2c ea 51 01 f0 aa 3a d9 bb 03 96 bf 71 a2 4b 13 e0 1f 6a 3a af b5 43 58 b0 62 3d d3 ed 98 97 30 9e 60 b8 Data Ascii: &=3Y3h#I0V>S#V-lE;PVTEEEYThpO0Sv"M4Ce),u7@& jL!dAX}-s+l'qb0{8b2[OGzIny8%U){f\|q,Q:qKj:CXb=0`
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 45 8a f5 55 95 42 16 ab fe 9c 7f 2c 7f 51 eb 9a 86 44 db 6b 5c a7 5f 62 00 82 ce d1 ad b6 04 0e f2 df 9d 49 f6 d4 1c 93 81 f5 7f b0 7a d3 f4 cd 56 c0 e3 2e a6 7d d3 b9 01 fb 33 c8 b7 b3 fd 2b ce b5 c6 8f ee b4 82 46 0e ed 0f fe bc ef de ba 9f d1 b3 e5 b9 ea bd 67 a7 68 ae 27 d5 0b 83 53 aa 1c b1 d3 e8 c7 6a 05 c5 8e ed b7 71 6f 4f 9e f3 76 ab 81 1b 97 97 f6 9f 59 8d 5b ab 6b e9 2c 3d a8 d8 66 ed b7 f6 6d bc 81 2e dc 20 f2 59 74 0a 06 bd 76 53 22 d3 27 93 6f eb 03 bd 6d ee be 39 5e 9e 8a 10 b5 25 f4 ce f9 9a 7a 9f c4 1a c2 ae 1b 4f a2 23 41 a6 89 88 b1 ff 00 48 6f 4d cd aa 37 84 88 05 12 df a1 27 ec 0f 62 75 58 d5 fa a2 90 22 1f 53 f6 8e fe af c3 ff 00 8d 9e f2 57 9a 6b 6a fe fb 49 75 ec de c8 ee c7 cf 3e 5b a5 7c 3e bb da e1 d1 42 13 7f 87 b5 db 5b 61 e1 Data Ascii: EUB,QDk\_bIzV.}3+Fgh'SjqoOvY[k,=fm. YtvS"'om9^%zO#AHoM7'buX"SWkjIu>[\|>B[a
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: d1 cf f0 73 6a 3a f3 ea e3 ea fa 7e 8e e3 13 e9 73 54 7b 0b 43 d3 bd 6d 75 38 fd dc 4c 18 f2 8f b4 9d 34 51 d5 42 86 75 5e 07 73 3b 47 cf 65 76 2d 45 47 6f 48 f7 91 66 83 e2 6d e9 2b 67 35 f2 da f4 14 50 85 a5 af 8e 7a d2 37 56 ea cf 20 a5 ee a9 d4 6e 5b 69 80 43 6b 35 1b 0c f9 06 46 90 78 07 69 38 9a fb 77 40 a0 e6 e8 1a 33 73 6d 2a 20 8e 54 d9 3e 04 7a af 2a ae f1 ef aa 46 05 ce f5 29 5b 69 9c 31 8d aa b0 c6 54 c3 03 70 a9 2f 0e 48 24 c0 58 52 57 26 0d 69 da 69 6f 1b 63 c2 6d 6f 1b df 7a 54 19 59 bd cb 56 b7 16 8d cc 43 05 19 26 54 a9 94 80 14 05 66 cb 85 96 62 76 c2 80 60 07 d4 80 30 16 f3 9c 7b 86 19 66 8b 37 14 93 a8 75 56 b9 00 e1 47 03 04 e0 44 93 02 4c 63 10 3d 00 ad d4 e8 86 5f 34 97 38 95 4a b4 2a 22 84 22 84 22 84 27 f6 7a 5d 95 00 5c ed 37 c7 Data Ascii: sj:~sT{Cmu8L4QBu^s;Gev-EGoHfm+g5Pz7V n[iCk5Fxi8w@3sm* T>zF)[i1Tp/H$XRW&iiocmozTYVC&Tfbv`0{f7uVGDLc=_48J"""'z]\7
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 84 cb a1 eb b6 b6 d3 c3 e3 f0 39 0a 7d b9 89 f2 90 7e c8 ac ba 45 3d a6 c8 c4 75 d7 d5 31 86 0a 67 d6 16 c8 60 d7 24 b0 fb 00 f3 93 1b b0 0a 80 3d 48 30 63 bd b7 39 28 fb c2 21 98 6f eb ae 52 9a fd 9c 4a 4f ad ea cc e3 68 84 4e 02 ae 04 7a 18 89 f5 8c 09 cc 56 d6 51 0d b9 b9 de 52 4b 89 56 be 10 f8 b2 ee 83 57 a6 d7 58 fd ae 92 fd bd 42 09 8d c6 d3 06 36 c9 83 0b 71 66 db 60 f7 58 e0 d2 f4 cd 0e 9e 9b a3 d4 d1 6a fe 17 b4 b4 f0 91 13 dc 6e 38 85 6a 55 4d 27 b6 a3 71 04 1e b9 e0 b7 69 f0 d7 c4 36 b5 7a 7b 1a ab 2c 1a ce a2 cd bb d6 98 79 a5 d4 0e a7 1e c4 57 c3 3a 56 8e fd 1a b3 e8 55 10 e6 92 d2 38 83 05 7a d5 37 8a 8d 0f 6e 04 02 3b d3 3a cc 98 8a 10 b0 bb 78 28 2c c4 00 a0 92 49 80 00 12 49 27 80 06 66 a4 02 4c 0c 51 82 d3 a7 cd 8f 98 f6 fa bf 53 d7 75 Data Ascii: 9}~E=u1g`$=H0c9(!oRJOhNzVQRKVWXB6qf`Xjn8jUM'qi6z{,yW:VU8z7n;:x(,II'fLQSu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49866	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:03 UTC	1149	OUT	GET /-AR2DrDB0h9ElGhjXxb_MW7148DtRaiypdfNq7Tho_kRFS2WwproRfAnsZwRuJXcHDqTQcnYpF1uL4cCW16VMONz9Q=s275-w275-h175 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:03 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 29112 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 21:44:49 GMT Expires: Thu, 11 Jan 2024 21:44:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 434 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:03 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 13 00 00 00 af 08 02 00 00 00 51 b4 ad 55 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 20 00 49 44 41 54 78 9c ec 7d 77 9c 1c 47 99 f6 53 d5 dd 93 67 a3 56 ab 5d 49 bb ab 9c ac 55 b2 82 25 d9 96 2d e7 88 6d b0 7d 06 0c 07 c7 61 0e 73 60 30 77 dc 07 dc 11 fc 3b 38 38 8e 7c 18 03 3e 6c 63 30 ce 39 48 ce 41 38 28 3a 28 e7 bc bb da 38 b9 43 d5 f7 47 75 f7 f4 f4 f4 cc ce ec ce ca 32 Data Ascii: PNGIHDRQUsBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2 IDATx}wGSgV]IU%-m}as`0w;88\|>lc09HA8(:(8CGu2
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: df 84 60 c7 3c e1 f8 0f 4e 9a 10 de 57 ca b5 ad 79 77 ef 07 57 0b 2a 77 2f 90 ad 05 b9 16 52 9d 71 4e aa 40 27 09 28 67 97 41 a5 79 f8 f1 96 df ca 10 e1 e0 ed 48 5a e1 55 a0 ca 36 c0 49 13 dc 71 a6 c1 76 19 c0 39 60 3e d0 f2 1b ca 65 41 85 ad 70 27 4d 08 27 a9 94 2e ff 1b 32 21 78 bf 2d cd 84 70 72 15 e8 6f 8b 4a f6 21 f8 1b 32 21 78 be 3d 79 1c 82 9b fe c6 55 a0 32 bd 6f bc bb f7 83 6e 42 40 51 11 ee 7d 58 05 1a 09 13 1c 4e 8a 70 15 a5 a1 b2 74 6f 13 42 a5 1d 79 4e 08 11 ee 7d 58 05 1a 21 01 f6 e4 2a 50 05 69 d8 bb 0c 30 92 fc 67 04 d2 2b 4a c3 df cb 70 a2 9b 10 70 72 15 a8 42 54 89 39 68 a4 4d 08 23 90 de 60 34 04 13 42 be 15 db 49 27 4d 08 7f 6d 54 a1 5d 06 f8 6b 35 21 a0 c0 18 28 45 05 3a 69 42 30 e9 af 92 05 c9 42 e0 c8 3f 82 76 88 74 dc 4c 08 27 d0 Data Ascii: `<NWywWw/RqN@'(gAyHZU6Iqv9`>eAp'M'.2!x-proJ!2!x=yU2onB@Q}XNptoByN}X!Pi0g+JpprBT9hM#`4BI'MmT]k5!(E:iB0B?vtL'
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 98 a2 28 4f 3c fd dc 9d f7 3f 53 15 f6 77 f5 26 be f3 d5 4f 5f 76 c9 85 8c e9 92 24 1d 3d da 71 d7 9f 1e 78 ee 95 b5 3e 45 92 65 49 55 75 9f 4f b9 e6 43 e7 cd 9c 31 dd a7 48 f9 65 90 24 a9 eb d8 b1 87 1f 7b e6 e5 d7 de ec e9 8f f9 14 99 10 a2 e9 86 44 c9 9c 59 d3 ae b8 f4 82 b9 73 da 2d 93 b7 09 b3 7d fb f6 ff f9 81 87 d7 6d 78 37 91 4a 07 fd 3e 06 64 32 6a 24 12 6a 9f 31 ed ef ae b9 6a 42 5b 6b 29 e0 c1 07 0d 3f 27 32 ff 29 c5 fb a6 24 13 02 46 c2 90 9d 53 86 4a 76 fa b4 69 53 a2 a1 20 e7 9c ca d2 8e dd fb f7 1f 38 34 b6 b9 89 31 46 08 d1 34 7d cd 1b eb fd 8a 0c 20 9e 4a 2f 3f 6d 81 2c 4b 9a a6 03 f0 f9 7c cd 0d d5 a1 80 3f e0 53 64 59 06 40 29 ed ee ee fe d6 7f fe b4 e3 58 f7 a8 da 28 00 ce b9 5f 51 00 fc e1 fe 27 67 4d db 52 1d 09 5b 79 da f6 43 da df Data Ascii: (O<?Sw&O_v$=qx>EeIUuOC1He${DYs-}mx7J>d2j$j1jB[k)?'2)$FSJviS 841F4} J/?m,K\|?SdY@)X(_Q'gMR[yC
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: d4 11 ae 08 19 86 31 67 ce 29 9a ae 73 ce 65 59 da b6 63 6f 77 77 cf 73 2f ae 89 04 fd 00 54 dd b8 f0 fc 33 75 c3 28 96 1e e7 0d 0d 75 1a 33 02 80 2c d1 8e ae 63 99 4c 46 92 a8 10 ee 28 a5 87 8f 1c f5 fb 72 bd d1 39 1f 37 76 cc ee bd 07 64 59 4a ab da 47 2e 3b 6f da b4 49 cc 62 6b 44 30 17 10 0e 50 4a 03 01 bf a6 69 ad cd a3 13 c9 24 a5 34 a0 48 bd 7d 7d 63 1a 1b 4d f0 10 a4 52 a9 43 47 bb aa c2 21 00 b2 4c ad 82 ba 16 94 d9 09 c5 7f f0 d7 b2 0a 54 e6 a9 51 18 ae 09 01 c7 d1 11 6e 90 c5 5c ce 83 c1 e0 39 67 2c 5a b7 69 73 c0 a7 74 76 f7 6e d9 b2 fd cd f5 ef 55 45 82 86 c1 5a c6 36 b6 b5 b6 70 6e f5 af 97 4c cd c1 eb ea 6a 35 cd 00 e0 57 e4 37 d7 be 7b d9 c5 bd cd 4d 63 0c c3 20 84 a8 aa fa da eb eb c2 01 bf 2b d7 c6 86 3a 55 37 fc 7e 68 ba 5e 5d 1d 5d b2 Data Ascii: 1g)seYcowws/T3u(u3,cLF(r97vdYJG.;oIbkD0PJi$4H}}cMRCG!LTQn\9g,ZistvnUEZ6pnLj5W7{Mc +:U7~h^]]
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: bf b5 ec 4a 19 30 38 a7 40 1f d8 b8 55 77 80 33 d8 70 52 d3 bf 38 e5 cc 7f 98 d0 ae 31 03 80 4f 92 d7 f6 75 2c 7b ee f7 08 55 83 38 14 62 c6 b7 af fc f8 58 25 c0 8a 88 58 05 6c e6 9c f3 6d db 76 d8 ae 2b 8c f3 a6 31 8d 35 35 6e d7 01 4a e9 fe fd 07 13 89 04 21 84 71 56 57 57 67 fb 4a 53 4a 75 5d 3f 70 f0 d0 de 3d fb 53 e9 4c 75 55 74 fc b8 b1 ad ad e3 62 f1 c4 be 7d 07 24 4a 39 b8 cf e7 6b 19 3f 4e 92 24 2b 35 c2 39 8e 76 74 76 76 76 1d 3a 7c 94 10 54 57 45 9b 9b 9b c6 8f 1b 2b cb 52 be bf 8f 24 51 55 d5 8e 1c ed 38 72 e4 68 4f 4f 1f 21 64 d4 a8 ba e6 a6 a6 c6 c6 d1 92 24 79 b1 47 8f e1 c1 3d 02 5d 21 c3 1d b1 23 a1 94 9f 98 db b9 1d 7a 8e 29 20 0f db 8e 52 20 81 34 33 40 1c 36 43 ce e1 0f 6d ef 3e 54 fd f2 9f 8f 2c bd b2 4a 56 06 d5 2b fc 92 fc cc 91 dd Data Ascii: J08@Uw3pR81Ou,{U8bX%Xlmv+155nJ!qVWWgJSJu]?p=SLuUtb}$J9k?N$+59vtvvv:\|TWE+R$QU8rhOO!d$yG=]!#z) R 43@6Cm>T,JV+
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 23 39 a6 0c 4a a9 f3 2b a1 40 3b 43 64 49 b8 fe 11 67 cc fc dc f3 6b e9 f6 4a b2 52 50 14 49 51 64 59 96 24 49 72 26 92 df a2 94 12 59 96 44 95 25 49 22 84 13 c2 65 d9 5d 60 57 2e 92 44 15 ab 99 28 a5 79 96 09 0f 72 94 cd f1 61 5e 05 5d 6d 25 49 92 70 8c 94 29 75 35 78 45 c8 69 42 18 f6 fd 39 36 78 ca 14 e1 d2 ba 7e fa e8 d6 d5 2b 3e 76 ee 9a 07 e0 0f 79 98 7e 3c f2 22 c8 a4 11 8c 6e 3a fb a3 12 e7 46 01 dd 86 93 f2 1c b1 39 e7 92 24 01 84 10 1c eb e9 0f 04 7c 42 c2 91 65 a9 ae 2a fc 8b df fc b1 be be 6e f6 29 b3 6c 0b 32 21 84 73 f4 f7 0f 6c de b6 bd bb ab 7b cf be 43 0d 0d 75 8d 0d a3 66 ce 98 5a 5b 5b e3 f7 fb 45 4c 49 92 d6 ae db 78 e4 48 87 e8 3f c3 d0 67 9f 32 b3 ad ad 85 31 26 cb f2 93 4f ad 66 8c 89 a6 63 8c 8d 1f d7 dc de 3e 8b 33 2e 49 74 eb d6 Data Ascii: #9J+@;CdIgkJRPIQdY$Ir&YD%I"e]`W.D(yra^]m%Ip)u5xEiB96x~+>vy~<"n:F9$\|Be*n)l2!sl{CufZ[[ELIxH?g21&Ofc>3.It
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: df 67 70 fe 93 5f dd de 32 b6 29 1c f6 00 0f 80 47 1e 7d e2 96 1f ff ba ad 79 54 e3 a8 5a 3b 30 08 3f 80 0d 6f bf f7 a7 87 57 df f6 a3 6f 2d 5c 78 aa 98 1d 28 a5 75 d5 91 68 38 04 c0 af 28 9c f1 1f fe f8 a7 af bd be be a6 2a 32 a6 3e 4a 2c ff ac 91 50 81 86 7c 82 47 51 22 ce 85 d4 41 28 63 e8 f3 6b 1a 1f 5e 7e 2d 0a d9 c7 09 41 26 49 c3 35 6f 9c 71 75 01 21 6d 90 8c 8a eb 3f 1c 9c 59 64 18 86 ae eb 67 2c 5f b2 6c d1 5c 7b 23 74 55 34 b8 7d fb 2e 4a a9 61 18 0f 3e fc e4 7b db 76 d7 d7 44 85 0c c6 18 4f ab 9a 90 55 08 21 a1 80 bf 36 1a ba ed f6 3f 76 1d eb 06 10 8d 44 da 67 4c 14 d2 85 4c e9 d1 8e 2e ce 41 29 3d 72 e4 68 c0 b1 01 81 52 7a a4 b3 a7 a3 b3 8b 52 aa 69 5a 4f 77 af d8 6e 9d d6 f4 29 93 da 28 a5 ce eb 83 28 25 9d 5d 3d a9 54 5a 22 24 91 ca 68 56 Data Ascii: gp_2)G}yTZ;0?oWo-\x(uh8(*2>J,P\|GQ"A(ck^~-A&I5oqu!m?Ydg,_l\{#tU4}.Ja>{vDOU!6?vDgLL.A)=rhRzRiZOwn)((%]=TZ"$hV
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 4f 6f af aa aa 5b 76 ec 55 24 89 31 d6 34 a6 41 51 24 ce 41 24 7a f8 48 57 2c 96 d8 bf ff 60 c0 af 00 50 75 63 ce ec 69 ae b5 5a 00 86 61 4c 6a 1d db 3e 7b 16 00 70 4e 29 5d b9 62 99 b0 b9 89 42 f6 f6 f5 6b ba b7 9e 43 08 fa fa fb f7 1f ea 10 27 85 88 3d 7c 67 2c 3f 4d 5c a9 50 57 5b fb a9 8f 5f d5 17 4b 88 c8 8a 22 ed dc bd 3f 95 4a f6 f4 f6 c6 92 69 73 be 30 8c b9 c1 24 e5 00 00 20 00 49 44 41 54 e9 93 5b cf 5d b9 42 51 64 4a 49 4d 75 d5 87 2e b9 20 e8 77 0d 50 42 08 59 bb fe 6d 9f c5 16 62 f1 e4 d5 57 5e 36 76 6c 33 a5 90 65 3a 77 ce 29 e7 9f b5 2c ad e6 14 92 80 1c eb ee 8e a7 d2 f6 61 ab ba ae 3f fa c4 93 7f be ff a1 fb ee 7f 68 f5 b3 cf db 7a 11 27 44 d3 8d 58 22 91 5f c1 de de 81 7f f8 e4 75 ff f6 d5 9b be fc c5 1b bf fe b5 9b 5b c7 b7 0c 6a 58 1b Data Ascii: Oo[vU$14AQ$A$zHW,`PuciZaLj>{pN)]bBkC'=\|g,?M\PW[_K"?Jis0$ IDAT[]BQdJIMu. wPBYmbW^6vl3e:w),a?hz'DX"_u[jX
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 76 ec 3e 18 b4 f4 99 4c 46 bd e2 c2 d3 db da 5a 74 dd 58 be 74 c1 9d f7 3c 5a 25 07 01 44 c3 81 7b ee 7b 3c 12 09 4f 9f 3a b9 b3 f3 d8 9d 77 3f 30 ba c1 54 79 0d c3 98 3b 73 42 7d 7d 9d aa aa 9c f3 96 96 f1 a3 6a ab 39 e7 3e 59 5e bf 69 33 63 4c a6 54 d3 f4 e6 a6 d1 55 55 55 13 26 b4 72 ce 19 a0 28 f2 fa 8d ef a9 9a 46 08 d1 75 6d fa b4 49 91 48 58 55 b5 41 90 53 56 d3 70 5e 57 57 db 36 ae 69 c7 9e 03 3e 59 a2 94 c4 93 a9 db ef fc f3 c7 af bd 22 14 0a 6e dd b6 f3 ee 7b 9f a8 8e 9a d7 96 a4 33 da 94 29 13 15 59 6e 1a d3 58 1d 0d a9 aa 0e 4a 28 25 e9 64 ea 17 b7 de 7e ed 47 2e ab af af df bb 77 ff 8f 7f f9 7f 32 75 6d b0 e1 9c b3 15 a7 2f 7e e0 d1 55 e2 50 ab 48 28 f0 a7 fb 1f a5 84 2c 59 72 6a 2a 9d 7e e2 a9 67 77 ee 39 10 b1 ec 07 d6 37 ac b9 b9 31 1a 0e Data Ascii: v>LFZtXt<Z%D{{<O:w?0Ty;sB}}j9>Y^i3cLTUUU&r(FumIHXUASVp^WW6i>Y"n{3)YnXJ(%d~G.w2um/~UPH(,Yrj*~gw971
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: b8 a4 c8 57 5e 71 c9 29 b3 a6 bf f0 c2 6b 4f 3d fb 6a df 40 52 96 29 67 5c d3 d9 25 e7 2f 3b 63 f9 a2 53 e7 cf 75 1d e3 c4 18 9b 34 a1 f5 a5 a7 b6 cf 3d bd 45 84 c4 93 99 8f 5c 72 ba f0 7a 34 c0 db 5a c6 3f f7 fa 9e b9 33 1a c5 db 9e 58 ea 8c 65 a7 86 1d c3 91 31 76 e0 c8 b1 54 46 a7 94 a4 32 5a cb b8 26 e7 b0 29 f4 36 99 4c 6d dd db 59 1d f6 03 d8 78 a8 47 b3 ce 4c e4 9c 8f aa af ff da cd 37 ae db b0 e9 e1 c7 56 af 7b 67 9b 60 d3 19 4d 6f 1b d7 78 c9 99 4b cf 59 79 ba d3 88 2c 3e 59 be 74 c9 f7 be e9 7f 72 d5 0b 0f af 5a 53 1d 0e e8 3a 6b 1e 53 7f c3 27 3f b2 60 fe dc 1b 6f fe d6 be c3 dd e2 48 f8 8d 2f ef e1 e0 c2 e4 56 55 15 fd ea 97 3e f7 c4 33 ab ef 7f 64 55 f7 b1 3e 4a 49 46 33 2e 59 b9 f4 23 57 5e ba 7d fb ee 57 b6 fc 79 c2 a8 2a 00 87 7b e3 d7 aa Data Ascii: W^q)kO=j@R)g\%/;cSu4=E\rz4Z?3Xe1vTF2Z&)6LmYxGL7V{g`MoxKYy,>YtrZS:kS'?`oH/VU>3dU>JIF3.Y#W^}Wy*{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49865	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:03 UTC	1149	OUT	GET /xCyFHoc8SX7ZhIR6-2qPnWc1PMInoh_k9hIdClmdr3VOLiXQsE1cE_yQEkUIPPUJzpzyfGCd-AYgwIsQ4NQnJZP1=s1280-w1280-h800 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:03 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 404185 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 20:22:23 GMT Expires: Thu, 11 Jan 2024 20:22:23 GMT Cache-Control: public, max-age=86400, no-transform Age: 5380 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:03 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 03 20 08 06 00 00 00 7c 98 cf fb 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 06 2a 6e 49 44 41 54 78 01 ec 5d 07 a0 1d 45 d5 3e 7b ef 7b 2f bd 91 00 81 40 e8 01 42 ef a1 f7 2e a0 24 a0 82 54 95 22 22 11 f4 17 1b 22 76 41 41 c1 82 0d 04 a4 4b 51 9a f4 de 7b 2f a1 04 42 48 08 a4 d7 57 ee fe 73 66 77 ee 9d 7b de 39 b3 7b 5f 49 ee 7b 39 5f 78 dc 2d 33 67 ce b4 dd 33 df 9e 99 89 00 20 06 85 42 51 d7 18 3f 7e 3c 9c 77 de 79 a0 50 28 96 2f c4 71 0c 51 14 d9 5f 0a 7a 1d cf fd 78 79 c3 d3 34 dc 31 17 9e 93 1b 8a 13 ca 13 97 47 aa 87 bb 1f 42 48 5f 9a 5e 56 7e 68 b8 90 cc ac 7c d5 02 ae ec e9 Data Ascii: PNGIHDR \|pHYssRGBgAMAa*nIDATx]E>{{/@B.$T"""vAAKQ{/BHWsfw{9{_I{9_x-3g3 BQ?~<wyP(/qQ_zxy41GBH_^V~h\|
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: b3 c2 e7 8d db 91 38 b5 a2 ab e4 76 97 7e 79 fa 86 84 ce f4 ff 50 7b 73 32 f2 20 ab 5c a4 41 1a 4d 27 ab ff 67 a5 15 7a 6e d4 22 a7 96 30 79 cb a8 b3 a8 25 9d d0 40 b5 16 68 ff ef 1e 39 14 da ff eb ab ff d3 77 27 f7 fe e7 d2 f4 df d1 a1 f7 7f 1e fb 86 93 47 e3 52 5b 91 c6 a1 61 a4 fb be bd e4 ae 71 bf 3e fc 72 91 f2 e2 cb e4 74 a1 e9 73 71 68 98 50 5a be 6e d2 bd bc 32 b8 6b a1 74 b8 73 da d7 fc fb 4a 00 2a 14 75 8e e3 8e 3b 0e 14 0a 45 ef 41 1e 03 12 c3 38 72 cc 8f 97 65 10 50 59 92 41 90 45 c0 50 83 53 0a cb 19 80 9c 0e 92 31 e6 87 93 8e 43 79 f0 c3 51 3d a9 1e 59 a0 79 cc 6b b8 71 72 b8 b4 b3 f2 c8 19 db 4e 9e 6f bc 73 32 b8 81 02 d5 c7 0f c3 e5 93 ea c9 b5 09 49 6e a8 9d fa 69 d2 63 9a 57 3f 0e 4d 5b 42 9e ba 0d 85 97 ca 94 0b d3 d9 b4 6a 09 5f cb 80 Data Ascii: 8v~yP{s2 \AM'gzn"0y%@h9w'GR[aq>rtsqhPZn2ktsJ*u;EA8rePYAEPS1CyQ=YykqrNos2InicW?M[Bj_
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 5e 70 6d 4c 1a 64 45 c2 80 9e 3b f7 f3 e6 eb 10 d2 c7 d7 25 eb b9 45 e5 73 69 73 f5 ea df 97 f4 91 64 fa 32 68 19 f9 d7 7c cf 14 bf fd d0 b6 e4 c0 79 42 53 1d 69 5a 12 68 9d 48 32 b5 ff 6b ff ef e9 fd df bf cf b5 21 ee 9a 24 23 2b 6c 48 1f 1a 5f 92 25 d5 2d d7 cf b3 ce a5 72 e4 d2 e0 7e b9 36 47 f3 44 ef d1 f6 2c a5 4d e5 85 fa 3f 17 de 4f 83 c6 5b 1a fd 9f cb 93 7f de 00 0a 85 a2 2e b1 dd 76 db 81 42 a1 e8 5d 08 19 69 92 f1 e7 c7 a1 06 28 77 9f 33 62 fd b8 5c 9a 79 8c 47 29 8e 9f 66 c8 50 0e 19 b7 92 21 c5 19 ff 5c 3a 59 86 39 37 ed 4c 8a 2b 0d a4 3b 72 8d cb 6b d6 3d 5a a7 79 e4 70 86 72 5e 48 f5 e6 e4 72 e7 7e 3c 29 5c a8 7c a4 63 77 1e 1a 7c 4a 6d 4a ea 0b b4 4f 70 e9 d1 73 4e ef 3c ed 90 d3 cd 4f 37 d4 3f 43 fd 9f ea 43 7f b3 fa 99 84 50 7d 49 7d 92 Data Ascii: ^pmLdE;%Esisd2h\|yBSiZhH2k!$#+lH_%-r~6GD,M?O[.vB]i(w3b\yG)fP!\:Y97L+;rk=Zypr^Hr~<)\\|cw\|JmJOpsN<O7?CCP}I}
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 7a a6 49 d7 42 3a 74 a4 cd 77 77 ff e7 ca 3c 4f dd 84 c2 73 79 ca d2 25 4f 59 48 f9 e6 a0 fd 5f fb ff f2 d2 ff 7d 70 75 9f 05 a9 0c 69 7d 53 b9 1d ed ff 59 c8 f3 6c c9 82 54 0e b4 5f 85 e2 84 64 70 3a 3b f2 37 ab 7f 67 d5 11 97 67 ae cd 51 59 52 bf a2 32 28 74 13 10 85 a2 ce 70 dc 71 c7 81 42 a1 e8 7d f0 8d d7 90 c1 41 07 31 92 2c e9 58 1a 10 e4 95 25 19 2f a1 30 21 d9 a1 c1 9a af 27 35 6a b2 06 06 92 4c 6e 20 25 0d ae b8 74 a5 01 04 97 6e 47 07 aa be 5c 7a 4c f5 a6 b2 a4 01 0a a7 6f a8 9e a4 c1 62 68 ea 97 04 27 cb ff fa 9f 95 7e a8 4c fd f8 b5 0c 34 b3 fa 55 28 ae 3b a7 03 6b a9 9c fc 30 f4 37 d4 ae 00 e4 ba a2 f1 42 fd 59 6a 03 be 9c 3c 71 b8 e7 4d 14 e5 1b 30 73 f9 a4 61 7d d0 78 fe 60 9e a6 2f a5 c1 f5 8b bc 7a fb f9 e5 7e 29 6a 6d bf 5c 59 fa 7a 52 Data Ascii: zIB:tww<Osy%OYH_}pui}SYlT_dp:;7ggQYR2(tpqB}A1,X%/0!'5jLn %tnG\zLobh'~L4U(;k07BYj<qM0sa}x`/z~)jm\YzR
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: fe ce f5 97 3c 69 d0 30 59 e5 46 cb 57 0a 9f a7 ff d3 7b 59 cf d2 ac 67 8d 34 50 f4 e5 bb 5d 57 dd f3 93 0b eb 93 17 dc 33 39 34 28 e5 9e 71 fe 79 dc 8d fd df 0f c7 b5 17 3f 2d ee 3a 97 17 49 0e 17 96 ca a1 f9 f3 75 d3 fe af fd 9f de 5b de fa bf 4b 87 be 8f b9 34 a5 fc 51 bb 52 b2 57 b8 f2 ec aa fe 9f 65 ef 50 19 5c 3f a5 9b 6d 70 71 f3 c0 97 eb ce 43 08 95 5b 1c c7 b9 fb be 1f 46 7a 2e 85 ea 21 aa d1 fe f7 c3 d0 78 ba 09 88 42 51 27 d0 cd 3f 14 8a 9e 8b 90 d1 99 c7 38 91 8c a3 2c 43 9d 1a dc a1 e3 50 9c 50 ba 52 f8 5a 06 14 be 11 c2 ed 98 c6 19 58 21 fd 7c 99 92 4e 14 d4 e8 cb 0b 3f 4e 28 2d a9 fc dd 3d 29 cf 59 f5 ce 1d 87 f4 a1 69 4a e9 53 59 5c 58 ae 1d e4 69 33 00 f9 06 e9 52 da fe 20 5b ca 73 c8 28 a7 7a 85 fa 40 1e 5d b9 eb d2 35 1f 52 9b 93 da 08 Data Ascii: <i0YFW{Yg4P]W394(qy?-:Iu[K4QRWeP\?mpqC[Fz.!xBQ'?8,CPPRZX!\|N?N(-=)YiJSY\Xi3R [s(z@]5R
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 5c b8 ae e8 ff 54 1e 6d 77 5c 3d 6b ff d7 fe af fd 3f 7f ff a7 3a 51 59 92 1e dd d9 ff 25 70 ef ff 50 fd e7 ed ff a8 13 5d d2 86 93 19 92 d5 d1 fe 9f e7 3e 0d 2b 95 ad 4f c0 f9 61 a9 1d e5 43 ea cb d4 c6 f2 f3 cb c5 a1 6d 0c 43 e4 cf 95 42 a1 e8 72 e0 da 7f 4a 00 2a 14 3d 07 21 e3 88 42 0a 17 92 d1 d1 7b 2e 3d ce b8 e1 0c dd 3c f2 5c 18 3f ae 24 4b d2 85 a6 4f af 51 59 9c 01 c8 e9 9d 47 87 2c bd 38 48 86 68 67 d3 e1 ca a2 56 59 79 74 e4 ea 29 6f 5e 42 ed 24 94 a7 bc ed ae 96 f6 c6 e9 91 15 4f 32 a2 39 bd fd eb be 0c ba bb b3 34 08 f3 d3 94 e4 75 b6 8f d3 63 a7 5f 47 e4 70 fa 74 65 ff 0f b5 eb 50 3f a0 71 f2 f4 7f 49 a6 74 3f 14 37 a4 5f 1e 3d f3 a6 9d 47 5f 9a 4e 56 59 d3 b0 59 79 ca 42 47 fb 3f 0d db 99 e7 a6 f6 7f ed ff da ff b3 db 69 56 5f 5c da fd 5f Data Ascii: \Tmw\=k?:QY%pP]>+OaCmCBrJ*=!B{.=<\?$KOQYG,8HhgVYyt)o^B$O294uc_GpteP?qIt?7_=G_NVYYyBG?iV_\_
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 1f 0a 95 89 9f 66 a8 5d bb eb 79 fb 3f 8d e3 43 8a 4b f3 92 a7 be f2 f6 7f 7a 2c d5 27 d5 85 a2 3b fb 3f d7 96 a9 ac 58 fb 3f 1b 96 cb 23 80 f6 7f 2e 3e 77 2e e5 c5 47 4f e8 ff 1c ea a9 ff 73 61 6a 91 95 b7 ff 73 fa 4a d7 38 5b 57 d2 95 ab 7f 29 2c 27 97 93 91 05 ae 5d fb 75 90 55 97 be 2e 79 fb 7f bb 7c 60 38 50 28 14 4b 15 e8 fd 87 9b 7f 28 14 8a 9e 05 6a 9c e5 7d e9 87 0c ba 2c 19 21 62 89 ea c1 85 cd 32 30 b2 ae 49 fa 49 86 0a d5 81 de eb 88 2e 79 51 8b 9e 08 b7 bb 9c 0b e7 87 c9 9b ef 8e ea c7 b5 89 50 5d 67 95 15 d7 36 43 69 3b 43 17 cb a0 a3 f9 91 f4 ad a5 9d 4a e1 b3 d2 f3 af 51 f9 59 f1 b8 f2 09 a5 97 35 80 cc 23 87 8b 9f 47 86 d4 9f b2 da 43 57 f6 7f 3f 4d 1f 1d ad b3 3c 69 d0 f4 3a 53 f6 79 fa 54 57 f7 ff d0 73 30 74 ad a3 fd 5f 3a f7 f3 44 c3 Data Ascii: f]y?CKz,';?X?#.>w.GOsajsJ8[W),']uU.y\|`8P(K(j},!b20II.yQP]g6Ci;CJQY5#GCW?M<i:SyTWs0t_:D
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: 7e d8 50 ff e7 ae 51 3d 28 3a d3 ff 43 ed c4 0f e7 cb a7 ba 68 ff 6f 7f ae fd 1f d8 72 58 1e fb 3f ad eb 50 5e 96 55 ff 0f a1 96 fe 9f 47 26 17 26 54 6f a1 be 2c e9 92 37 6f 2e 6e 56 9f 0f 95 29 97 7e 56 58 ae 1c b9 e7 02 57 b6 7e dc a2 f9 3b 1b 14 0a c5 52 c1 f1 c7 1f 0f fb ec b3 0f 28 14 8a fa 43 d6 cb 37 4f d8 bc 86 03 8d 93 37 5e 5e a3 26 94 16 67 20 4b c6 1d 67 60 e4 49 23 14 47 32 9c 25 5d dd 31 0d 5b 8b 91 16 aa 2f 69 50 e5 87 e1 64 71 06 63 47 0c 58 29 5d 7a 8f 0b d7 91 f6 56 0b b8 01 52 de 38 0e dc a0 dd 85 f3 7f e9 b1 24 b3 ab f2 2c 95 75 9e 81 44 1e 3d 3b a3 47 2d e1 3b 5a 1e be 17 59 96 de b5 f6 ff ac 3e c7 d5 65 28 8d 8e f6 ff ac e7 8b a4 8f d4 e7 b9 f0 59 fd 3f 54 0e b5 5e cb ea ff 5d fd 3c a8 a5 ff d3 f2 0c b5 01 1a 9e 5e 93 f4 08 85 a9 15 Data Ascii: ~PQ=(:ChorX?P^UG&&To,7o.nV)~VXW~;R(C7O7^^&g Kg`I#G2%]1[/iPdqcGX)]zVR8$,uD=;G-;ZY>e(Y?T^]<^
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: e7 90 9f 9e 54 96 dc b1 a4 17 95 45 db 1e 17 46 d2 01 8f b9 69 f4 f4 97 1b 44 71 b2 fc df 3c 65 4b d3 91 9e d3 b4 ff 87 9e fb 34 8e 94 7f 3f 8d 50 1f f1 f3 9a d5 fe a8 1c 9f dc 90 f4 e6 d2 a3 72 39 d9 ee 1a cd 8f 4b 93 db 2d 9d 42 fb bf f6 7f ed ff d9 fd 9f 86 e1 e4 72 f9 0b c9 a5 b2 24 5d b8 7e 21 f5 15 ae 5d f8 e1 b9 30 79 cb 24 4f 79 72 72 38 79 79 9e 65 5c d8 bc 7d 8a ca f5 c9 57 e9 59 c1 e5 43 02 d7 0e a5 f2 c9 d2 d5 ca c1 f8 a0 50 28 ba 15 0f 3d f4 90 12 80 0a 45 9d c2 37 2c e9 0b 33 6b 30 44 5f e4 79 8c 3b 17 ae 16 43 ad 23 71 25 70 06 17 97 6f 5a 1e b4 2c a4 32 eb 28 b2 64 4a 03 80 d0 20 d7 37 f0 b3 f2 26 19 b5 79 f4 ce 1b 27 2b 4c c8 b0 ce d2 8f 33 34 f3 e4 c9 5d c7 c1 bb 3f 30 e3 da b2 bb e6 ef 32 4c d3 77 b2 a4 7c d2 7a f6 af 53 bd e8 bd 50 7f Data Ascii: TEFiDq<eK4?Pr9K-Br$]~!]0y$Oyrr8yye\}WYCP(=E7,3k0D_y;C#q%poZ,2(dJ 7&y'+L34]?02Lw\|zSP
2024-01-10 21:52:03 UTC	1252	IN	Data Raw: e6 55 32 46 3b 42 38 70 c8 6a 47 79 e5 72 6d 3b 0f 42 6d 8b 9e 73 f5 19 8a 27 d5 4b ad a0 ed 20 2b 6c 47 ee 75 34 4e ad 83 1b 49 6e e8 dc 2f f7 ac 36 cd c9 ca 93 7e 67 c3 67 3d a3 5c 98 8e b6 d3 8e d6 7b 9e 67 61 2d c8 1b a7 33 cf 03 69 b0 9d 15 2f 74 2e 41 fb 7f 76 da 79 ef 6b ff 0f c7 cd d3 7e 5c f8 50 98 90 cd e6 cb e0 ec 29 6a 57 49 b6 0a fd 95 ae e5 d1 9f b3 97 68 dd f9 bf 74 09 1a a7 6b 88 bc a3 69 66 b5 27 ff 8f bb 2f c5 cf db 1f a8 6d 45 ef e7 81 af 5b 9e cd 95 68 bc 90 ed 8c 50 02 50 a1 e8 26 4c 98 30 41 bd ff 14 8a 3a 06 7d 51 72 86 4b 2d c6 be 44 9e 71 71 24 a3 80 7e 71 f4 8d 33 2e 1e 37 a8 93 8c 62 4a 7a 52 a3 82 de e7 f4 e6 90 35 38 91 8c 90 2c 12 49 22 d0 e8 7d 29 3e 17 8e 0b e3 2f 7e 1f 32 1c e9 35 ff 37 64 30 53 92 59 42 c8 00 cf d3 b6 7c Data Ascii: U2F;B8pjGyrm;Bms'K +lGu4NIn/6~gg=\{ga-3i/t.Avyk~\P)jWIhtkif'/mE[hPP&L0A:}QrK-Dqq$~q3.7bJzR58,I"})>/~257d0SYB\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49869	142.251.179.139	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:04 UTC	1319	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.GsbA68hXs80.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo899t-H8Lxb3OqzMDuPn6TV_i36ag/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:52:04 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 121630 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 04 Jan 2024 13:20:05 GMT Expires: Fri, 03 Jan 2025 13:20:05 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 06 Dec 2023 17:20:24 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 549119 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:04 UTC	336	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 5d 29 3b 0a 76 61 72 20 65 61 2c 66 61 2c 6e 61 2c 70 61 2c 73 61 2c 76 61 2c 77 61 2c 43 61 3b 5f 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);var ea,fa,na,pa,sa,va,wa,Ca;_.da=function(a)
2024-01-10 21:52:04 UTC	1252	IN	Data Raw: 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 66 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 Data Ascii: var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};na=function(a){a
2024-01-10 21:52:04 UTC	1252	IN	Data Raw: 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 5f 2e 6f 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 66 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 61 28 65 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b Data Ascii: at32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=_.oa[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&fa(d.prototype,a,{configurable:!0,writable:!0,value:function(){return sa(ea(this))}})}return a});sa=function(a){a={next:a};a[
2024-01-10 21:52:04 UTC	1252	IN	Data Raw: 3f 68 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 28 68 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 4c 66 29 7b 74 68 69 73 2e 4c 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 66 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 62 37 28 29 7d 29 7d 74 68 69 73 2e 4c 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6f 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 4c 66 26 26 74 68 69 73 Data Ascii: ?h:new e(function(k){k(h)})}if(a)return a;b.prototype.eP=function(h){if(null==this.Lf){this.Lf=[];var k=this;this.fP(function(){k.b7()})}this.Lf.push(h)};var d=_.oa.setTimeout;b.prototype.fP=function(h){d(h,0)};b.prototype.b7=function(){for(;this.Lf&&this
2024-01-10 21:52:04 UTC	1252	IN	Data Raw: 63 60 22 2b 68 2b 22 60 22 2b 6b 2b 22 60 22 2b 74 68 69 73 2e 46 61 29 3b 74 68 69 73 2e 46 61 3d 68 3b 74 68 69 73 2e 7a 66 3d 6b 3b 32 3d 3d 3d 74 68 69 73 2e 46 61 26 26 74 68 69 73 2e 51 64 61 28 29 3b 74 68 69 73 2e 63 37 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 51 64 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 46 62 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6f 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6b 26 26 6b 2e 65 72 72 6f 72 28 68 2e 7a 66 29 7d 7d 2c 0a 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 69 56 29 72 65 74 75 72 6e 21 31 3b 76 Data Ascii: c`"+h+"`"+k+"`"+this.Fa);this.Fa=h;this.zf=k;2===this.Fa&&this.Qda();this.c7()};e.prototype.Qda=function(){var h=this;d(function(){if(h.Fba()){var k=_.oa.console;"undefined"!==typeof k&&k.error(h.zf)}},1)};e.prototype.Fba=function(){if(this.iV)return!1;v
2024-01-10 21:52:04 UTC	1252	IN	Data Raw: 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 60 22 2b 6d 2e 46 61 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 63 73 3f 66 2e 65 50 28 6c 29 3a 74 68 69 73 2e 63 73 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 69 56 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 74 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d Data Ascii: ;break;default:throw Error("d`"+m.Fa);}}var m=this;null==this.cs?f.eP(l):this.cs.push(l);this.iV=!0};e.resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ta(h),n=m.next();!n.done;n=m
2024-01-10 21:52:04 UTC	1252	IN	Data Raw: 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d Data Ascii: instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==
2024-01-10 21:52:04 UTC	1252	IN	Data Raw: 6f 6e 65 7c 7c 34 21 3d 6e 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 22 74 22 21 3d 6e 2e 76 61 6c 75 65 5b 31 5d 7c 7c 21 6d 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 21 31 3a 21 30 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 5f 2e 74 61 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 Data Ascii: one\|\|4!=n.value[0].x\|\|"t"!=n.value[1]\|\|!m.next().done?!1:!0}catch(p){return!1}}())return a;var b=new WeakMap,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=_.ta(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};c.prototype.set=fu
2024-01-10 21:52:04 UTC	1252	IN	Data Raw: 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6c 26 26 74 79 70 65 6f 66 20 6c 3b 22 6f 62 6a 65 63 74 22 3d 3d 6d 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 6d 3f 62 2e 68 61 73 28 6c 29 3f 6d 3d 62 2e 67 65 74 28 6c 29 3a 28 6d 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 6e 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 6e 26 26 76 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6c 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 Data Ascii: r]=c.prototype.entries;var d=function(k,l){var m=l&&typeof l;"object"==m\|\|"function"==m?b.has(l)?m=b.get(l):(m=""+ ++h,b.set(l,m)):m="p_"+l;var n=k[0][m];if(n&&va(k[0],m))for(k=0;k<n.length;k++){var p=n[k];if(l!==l&&p.key!==p.key\|\|l===p.key)return{id:m,li
2024-01-10 21:52:04 UTC	1252	IN	Data Raw: 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7d 29 7d 7d 29 3b 0a 70 61 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 74 61 28 5b 63 5d 29 Data Ascii: .keys",function(a){return a?a:function(){return Oa(this,function(b){return b})}});pa("Set",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal({x:4}),d=new a(_.ta([c])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49880	142.251.179.139	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:06 UTC	1330	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.GsbA68hXs80.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo899t-H8Lxb3OqzMDuPn6TV_i36ag/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-10 21:52:06 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 206436 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 06 Jan 2024 22:04:30 GMT Expires: Sun, 05 Jan 2025 22:04:30 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 06 Dec 2023 17:20:24 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 344856 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:06 UTC	336	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 47 68 3d 28 77 69 6e 64 6f 77 2e 67 61 70 69 7c 7c 7b 7d 29 2e 6c 6f 61 64 3b 0a 5f 2e 51 6f 3d 5f 2e 6e 66 28 5f 2e 7a 66 2c 22 72 77 22 2c 5f 2e 6f 66 28 29 29 3b 0a 76 61 72 20 52 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 3d 5f 2e 51 6f 5b 61 5d 29 26 26 61 2e 73 74 61 74 65 3c 62 26 26 28 61 2e 73 74 61 74 65 3d 62 29 7d 3b 76 61 72 20 53 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 61 3d 5f 2e 51 6f 5b 61 5d 29 3f 61 2e 6f 69 64 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 5f 2e 6b 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.Gh=(window.gapi\|\|{}).load;_.Qo=_.nf(_.zf,"rw",_.of());var Ro=function(a,b){(a=_.Qo[a])&&a.state<b&&(a.state=b)};var So=function(a){a=(a=_.Qo[a])?a.oid:void 0;if(a){var b=_.kf.getElementById(a);b&&b.parentNode
2024-01-10 21:52:06 UTC	1252	IN	Data Raw: 74 79 70 65 6f 66 20 61 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 55 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 72 65 74 75 72 6e 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 30 30 30 30 70 78 3b 77 69 64 74 68 3a 22 2b 28 62 3f 62 2b 22 70 78 22 3a 61 2e 73 74 79 6c 65 2e 77 69 64 74 68 7c 7c 22 33 30 30 70 78 22 29 2b 22 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 7d 3b 0a 5f 2e 56 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3d 61 2e 48 63 28 29 2c 65 3d 62 26 26 62 2e 77 69 64 74 68 2c 66 3d Data Ascii: typeof a&&(a=document.getElementById(a));return a};_.Uo=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};_.Vo=function(a,b){var c={},d=a.Hc(),e=b&&b.width,f=
2024-01-10 21:52:06 UTC	1252	IN	Data Raw: 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 53 69 74 65 45 6c 28 29 3b 62 26 26 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 2e 67 65 74 49 66 72 61 6d 65 45 6c 28 29 29 7d 3b 5f 2e 58 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 77 68 65 72 65 3d 5f 2e 54 6f 28 61 29 3b 76 61 72 20 62 3d 61 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 3d 61 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 7c 7c 7b 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 2e 56 6f 28 74 68 69 73 2c 65 29 7d 3b 62 2e 5f 72 65 61 64 79 3d 63 3b 62 2e 5f 72 65 6e 64 65 72 73 74 61 72 74 3d 63 3b 76 61 72 20 64 3d 61 2e 6f 6e 43 6c 6f 73 65 3b 61 2e 6f 6e 43 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 64 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 3b Data Ascii: ction(a){var b=a.getSiteEl();b&&b.removeChild(a.getIframeEl())};_.Xo=function(a){a.where=_.To(a);var b=a.messageHandlers=a.messageHandlers\|\|{},c=function(e){_.Vo(this,e)};b._ready=c;b._renderstart=c;var d=a.onClose;a.onClose=function(e){d&&d.call(this,e);
2024-01-10 21:52:06 UTC	1252	IN	Data Raw: 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 3f 5f 2e 5a 6d 28 29 5b 63 5d 7c 7c 61 5b 63 5d 7c 7c 22 22 3a 5f 2e 5a 6d 28 29 5b 63 5d 7c 7c 22 22 7d 7d 3b 5f 2e 6a 70 3d 7b 63 61 6c 6c 62 61 63 6b 3a 31 2c 63 6c 69 65 6e 74 69 64 3a 31 2c 63 6f 6f 6b 69 65 70 6f 6c 69 63 79 3a 31 2c 6f 70 65 6e 69 64 72 65 61 6c 6d 3a 2d 31 2c 69 6e 63 6c 75 64 65 67 72 61 6e 74 65 64 73 63 6f 70 65 73 3a 2d 31 2c 72 65 71 75 65 73 74 76 69 73 69 62 6c 65 61 63 74 69 6f 6e 73 3a 31 2c 73 63 6f 70 65 3a 31 7d 3b 5f 2e 6b 70 3d 21 31 3b 0a 5f 2e 6c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 5f 2e 6b 70 29 7b 66 6f 72 28 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2c 62 3d 30 Data Ascii: ion(b,c){return a?_.Zm()[c]\|\|a[c]\|\|"":_.Zm()[c]\|\|""}};_.jp={callback:1,clientid:1,cookiepolicy:1,openidrealm:-1,includegrantedscopes:-1,requestvisibleactions:1,scope:1};_.kp=!1;_.lp=function(){if(!_.kp){for(var a=document.getElementsByTagName("meta"),b=0
2024-01-10 21:52:06 UTC	1252	IN	Data Raw: 2c 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 63 2e 67 77 69 64 67 65 74 26 26 63 2e 67 77 69 64 67 65 74 2e 65 63 70 29 29 3b 72 65 74 75 72 6e 20 61 7c 7c 76 6f 69 64 20 30 7d 3b 5f 2e 73 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 5f 2e 70 70 28 61 2c 62 2c 63 2c 62 2e 61 63 74 69 6f 6e 3f 76 6f 69 64 20 30 3a 22 70 75 62 6c 69 73 68 65 72 22 29 7d 3b 76 61 72 20 74 70 2c 75 70 2c 76 70 2c 77 70 2c 78 70 2c 79 70 2c 41 70 2c 7a 70 3b 74 70 3d 7b 73 65 3a 22 30 22 7d 3b 75 70 3d 7b 70 6f 73 74 3a 21 30 7d 3b 76 70 3d 7b 73 74 79 6c 65 3a 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 30 30 30 30 70 78 3b 77 69 64 74 68 3a 34 35 30 70 78 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 Data Ascii: ,null==a&&(a=c.gwidget&&c.gwidget.ecp));return a\|\|void 0};_.sp=function(a,b,c){return _.pp(a,b,c,b.action?void 0:"publisher")};var tp,up,vp,wp,xp,yp,Ap,zp;tp={se:"0"};up={post:!0};vp={style:"position:absolute;top:-10000px;width:450px;margin:0px;border-sty
2024-01-10 21:52:06 UTC	1252	IN	Data Raw: 61 26 26 28 62 3d 70 61 72 73 65 49 6e 74 28 61 2c 31 30 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 76 61 72 20 61 70 3d 5f 2e 44 6b 28 5b 22 64 61 74 61 2d 22 5d 29 2c 44 70 2c 45 70 2c 46 70 2c 47 70 2c 48 70 3d 2f 28 3f 3a 5e 7c 5c 73 29 67 2d 28 28 5c 53 29 2a 29 28 3f 3a 24 7c 5c 73 29 2f 2c 49 70 3d 7b 70 6c 75 73 6f 6e 65 3a 21 30 2c 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3a 21 30 2c 70 72 6f 66 69 6c 65 3a 21 30 2c 73 69 67 6e 69 6e 3a 21 30 2c 73 69 67 6e 69 6e 32 3a 21 30 7d 3b 44 70 3d 5f 2e 6e 66 28 5f 2e 7a 66 2c 22 53 57 22 2c 5f 2e 6f 66 28 29 29 3b 45 70 3d 5f 2e 6e 66 28 5f 2e 7a 66 2c 22 53 41 22 2c 5f 2e 6f 66 28 29 29 3b 46 70 3d 5f 2e 6e 66 28 5f 2e 7a 66 2c 22 53 4d 22 2c 5f 2e 6f 66 28 29 29 3b 47 70 3d 5f 2e 6e 66 28 5f 2e 7a 66 2c 22 46 Data Ascii: a&&(b=parseInt(a,10));return b};var ap=_.Dk(["data-"]),Dp,Ep,Fp,Gp,Hp=/(?:^\|\s)g-((\S)*)(?:$\|\s)/,Ip={plusone:!0,autocomplete:!0,profile:!0,signin:!0,signin2:!0};Dp=_.nf(_.zf,"SW",_.of());Ep=_.nf(_.zf,"SA",_.of());Fp=_.nf(_.zf,"SM",_.of());Gp=_.nf(_.zf,"F
2024-01-10 21:52:06 UTC	1252	IN	Data Raw: 70 28 63 2c 66 2c 41 70 28 66 29 2c 65 2c 62 29 7d 7d 3b 76 61 72 20 4f 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 68 70 28 61 29 3b 62 26 26 63 3f 28 63 28 62 29 2c 28 63 3d 62 2e 69 66 72 61 6d 65 4e 6f 64 65 29 26 26 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 61 74 74 61 63 68 65 64 22 2c 21 30 29 29 3a 5f 2e 72 66 2e 6c 6f 61 64 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 68 70 28 61 29 2c 65 3d 62 26 26 62 2e 69 66 72 61 6d 65 4e 6f 64 65 2c 66 3d 62 26 26 62 2e 75 73 65 72 50 61 72 61 6d 73 3b 65 26 26 64 3f 28 64 28 62 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 61 74 74 61 63 68 65 64 22 2c 21 30 29 29 3a 28 64 3d 5f 2e 72 66 5b 61 5d 2e 67 Data Ascii: p(c,f,Ap(f),e,b)}};var Op=function(a,b){var c=hp(a);b&&c?(c(b),(c=b.iframeNode)&&c.setAttribute("data-gapiattached",!0)):_.rf.load(a,function(){var d=hp(a),e=b&&b.iframeNode,f=b&&b.userParams;e&&d?(d(b),e.setAttribute("data-gapiattached",!0)):(d=_.rf[a].g
2024-01-10 21:52:06 UTC	1252	IN	Data Raw: 3b 64 65 6c 65 74 65 20 66 2e 68 72 65 66 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 70 6c 75 73 6f 6e 65 22 3a 6d 3d 28 6d 3d 63 2e 68 72 65 66 29 3f 6d 70 28 6d 29 3a 6e 70 28 29 3b 66 2e 75 72 6c 3d 6d 3b 66 2e 64 62 3d 5f 2e 71 70 28 63 2e 64 62 2c 76 6f 69 64 20 30 2c 5f 2e 48 66 28 29 29 3b 66 2e 65 63 70 3d 5f 2e 72 70 28 63 2e 65 63 70 2c 76 6f 69 64 20 30 2c 5f 2e 48 66 28 29 29 3b 64 65 6c 65 74 65 20 66 2e 68 72 65 66 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 73 69 67 6e 69 6e 22 3a 66 2e 75 72 6c 3d 6e 70 28 29 7d 5f 2e 7a 66 2e 49 4c 49 26 26 28 66 2e 69 6c 6f 61 64 65 72 3d 22 31 22 29 3b 64 65 6c 65 74 65 20 66 5b 22 64 61 74 61 2d 6f 6e 6c 6f 61 64 22 5d 3b 64 65 6c 65 74 65 20 66 2e 72 64 3b 66 6f 72 28 76 61 72 20 71 20 69 6e 20 74 70 29 66 5b Data Ascii: ;delete f.href;break;case "plusone":m=(m=c.href)?mp(m):np();f.url=m;f.db=_.qp(c.db,void 0,_.Hf());f.ecp=_.rp(c.ecp,void 0,_.Hf());delete f.href;break;case "signin":f.url=np()}_.zf.ILI&&(f.iloader="1");delete f["data-onload"];delete f.rd;for(var q in tp)f[
2024-01-10 21:52:06 UTC	1252	IN	Data Raw: 65 74 75 72 6e 20 31 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 5f 2e 6e 66 28 5f 2e 72 66 2c 22 70 6c 61 74 66 6f 72 6d 22 2c 7b 7d 29 2e 67 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 4e 70 28 61 2c 62 29 7d 3b 76 61 72 20 51 70 3d 5f 2e 6e 66 28 5f 2e 7a 66 2c 22 70 65 72 66 22 2c 5f 2e 6f 66 28 29 29 2c 4b 70 3d 5f 2e 6e 66 28 51 70 2c 22 67 22 2c 5f 2e 6f 66 28 29 29 2c 52 70 3d 5f 2e 6e 66 28 51 70 2c 22 69 22 2c 5f 2e 6f 66 28 29 29 2c 53 70 2c 54 70 2c 55 70 2c 4c 70 2c 57 70 2c 58 70 2c 59 70 3b 5f 2e 6e 66 28 51 70 2c 22 72 22 2c 5b 5d 29 3b 53 70 3d 5f 2e 6f 66 28 29 3b 54 70 3d 5f 2e 6f 66 28 29 3b 55 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 53 70 5b 63 5d 3d 53 70 5b 63 5d 7c 7c 21 21 64 3b 5f 2e 6e 66 28 54 70 2c 63 Data Ascii: eturn 1}}return null};_.nf(_.rf,"platform",{}).go=function(a,b){Np(a,b)};var Qp=_.nf(_.zf,"perf",_.of()),Kp=_.nf(Qp,"g",_.of()),Rp=_.nf(Qp,"i",_.of()),Sp,Tp,Up,Lp,Wp,Xp,Yp;_.nf(Qp,"r",[]);Sp=_.of();Tp=_.of();Up=function(a,b,c,d){Sp[c]=Sp[c]\|\|!!d;_.nf(Tp,c
2024-01-10 21:52:06 UTC	1252	IN	Data Raw: 77 2e 63 68 72 6f 6d 65 26 26 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 28 29 2e 70 61 67 65 54 29 2c 66 26 26 30 3c 65 26 26 28 66 2e 74 69 63 6b 28 22 5f 74 62 6e 64 22 2c 76 6f 69 64 20 30 2c 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 28 29 2e 73 74 61 72 74 45 29 2c 66 2e 74 69 63 6b 28 22 74 62 6e 64 5f 22 2c 22 5f 74 62 6e 64 22 2c 65 29 29 29 2c 6e 75 6c 6c 3d 3d 62 26 26 77 69 6e 64 6f 77 2e 67 74 62 45 78 74 65 72 6e 61 6c 26 26 28 62 3d 77 69 6e 64 6f 77 2e 67 74 62 45 78 74 65 72 6e 61 6c 2e 70 61 67 65 54 28 29 29 2c 6e 75 6c 6c 3d 3d 62 26 26 77 69 6e 64 6f 77 2e 65 78 74 65 72 6e 61 6c 26 26 28 62 3d 77 69 6e 64 6f 77 2e 65 78 Data Ascii: w.chrome&&window.chrome.csi&&(b=Math.floor(window.chrome.csi().pageT),f&&0<e&&(f.tick("_tbnd",void 0,window.chrome.csi().startE),f.tick("tbnd_","_tbnd",e))),null==b&&window.gtbExternal&&(b=window.gtbExternal.pageT()),null==b&&window.external&&(b=window.ex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49890	172.253.115.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:06 UTC	436	OUT	GET /5iqSydGWCwZl180kxxi8cYBGJrxCQtwj4qCWGTRfQ_3LX_W3qCiA1pS47bT-sMA4aC7QiBjZwHvq21u9vgo_8znj7Qo HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:06 UTC	520	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Thu, 11 Jan 2024 21:52:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 21:52:06 GMT Server: fife Content-Length: 2160 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:06 UTC	732	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 06 00 00 00 c3 3e 61 cb 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 08 05 49 44 41 54 78 01 ed 9d 3d 56 e3 48 14 85 9f 87 0e 66 22 4c 36 59 ab 57 80 7b 05 98 6c 32 d8 81 4d 36 99 d9 01 b0 02 98 15 d8 ac 80 43 38 91 cd 0a 0c 2b 90 7b 05 66 b2 e9 c8 53 57 72 79 84 b0 65 81 a4 f7 5e 95 ea 3b e7 1e f3 d3 8d cb 55 b7 5e fd 97 3a 24 4b d7 a8 6f f4 d5 a8 67 14 ad 45 99 57 5f 78 35 5a 64 5e 7f 18 cd 8c 9e d7 3f 13 a1 43 bc d8 02 87 ce c8 bf 42 fe 2c 0b 4a cd f0 b8 7e 15 33 44 53 f4 8d 1e 8c 96 46 ab a0 bd 1a 1b 9d 93 e3 a0 b6 5f 51 28 f4 2a 8a 8d 06 e4 58 a4 0c 05 df 8c 11 ae c8 Data Ascii: PNGIHDR>apHYssRGBgAMAaIDATx=VHf"L6YW{l2M6C8+{fSWrye^;U^:$KogEW_x5Zd^?CB,J~3DSF_Q(*X
2024-01-10 21:52:06 UTC	1252	IN	Data Raw: 53 8d 89 bb bd bd 5d f9 82 62 13 4c 61 00 75 3b 7e d1 86 fa 06 3e 93 b6 7c a6 f5 48 40 d5 c9 5e 1f 0b df a2 d0 04 31 69 4a 10 42 a5 ef a0 69 d3 94 e7 6a 0c d0 86 c2 b7 5c 5e 5e aa c8 73 35 06 c0 70 a9 6d 28 1a 22 ca 26 00 13 26 4d ac de 15 61 c7 e8 98 56 46 1a 86 c3 a1 48 1a 94 4c 16 c9 26 60 32 99 ac 38 d9 95 f1 12 46 c4 ec a6 74 fe 8b 1a 00 35 8f 9b a2 b9 7a b4 cd dc 28 e8 0f c8 bc b1 44 8d 03 bd 5e 6f 67 9a f0 3b 6e 30 cd 6d 9b 22 09 15 1d 0d 6b 94 eb eb eb 64 9b 16 37 45 fb fd 24 f6 02 62 9b 9a 89 02 24 89 48 ed 97 a2 a8 e3 25 95 2e 44 01 a9 0e a1 48 04 40 ed 0f fc 8f 74 14 68 4d ed 07 1a 23 00 90 ea 0b b0 47 00 6c d5 0e bc 47 32 0a b0 3a 4e a2 e7 9f 45 6b 04 00 88 02 dc e5 c1 1a 01 50 fb 25 7a fe ae 80 28 c0 1d 21 59 0d 60 26 7e 28 50 cc f9 39 ef 01 Data Ascii: S]bLau;~>\|H@^1iJBij\^^s5pm("&&MaVFHL&`28Ft5z(D^og;n0m"kd7E$b$H%.DH@thM#GlG2:NEkP%z(!Y`&~(P9
2024-01-10 21:52:06 UTC	176	IN	Data Raw: 0a 26 68 6d e1 5b 22 0a 26 68 6d e1 5b 22 0a 26 68 6d e1 5b 22 0a 1d 43 4d 12 9b ba 0f 43 44 79 a1 0c 44 27 eb 86 e4 c1 7e 42 07 85 3c bf 24 25 44 94 ce 37 bb 94 81 2e 6b 4a 4a 57 6b 87 14 3a 88 4d 2a 36 1a 90 03 5c 53 30 42 9d 5a ae f3 d4 a9 85 b9 88 42 44 68 65 c1 6f 03 9b 4b 26 e4 56 e6 4b 16 3a fa 53 7d 62 a0 43 bc c0 c9 7d 4a 0d 71 42 61 db 99 65 41 e9 3e fd d9 5a 6c 07 13 b8 0d 90 07 86 e8 51 6a 8a af 94 1a a2 9b 79 f5 89 45 e6 15 7a 36 fa 41 cc 05 9e e7 3f 50 4e c0 f3 57 f5 80 5d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: &hm["&hm["&hm["CMCDyD'~B<$%D7.kJJWk:M*6\S0BZBDheoK&VK:S}bC}JqBaeA>ZlQjyEz6A?PNW]IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49897	142.251.179.139	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:07 UTC	922	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://scone-pa.clients6.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT
2024-01-10 21:52:07 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 18394 Date: Wed, 10 Jan 2024 21:52:07 GMT Expires: Wed, 10 Jan 2024 21:52:07 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "7ab82ceafc97e816" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:07 UTC	415	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 67 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c Data Ascii: (function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},g="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.val
2024-01-10 21:52:07 UTC	1252	IN	Data Raw: 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 66 61 3d 65 61 28 74 68 69 73 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 66 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e Data Ascii: obal];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},fa=ea(this),h=function(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.len
2024-01-10 21:52:07 UTC	1252	IN	Data Raw: 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 68 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 Data Ascii: lue for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};h("String.prototype.endsWith",function(a){return a?a:funct
2024-01-10 21:52:07 UTC	1252	IN	Data Raw: 70 69 2e 4b 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6e 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 70 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2c 6b 61 3d 30 2c 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 4d 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: pi.K=(new Date).getTime();/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0/var n=this\|\|self,p="closure_uid_"+(1E9Math.random()>>>0),ka=0,la=function(a,b){function c(){}c.prototype=b.prototype;a.M=b.prototype;a.prototype
2024-01-10 21:52:07 UTC	1252	IN	Data Raw: 70 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 48 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 6e 65 77 20 70 61 3b 76 61 72 20 71 61 3d 7b 7d 2c 72 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 71 61 21 3d 3d 71 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 53 74 79 6c 65 53 68 65 65 74 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 47 3d 22 22 7d 3b 72 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 47 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 6e 65 77 20 72 61 3b 76 61 72 20 73 61 3d 7b 7d 2c 74 61 3d Data Ascii: pa.prototype.toString=function(){return this.H.toString()};new pa;var qa={},ra=function(){if(qa!==qa)throw Error("SafeStyleSheet is not meant to be built directly");this.G=""};ra.prototype.toString=function(){return this.G.toString()};new ra;var sa={},ta=
2024-01-10 21:52:07 UTC	1252	IN	Data Raw: 76 61 72 20 63 3d 61 2e 65 6e 74 72 69 65 73 5b 62 5d 3b 69 66 28 63 29 72 65 74 75 72 6e 20 63 3b 63 3d 49 28 61 2c 62 2e 73 6c 69 63 65 28 30 2c 4d 61 74 68 2e 6d 61 78 28 62 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 2c 30 29 29 29 3b 76 61 72 20 64 3d 0a 6e 65 77 20 78 61 28 62 2c 63 29 3b 61 2e 65 6e 74 72 69 65 73 5b 62 5d 3d 64 3b 63 2e 63 68 69 6c 64 72 65 6e 2e 70 75 73 68 28 64 29 3b 72 65 74 75 72 6e 20 64 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 48 7c 7c 28 48 3d 6e 65 77 20 41 61 29 3b 72 65 74 75 72 6e 20 48 7d 3b 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 42 61 3d 5b 5d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 Data Ascii: var c=a.entries[b];if(c)return c;c=I(a,b.slice(0,Math.max(b.lastIndexOf("."),0)));var d=new xa(b,c);a.entries[b]=d;c.children.push(d);return d},J=function(){H\|\|(H=new Aa);return H};/* SPDX-License-Identifier: Apache-2.0*/var Ba=[],Ca=function(a){var
2024-01-10 21:52:07 UTC	1252	IN	Data Raw: 68 3d 28 5b 5e 26 23 5d 2a 29 22 2c 22 67 22 29 3b 69 66 28 61 3d 61 26 26 28 63 2e 65 78 65 63 28 61 29 7c 7c 64 2e 65 78 65 63 28 61 29 29 29 74 72 79 7b 62 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 32 5d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 62 7d 2c 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 4d 28 52 2c 22 50 51 22 2c 5b 5d 29 3b 52 2e 50 51 3d 5b 5d 3b 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 63 29 61 28 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 2b 2b 64 3d 3d 3d 63 26 26 61 28 29 7d 2c 66 3d 30 3b 66 3c 63 3b 66 2b 2b 29 62 5b 66 5d 28 65 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e Data Ascii: h=([^&#]*)","g");if(a=a&&(c.exec(a)\|\|d.exec(a)))try{b=decodeURIComponent(a[2])}catch(e){}}return b},Ja=function(a){var b=M(R,"PQ",[]);R.PQ=[];var c=b.length;if(0===c)a();else for(var d=0,e=function(){++d===c&&a()},f=0;f<c;f++)b[f](e)},S=function(a){return
2024-01-10 21:52:07 UTC	1252	IN	Data Raw: 20 70 72 6f 63 65 73 73 6f 72 20 66 6f 72 3a 20 22 2b 6b 29 3b 6c 7c 7c 57 28 22 66 61 69 6c 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 6c 6f 61 64 20 75 72 6c 22 29 3b 62 3d 6c 3b 63 3d 62 2e 6d 61 74 63 68 28 55 61 29 3b 28 64 3d 62 2e 6d 61 74 63 68 28 56 61 29 29 26 26 31 3d 3d 3d 64 2e 6c 65 6e 67 74 68 26 26 57 61 2e 74 65 73 74 28 62 29 26 26 63 26 26 31 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 57 28 22 66 61 69 6c 65 64 20 73 61 6e 69 74 79 3a 20 22 2b 61 29 3b 74 72 79 7b 61 3d 22 3f 22 3b 69 66 28 65 26 26 30 3c 65 2e 6c 65 6e 67 74 68 29 7b 63 3d 62 3d 30 3b 66 6f 72 28 64 3d 7b 7d 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 71 3d 65 5b 63 2b 2b 5d 3b 66 3d 76 6f 69 64 20 30 3b 6b 3d 74 79 70 65 6f 66 20 71 3b 66 3d 22 6f 62 6a 65 63 Data Ascii: processor for: "+k);l\|\|W("failed to generate load url");b=l;c=b.match(Ua);(d=b.match(Va))&&1===d.length&&Wa.test(b)&&c&&1===c.length\|\|W("failed sanity: "+a);try{a="?";if(e&&0<e.length){c=b=0;for(d={};c<e.length;){var q=e[c++];f=void 0;k=typeof q;f="objec
2024-01-10 21:52:07 UTC	1252	IN	Data Raw: 2c 6b 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 5b 30 5d 29 2c 6d 3d 0a 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 5b 31 5d 29 3b 32 3d 3d 66 2e 6c 65 6e 67 74 68 26 26 6b 26 26 6d 26 26 28 61 5b 6b 5d 3d 61 5b 6b 5d 7c 7c 6d 29 7d 62 3d 22 2f 22 2b 63 2e 6a 6f 69 6e 28 22 2f 22 29 3b 50 61 2e 74 65 73 74 28 62 29 7c 7c 57 28 22 69 6e 76 61 6c 69 64 5f 70 72 65 66 69 78 22 29 3b 63 3d 30 3b 66 6f 72 28 64 3d 51 61 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 51 61 5b 63 5d 2e 74 65 73 74 28 62 29 26 26 57 28 22 69 6e 76 61 6c 69 64 5f 70 72 65 66 69 78 22 29 3b 63 3d 58 28 61 2c 22 6b 22 2c 21 30 29 3b 64 3d 58 28 61 2c 22 61 6d 22 29 3b 65 3d 58 28 61 2c 22 72 73 22 29 3b 61 3d 58 28 61 2c 22 74 22 29 3b 72 65 74 Data Ascii: ,k=decodeURIComponent(f[0]),m=decodeURIComponent(f[1]);2==f.length&&k&&m&&(a[k]=a[k]\|\|m)}b="/"+c.join("/");Pa.test(b)\|\|W("invalid_prefix");c=0;for(d=Qa.length;c<d;++c)Qa[c].test(b)&&W("invalid_prefix");c=X(a,"k",!0);d=X(a,"am");e=X(a,"rs");a=X(a,"t");ret
2024-01-10 21:52:07 UTC	1252	IN	Data Raw: 0a 65 6c 73 65 7b 76 61 72 20 62 3d 63 62 28 29 2c 63 3d 22 22 3b 6e 75 6c 6c 21 3d 3d 62 26 26 28 63 3d 27 20 6e 6f 6e 63 65 3d 22 27 2b 62 2b 27 22 27 29 3b 61 3d 22 3c 22 2b 59 2b 27 20 73 72 63 3d 22 27 2b 65 6e 63 6f 64 65 55 52 49 28 61 29 2b 27 22 27 2b 63 2b 22 3e 3c 2f 22 2b 59 2b 22 3e 22 3b 4c 2e 77 72 69 74 65 28 5a 3f 5a 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 29 7d 7d 2c 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 4c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 59 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 5a 3f 5a 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 3b 61 3d 63 62 28 29 3b 6e 75 6c 6c 21 3d 3d 61 26 26 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e Data Ascii: else{var b=cb(),c="";null!==b&&(c=' nonce="'+b+'"');a="<"+Y+' src="'+encodeURI(a)+'"'+c+"></"+Y+">";L.write(Z?Z.createHTML(a):a)}},db=function(a){var b=L.createElement(Y);b.setAttribute("src",Z?Z.createScriptURL(a):a);a=cb();null!==a&&b.setAttribute("non

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49898	142.251.179.139	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:08 UTC	1035	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.GsbA68hXs80.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/rs=AHpOoo899t-H8Lxb3OqzMDuPn6TV_i36ag/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://scone-pa.clients6.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT
2024-01-10 21:52:08 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 79852 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 06 Jan 2024 22:04:31 GMT Expires: Sun, 05 Jan 2025 22:04:31 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 06 Dec 2023 17:20:24 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 344857 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:08 UTC	337	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 5d 29 3b 0a 76 61 72 20 65 61 2c 66 61 2c 6e 61 2c 70 61 2c 73 61 2c 76 61 2c 77 61 2c 43 61 3b 5f 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);var ea,fa,na,pa,sa,va,wa,Ca;_.da=function(a)
2024-01-10 21:52:08 UTC	1252	IN	Data Raw: 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 66 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d Data Ascii: ar b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};na=function(a){a=
2024-01-10 21:52:08 UTC	1252	IN	Data Raw: 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 5f 2e 6f 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 66 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 61 28 65 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 Data Ascii: t32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=_.oa[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&fa(d.prototype,a,{configurable:!0,writable:!0,value:function(){return sa(ea(this))}})}return a});sa=function(a){a={next:a};a[S
2024-01-10 21:52:08 UTC	1252	IN	Data Raw: 68 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 28 68 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 4c 66 29 7b 74 68 69 73 2e 4c 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 66 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 62 37 28 29 7d 29 7d 74 68 69 73 2e 4c 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6f 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 4c 66 26 26 74 68 69 73 2e Data Ascii: h:new e(function(k){k(h)})}if(a)return a;b.prototype.eP=function(h){if(null==this.Lf){this.Lf=[];var k=this;this.fP(function(){k.b7()})}this.Lf.push(h)};var d=_.oa.setTimeout;b.prototype.fP=function(h){d(h,0)};b.prototype.b7=function(){for(;this.Lf&&this.
2024-01-10 21:52:08 UTC	1252	IN	Data Raw: 60 22 2b 68 2b 22 60 22 2b 6b 2b 22 60 22 2b 74 68 69 73 2e 46 61 29 3b 74 68 69 73 2e 46 61 3d 68 3b 74 68 69 73 2e 7a 66 3d 6b 3b 32 3d 3d 3d 74 68 69 73 2e 46 61 26 26 74 68 69 73 2e 51 64 61 28 29 3b 74 68 69 73 2e 63 37 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 51 64 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 46 62 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6f 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6b 26 26 6b 2e 65 72 72 6f 72 28 68 2e 7a 66 29 7d 7d 2c 0a 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 69 56 29 72 65 74 75 72 6e 21 31 3b 76 61 Data Ascii: `"+h+"`"+k+"`"+this.Fa);this.Fa=h;this.zf=k;2===this.Fa&&this.Qda();this.c7()};e.prototype.Qda=function(){var h=this;d(function(){if(h.Fba()){var k=_.oa.console;"undefined"!==typeof k&&k.error(h.zf)}},1)};e.prototype.Fba=function(){if(this.iV)return!1;va
2024-01-10 21:52:08 UTC	1252	IN	Data Raw: 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 60 22 2b 6d 2e 46 61 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 63 73 3f 66 2e 65 50 28 6c 29 3a 74 68 69 73 2e 63 73 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 69 56 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 74 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d 2e Data Ascii: break;default:throw Error("d`"+m.Fa);}}var m=this;null==this.cs?f.eP(l):this.cs.push(l);this.iV=!0};e.resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ta(h),n=m.next();!n.done;n=m.
2024-01-10 21:52:08 UTC	1252	IN	Data Raw: 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d 6e Data Ascii: nstanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==n
2024-01-10 21:52:08 UTC	1252	IN	Data Raw: 6e 65 7c 7c 34 21 3d 6e 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 22 74 22 21 3d 6e 2e 76 61 6c 75 65 5b 31 5d 7c 7c 21 6d 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 21 31 3a 21 30 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 5f 2e 74 61 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e Data Ascii: ne\|\|4!=n.value[0].x\|\|"t"!=n.value[1]\|\|!m.next().done?!1:!0}catch(p){return!1}}())return a;var b=new WeakMap,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=_.ta(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};c.prototype.set=fun
2024-01-10 21:52:08 UTC	1252	IN	Data Raw: 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6c 26 26 74 79 70 65 6f 66 20 6c 3b 22 6f 62 6a 65 63 74 22 3d 3d 6d 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 6d 3f 62 2e 68 61 73 28 6c 29 3f 6d 3d 62 2e 67 65 74 28 6c 29 3a 28 6d 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 6e 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 6e 26 26 76 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6c 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 Data Ascii: ]=c.prototype.entries;var d=function(k,l){var m=l&&typeof l;"object"==m\|\|"function"==m?b.has(l)?m=b.get(l):(m=""+ ++h,b.set(l,m)):m="p_"+l;var n=k[0][m];if(n&&va(k[0],m))for(k=0;k<n.length;k++){var p=n[k];if(l!==l&&p.key!==p.key\|\|l===p.key)return{id:m,lis
2024-01-10 21:52:08 UTC	1252	IN	Data Raw: 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7d 29 7d 7d 29 3b 0a 70 61 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 74 61 28 5b 63 5d 29 29 Data Ascii: keys",function(a){return a?a:function(){return Oa(this,function(b){return b})}});pa("Set",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal({x:4}),d=new a(_.ta([c]))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49905	172.253.63.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:11 UTC	597	OUT	GET /crx/blobs/AeKPYwz3Uq7kdc_f1tM_Y4vlxAWOgyfKCFU0QHKOEEHcz-R65zVooGKb9Oed2m5yw2xQKclqVBWGEeOZxjRI2-xHwCNjTk4VvZmvaBsR0ijNqjNqFGrkXADGUprl8qHqsf1ASzTVBsA98LSFEztFows/AFHDHDLLPDMAJOOPKOGFDMDFDGMPJIPP_1_0_0_11.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: empty Referer: https://chromewebstore.google.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:11 UTC	574	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqi07P1RMnmw3ubdV-h5XSw-RH1G6z4ZPtVNhryKm15zMF1RQL_1vhXltXDW1f3wweWFaEQl28aq3mjB4jIBy-1RA Content-Type: application/x-chrome-extension ETag: e11337f4_67ef4632_ea82238e_a1e00487_66b7366a Last-Modified: Thu, 21 Dec 2023 08:52:10 GMT Accept-Ranges: bytes Content-Length: 9071836 Date: Wed, 10 Jan 2024 21:52:11 GMT Expires: Thu, 09 Jan 2025 21:52:11 GMT Cache-Control: public, max-age=31536000 X-Goog-Hash: crc32c=gjd9fw== Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:52:11 UTC	678	IN	Data Raw: 43 72 32 34 03 00 00 00 1d 05 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 8f fb bf 5c 37 63 94 3c b0 ee 01 c4 b5 a6 9a b1 9f 46 74 6f 16 38 a0 32 27 35 dd f0 71 6b 0e dc f6 25 cb b2 ed ea fb 32 d5 af 1e 03 43 03 46 f0 a7 39 db 23 96 1d 65 e5 78 51 f0 84 b0 0e 12 ac 0e 5b dc c9 d6 4c 7c 00 d5 b8 1b 88 33 3e 2f da eb aa f7 1a 75 c2 ae 3a 54 de 37 8f 10 d2 28 e6 84 79 4d 15 b4 f3 bd 3f 56 d3 3c 3f 18 ab fc 2e 05 c0 1e 08 31 b6 61 d0 fd 9f 4f 3f 64 0d 17 93 bc ad 41 c7 48 be 00 27 a8 4d 70 42 92 05 54 a6 6d b8 de 56 6e 20 49 70 ee 10 3e 6b d2 7c 31 bd 1b 6e a4 3c 46 62 9f 08 66 93 f9 2a 51 31 a8 db b5 9d b9 0f 73 e8 a0 09 32 01 e9 7b 2a 8a 36 a0 cf 17 b0 50 70 9d a2 f9 a4 6f 62 4d Data Ascii: Cr240"0H0\7c<Fto82'5qk%2CF9#exQ[L\|3>/u:T7(yM?V<?.1aO?dAH'MpBTmVn Ip>k\|1n<FbfQ1s2{*6PpobM
2024-01-10 21:52:11 UTC	1252	IN	Data Raw: 95 e9 19 4c 9d 8b f3 2a d9 33 89 e7 d7 77 11 95 cd 22 1c 8c 92 29 89 33 de 79 0f 2d a3 e7 82 0b 4a 76 82 94 79 d9 ef 30 5f a1 bb 41 0c 47 e2 7e cf d1 89 ba 15 e9 65 9b 0c 22 82 cc 74 ff 9d cf 1f c6 55 3d 31 e9 14 49 dc 78 05 87 aa 7e 2d 3c 14 90 52 97 2a f5 09 4f 03 57 66 13 10 ef 0a bb 92 ac 52 c6 65 8d b5 ad d2 80 78 22 9c 3c de 5b 18 59 f6 09 a0 ff 55 33 2f 4b f4 63 f3 5b 6e 44 fe a1 e8 69 4a aa 60 00 55 8e a7 8a fa d0 b0 42 32 16 97 24 6e 6e 33 c8 76 3c 48 47 2c 42 41 a1 1a a8 13 b9 97 da a4 32 8b 41 7c 58 d6 32 f4 e0 ea e0 af 14 c3 f7 ba 85 cf a7 1b c1 02 03 01 00 01 12 80 02 6f d6 5a 55 e6 75 d7 8a 1a 3c ae 14 41 dd 25 81 83 67 ca e7 83 fc b2 4f 8b 2d 79 1c 62 b1 f9 3f d8 35 2b 9b b3 a4 dd f7 5e 7b 35 2f a3 50 67 ee 4d 00 cc 3d 39 51 cd 62 0f ab 86 Data Ascii: L3w")3y-Jvy0_AG~e"tU=1Ix~-<ROWfRex"<[YU3/Kc[nDiJ`UB2$nn3v<HG,BA2A\|X2oZUu<A%gO-yb?5+^{5/PgM=9Qb
2024-01-10 21:52:11 UTC	1252	IN	Data Raw: 12 84 b8 d4 dc 7f f0 fc 05 62 61 1e a2 88 72 06 12 cd 2c cc 95 ca 39 84 54 89 c8 80 5e 33 0a 51 b3 62 16 51 fd ea df 8c 46 9e fd f9 84 22 53 d2 5a 78 ab df eb b1 14 32 52 72 8c 19 ad 67 fc 88 89 3c aa 5e 82 f9 2c 2c 64 6e 17 1f b0 85 2a ca a2 86 eb a7 70 81 82 1f e3 90 21 87 8a 8b e3 1f cf df 62 52 14 5f 4a 44 25 bf 82 a1 71 ec d7 0b de 9b 75 7e 42 e8 2a d7 aa 94 a9 1b 5f bb 9f 78 a3 f4 0a 74 65 6c 69 a2 01 0e 97 c6 b5 63 23 47 9b 94 d8 50 cd 0a 34 76 c1 ef de d8 60 b6 46 97 ee 6c 3f 1e 59 0f 9c 25 d1 f2 4f 09 7a 1b cc c3 59 38 0d 05 93 95 af 9b d3 78 96 89 02 f2 80 2a 0d 67 c8 42 ab 35 4b 41 9b 88 24 06 b5 2d 49 d0 0d 5d b5 2a 15 57 61 59 72 15 76 76 53 03 86 9b ab b0 f5 ea 3a ec dc 16 da fa f5 75 ed 7e 2f 2e ef 0b 82 74 01 27 2a 38 b1 cd 31 09 33 42 21 Data Ascii: bar,9T^3QbQF"SZx2Rrg<^,,dnp!bR_JD%qu~B_xtelic#GP4v`Fl?Y%OzY8xgB5KA$-I]WaYrvvS:u~/.t'*813B!
2024-01-10 21:52:11 UTC	1252	IN	Data Raw: 5b d9 3a 51 e3 07 2b d6 ce 2d 0d 50 00 e6 8e 00 15 4b 5b e9 f6 00 ec b9 e0 b6 83 80 28 51 ca 8a d4 c0 cf 00 b0 b5 9f 79 c8 af c6 84 0a 2a 25 c9 29 56 f4 a0 a2 98 66 a2 a6 e6 92 67 4c 65 1d 5e 9d 18 8b c1 0d 87 8b c8 0e c1 ee e9 47 0c 9b e8 06 e9 9f eb be 5a 67 81 7b b0 9a 1f 4c 38 cb 81 83 04 38 a6 b5 5e ed 04 7f f9 6f 96 52 81 98 ec 2b db f3 3c f4 9f ef d1 3f 21 de 4b 0a 1b 10 7c 15 4a b8 80 89 da 01 e8 9e 95 00 ed 5d 1a a7 df 81 6a 31 88 23 01 83 a9 6a 6a 1d 6a 14 85 c6 1e be 39 ef 04 ce 67 c0 9b 5a bf 05 9c 9f dd ad 9f e8 4b 56 83 7d 0e 58 36 d4 40 4a bf 1e 4d a4 d5 77 17 73 03 ab 2c a4 45 dd 87 0b 02 67 4b c7 f0 dc 81 ae 06 a0 f8 1c ac 8e 73 6f a0 ff f5 e2 f3 ff fd 0d 2e 3e 3c f3 04 6b cf a4 c3 6c e3 8f 14 ed 72 81 ae 21 b0 ad 17 22 64 0b 86 1b f4 7d Data Ascii: [:Q+-PK[(Qy*%)VfgLe^GZg{L88^oR+<?!K\|J]j1#jjj9gZKV}X6@JMws,EgKso.><klr!"d}
2024-01-10 21:52:11 UTC	1252	IN	Data Raw: 2e f7 a6 ef 04 38 db fc b5 a2 f1 e4 ae 7d 8b 77 c2 70 e6 b2 fc f4 01 49 d1 d4 09 fd 89 54 15 20 fb d7 cf ff d8 c2 c8 4b a4 f4 0a 52 a1 4f cb 8b df 00 50 4b 07 08 ae 1d 77 e2 0d 07 00 00 c9 1a 00 00 50 4b 03 04 14 00 08 08 08 00 ce a0 5b 57 00 00 00 00 00 00 00 00 00 00 00 00 0f 00 00 00 63 73 73 2f 61 70 70 2e 63 73 73 2e 6d 61 70 ad 57 5b 57 db 38 10 7e df 5f d1 93 57 7c 36 50 97 a5 2c 4f a3 91 e3 26 81 26 59 4a 6e 3d 7d 08 6c 08 09 e4 82 93 06 48 4f ff 7b 35 23 db b2 64 bb 25 dd e5 81 e3 33 91 be f9 e6 9b 8b a4 6f 7f bc 51 7f 95 ed 38 5a 4f 97 8b ca df 6f 7c 4f 5b e6 a3 d5 6a ba 98 ac 95 a9 02 70 01 5e 0b a0 e5 21 00 7a 07 35 80 fa 19 c0 c7 a1 07 ea cf 3b 14 00 87 82 7f 3b 0b 00 02 6f aa 0c 53 e1 f1 f7 25 c0 a5 b6 36 01 9a da 66 56 5e 28 e8 8c 0d 09 58 Data Ascii: .8}wpIT KROPKwPK[Wcss/app.css.mapW[W8~_W\|6P,O&&YJn=}lHO{5#d%3oQ8ZOo\|O[jp^!z5;;oS%6fV^(X
2024-01-10 21:52:11 UTC	1252	IN	Data Raw: 4b 07 08 00 00 00 00 02 00 00 00 00 00 00 00 50 4b 03 04 14 00 08 08 08 00 3b 85 92 57 00 00 00 00 00 00 00 00 00 00 00 00 0d 00 00 00 6a 73 2f 70 72 6f 76 69 64 65 72 73 2f 03 00 50 4b 07 08 00 00 00 00 02 00 00 00 00 00 00 00 50 4b 03 04 14 00 08 08 08 00 3b 85 92 57 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 00 00 6a 73 2f 70 6f 70 75 70 2e 6a 73 ec bd 69 77 db 46 b2 30 fc 7d 7e 05 c4 d7 67 1e 70 42 d3 92 bc cb 51 7c 6d 59 4e 9c 78 8b d7 4c 74 7d 74 20 12 94 60 43 00 03 82 92 e5 89 ff fb db 55 d5 2b d0 1b 69 7b 26 f7 3e 0f ce 89 23 02 e8 46 77 75 75 75 ed 35 a9 ab 45 9b fc 2b 99 34 79 d6 e6 0f 1f 9e ce f3 e3 51 32 cb db c9 c9 c3 a2 cc 93 cf c9 6e 42 77 ef fc ed 6f 13 7c 79 36 83 9f ec be de 26 fd d7 df 12 76 4d ea 26 7f 9e b5 27 3b c9 e4 a4 a9 4f f3 71 Data Ascii: KPK;Wjs/providers/PKPK;Wjs/popup.jsiwF0}~gpBQ\|mYNxLt}t `CU+i{&>#Fwuuu5E+4yQ2nBwo\|y6&vM&';Oq
2024-01-10 21:52:11 UTC	1252	IN	Data Raw: 67 0b 50 7c a4 63 a2 1c c3 c8 80 d0 c0 df ea 04 69 e8 27 e3 a7 81 60 b0 1f 11 5b dd 8b 5a 34 0a df 76 a2 61 39 91 07 c6 b9 c3 86 69 7d c8 07 be c3 c6 ed 78 ce 66 b2 93 6c ae 89 2d 0b 3b b6 e4 0a b6 78 c2 b1 1b 3a 78 c5 3d 01 61 fe 53 01 59 dd 91 70 de da 4c 7e 48 c4 fa 03 92 b1 35 5e 2e 4e d8 f7 a3 06 3a 55 d8 55 ba ce 6b 38 f5 04 52 f7 51 27 1d 2c 19 0b 3d 2b aa 7c 3a 40 b4 ae 81 55 18 1c d5 75 99 67 15 bf 45 27 60 ce a7 e0 38 fe e0 f8 dd d8 f2 1c ec d0 15 83 2b be b7 e9 38 e7 16 e7 05 13 0e d9 51 ed da 0b 93 8c bd 35 58 a0 fc 35 d8 f1 bc 52 2d 4f 8f f2 c6 f1 0a 8e cb 31 0e 71 1d 31 ee fc 83 fd 31 7d 81 13 0d f7 17 c4 64 14 e1 70 cd ca e8 f8 83 bb 47 f9 ce be ff 1d b8 68 7e ce d7 fa fb d9 7e 98 17 52 62 ad 40 aa 64 f8 36 20 ac 68 93 bb c9 60 0c ec d4 29 Data Ascii: gP\|ci'`[Z4va9i}xfl-;x:x=aSYpL~H5^.N:UUk8RQ',=+\|:@UugE'`8+8Q5X5R-O1q11}dpGh~~Rb@d6 h`)
2024-01-10 21:52:11 UTC	1252	IN	Data Raw: b4 4e 91 7d c1 78 65 c1 bf 0e e7 9b e4 23 1c ec 95 21 5d 6c 98 ec b0 b6 f4 1b 56 46 b9 7f 7e dd ba 6e 3b be 74 13 cb b8 03 a2 14 1e a2 b0 cc 4e e2 81 18 fa a0 73 0a 9b 13 9c a9 d5 34 e6 e8 b4 07 75 be ad 61 83 fa fc 40 eb b5 ff f9 5a 7d 9e 7d 52 1b 4c df dc fb 80 bd 50 18 af 57 f9 79 52 9b 2f 3e 18 a3 11 bf 59 c2 d9 04 0d 46 c9 51 fa c0 98 26 63 47 1e b0 e5 7e be 6c f2 de 92 77 b5 31 f0 dd 87 ce 9d c6 99 11 e2 0a 63 90 f0 31 eb 8a 0b 85 0a ea a6 b1 a7 df e8 bd f3 fb a8 f9 de b0 d0 54 b8 50 f5 ed 7a 78 78 b8 c8 4b ff 73 3c cd 77 6c fa 1b cb c4 ee b1 31 5e f9 ef 2b df 31 61 a8 f7 ec 35 98 f7 df f5 ef bf 59 17 ae e6 12 b5 e3 3d 65 1f ea f7 77 9a cd 77 cc ed ea 10 55 e0 d2 98 48 d8 83 82 3d b4 cb 86 42 b6 39 70 18 ae 78 6b 29 7e a0 7a 04 bf ce 7e c7 00 95 6d Data Ascii: N}xe#!]lVF~n;tNs4ua@Z}}RLPWyR/>YFQ&cG~lw1c1TPzxxKs<wl1^+1a5Y=ewwUH=B9pxk)~z~m
2024-01-10 21:52:11 UTC	1252	IN	Data Raw: c5 35 f7 e4 18 64 47 13 db e2 8a 2f b4 07 d7 41 10 19 4c 73 f0 1c ba 4e 3e 47 56 b8 42 28 19 a8 f0 0e 36 df 05 07 22 45 9f 8a db 39 1a 12 81 d0 19 b4 b9 93 34 20 03 55 07 83 43 74 51 48 9b 21 8c c1 22 42 8b 51 0e 36 b7 b6 af 5e bb 7e e3 e6 ad db 03 94 18 3d 23 ac 86 e3 d3 6c 9e 46 2a cf e0 d2 c2 ca 9c ef 7d 1e 0a 07 ab c1 30 6a 1d 4a 8b 41 a8 f3 c1 83 41 06 40 3f 82 7f 26 f0 cf 14 fe c1 85 98 c1 3f c7 f0 cf 09 fc 53 c0 3f ef e1 9f 0f f0 4f 09 ff 9c c2 3f 15 fc 53 c3 3f 73 f8 e7 0f f8 a7 81 7f 16 f0 4f 3b 78 37 e6 5a de 58 78 94 14 96 e7 51 26 02 46 31 aa 71 7c 52 bc ff 50 9e 56 f5 fc 8f 66 d1 1a 78 83 0e 69 06 e6 a2 26 a6 d4 40 d8 67 4e 18 7d 42 57 52 a7 a6 c4 6d 47 ec 30 36 29 78 e5 98 54 30 a4 d7 54 c1 6b 23 50 1f 2e d1 7b 00 2c 39 20 e5 6f dd 61 ff b3 Data Ascii: 5dG/ALsN>GVB(6"E94 UCtQH!"BQ6^~=#lF*}0jJAA@?&?S?O?S?sO;x7ZXxQ&F1q\|RPVfxi&@gN}BWRmG06)xT0Tk#P.{,9 oa
2024-01-10 21:52:11 UTC	1252	IN	Data Raw: 79 bb b8 4f 81 fe a0 1c d9 e6 46 52 b6 08 57 d5 9f d7 e8 4f 9e 52 28 6b db a6 38 5a 32 0a 02 bc 04 52 e1 fe fd c5 3c 9b e4 dc 3f 11 1e 9e 2e 17 ed eb 45 2e 8e 8c 04 b3 4f c8 94 46 42 37 9d a8 cc 46 dc a5 40 7c 74 91 55 45 5b 7c ca 5f bf 00 17 ee 3a 0a 12 e7 5e e3 54 7e b0 f5 6e dc d6 af e7 ec eb 7b 8c 1b 8c 24 fe 1f 02 c9 3c 84 66 fb 37 db 29 79 97 dd 86 a3 6b c7 91 00 49 05 d0 01 e1 dc 68 d0 71 8c 09 38 db 1a 29 19 52 34 39 69 f9 db 83 4d 74 15 1b 3c d3 7e c3 f3 4a fc de a2 e7 4f d5 6f 20 c3 3c a5 0e 42 19 3b 4c bb c6 47 c7 f4 e0 d2 6d 6c 88 1f 2b b4 ed f5 b1 b1 cb a3 1c 69 48 15 1f 52 c0 7e 20 2e 91 5e 81 1f a2 4e d5 b8 7e 51 e6 06 79 06 87 b3 28 f0 7c 13 68 35 8b 78 1d 2e 31 7c 4f 6e 09 b3 77 91 6c 63 b5 ee 11 41 14 d2 60 24 fc 34 6b b3 cb b4 da 29 85 Data Ascii: yOFRWOR(k8Z2R<?.E.OFB7F@\|tUE[\|_:^T~n{$<f7)ykIhq8)R49iMt<~JOo <B;LGml+iHR~ .^N~Qy(\|h5x.1\|OnwlcA`$4k)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49910	35.84.115.54	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:15 UTC	719	OUT	GET /ty/video_downloader HTTP/1.1 Host: t-y-p.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP; subid_1=347207
2024-01-10 21:52:16 UTC	174	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-01-10 21:52:16 UTC	747	IN	Data Raw: 32 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 31 30 30 2c 33 30 30 2c 34 30 30 2c 35 30 30 2c 37 30 30 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d Data Ascii: 2df<!DOCTYPE html><html><head> <link href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700" rel="stylesheet"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49909	35.84.115.54	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:16 UTC	621	OUT	GET /static/style.css HTTP/1.1 Host: t-y-p.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://t-y-p.site/ty/video_downloader Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP; subid_1=347207
2024-01-10 21:52:16 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:16 GMT Content-Type: text/css Content-Length: 937 Last-Modified: Mon, 07 Aug 2023 13:31:54 GMT Connection: close ETag: "64d0f24a-3a9" Accept-Ranges: bytes
2024-01-10 21:52:16 UTC	937	IN	Data Raw: 62 6f 64 79 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 23 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 32 38 35 70 78 3b 0a 20 20 2f 2a 20 68 61 6c 66 20 6f 66 20 23 63 6f 6e 74 65 6e 74 20 68 65 69 67 68 74 2a 2f 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 23 6d 61 69 6e 5f 62 6c 6f 63 6b 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 34 38 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 35 37 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 6d Data Ascii: body {text-align: center;}#container { position: absolute; top: 50%; margin-top: -285px; /* half of #content height*/ left: 0; width: 100%;}#main_block { width: 1480px; height: 570px; display: inline-block; margin-left: auto; m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49913	35.84.115.54	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:16 UTC	608	OUT	GET /static/scripts.js HTTP/1.1 Host: t-y-p.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t-y-p.site/ty/video_downloader Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP; subid_1=347207
2024-01-10 21:52:17 UTC	256	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:16 GMT Content-Type: application/javascript Content-Length: 1378 Last-Modified: Tue, 07 Nov 2023 09:47:21 GMT Connection: close ETag: "654a07a9-562" Accept-Ranges: bytes
2024-01-10 21:52:17 UTC	1378	IN	Data Raw: 63 6f 6e 73 74 20 61 6c 6c 43 6f 6f 6b 69 65 73 20 3d 20 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 20 22 29 2e 6d 61 70 28 65 6c 20 3d 3e 20 65 6c 2e 73 70 6c 69 74 28 27 3d 27 29 29 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 61 70 70 65 6e 64 50 69 78 65 6c 28 75 72 6c 29 20 7b 0d 0a 20 20 6c 65 74 20 69 6d 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0d 0a 20 20 69 6d 67 2e 73 74 79 6c 65 3d 27 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 27 3b 0d 0a 20 20 69 6d 67 2e 73 72 63 3d 75 72 6c 3b 0d 0a 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 6d 67 29 3b 0d 0a 7d Data Ascii: const allCookies = Object.fromEntries(document.cookie.split("; ").map(el => el.split('=')));function appendPixel(url) { let img = document.createElement('img'); img.style='visibility:hidden'; img.src=url; document.head.appendChild(img);}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49916	54.190.82.3	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:17 UTC	657	OUT	GET /pixel/i?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207 HTTP/1.1 Host: trck.t-y-p.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t-y-p.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:17 UTC	159	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:17 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close
2024-01-10 21:52:17 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49917	157.230.107.172	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:17 UTC	777	OUT	GET /matomo.php?idsite=205&rec=1&url=https%3A%2F%2Ft-y-p.site%2Fty%2Fvideo_downloader&cvar={%22click_id%22:%22AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP%22,%22product%22:%22video_downloader%22,%22subID1%22:%22347207%22} HTTP/1.1 Host: metrika.traff.space Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t-y-p.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:18 UTC	211	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:17 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Cache-Control: no-store Strict-Transport-Security: max-age=604800
2024-01-10 21:52:18 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49918	54.190.82.3	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:18 UTC	428	OUT	GET /pixel/i?product=video_downloader&click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP&subid_1=347207 HTTP/1.1 Host: trck.t-y-p.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:18 UTC	159	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:18 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close
2024-01-10 21:52:18 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49919	35.84.115.54	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:18 UTC	662	OUT	GET /favicon.ico HTTP/1.1 Host: t-y-p.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t-y-p.site/ty/video_downloader Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: click_id=AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP; subid_1=347207
2024-01-10 21:52:18 UTC	159	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:18 GMT Content-Type: text/html Content-Length: 564 Connection: close
2024-01-10 21:52:18 UTC	564	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49921	157.230.107.172	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:18 UTC	547	OUT	GET /matomo.php?idsite=205&rec=1&url=https%3A%2F%2Ft-y-p.site%2Fty%2Fvideo_downloader&cvar={%22click_id%22:%22AH4Rn2VHTAUAWl4CAFVTFwASAAAAAAAP%22,%22product%22:%22video_downloader%22,%22subID1%22:%22347207%22} HTTP/1.1 Host: metrika.traff.space Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:19 UTC	211	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:18 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Cache-Control: no-store Strict-Transport-Security: max-age=604800
2024-01-10 21:52:19 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49920	3.10.43.234	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:18 UTC	482	OUT	OPTIONS /video_d/1.0.0.11/dnl_settings.json HTTP/1.1 Host: videodown.site Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-requested-with Origin: null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:18 UTC	363	IN	HTTP/1.1 204 No Content Server: nginx/1.14.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:18 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: x-requested-with Access-Control-Expose-Headers: X-Additional-Info

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	49922	3.10.43.234	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:19 UTC	569	OUT	GET /video_d/1.0.0.11/dnl_settings.json HTTP/1.1 Host: videodown.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:20 UTC	389	IN	HTTP/1.1 200 OK Server: nginx/1.14.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:19 GMT Content-Type: application/json; charset=utf-8 Content-Length: 63 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Additional-Info Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache ETag: W/"3f-UBFKnP6sVj3rZTraiDRoSqW4Iow"
2024-01-10 21:52:20 UTC	63	IN	Data Raw: 7b 22 68 65 61 64 65 72 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 2a 22 7d 5d 7d Data Ascii: {"headers":[{"key":"Access-Control-Allow-Origin","value":"*"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	49924	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:27 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=79NlTh1+hhOO4dP&MD=9n5xSzmn HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-01-10 21:52:28 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 627f011a-a4b7-4bb7-8e41-942f561cfd4f MS-RequestId: 5a8a25ec-eb98-4269-adc4-202b566106b6 MS-CV: ixFmdSrOiEiAanzp.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 21:52:27 GMT Connection: close Content-Length: 25457
2024-01-10 21:52:28 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-01-10 21:52:28 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	49778	139.45.197.244	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:35 UTC	1065	OUT	GET /4/5596087 HTTP/1.1 Host: vaikijie.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=a12b2079a0554715ad9689b20b20a045; oaidts=1704923514
2024-01-10 21:52:35 UTC	1619	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:35 GMT Content-Type: text/html; charset=utf8 Content-Length: 1604 Connection: close X-Trace-Id: 762f061d63eae6af08f20ceb0b60dd13 Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch" Link: <https://opmetapodor.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=a12b2079a0554715ad9689b20b20a045; expires=Thu, 09 Jan 2025 21:52:35 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923514; expires=Thu, 09 Jan 2025 21:52:35 GMT; path=/; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, favicon
2024-01-10 21:52:35 UTC	1604	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6e 6f 73 63 72 69 70 74 3e 0a 09 09 3c 6d 65 74 61 20 69 64 3d 22 6d 65 74 61 2d 72 65 66 72 65 73 68 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 6f 70 6d 65 74 61 70 6f 64 6f 72 2e 63 6f 6d 2f 3f 73 3d 37 36 39 30 36 37 37 33 36 39 34 34 30 38 37 36 36 34 26 61 6d Data Ascii: <!doctype html><html lang="en" xmlns="http://www.w3.org/1999/html"><head> <meta charset="UTF-8"/> <title>Redirect</title><noscript><meta id="meta-refresh" http-equiv="refresh" content="1; url=https://opmetapodor.com/?s=769067736944087664&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	49927	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:35 UTC	982	OUT	POST /convert/ HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive Content-Length: 19 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://v9.www-ytmp4.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://v9.www-ytmp4.com/search/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923513.0.0.0; _ga=GA1.1.20077430.1704923498
2024-01-10 21:52:35 UTC	19	OUT	Data Raw: 76 69 64 65 6f 49 44 3d 30 6e 42 5a 4c 48 78 6d 55 64 30 Data Ascii: videoID=0nBZLHxmUd0
2024-01-10 21:52:36 UTC	597	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rqo8%2BDPymERqoNs1jGOt0XNhXMVTUnw0C9vg9xsfFVdKUQYRzJdyqtyzSee88DCNdkQ6pCNLSX%2FTzBXdlgQ2Z%2BMzV%2Boei1YIuMMZ3TDzm2dmR1VMCCvNpCYY9Rqye8QYplRg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825dff98f81a3-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:36 UTC	772	IN	Data Raw: 32 32 34 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 59 54 4d 50 34 20 2d 20 59 6f 75 74 75 62 65 20 74 6f 20 4d 70 34 20 63 6f 6e 76 65 72 74 65 72 20 4f 6e 6c 69 6e 65 20 54 6f 6f 6c 20 5b Data Ascii: 2247<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="robots" content="index,follow" /><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title>YTMP4 - Youtube to Mp4 converter Online Tool [
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 66 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 66 72 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 74 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 74 68 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 69 64 2f Data Ascii: te" hreflang="en" href="https://www-ytmp4.com"><link rel="alternate" hreflang="fr" href="https://www-ytmp4.com/fr/"><link rel="alternate" hreflang="th" href="https://www-ytmp4.com/th/"><link rel="alternate" hreflang="id" href="https://www-ytmp4.com/id/
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 0a 3c 64 69 76 20 69 64 3d 22 6c 6f 61 64 69 6e 67 5f 69 6d 67 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 0a 3c 73 70 61 6e 3e 69 6e 69 74 69 61 6c 69 7a 65 3c 2f 73 70 61 6e 3e 20 3c 69 6d 67 20 69 64 3d 22 73 70 65 65 6e 22 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 73 70 69 6e 6e 69 6e 67 2d 77 68 65 65 6c 2e 70 6e 67 22 20 61 6c 74 3d 22 79 74 6d 70 34 22 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 66 72 61 6d 65 44 69 76 22 3e 0a 0a 3c 69 66 72 61 6d 65 20 69 64 3d 22 62 75 74 74 6f 6e 41 70 69 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 6c 2d 2d 6d 61 73 74 65 72 2d 2d 63 64 6e 2e 79 74 61 70 69 73 2e 63 6f 6d 2f 61 70 69 2f 62 75 74 74 6f 6e 2f 6d 70 34 3f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f Data Ascii: <div id="loading_img" style="display: none;"><span>initialize</span> <img id="speen" src="/images/spinning-wheel.png" alt="ytmp4"></div><div class="iframeDiv"><iframe id="buttonApi" src="https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 6d 70 75 74 65 72 73 20 26 20 74 61 62 6c 65 74 73 20 64 65 76 69 63 65 73 2e 20 49 74 e2 80 99 73 20 74 6f 74 61 6c 6c 79 20 66 72 65 65 20 74 6f 6f 6c 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 59 6f 75 74 75 62 65 20 64 6f 65 73 6e e2 80 99 74 20 70 72 6f 76 69 64 65 20 41 6e 79 20 64 6f 77 6e 6c 6f 61 64 20 6f 70 74 69 6f 6e 73 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 74 68 65 20 79 74 6d 70 34 20 74 6f 6f 6c 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 65 73 74 20 41 6c 74 65 72 6e 61 74 69 76 65 73 20 74 6f 20 63 6f 6e 76 65 72 74 20 79 6f 75 74 75 62 65 20 74 6f 20 6d 70 34 20 66 69 6c 65 73 2e 20 41 72 65 20 79 6f 75 20 75 73 69 6e 67 20 6f 75 72 20 66 72 65 65 20 73 65 72 76 69 63 65 73 2c 20 74 68 65 6e 20 63 6f 70 79 20 74 68 65 20 79 6f 75 74 Data Ascii: mputers & tablets devices. Its totally free tool.</p><p>Youtube doesnt provide Any download options. In this case, the ytmp4 tool is one of the best Alternatives to convert youtube to mp4 files. Are you using our free services, then copy the yout
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 20 69 6e 74 65 72 66 61 63 65 20 6f 75 72 20 74 68 69 73 20 74 6f 6f 6c 3c 2f 6c 69 3e 0a 3c 6c 69 3e 79 6f 75 20 63 61 6e 20 63 6f 6e 76 65 72 74 20 74 68 65 20 6d 70 34 20 66 69 6c 65 73 20 66 72 6f 6d 20 79 6f 75 74 75 62 65 2e 3c 2f 6c 69 3e 0a 3c 6c 69 3e 55 73 69 6e 67 20 74 68 65 73 65 20 74 6f 6f 6c 73 20 77 69 74 68 6f 75 74 20 61 6e 79 20 61 64 73 2e 20 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 70 3e 57 65 20 68 6f 70 65 20 79 6f 75 20 6c 69 6b 65 20 6f 75 72 20 79 74 6d 70 34 20 2d 20 79 6f 75 74 75 62 65 20 74 6f 20 6d 70 34 20 63 6f 6e 76 65 72 74 65 72 20 6f 6e 6c 69 6e 65 20 74 6f 6f 6c 2e 20 4d 61 6b 65 20 73 75 72 65 20 69 66 20 61 72 65 20 75 73 69 6e 67 20 74 68 69 73 20 74 6f 6f 6c 20 6f 6e 20 64 61 69 6c 79 20 62 61 73 69 73 20 74 68 65 Data Ascii: interface our this tool</li><li>you can convert the mp4 files from youtube.</li><li>Using these tools without any ads. </li></ul><p>We hope you like our ytmp4 - youtube to mp4 converter online tool. Make sure if are using this tool on daily basis the
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 30 35 2e 35 38 33 20 32 39 38 2e 35 35 38 2d 32 39 38 2e 35 35 38 20 32 39 38 2e 35 35 38 2d 35 39 2e 34 35 32 20 30 2d 31 31 34 2e 36 38 2d 31 37 2e 32 31 39 2d 31 36 31 2e 31 33 37 2d 34 37 2e 31 30 36 20 38 2e 34 34 37 2e 39 37 34 20 31 36 2e 35 36 38 20 31 2e 32 39 39 20 32 35 2e 33 34 20 31 2e 32 39 39 20 34 39 2e 30 35 35 20 30 20 39 34 2e 32 31 33 2d 31 36 2e 35 36 38 20 31 33 30 2e 32 37 34 2d 34 34 2e 38 33 32 2d 34 36 2e 31 33 32 2d 2e 39 37 35 2d 38 34 2e 37 39 32 2d 33 31 2e 31 38 38 2d 39 38 2e 31 31 32 2d 37 32 2e 37 37 32 20 36 2e 34 39 38 2e 39 37 34 20 31 32 2e 39 39 35 20 31 2e 36 32 34 20 31 39 2e 38 31 38 20 31 2e 36 32 34 20 39 2e 34 32 31 20 30 20 31 38 2e 38 34 33 2d 31 2e 33 20 32 37 2e 36 31 34 2d 33 2e 35 37 33 2d 34 38 2e 30 38 Data Ascii: 05.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-98.112-72.772 6.498.974 12.995 1.624 19.818 1.624 9.421 0 18.843-1.3 27.614-3.573-48.08
2024-01-10 21:52:36 UTC	1166	IN	Data Raw: 31 20 30 20 31 38 2e 39 20 32 2e 37 20 33 37 2e 35 20 34 2e 35 20 35 36 2e 34 20 33 2e 34 20 33 2e 38 20 31 2e 37 20 33 2e 34 20 36 2e 39 20 31 2e 35 20 35 30 2e 34 2d 36 39 20 34 38 2e 36 2d 38 32 2e 35 20 37 31 2e 34 2d 31 37 32 2e 38 20 31 32 2e 33 20 32 33 2e 34 20 34 34 2e 31 20 33 36 20 36 39 2e 33 20 33 36 20 31 30 36 2e 32 20 30 20 31 35 33 2e 39 2d 31 30 33 2e 35 20 31 35 33 2e 39 2d 31 39 36 2e 38 43 33 38 34 20 37 31 2e 33 20 32 39 38 2e 32 20 36 2e 35 20 32 30 34 20 36 2e 35 7a 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 73 70 61 6e 3e 50 69 6e 74 65 72 65 73 74 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 68 61 72 65 42 75 74 74 6f 6e 73 22 3e 3c 61 Data Ascii: 1 0 18.9 2.7 37.5 4.5 56.4 3.4 3.8 1.7 3.4 6.9 1.5 50.4-69 48.6-82.5 71.4-172.8 12.3 23.4 44.1 36 69.3 36 106.2 0 153.9-103.5 153.9-196.8C384 71.3 298.2 6.5 204 6.5z" fill="white"></path></svg><span>Pinterest</span></a></div><div class="shareButtons"><a
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 34 38 34 37 0d 0a 3c 70 61 74 68 20 64 3d 22 4d 33 38 30 2e 39 20 39 37 2e 31 43 33 33 39 20 35 35 2e 31 20 32 38 33 2e 32 20 33 32 20 32 32 33 2e 39 20 33 32 63 2d 31 32 32 2e 34 20 30 2d 32 32 32 20 39 39 2e 36 2d 32 32 32 20 32 32 32 20 30 20 33 39 2e 31 20 31 30 2e 32 20 37 37 2e 33 20 32 39 2e 36 20 31 31 31 4c 30 20 34 38 30 6c 31 31 37 2e 37 2d 33 30 2e 39 63 33 32 2e 34 20 31 37 2e 37 20 36 38 2e 39 20 32 37 20 31 30 36 2e 31 20 32 37 68 2e 31 63 31 32 32 2e 33 20 30 20 32 32 34 2e 31 2d 39 39 2e 36 20 32 32 34 2e 31 2d 32 32 32 20 30 2d 35 39 2e 33 2d 32 35 2e 32 2d 31 31 35 2d 36 37 2e 31 2d 31 35 37 7a 6d 2d 31 35 37 20 33 34 31 2e 36 63 2d 33 33 2e 32 20 30 2d 36 35 2e 37 2d 38 2e 39 2d 39 34 2d 32 35 2e 37 6c 2d 36 2e 37 2d 34 2d 36 39 2e 38 Data Ascii: 4847<path d="M380.9 97.1C339 55.1 283.2 32 223.9 32c-122.4 0-222 99.6-222 222 0 39.1 10.2 77.3 29.6 111L0 480l117.7-30.9c32.4 17.7 68.9 27 106.1 27h.1c122.3 0 224.1-99.6 224.1-222 0-59.3-25.2-115-67.1-157zm-157 341.6c-33.2 0-65.7-8.9-94-25.7l-6.7-4-69.8
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 55 41 2d 32 32 35 34 30 36 35 34 37 2d 31 27 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2d 33 2e 34 2e 31 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 63 75 73 74 6f 6d 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 24 28 64 6f 63 75 6d 65 Data Ascii: \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-225406547-1');</script><script src="/js/jquery-3.4.1.min.js"></script><script src="/js/custome.js"></script><script type="text/javascript"> $(docume

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.16	49926	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:36 UTC	717	OUT	GET /css/custome.css?ver=233 HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://v9.www-ytmp4.com/convert/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga=GA1.1.20077430.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923555.0.0.0
2024-01-10 21:52:36 UTC	781	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:36 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Cf-Bgj: minify Cf-Polished: origSize=10759 ETag: W/"653c4b5c-2a07" Expires: Wed, 10 Jan 2024 21:53:36 GMT Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT Vary: Accept-Encoding X-Cache: HIT CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mEP1A5N0LfSQhEbnAIz3ybE2Qir2Xu%2Bf3RlPNYP41ZBgyhgsfJb5p%2BBSIS6vymwMO8czEApxJyUy0DA5caS4QFB556TY72KvdwQNVCvxhUBsnHUsr0DfcrLHq6IJWPoqNC0m"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825e20afa3886-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:36 UTC	588	IN	Data Raw: 32 31 61 64 0d 0a 69 6d 67 23 67 6c 6f 62 65 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 7d 2e 63 6f 70 79 72 69 67 68 74 5f 74 65 78 74 7b 31 2e 70 61 64 64 69 6e 67 3a 31 30 70 78 7d 69 6d 67 23 73 70 69 6e 5f 6c 6f 61 64 65 72 2c 69 6d 67 23 73 70 65 65 6e 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 33 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 65 78 74 2d 62 6f 74 74 6f 6d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 31 30 30 25 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: 21adimg#globe{vertical-align:bottom}.copyright_text{1.padding:10px}img#spin_loader,img#speen{animation:spin 3s linear infinite;vertical-align:text-bottom}@-moz-keyframes spin{100%{-moz-transform:rotate(360deg)}}@-webkit-keyframes spin{100%{-webkit-trans
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 6c 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 32 2c 32 32 2c 32 32 2c 2e 31 35 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 6c 61 6e 67 75 61 67 65 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6c 61 6e 67 75 61 67 65 2d Data Ascii: le:none;background-color:#fff;background-clip:padding-box;border:1px solid rgba(22,22,22,.15);-webkit-border-radius:.25rem;-moz-border-radius:.25rem;border-radius:.25rem}.language-dropdown ul{list-style:none;margin:0;padding:0;text-align:center}.language-
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 34 30 38 36 30 32 31 35 30 35 25 20 30 20 31 2e 30 37 35 32 36 38 38 31 37 32 30 34 33 30 31 25 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 6f 6e 76 65 72 74 65 72 20 2e 66 6f 72 6d 20 23 73 75 62 6d 69 74 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 38 37 63 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 32 32 2e 33 38 33 35 31 33 25 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 33 70 78 20 2e 35 33 37 36 33 34 34 30 38 36 30 32 31 35 30 35 25 20 33 70 78 20 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 Data Ascii: 4086021505% 0 1.075268817204301%;padding:0}#converter .form #submit{color:#fff;background-color:#0087cf;font-size:15px;font-weight:500;float:left;width:22.383513%;height:36px;border:none;border-radius:3px;margin:3px .5376344086021505% 3px 0;cursor:pointer
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 34 32 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 23 30 30 38 37 63 66 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 7d 23 73 65 70 61 72 61 74 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 61 64 61 64 61 3b 77 69 64 74 68 3a 36 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 37 25 3b 68 65 69 67 68 74 3a 35 70 78 3b 6d 61 72 67 69 6e 3a 34 30 70 78 20 61 75 74 6f 7d 23 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 32 32 32 31 32 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 3b 70 61 64 64 69 6e 67 3a 30 20 33 2e 33 33 33 33 33 33 33 Data Ascii: 42px;border:1px #0087cf solid;border-radius:3px;display:none;font-weight:800}#separator{background-color:#dadada;width:6.666666666666667%;height:5px;margin:40px auto}#text{color:#222121;font-size:15px;font-weight:400;text-align:justify;padding:0 3.3333333
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 74 68 3a 39 36 2e 36 37 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 3a 31 2e 36 37 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 64 69 76 2e 72 69 67 68 74 5f 70 61 72 74 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 77 69 64 74 68 3a 37 30 25 7d 61 2e 64 6f 77 6e 6c 6f 61 64 5f 6d 70 34 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 32 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6f 75 74 73 65 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 62 75 74 74 6f 6e 62 6f 72 64 65 72 3b 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 69 6e 69 74 69 61 6c 3b 61 70 70 65 61 72 61 6e 63 65 3a 61 75 74 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 64 69 76 23 53 65 61 72 63 68 52 65 73 75 Data Ascii: th:96.67%;border-radius:2px;margin-bottom:15px;padding:1.67%;display:flex}div.right_part{margin:auto;width:70%}a.download_mp4{border-width:2px;border-style:outset;border-color:buttonborder;border-image:initial;appearance:auto;font-size:12px}div#SearchResu
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 23 61 64 20 61 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 2c 23 64 77 6e 5f 61 64 20 61 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 61 38 30 63 7d 23 61 64 20 61 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 2c 23 64 77 6e 5f 61 64 20 61 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 33 32 39 31 61 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 33 2e 35 32 39 39 31 34 35 32 39 39 31 34 35 33 25 7d 23 61 64 20 23 74 65 78 74 2c 23 64 77 6e 5f 61 64 20 23 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 63 6f 6c 6f 72 3a 23 37 62 37 63 Data Ascii: #ad a:first-of-type,#dwn_ad a:first-of-type{color:#fff;background-color:#00a80c}#ad a:last-of-type,#dwn_ad a:last-of-type{color:#fff;background-color:#c3291a;margin-left:13.52991452991453%}#ad #text,#dwn_ad #text{font-size:12px;font-weight:300;color:#7b7c
2024-01-10 21:52:36 UTC	1196	IN	Data Raw: 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 31 20 31 3b 74 6f 70 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 30 3b 74 6f 70 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 73 68 61 72 65 42 75 74 74 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 65 78 3a 31 20 31 3b 6c 65 66 74 3a 30 7d 2e 73 68 61 72 65 42 75 74 74 6f 6e 73 20 61 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 33 70 78 20 31 35 70 78 Data Ascii: display:flex;flex:1 1;top:auto;bottom:0;top:auto;-webkit-transform:none;-moz-transform:none;-ms-transform:none;transform:none}.shareButtons{display:inline-block;flex:1 1;left:0}.shareButtons a{display:block;margin:0 auto;line-height:24px;padding:13px 15px
2024-01-10 21:52:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.16	49933	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:36 UTC	788	OUT	GET /?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} HTTP/1.1 Host: opmetapodor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:36 UTC	1305	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/7.4.33 Set-Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; expires=Wed, 10-Jan-2024 22:52:36 GMT; Max-Age=3600; path=/ Set-Cookie: OAID=d36449c3fc5d2c86d4a195aa43f059a6; expires=Fri, 20-Jan-2079 19:45:12 GMT; Max-Age=1736545956; path=/ Set-Cookie: oaidts=1704923556; expires=Fri, 20-Jan-2079 19:45:12 GMT; Max-Age=1736545956; path=/ Set-Cookie: syncedCookie=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7VicGTu4vsAueBJ3gnb3yonqrofOI1iZanZp3NbW6ozYiXPAEQsMjt3GDHwdtTBz3umOQldd%2Fp8B67q%2F7WJX%2Bz4Iq86GLPrXMkdAA1hMr1sHgeL8xCEFwC5Qg60ISlymi50%3D"}],"group":"cf-nel","max_age":604800}
2024-01-10 21:52:36 UTC	149	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 34 33 38 32 35 65 33 33 63 34 32 34 33 37 38 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 843825e33c424378-EWRalt-svc: h3=":443"; ma=86400
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 Data Ascii: 7ffa<!DOCTYPE html><html><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no"><meta http-equiv="X-UA-Compatible" content="ie=edge"><meta name="g
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 2e 6a 73 6f 6e 28 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 28 64 61 74 61 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 67 69 64 20 3d 20 64 61 74 61 2e 67 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 74 72 44 65 62 75 67 4c 6f 67 28 27 5b 67 65 74 47 69 64 5d 20 47 69 64 20 66 72 6f 6d 20 72 74 6d 61 72 6b 27 2c 20 67 69 64 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 69 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 79 6e 63 65 64 4f 61 69 64 56 61 6c 75 65 20 3d 20 67 69 64 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 65 78 70 44 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: .json()) .then((data) => { let gid = data.gid; rtrDebugLog('[getGid] Gid from rtmark', gid); if (gid) { syncedOaidValue = gid; let expDate = new Date();
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 20 20 20 20 69 73 4f 61 69 64 53 79 6e 63 46 69 6e 69 73 68 65 64 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 72 65 73 6f 6c 76 65 28 73 79 6e 63 65 64 4f 61 69 64 56 61 6c 75 65 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 29 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 61 64 64 55 52 4c 50 61 72 61 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 55 52 4c 50 61 72 61 6d 73 28 7b 75 72 6c 3a 74 2c 70 61 72 61 6d 73 3a 72 7d 29 7b 63 6f 6e 73 74 20 73 3d 22 68 74 74 70 73 3a 2f 2f 64 75 6d 6d 79 2e 63 6f 6d 22 3b 74 72 79 7b 74 2e 6d 61 74 63 68 28 2f 5e 28 68 74 74 70 73 3f 7c 66 74 70 29 3a 5c 2f 5c 2f 2f 69 29 7c 7c 28 74 3d 60 24 7b 73 7d 24 7b 74 Data Ascii: isOaidSyncFinished = true; resolve(syncedOaidValue); } })</script><script>var addURLParams=function(){"use strict";return function addURLParams({url:t,params:r}){const s="https://dummy.com";try{t.match(/^(https?\|ftp):\/\//i)\|\|(t=`${s}${t
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 6f 73 56 65 72 55 72 6c 50 61 72 61 6d 3a 72 2e 6f 73 56 65 72 55 72 6c 50 61 72 61 6d 2c 6f 73 56 65 72 4e 75 6d 3a 72 2e 6f 73 56 65 72 4e 75 6d 7d 29 7d 29 29 7d 65 6c 73 65 7b 63 6f 6e 73 74 20 65 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 2f 28 61 6e 64 72 6f 69 64 7c 69 70 68 6f 6e 65 7c 69 70 61 64 7c 69 70 6f 64 7c 77 69 6e 64 6f 77 73 20 70 68 6f 6e 65 7c 77 69 6e 64 6f 77 73 20 6e 74 7c 6d 61 63 20 6f 73 20 78 7c 6c 69 6e 75 78 7c 75 62 75 6e 74 75 7c 64 65 62 69 61 6e 7c 66 65 64 6f 72 61 7c 72 65 64 20 68 61 74 7c 73 75 73 65 7c 6f 73 20 76 65 72 73 69 6f 6e 29 5b 5c 2f 7c 5c 73 5d 28 5b 5e 5c 73 3b 5d 2a 29 2f 29 3b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 3e 3d Data Ascii: osVerUrlParam:r.osVerUrlParam,osVerNum:r.osVerNum})}))}else{const e=navigator.userAgent.toLowerCase().match(/(android\|iphone\|ipad\|ipod\|windows phone\|windows nt\|mac os x\|linux\|ubuntu\|debian\|fedora\|red hat\|suse\|os version)[\/\|\s]([^\s;]*)/);if(e&&e.length>=
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 61 62 65 74 2e 6c 65 6e 67 74 68 20 2d 20 31 29 5d 7d 2e 24 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 7d 60 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 73 79 6e 63 65 64 4f 61 69 64 56 61 6c 75 65 20 67 65 74 20 66 72 6f 6d 20 6f 61 69 64 50 72 6f 6d 69 73 65 2e 6a 73 0a 20 20 20 20 20 20 76 61 72 20 74 62 55 72 6c 20 3d 20 27 2f 73 75 62 6d 65 6e 75 2f 34 36 36 32 37 32 38 2f 3f 72 68 64 3d 31 26 76 61 72 3d 35 35 39 36 30 38 37 26 76 61 72 33 3d 37 36 39 30 36 37 37 33 36 39 34 34 30 38 37 36 36 34 27 20 2b 20 27 26 6f 61 69 64 3d 27 20 2b 20 73 79 6e 63 65 64 4f 61 69 64 56 61 6c 75 Data Ascii: abet.length - 1)]}.${window.location.host}`; } } </script><script> (function () { // syncedOaidValue get from oaidPromise.js var tbUrl = '/submenu/4662728/?rhd=1&var=5596087&var3=769067736944087664' + '&oaid=' + syncedOaidValu
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 76 72 64 50 61 72 61 6d 20 3d 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 69 6e 69 74 57 76 72 64 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 64 69 72 65 63 74 28 22 63 61 6e 74 73 75 62 73 63 72 69 62 65 22 2c 20 74 62 55 72 6c 29 7d 29 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 28 22 63 61 6e 74 73 75 62 73 63 72 69 62 65 22 2c 20 74 62 55 72 6c 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 28 29 3b 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 71 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 71 2e 71 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 2d 71 2e 79 21 3d 3d 6e 5b 71 2e 48 5d 28 71 2e Data Ascii: vrdParam == 1) { initWvrd(function() { redirect("cantsubscribe", tbUrl)}) } else { redirect("cantsubscribe", tbUrl); } })(); </script><script> (function(q){!function(){q.q;function n(n,e,t){return n+=-q.y!==n[q.H](q.
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 6e 5b 71 2e 48 65 5d 26 26 6e 5b 71 2e 47 65 5d 26 26 6e 5b 71 2e 68 77 5d 26 26 28 21 65 7c 7c 21 6f 29 26 26 21 61 29 7d 28 6e 2c 65 29 26 26 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6e 5b 71 2e 57 5d 2c 72 3d 6e 5b 71 2e 68 77 5d 2c 6f 3d 6e 5b 71 2e 6a 77 5d 2c 63 3d 6e 65 77 20 44 61 74 65 28 6e 65 77 20 44 61 74 65 28 2b 6e 65 77 20 44 61 74 65 2b 71 2e 65 72 2a 72 29 5b 71 2e 50 77 5d 28 29 29 5b 71 2e 50 77 5d 28 29 2c 75 3d 71 2e 6b 77 2b 6f 3b 21 71 2e 67 2c 69 3d 21 71 2e 67 2c 64 6f 63 75 6d 65 6e 74 5b 71 2e 61 77 5d 3d 75 2b 71 2e 66 65 2b 63 2b 71 2e 41 77 2c 66 65 74 63 68 28 74 2b 71 2e 4a 65 2c 71 2e 75 28 71 2e 72 72 2c 71 2e 74 72 29 29 5b 71 2e 74 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 71 2e Data Ascii: n[q.He]&&n[q.Ge]&&n[q.hw]&&(!e\|\|!o)&&!a)}(n,e)&&function(n,e){var t=n[q.W],r=n[q.hw],o=n[q.jw],c=new Date(new Date(+new Date+q.er*r)[q.Pw]())[q.Pw](),u=q.kw+o;!q.g,i=!q.g,document[q.aw]=u+q.fe+c+q.Aw,fetch(t+q.Je,q.u(q.rr,q.tr))[q.t](function(n){return q.
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 73 5b 71 2e 53 77 5d 5b 71 2e 65 77 5d 5b 71 2e 42 77 5d 3d 71 2e 44 77 29 2c 21 71 2e 67 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 71 2e 79 7d 7d 3b 76 61 72 20 6c 3d 73 3b 66 75 6e 63 74 69 6f 6e 20 70 28 6e 2c 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 28 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 20 65 3f 65 28 6e 29 3a 71 2e 50 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 20 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 2d 71 2e 79 3b 74 72 79 7b 65 3d 6e 5b 71 2e 54 72 5d 28 71 2e 59 72 29 7d 63 61 74 63 68 28 6e 29 7b 7d 72 65 74 75 72 6e 20 65 7d 2c 65 3d 74 68 69 73 3b 65 Data Ascii: s[q.Sw][q.ew][q.Bw]=q.Dw),!q.g)}catch(n){return!q.y}};var l=s;function p(n,e){try{return n()}catch(n){return e?e(n):q.P}}function v(e){return p(function(){var t,r=new function(){var n=function(n){var e=-q.y;try{e=n[q.Tr](q.Yr)}catch(n){}return e},e=this;e
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 3d 76 5b 71 2e 63 72 5d 5b 71 2e 59 5d 28 6e 65 77 20 52 65 67 45 78 70 28 71 2e 4d 72 2c 71 2e 77 29 29 2c 6d 3d 76 5b 71 2e 42 72 5d 2c 71 2e 75 28 71 2e 4c 65 2c 70 2c 71 2e 6b 65 2c 70 61 72 73 65 49 6e 74 28 68 5b 71 2e 67 5d 2c 71 2e 76 72 29 2c 71 2e 5a 65 2c 70 61 72 73 65 49 6e 74 28 68 5b 71 2e 79 5d 2c 71 2e 76 72 29 2c 71 2e 43 65 2c 6d 2c 71 2e 58 65 2c 69 28 6d 29 29 29 3b 65 5b 71 2e 4c 65 5d 3d 75 5b 71 2e 4c 65 5d 2c 65 5b 71 2e 6b 65 5d 3d 75 5b 71 2e 6b 65 5d 2c 65 5b 71 2e 5a 65 5d 3d 75 5b 71 2e 5a 65 5d 2c 65 5b 71 2e 43 65 5d 3d 75 5b 71 2e 43 65 5d 2c 65 5b 71 2e 58 65 5d 3d 75 5b 71 2e 58 65 5d 2c 65 5b 71 2e 4b 65 5d 3d 21 71 2e 67 7d 7d 65 6c 73 65 20 69 66 28 2d 71 2e 79 3d 3d 3d 6e 61 76 69 67 61 74 6f 72 5b 71 2e 4b 72 5d 5b Data Ascii: =v[q.cr][q.Y](new RegExp(q.Mr,q.w)),m=v[q.Br],q.u(q.Le,p,q.ke,parseInt(h[q.g],q.vr),q.Ze,parseInt(h[q.y],q.vr),q.Ce,m,q.Xe,i(m)));e[q.Le]=u[q.Le],e[q.ke]=u[q.ke],e[q.Ze]=u[q.Ze],e[q.Ce]=u[q.Ce],e[q.Xe]=u[q.Xe],e[q.Ke]=!q.g}}else if(-q.y===navigator[q.Kr][

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.16	49935	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:36 UTC	765	OUT	GET /images/spinning-wheel.png HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://v9.www-ytmp4.com/convert/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga=GA1.1.20077430.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923555.0.0.0
2024-01-10 21:52:36 UTC	727	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:36 GMT Content-Type: image/png Content-Length: 1022 Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT ETag: "653c4b5c-3fe" Expires: Wed, 10 Jan 2024 21:53:36 GMT Cache-Control: max-age=14400 X-Cache: HIT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H82K01JfaLTQweGv95E6n%2Fgghag2HQACJ9UtqjCQKCOieHakPQ9dXdk%2FXzjekQFpyQqDpxmIVbtMoaJiQ307ADCkvbaZh00DzcrafygtJhhhJG6BjP4DXvFWjn0mj0tnDGKJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825e45fef82ec-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:36 UTC	642	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 01 56 50 4c 54 45 00 00 00 00 88 ce 00 86 cf 00 86 ce 00 86 cc 00 92 db 00 8b d1 00 99 cc 00 87 cf 00 87 cf 00 88 cf 00 88 d0 00 84 d3 00 87 cf 00 88 cf 00 86 ce 00 87 ce 00 87 cf 00 87 d0 00 88 cf 00 88 d1 00 87 d1 00 89 cf 00 86 cf 00 87 cf 00 88 cf 00 86 d0 00 88 d0 00 87 cd 00 87 cf 00 86 d0 00 88 d0 00 88 cf 00 86 cf 00 87 d0 00 87 ce 00 86 d0 00 87 cf 00 88 cc 00 87 cf 00 80 d5 00 87 cf 00 88 ce 00 8a cf 00 88 cf 00 85 d0 00 87 d0 00 87 cf 00 86 d2 00 87 ce 00 87 cf 00 Data Ascii: PNGIHDR(-SgAMAa cHRMz&u0`:pQ<VPLTE
2024-01-10 21:52:36 UTC	380	IN	Data Raw: c7 b2 26 58 c8 06 88 a2 91 62 50 b2 4a 74 15 94 c4 12 10 0b 01 b1 57 c0 5e b0 0b fe ff 49 16 7c a7 99 77 7b 40 9b 9e de be 7e 80 0c a0 8b 24 fb 06 87 86 47 fc 8a 8f 4a 9d af 06 82 21 6d 74 2c a0 21 1c 16 66 7c 42 57 27 11 89 c6 68 7c ca 48 00 d3 f2 8c 9a 04 4c 02 04 d9 ec 5c 0a 86 35 bf c0 17 97 d2 e9 cc 72 6c 25 cb 6d 38 ab 6b 16 5b ff 6d b3 c1 5d 6a c9 c8 e5 37 19 2b 08 51 20 e0 5b 36 b6 77 76 89 54 14 a2 28 21 e4 71 a4 4a e5 bd ca be 10 07 d4 d5 34 13 f0 0e 33 89 23 e7 f8 e4 f4 ec dc b9 b8 bc 02 58 35 59 01 6a 79 a0 ee d6 af 6f 80 db bb fb 87 47 3c 59 cf 2f 8a bf d1 69 79 8d 64 df 68 ee fd e3 13 66 37 8e 18 fa 57 34 fe ad fc 34 1b ff b9 68 35 b9 ed 79 7a 4b ec 3f 58 e8 2a 2f 7a c4 b2 47 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 32 30 Data Ascii: &XbPJtW^I\|w{@~$GJ!mt,!f\|BW'h\|HL\5rl%m8k[m]j7+Q [6wvT(!qJ43#X5YjyoG<Y/iydhf7W44h5yzK?X*/zG%tEXtdate:create20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.16	49931	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:36 UTC	626	OUT	POST /img.gif?f=merge&userId=a12b2079a0554715ad9689b20b20a045 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://vaikijie.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:36 UTC	678	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: https://vaikijie.net Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:36 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.16	49936	104.17.24.14	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:36 UTC	571	OUT	GET /ajax/libs/iframe-resizer/4.3.6/iframeResizer.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:36 UTC	946	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:36 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"640896fc-1603" Last-Modified: Wed, 08 Mar 2023 14:09:00 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Mon, 30 Dec 2024 21:52:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jG6A6ab668nOEBO%2FISPrPxJR2wSxvOitCq9qS1MhTmkd9sdsDeC66N71POq%2B9sDJtbmclZLRX92qFVnGZjmvVHuK4Ez8LvSFHPl%2FX9UgEwW760LA2ajSyT6aYi7Jxwcy4Fyl06LH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 843825e4d9328224-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:36 UTC	423	IN	Data Raw: 33 37 35 36 0d 0a 2f 2a 21 20 69 46 72 61 6d 65 20 52 65 73 69 7a 65 72 20 28 69 66 72 61 6d 65 53 69 7a 65 72 2e 6d 69 6e 2e 6a 73 20 29 20 2d 20 76 34 2e 33 2e 35 20 2d 20 32 30 32 33 2d 30 33 2d 30 38 0a 20 2a 20 20 44 65 73 63 3a 20 46 6f 72 63 65 20 63 72 6f 73 73 20 64 6f 6d 61 69 6e 20 69 66 72 61 6d 65 73 20 74 6f 20 73 69 7a 65 20 74 6f 20 63 6f 6e 74 65 6e 74 2e 0a 20 2a 20 20 52 65 71 75 69 72 65 73 3a 20 69 66 72 61 6d 65 52 65 73 69 7a 65 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 6d 69 6e 2e 6a 73 20 74 6f 20 62 65 20 6c 6f 61 64 65 64 20 69 6e 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 66 72 61 6d 65 2e 0a 20 2a 20 20 43 6f 70 79 72 69 67 68 74 3a 20 28 63 29 20 32 30 32 33 20 44 61 76 69 64 20 4a 2e 20 42 72 61 64 73 68 61 77 20 2d 20 Data Ascii: 3756/! iFrame Resizer (iframeSizer.min.js ) - v4.3.5 - 2023-03-08 Desc: Force cross domain iframes to size to content. * Requires: iframeResizer.contentWindow.min.js to be loaded into the target frame. * Copyright: (c) 2023 David J. Bradshaw -
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 6e 2c 69 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 69 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 2c 6e 2c 69 29 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 69 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 72 65 74 75 72 6e 20 78 2b 22 5b 22 2b 28 6e 3d 22 48 6f 73 74 20 70 61 67 65 3a 20 22 2b 28 65 3d 65 29 2c 6e 3d 77 69 6e 64 6f 77 2e 74 6f 70 21 3d 3d 77 69 6e 64 6f 77 2e 73 65 6c 66 3f 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 49 46 72 61 6d 65 26 26 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 49 46 72 61 6d 65 2e 67 65 74 49 64 3f 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 49 46 72 61 6d 65 2e 67 Data Ascii: MutationObserver}function F(e,n,i){e.addEventListener(n,i,!1)}function B(e,n,i){e.removeEventListener(n,i,!1)}function p(e){return x+"["+(n="Host page: "+(e=e),n=window.top!==window.self?window.parentIFrame&&window.parentIFrame.getId?window.parentIFrame.g
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 74 3d 65 2e 6f 72 69 67 69 6e 2c 6f 3d 6b 5b 62 5d 26 26 6b 5b 62 5d 2e 63 68 65 63 6b 4f 72 69 67 69 6e 3b 69 66 28 6f 26 26 22 22 2b 74 21 3d 22 6e 75 6c 6c 22 26 26 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 29 72 65 74 75 72 6e 20 65 3d 6b 5b 62 5d 26 26 6b 5b 62 5d 2e 72 65 6d 6f 74 65 48 6f 73 74 2c 4f 28 62 2c 22 43 68 65 63 6b 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 66 72 6f 6d 3a 20 22 2b 65 29 2c 74 3d 3d 3d 65 3b 76 61 72 20 65 2c 6e 3d 30 2c 69 3d 21 31 3b 66 6f 72 28 4f 28 62 2c 22 43 68 65 63 6b 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 66 72 6f 6d 20 61 6c 6c 6f 77 65 64 20 6c 69 73 74 20 6f 66 20 Data Ascii: }function o(){var t=e.origin,o=k[b]&&k[b].checkOrigin;if(o&&""+t!="null"&&!function(){if(o.constructor!==Array)return e=k[b]&&k[b].remoteHost,O(b,"Checking connection is from: "+e),t===e;var e,n=0,i=!1;for(O(b,"Checking connection is from allowed list of
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 69 65 6e 74 52 65 63 74 28 29 3b 72 65 74 75 72 6e 20 57 28 62 29 2c 7b 78 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4e 75 6d 62 65 72 28 65 2e 6c 65 66 74 29 2b 4e 75 6d 62 65 72 28 4d 2e 78 29 29 2c 79 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4e 75 6d 62 65 72 28 65 2e 74 6f 70 29 2b 4e 75 6d 62 65 72 28 4d 2e 79 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 6e 3d 65 3f 72 28 77 2e 69 66 72 61 6d 65 29 3a 7b 78 3a 30 2c 79 3a 30 7d 2c 69 3d 7b 78 3a 4e 75 6d 62 65 72 28 77 2e 77 69 64 74 68 29 2b 6e 2e 78 2c 79 3a 4e 75 6d 62 65 72 28 77 2e 68 65 69 67 68 74 29 2b 6e 2e 79 7d 3b 4f 28 62 2c 22 52 65 70 6f 73 69 74 69 6f 6e 20 72 65 71 75 65 73 74 65 64 20 66 72 6f 6d 20 69 46 72 61 6d 65 20 28 6f 66 66 73 65 74 20 78 3a 22 2b 6e 2e 78 2b 22 20 Data Ascii: ientRect();return W(b),{x:Math.floor(Number(e.left)+Number(M.x)),y:Math.floor(Number(e.top)+Number(M.y))}}function d(e){var n=e?r(w.iframe):{x:0,y:0},i={x:Number(w.width)+n.x,y:Number(w.height)+n.y};O(b,"Reposition requested from iFrame (offset x:"+n.x+"
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 66 72 61 6d 65 3a 77 2e 69 66 72 61 6d 65 2c 6d 65 73 73 61 67 65 3a 4a 53 4f 4e 2e 70 61 72 73 65 28 6e 29 7d 29 2c 4f 28 62 2c 22 2d 2d 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 6f 75 73 65 65 6e 74 65 72 22 3a 66 28 22 6f 6e 4d 6f 75 73 65 45 6e 74 65 72 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 6f 75 73 65 6c 65 61 76 65 22 3a 66 28 22 6f 6e 4d 6f 75 73 65 4c 65 61 76 65 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 75 74 6f 52 65 73 69 7a 65 22 3a 6b 5b 62 5d 2e 61 75 74 6f 52 65 73 69 7a 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 28 39 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 63 72 6f 6c 6c 54 6f 22 3a 64 28 21 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 63 72 6f 6c 6c 54 6f 4f 66 66 73 65 74 22 3a 64 28 21 30 29 3b 62 72 65 61 6b 3b 63 61 Data Ascii: frame:w.iframe,message:JSON.parse(n)}),O(b,"--");break;case"mouseenter":f("onMouseEnter");break;case"mouseleave":f("onMouseLeave");break;case"autoResize":k[b].autoResize=JSON.parse(a(9));break;case"scrollTo":d(!1);break;case"scrollToOffset":d(!0);break;ca
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 20 28 22 2b 77 2e 69 64 2b 22 29 20 6e 6f 74 20 66 6f 75 6e 64 22 29 2c 67 3d 21 31 29 2c 67 26 26 6f 28 29 26 26 6d 28 29 29 29 3a 45 28 62 2c 22 49 67 6e 6f 72 65 64 3a 20 22 2b 70 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 6e 2c 69 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 2c 6f 3d 6e 75 6c 6c 3b 69 66 28 6b 5b 65 5d 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 28 74 3d 6b 5b 65 5d 5b 6e 5d 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 6e 2b 22 20 6f 6e 20 69 46 72 61 6d 65 5b 22 2b 65 2b 22 5d 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 6f 3d 74 28 69 29 7d 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 65 3d 65 2e 69 64 3b 64 65 6c 65 74 65 20 6b 5b 65 5d 7d 66 75 6e 63 Data Ascii: ("+w.id+") not found"),g=!1),g&&o()&&m())):E(b,"Ignored: "+p)}function T(e,n,i){var t=null,o=null;if(k[e]){if("function"!=typeof(t=k[e][n]))throw new TypeError(n+" on iFrame["+e+"] is not a function");o=t(i)}return o}function g(e){e=e.id;delete k[e]}func
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 65 61 74 69 6e 67 20 76 69 73 69 62 69 6c 69 74 79 20 6c 69 73 74 65 6e 65 72 22 29 2c 65 3d 6d 28 29 29 26 26 28 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 62 6f 64 79 22 29 2c 6e 65 77 20 65 28 74 29 2e 6f 62 73 65 72 76 65 28 6e 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 21 30 2c 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 3a 21 31 2c 63 68 61 72 61 63 74 65 72 44 61 74 61 3a 21 30 2c 63 68 61 72 61 63 74 65 72 44 61 74 61 4f 6c 64 56 61 6c 75 65 3a 21 31 2c 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 6e 3b 6e 3d 65 2c 6f 2e 69 64 3f 28 6f 2e 69 66 72 61 6d 65 2e 73 74 79 6c 65 5b 6e 5d 3d 6f 5b 6e 5d 2b 22 70 78 22 2c 4f 28 Data Ascii: eating visibility listener"),e=m())&&(n=document.querySelector("body"),new e(t).observe(n,{attributes:!0,attributeOldValue:!1,characterData:!0,characterDataOldValue:!1,childList:!0,subtree:!0}))}function e(e){var n;n=e,o.id?(o.iframe.style[n]=o[n]+"px",O(
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 22 2b 6b 5b 65 5d 2e 61 75 74 6f 52 65 73 69 7a 65 2b 22 3a 22 2b 6b 5b 65 5d 2e 62 6f 64 79 4d 61 72 67 69 6e 2b 22 3a 22 2b 6b 5b 65 5d 2e 68 65 69 67 68 74 43 61 6c 63 75 6c 61 74 69 6f 6e 4d 65 74 68 6f 64 2b 22 3a 22 2b 6b 5b 65 5d 2e 62 6f 64 79 42 61 63 6b 67 72 6f 75 6e 64 2b 22 3a 22 2b 6b 5b 65 5d 2e 62 6f 64 79 50 61 64 64 69 6e 67 2b 22 3a 22 2b 6b 5b 65 5d 2e 74 6f 6c 65 72 61 6e 63 65 2b 22 3a 22 2b 6b 5b 65 5d 2e 69 6e 50 61 67 65 4c 69 6e 6b 73 2b 22 3a 22 2b 6b 5b 65 5d 2e 72 65 73 69 7a 65 46 72 6f 6d 2b 22 3a 22 2b 6b 5b 65 5d 2e 77 69 64 74 68 43 61 6c 63 75 6c 61 74 69 6f 6e 4d 65 74 68 6f 64 2b 22 3a 22 2b 6b 5b 65 5d 2e 6d 6f 75 73 65 45 76 65 6e 74 73 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 65 Data Ascii: "+k[e].autoResize+":"+k[e].bodyMargin+":"+k[e].heightCalculationMethod+":"+k[e].bodyBackground+":"+k[e].bodyPadding+":"+k[e].tolerance+":"+k[e].inPageLinks+":"+k[e].resizeFrom+":"+k[e].widthCalculationMethod+":"+k[e].mouseEvents}function s(t,i){function e
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 6c 65 3a 5c 2f 5c 2f 29 2f 29 3f 22 2a 22 3a 65 29 7d 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 69 6c 64 20 69 64 20 66 6f 72 20 69 46 72 61 6d 65 2e 20 45 78 70 65 63 74 65 64 20 53 74 72 69 6e 67 22 29 3b 76 61 72 20 6e 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 65 26 26 28 74 2e 69 64 3d 28 6e 3d 69 26 26 69 2e 69 64 7c 7c 6c 2e 69 64 2b 63 2b 2b 2c 6e 75 6c 6c 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6e 29 26 26 28 6e 2b 3d 63 2b 2b 29 2c 65 3d 6e 29 2c 75 3d 28 69 7c 7c 7b 7d 29 2e 6c 6f 67 2c 4f 28 65 2c 22 41 64 64 65 64 20 6d 69 73 73 69 6e 67 20 69 66 72 61 6d 65 Data Ascii: le:\/\/)/)?"*":e)}var r=function(e){if("string"!=typeof e)throw new TypeError("Invaild id for iFrame. Expected String");var n;return""===e&&(t.id=(n=i&&i.id\|\|l.id+c++,null!==document.getElementById(n)&&(n+=c++),e=n),u=(i\|\|{}).log,O(e,"Added missing iframe
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 6e 22 2b 65 5d 3e 6b 5b 72 5d 5b 22 6d 61 78 22 2b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 56 61 6c 75 65 20 66 6f 72 20 6d 69 6e 22 2b 65 2b 22 20 63 61 6e 20 6e 6f 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 6d 61 78 22 2b 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 69 26 26 28 69 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 6e 75 6c 6c 2c 65 28 29 7d 2c 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 28 4f 28 22 64 6f 63 75 6d 65 6e 74 22 2c 22 54 72 69 67 67 65 72 20 65 76 65 6e 74 3a 20 56 69 73 69 62 69 6c 69 74 79 20 63 68 61 6e 67 65 22 29 Data Ascii: n"+e]>k[r]["max"+e])throw new Error("Value for min"+e+" can not be greater than max"+e)}}function h(e,n){null===i&&(i=setTimeout(function(){i=null,e()},n))}function e(){"hidden"!==document.visibilityState&&(O("document","Trigger event: Visibility change")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.16	49934	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:36 UTC	891	OUT	GET /pfe/current/micro.tag.min.js?z=4662709&ymid=769067736944087664&var=5596087&sw=/sw-check-permissions/4662709&uhd=1 HTTP/1.1 Host: opmetapodor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
2024-01-10 21:52:36 UTC	749	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 23 Nov 2023 20:42:33 GMT Vary: Accept-Encoding ETag: W/"655fb939-697f" Access-Control-Allow-Credentials: true Cache-Control: max-age=86400 Pragma: no-cache CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gj7Hz79zege6s1ySatWgFK0XIo1llR1YMiNfIm4xJ5aesKQTuosa0UIIavQNfb9Jyj10983aGxWoah9%2FN4jmUqDJMEaCmaPPbQfU9aS5okuL6bbwSYOSqNra%2Ftr5ij4x7HM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825e4df8d426d-EWR alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:36 UTC	620	IN	Data Raw: 36 39 37 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 57 29 7b 28 28 29 3d 3e 7b 57 2e 57 3b 76 61 72 20 65 3d 57 2e 41 28 57 2e 6b 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 69 6b 5d 28 74 2c 57 2e 6d 6b 2c 57 2e 41 28 57 2e 4f 64 2c 21 57 2e 54 29 29 2c 74 5b 57 2e 7a 6b 5d 3d 74 5b 57 2e 77 6b 5d 3d 76 6f 69 64 20 57 2e 54 3b 63 6f 6e 73 74 20 72 3d 57 2e 6e 2c 6e 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 5b 57 2e 62 50 5d 5b 57 2e 69 50 5d 5b 57 2e 57 50 5d 5b 57 2e 54 64 5d 7c 7c 72 3b 5b 77 69 6e 64 6f 77 5b 74 5d 7c 7c 5b 5d 2c 6e 5d 5b 57 2e 69 78 5d 28 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 74 5b 57 2e 52 72 5d 28 65 29 3b 72 3e 2d 57 2e 6d 78 26 26 74 5b 57 2e 50 72 5d 28 72 2c 57 2e 6d 78 Data Ascii: 697f(function(W){(()=>{W.W;var e=W.A(W.k,(e,t)=>{Object[W.ik](t,W.mk,W.A(W.Od,!W.T)),t[W.zk]=t[W.wk]=void W.T;const r=W.n,n=[];function o(e){const t=window[W.bP][W.iP][W.WP][W.Td]\|\|r;[window[t]\|\|[],n][W.ix](t=>{const r=t[W.Rr](e);r>-W.mx&&t[W.Pr](r,W.mx
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 69 78 5d 28 6f 29 7d 7d 2c 57 2e 78 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 69 6b 5d 28 74 2c 57 2e 6d 6b 2c 57 2e 41 28 57 2e 4f 64 2c 21 57 2e 54 29 29 2c 74 5b 57 2e 45 5d 3d 76 6f 69 64 20 57 2e 54 3b 74 5b 57 2e 45 5d 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 6e 61 76 69 67 61 74 6f 72 5b 57 2e 6b 50 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 6e 65 77 20 52 65 67 45 78 70 28 57 2e 43 74 2c 57 2e 6c 78 29 29 5b 57 2e 75 64 5d 28 65 29 7d 7d 2c 57 2e 64 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 69 6b 5d 28 74 2c 57 2e 6d 6b 2c 57 2e 41 28 57 2e 4f 64 2c 21 57 2e 54 29 29 2c 74 5b 57 2e 71 5d 3d 76 6f 69 64 20 57 2e 54 3b 74 5b 57 2e 71 5d 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 5b 57 2e 53 72 5d 5b 57 2e 79 Data Ascii: ix](o)}},W.x,(e,t)=>{Object[W.ik](t,W.mk,W.A(W.Od,!W.T)),t[W.E]=void W.T;t[W.E]=()=>{const e=navigator[W.kP];return new RegExp(new RegExp(W.Ct,W.lx))[W.ud](e)}},W.d,(e,t)=>{Object[W.ik](t,W.mk,W.A(W.Od,!W.T)),t[W.q]=void W.T;t[W.q]=e=>{const t=e[W.Sr][W.y
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 5b 57 2e 75 74 5d 28 57 2e 4d 74 2c 65 29 2c 21 57 2e 6d 78 7d 7d 74 5b 57 2e 63 6b 5d 3d 69 2c 74 5b 57 2e 4e 6b 5d 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 3d 57 2e 6c 78 29 7b 63 6f 6e 73 74 20 74 3d 6e 61 76 69 67 61 74 6f 72 5b 57 2e 47 64 5d 3b 69 66 28 74 29 7b 63 6f 6e 73 74 20 72 3d 61 77 61 69 74 20 74 5b 57 2e 6a 72 5d 28 65 29 3b 69 66 28 72 29 74 72 79 7b 63 6f 6e 73 74 20 65 3d 61 77 61 69 74 20 72 5b 57 2e 75 43 5d 5b 57 2e 77 43 5d 28 29 3b 72 65 74 75 72 6e 21 21 65 26 26 61 77 61 69 74 20 69 28 65 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 57 2e 6d 78 7d 7d 72 65 74 75 72 6e 21 57 2e 6d 78 7d 7d Data Ascii: return Boolean(t)}catch(e){return console[W.ut](W.Mt,e),!W.mx}}t[W.ck]=i,t[W.Nk]=async function(e=W.lx){const t=navigator[W.Gd];if(t){const r=await t[W.jr](e);if(r)try{const e=await r[W.uC][W.wC]();return!!e&&await i(e)}catch(e){return!W.mx}}return!W.mx}}
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 72 29 29 3a 57 2e 54 3b 64 6f 63 75 6d 65 6e 74 5b 57 2e 73 72 5d 3d 60 24 7b 65 7d 3d 24 7b 74 7d 3b 20 65 78 70 69 72 65 73 3d 24 7b 53 74 72 69 6e 67 28 6f 29 7d 3b 60 7d 29 7d 7d 2c 57 2e 43 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 69 6b 5d 28 74 2c 57 2e 6d 6b 2c 57 2e 41 28 57 2e 4f 64 2c 21 57 2e 54 29 29 2c 74 5b 57 2e 4c 6b 5d 3d 76 6f 69 64 20 57 2e 54 2c 74 5b 57 2e 4c 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 74 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 65 29 29 7d 7d 2c 57 2e 6f 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 69 6b 5d 28 74 2c 57 2e 6d 6b 2c 57 2e 41 28 57 2e 4f 64 2c 21 57 2e 54 29 29 2c 74 5b 57 2e 55 5d 3d 76 6f 69 64 20 57 2e 54 3b 74 5b 57 Data Ascii: r)):W.T;document[W.sr]=`${e}=${t}; expires=${String(o)};`})}},W.C,(e,t)=>{Object[W.ik](t,W.mk,W.A(W.Od,!W.T)),t[W.Lk]=void W.T,t[W.Lk]=function(e){return new Promise(t=>setTimeout(t,e))}},W.o,(e,t)=>{Object[W.ik](t,W.mk,W.A(W.Od,!W.T)),t[W.U]=void W.T;t[W
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 28 57 2e 54 2c 6f 5b 57 2e 4d 6b 5d 29 28 29 5b 57 2e 48 6b 5d 28 57 2e 79 64 29 5b 57 2e 66 64 5d 2c 57 2e 74 6b 2c 28 29 3d 3e 28 57 2e 54 2c 6f 5b 57 2e 4d 6b 5d 29 28 29 5b 57 2e 49 6b 5d 28 57 2e 79 64 2c 44 61 74 65 5b 57 2e 74 50 5d 28 29 2c 57 2e 67 64 29 2c 57 2e 72 6b 2c 28 29 3d 3e 28 57 2e 54 2c 6f 5b 57 2e 4d 6b 5d 29 28 29 5b 57 2e 49 6b 5d 28 57 2e 4b 64 2c 44 61 74 65 5b 57 2e 74 50 5d 28 29 2c 57 2e 6d 78 29 2c 57 2e 43 6b 2c 28 29 3d 3e 76 6f 69 64 20 57 2e 54 21 3d 3d 28 57 2e 54 2c 6f 5b 57 2e 4d 6b 5d 29 28 29 5b 57 2e 48 6b 5d 28 57 2e 4b 64 29 5b 57 2e 66 64 5d 29 7d 2c 57 2e 5a 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 69 6b 5d 28 74 2c 57 2e 6d 6b 2c 57 2e 41 28 57 2e 4f 64 2c 21 57 2e 54 29 29 2c 74 5b 57 2e 71 6b 5d Data Ascii: (W.T,o[W.Mk])()[W.Hk](W.yd)[W.fd],W.tk,()=>(W.T,o[W.Mk])()[W.Ik](W.yd,Date[W.tP](),W.gd),W.rk,()=>(W.T,o[W.Mk])()[W.Ik](W.Kd,Date[W.tP](),W.mx),W.Ck,()=>void W.T!==(W.T,o[W.Mk])()[W.Hk](W.Kd)[W.fd])},W.Z,(e,t)=>{Object[W.ik](t,W.mk,W.A(W.Od,!W.T)),t[W.qk]
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 78 3a 4e 75 6d 62 65 72 28 65 29 2b 57 2e 6d 78 3b 6f 5b 57 2e 41 72 5d 28 74 2c 72 29 5b 57 2e 5a 43 5d 3d 28 29 3d 3e 7b 6e 28 57 2e 41 28 57 2e 7a 78 2c 72 2c 57 2e 56 43 2c 65 29 29 7d 7d 7d 29 2c 57 2e 44 72 2c 61 73 79 6e 63 20 65 3d 3e 61 77 61 69 74 20 72 28 74 3d 3e 74 5b 57 2e 44 72 5d 28 65 29 29 2c 57 2e 41 72 2c 61 73 79 6e 63 20 65 3d 3e 61 77 61 69 74 20 72 28 74 3d 3e 74 5b 57 2e 41 72 5d 28 65 29 29 2c 57 2e 48 6b 2c 61 73 79 6e 63 20 65 3d 3e 61 77 61 69 74 20 72 28 74 3d 3e 74 5b 57 2e 48 6b 5d 28 65 29 2c 57 2e 67 43 29 2c 57 2e 49 6b 2c 61 73 79 6e 63 28 65 2c 74 29 3d 3e 61 77 61 69 74 20 72 28 72 3d 3e 72 5b 57 2e 41 72 5d 28 74 2c 65 29 29 2c 57 2e 54 72 2c 61 73 79 6e 63 28 29 3d 3e 61 77 61 69 74 20 72 28 65 3d 3e 65 5b 57 2e 54 Data Ascii: x:Number(e)+W.mx;o[W.Ar](t,r)[W.ZC]=()=>{n(W.A(W.zx,r,W.VC,e))}}}),W.Dr,async e=>await r(t=>t[W.Dr](e)),W.Ar,async e=>await r(t=>t[W.Ar](e)),W.Hk,async e=>await r(t=>t[W.Hk](e),W.gC),W.Ik,async(e,t)=>await r(r=>r[W.Ar](t,e)),W.Tr,async()=>await r(e=>e[W.T
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 74 2c 72 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 57 2e 59 7d 7d 2c 57 2e 49 64 2c 61 73 79 6e 63 20 74 3d 3e 7b 74 72 79 7b 63 6f 6e 73 74 20 72 3d 61 77 61 69 74 28 57 2e 54 2c 6e 5b 57 2e 42 5d 29 28 65 29 3b 72 65 74 75 72 6e 20 61 77 61 69 74 20 72 5b 57 2e 49 64 5d 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 57 2e 6d 78 7d 7d 29 7d 7d 2c 57 2e 48 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 69 6b 5d 28 74 2c 57 2e 6d 6b 2c 57 2e 41 28 57 2e 4f 64 2c 21 57 2e 54 29 29 2c 74 5b 57 2e 51 6b 5d 3d 76 6f 69 64 20 57 2e 54 2c 74 5b 57 2e 51 6b 5d 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 5b 57 2e 6e 74 2c 57 2e 45 74 2c 57 2e 71 74 2c 57 2e 62 74 2c 57 2e 55 74 5d 3b 72 65 74 75 72 Data Ascii: t,r)}catch(e){return W.Y}},W.Id,async t=>{try{const r=await(W.T,n[W.B])(e);return await r[W.Id](t)}catch(e){return!W.mx}})}},W.H,(e,t)=>{Object[W.ik](t,W.mk,W.A(W.Od,!W.T)),t[W.Qk]=void W.T,t[W.Qk]=async function(){const e=[W.nt,W.Et,W.qt,W.bt,W.Ut];retur
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 55 50 5d 28 72 29 2c 69 3d 57 2e 72 50 3d 3d 3d 74 3f 57 2e 41 28 57 2e 5a 72 2c 57 2e 79 72 29 3a 57 2e 41 28 29 3b 6e 26 26 28 69 5b 57 2e 42 50 5d 3d 6e 29 3b 63 6f 6e 73 74 20 61 3d 57 2e 41 28 57 2e 6b 78 2c 6f 2c 57 2e 49 74 2c 74 2c 57 2e 4a 74 2c 57 2e 42 74 2c 57 2e 53 74 2c 69 29 2c 73 3d 61 77 61 69 74 20 66 65 74 63 68 28 65 2c 61 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 73 5b 57 2e 67 72 5d 28 29 7d 63 61 74 63 68 28 72 29 7b 63 6f 6e 73 74 20 6e 3d 72 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 24 7b 74 7d 3a 20 24 7b 65 7d 3b 20 62 6f 64 79 3a 20 24 7b 53 74 72 69 6e 67 28 6f 29 7d 3b 20 68 74 74 70 2d 73 74 61 74 75 73 3a 20 24 7b 73 5b 57 2e 74 43 5d 7d 3b 20 74 79 70 65 64 45 72 72 6f 72 4d 65 73 73 61 67 65 3a 20 24 7b 57 2e 59 Data Ascii: UP](r),i=W.rP===t?W.A(W.Zr,W.yr):W.A();n&&(i[W.BP]=n);const a=W.A(W.kx,o,W.It,t,W.Jt,W.Bt,W.St,i),s=await fetch(e,a);try{return s[W.gr]()}catch(r){const n=r;throw new Error(`${t}: ${e}; body: ${String(o)}; http-status: ${s[W.tC]}; typedErrorMessage: ${W.Y
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 24 7b 63 5b 57 2e 71 64 5d 7d 2c 20 66 61 6c 6c 62 61 63 6b 3a 20 24 7b 53 74 72 69 6e 67 28 73 29 7d 60 2c 57 2e 58 50 2c 53 74 72 69 6e 67 28 63 5b 57 2e 62 64 5d 29 2c 57 2e 59 50 2c 64 2c 57 2e 56 78 2c 53 74 72 69 6e 67 28 6c 29 2c 57 2e 6a 50 2c 61 5b 57 2e 6a 50 5d 2c 57 2e 70 50 2c 70 29 2c 57 2e 59 3d 3d 75 3f 76 6f 69 64 20 57 2e 54 3a 75 5b 57 2e 73 50 5d 29 2c 21 57 2e 54 7d 74 5b 57 2e 76 5d 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 3d 6f 5b 57 2e 43 78 5d 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 77 61 69 74 20 61 28 53 74 72 69 6e 67 28 6e 29 2c 65 2c 74 2c 72 2c 21 57 2e 6d 78 29 7d 63 61 74 63 68 28 69 29 7b 63 6f 6e 73 6f 6c 65 5b 57 2e 75 74 5d 28 69 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 77 61 69 74 20 61 Data Ascii: ${c[W.qd]}, fallback: ${String(s)}`,W.XP,String(c[W.bd]),W.YP,d,W.Vx,String(l),W.jP,a[W.jP],W.pP,p),W.Y==u?void W.T:u[W.sP]),!W.T}t[W.v]=async function(e,t,r,n=o[W.Cx]){try{return await a(String(n),e,t,r,!W.mx)}catch(i){console[W.ut](i);try{return await a
2024-01-10 21:52:36 UTC	1369	IN	Data Raw: 57 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 6f 2e 57 49 48 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 6f 2e 43 57 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 6f 2e 57 46 43 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 66 72 61 6d 65 73 2e 6c 65 6e 67 74 68 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 6f 2e 50 4c 3d 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 Data Ascii: W=window.innerWidth}catch(e){}try{o.WIH=window.innerHeight}catch(e){}try{o.CW=document.documentElement.clientWidth}catch(e){}try{o.WFC=null===(e=window.top)\|\|void 0===e?void 0:e.frames.length}catch(e){}try{o.PL='undefined'!=typeof document&&document.locat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.16	49937	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:36 UTC	873	OUT	GET /19/4662728/?abt_opts=1&var=5596087&var3=769067736944087664&ymid=&rhd=1&os=windows&os_version=10.0.0 HTTP/1.1 Host: opmetapodor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
2024-01-10 21:52:37 UTC	1283	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Trace-Id: df2e55c3b9803ecbc6e7fee22ceaf115 Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=d36449c3fc5d2c86d4a195aa43f059a6; expires=Thu, 09 Jan 2025 21:52:37 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923556; expires=Thu, 09 Jan 2025 21:52:37 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC
2024-01-10 21:52:37 UTC	411	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 50 41 62 4d 35 62 25 32 46 6c 74 75 51 77 57 49 47 25 32 46 78 77 52 75 45 72 38 62 44 37 34 4b 72 76 32 6d 52 69 37 39 25 32 46 74 55 6f 72 51 33 4e 4e 4e 51 49 70 4a 6c 4f 64 39 4d 45 77 55 6c 4e 49 50 72 25 32 46 53 71 53 62 39 4e 33 79 30 73 51 41 56 58 61 46 4f 6d 4e 35 72 73 6a 4d 57 74 51 64 4e 25 32 42 63 41 6a 34 6b 69 5a 68 49 78 39 53 4e 58 31 6b 62 42 68 4a 49 61 54 53 42 72 61 44 7a 53 6e 6b 6f 56 4c 38 51 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PAbM5b%2FltuQwWIG%2FxwRuEr8bD74Krv2mRi79%2FtUorQ3NNNQIpJlOd9MEwUlNIPr%2FSqSb9N3y0sQAVXaFOmN5rsjMWtQdN%2BcAj4kiZhIx9SNX1kbBhJIaTSBraDzSnkoVL8Q%3D"}],"group":"cf-nel","max_age":60
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 63 35 37 0d 0a 7b 22 75 72 6c 22 3a 22 2f 2f 6f 70 6d 65 74 61 70 6f 64 6f 72 2e 63 6f 6d 2f 72 68 64 3f 72 62 3d 52 64 62 36 77 5a 45 4f 32 39 7a 49 35 4a 74 57 62 54 67 42 4d 42 4d 46 4b 33 48 71 2d 4d 45 53 63 4b 50 38 65 74 6f 55 58 57 74 33 6d 64 57 53 33 77 57 73 54 73 50 33 6b 53 71 41 57 70 62 4e 46 4e 31 64 43 6e 36 43 59 72 75 4d 64 73 48 69 50 73 48 70 4e 72 76 77 6e 62 76 68 39 36 74 48 6d 59 64 42 69 55 34 36 52 4f 44 65 57 68 6a 58 59 78 52 63 32 6e 55 44 73 43 64 43 4f 31 49 59 70 67 63 2d 57 64 69 46 61 5a 49 51 76 41 44 7a 6f 4c 64 74 36 36 30 4b 46 64 33 43 51 6e 53 56 30 4a 65 66 59 43 6d 49 64 51 72 33 48 6b 64 79 57 55 4d 63 72 37 69 78 55 5a 30 4e 41 39 54 35 6b 39 50 57 64 35 51 63 50 7a 48 59 79 58 58 32 4b 4c 55 4f 77 77 34 45 5f Data Ascii: c57{"url":"//opmetapodor.com/rhd?rb=Rdb6wZEO29zI5JtWbTgBMBMFK3Hq-MEScKP8etoUXWt3mdWS3wWsTsP3kSqAWpbNFN1dCn6CYruMdsHiPsHpNrvwnbvh96tHmYdBiU46RODeWhjXYxRc2nUDsCdCO1IYpgc-WdiFaZIQvADzoLdt660KFd3CQnSV0JefYCmIdQr3HkdyWUMcr7ixUZ0NA9T5k9PWd5QcPzHYyXX2KLUOww4E_
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 73 73 69 6f 6e 43 6c 69 63 6b 73 22 3a 30 2c 22 61 64 64 4f 76 65 72 6c 61 79 22 3a 66 61 6c 73 65 2c 22 73 6d 61 72 74 4f 76 65 72 6c 61 79 22 3a 74 72 75 65 2c 22 63 6c 69 63 6b 41 6e 79 77 68 65 72 65 22 3a 74 72 75 65 2c 22 69 4f 53 43 6c 69 63 6b 46 69 78 22 3a 74 72 75 65 2c 22 61 6e 64 72 6f 69 64 43 6c 69 63 6b 46 69 78 22 3a 66 61 6c 73 65 2c 22 6e 6f 53 63 72 6f 6c 6c 50 6c 65 61 73 65 22 3a 66 61 6c 73 65 2c 22 74 72 79 54 6f 45 73 63 61 70 65 49 66 72 61 6d 65 22 3a 66 61 6c 73 65 2c 22 53 53 22 3a 74 72 75 65 2c 22 6c 69 6d 4c 6f 22 3a 66 61 6c 73 65 2c 22 72 65 66 72 65 73 68 50 61 67 65 4f 6e 44 6f 6d 61 69 6e 53 65 72 69 65 73 46 6f 72 4c 69 6d 4c 6f 4f 6e 50 61 67 65 52 65 66 72 65 73 68 22 3a 66 61 6c 73 65 2c 22 61 67 67 72 65 73 73 69 Data Ascii: ssionClicks":0,"addOverlay":false,"smartOverlay":true,"clickAnywhere":true,"iOSClickFix":true,"androidClickFix":false,"noScrollPlease":false,"tryToEscapeIframe":false,"SS":true,"limLo":false,"refreshPageOnDomainSeriesForLimLoOnPageRefresh":false,"aggressi
2024-01-10 21:52:37 UTC	428	IN	Data Raw: 74 22 3a 66 61 6c 73 65 2c 22 70 6f 70 75 6e 64 65 72 56 69 65 77 44 65 61 64 6c 69 6e 65 54 69 6d 65 6f 75 74 22 3a 30 2c 22 70 6f 70 75 6e 64 65 72 56 69 65 77 44 65 61 64 6c 69 6e 65 43 6f 75 6e 74 22 3a 30 2c 22 75 73 65 72 47 65 6f 22 3a 22 75 73 22 2c 22 67 6d 74 4f 66 66 73 65 74 4d 69 6e 75 74 65 22 3a 2d 33 30 30 2c 22 69 73 50 72 6f 78 79 22 3a 74 72 75 65 2c 22 69 73 47 69 64 72 61 74 6f 72 43 6f 6f 6b 69 65 53 79 6e 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 44 65 76 50 6c 65 61 73 65 22 3a 66 61 6c 73 65 2c 22 6f 6e 63 6c 69 63 6b 46 69 72 73 74 22 3a 74 72 75 65 2c 22 72 65 6d 6f 76 65 53 63 72 69 70 74 22 3a 66 61 6c 73 65 2c 22 77 65 62 76 69 65 77 52 65 64 69 72 65 63 74 55 72 6c 22 3a 22 61 6b 2e 6a 6f 63 61 75 7a 65 65 2e Data Ascii: t":false,"popunderViewDeadlineTimeout":0,"popunderViewDeadlineCount":0,"userGeo":"us","gmtOffsetMinute":-300,"isProxy":true,"isGidratorCookieSyncEnabled":false,"noDevPlease":false,"onclickFirst":true,"removeScript":false,"webviewRedirectUrl":"ak.jocauzee.
2024-01-10 21:52:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.16	49940	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	997	OUT	POST /?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}&mprtr=1&os_version=10.0.0 HTTP/1.1 Host: opmetapodor.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://opmetapodor.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
2024-01-10 21:52:37 UTC	867	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/7.4.33 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UwDf2jiQr5xPdMFrM7AV1cEl4Ywo9b2cHi8eTGC7vASrdMRUoszrlPQvE%2F8Lqcy6RBXMEpndK2IzZLfShdc6Sha2AlXJL32ZyccNctOfiIRzFn4wEoGT22JrhCupHwoIFGo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825e89d74179d-EWR alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:37 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-01-10 21:52:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.16	49942	104.21.76.46	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	520	OUT	GET /images/spinning-wheel.png HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga=GA1.1.20077430.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923555.0.0.0
2024-01-10 21:52:37 UTC	729	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: image/png Content-Length: 1022 Connection: close Last-Modified: Fri, 27 Oct 2023 23:44:28 GMT ETag: "653c4b5c-3fe" Expires: Wed, 10 Jan 2024 21:53:36 GMT Cache-Control: max-age=14400 X-Cache: HIT CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hLJBoENJvFwn2VHC4GXl5YeLVUYInWny7lM58w0dTOPs2Jg8z2LRPlY38uEZ%2BV9EmRa01sUk6Fef0H4h%2FCqn%2FDFxQzwUG2VtKj634Po6oVuxnOLdNyqPEmElWcoc66yBDeug"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825e8bd648212-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:37 UTC	640	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 01 56 50 4c 54 45 00 00 00 00 88 ce 00 86 cf 00 86 ce 00 86 cc 00 92 db 00 8b d1 00 99 cc 00 87 cf 00 87 cf 00 88 cf 00 88 d0 00 84 d3 00 87 cf 00 88 cf 00 86 ce 00 87 ce 00 87 cf 00 87 d0 00 88 cf 00 88 d1 00 87 d1 00 89 cf 00 86 cf 00 87 cf 00 88 cf 00 86 d0 00 88 d0 00 87 cd 00 87 cf 00 86 d0 00 88 d0 00 88 cf 00 86 cf 00 87 d0 00 87 ce 00 86 d0 00 87 cf 00 88 cc 00 87 cf 00 80 d5 00 87 cf 00 88 ce 00 8a cf 00 88 cf 00 85 d0 00 87 d0 00 87 cf 00 86 d2 00 87 ce 00 87 cf 00 Data Ascii: PNGIHDR(-SgAMAa cHRMz&u0`:pQ<VPLTE
2024-01-10 21:52:37 UTC	382	IN	Data Raw: 00 44 c7 b2 26 58 c8 06 88 a2 91 62 50 b2 4a 74 15 94 c4 12 10 0b 01 b1 57 c0 5e b0 0b fe ff 49 16 7c a7 99 77 7b 40 9b 9e de be 7e 80 0c a0 8b 24 fb 06 87 86 47 fc 8a 8f 4a 9d af 06 82 21 6d 74 2c a0 21 1c 16 66 7c 42 57 27 11 89 c6 68 7c ca 48 00 d3 f2 8c 9a 04 4c 02 04 d9 ec 5c 0a 86 35 bf c0 17 97 d2 e9 cc 72 6c 25 cb 6d 38 ab 6b 16 5b ff 6d b3 c1 5d 6a c9 c8 e5 37 19 2b 08 51 20 e0 5b 36 b6 77 76 89 54 14 a2 28 21 e4 71 a4 4a e5 bd ca be 10 07 d4 d5 34 13 f0 0e 33 89 23 e7 f8 e4 f4 ec dc b9 b8 bc 02 58 35 59 01 6a 79 a0 ee d6 af 6f 80 db bb fb 87 47 3c 59 cf 2f 8a bf d1 69 79 8d 64 df 68 ee fd e3 13 66 37 8e 18 fa 57 34 fe ad fc 34 1b ff b9 68 35 b9 ed 79 7a 4b ec 3f 58 e8 2a 2f 7a c4 b2 47 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 Data Ascii: D&XbPJtW^I\|w{@~$GJ!mt,!f\|BW'h\|HL\5rl%m8k[m]j7+Q [6wvT(!qJ43#X5YjyoG<Y/iydhf7W44h5yzK?X*/zG%tEXtdate:create

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.16	49941	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	928	OUT	GET /zone?&pub=0&zone_id=4662709&is_mobile=false&domain=opmetapodor.com&var=5596087&ymid=769067736944087664&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=settings HTTP/1.1 Host: opmetapodor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
2024-01-10 21:52:37 UTC	872	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 796 Connection: close Vary: Accept-Encoding X-Trace-Id: 8c7bf441c6a9b6733c19180856085d36 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m5KwD6cSf1AJ2x5zhjtZeImDuHsCZOO72ETRSeOChYO%2FXIJVVivIcgugQxkcIPzhh%2FaQdoS5N5raSsUKSqgvmeqi7YeG398TBWzgnkHhdOyuEBspHz%2FbNChG7ljcQNqhXeI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825e89b2741e0-EWR alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:37 UTC	497	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 6a 73 54 61 67 50 61 72 61 6d 65 74 65 72 73 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 2c 22 75 6e 73 75 70 70 6f 72 74 65 64 22 3a 66 61 6c 73 65 2c 22 61 66 74 65 72 43 6c 6f 73 65 44 65 6c 61 79 22 3a 33 2c 22 61 6c 6c 6f 77 50 6f 70 75 70 49 66 48 74 74 70 73 44 65 6e 69 65 64 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 47 65 6f 22 3a 22 75 73 22 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 49 70 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 32 22 2c 22 64 69 73 61 62 6c 65 53 77 53 61 6e 69 74 79 22 3a 66 61 6c 73 65 2c 22 64 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 6f 75 74 65 65 74 75 2e 6e 65 74 22 2c 22 66 6f 72 63 65 53 74 61 6e 64 61 6c 6f 6e 65 22 3a 74 Data Ascii: {"status":true,"code":"jsTagParameters","message":"","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"102.165.48.42","disableSwSanity":false,"domain":"https://jouteetu.net","forceStandalone":t
2024-01-10 21:52:37 UTC	299	IN	Data Raw: 61 6d 65 22 3a 22 73 77 2e 6a 73 22 2c 22 73 77 53 61 6e 69 74 79 34 30 34 6f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 73 77 54 69 6d 65 6f 75 74 22 3a 30 2c 22 75 73 65 52 74 4d 61 72 6b 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 77 69 6c 64 63 61 72 64 44 6f 6d 61 69 6e 22 3a 22 62 6f 75 73 74 61 68 65 2e 63 6f 6d 22 2c 22 7a 6f 6e 65 49 64 22 3a 34 36 36 32 37 30 39 2c 22 73 6b 69 6e 55 72 6c 22 3a 22 2f 70 66 65 2f 63 75 72 72 65 6e 74 2f 64 65 66 61 75 6c 74 53 6b 69 6e 2e 6d 69 6e 2e 6a 73 22 2c 22 70 6f 70 75 70 55 72 6c 22 3a 22 2f 70 66 65 2f 63 75 72 72 65 6e 74 2f 70 6f 70 75 70 2e 68 74 6d 6c 22 2c 22 66 6c 61 67 73 22 3a 7b 22 61 70 70 4c 6f 63 6b 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 71 75 69 65 74 65 72 4e 6f 74 69 66 69 63 61 74 69 6f Data Ascii: ame":"sw.js","swSanity404only":false,"swTimeout":0,"useRtMarkUser":false,"wildcardDomain":"boustahe.com","zoneId":4662709,"skinUrl":"/pfe/current/defaultSkin.min.js","popupUrl":"/pfe/current/popup.html","flags":{"appLockDisabled":false,"quieterNotificatio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.16	49945	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	849	OUT	GET /favicon.ico HTTP/1.1 Host: opmetapodor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
2024-01-10 21:52:37 UTC	618	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 21:52:37 GMT Connection: close Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 7009 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yGCdKAvGNoR0CyzHlJgpsuWSaHpK9h56mxBMtKIyjMhwyEeUIK0YWcxu5OGIp7tk20ZAQUrkQBlpSecHwsJ7O4x9CmB4LLreR6Hv4ne3F%2FJaT2MsU7zmpdbbHFGz5zL5nSs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825e9db4242d8-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.16	49944	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	1857	OUT	GET /rhd?rb=Rdb6wZEO29zI5JtWbTgBMBMFK3Hq-MEScKP8etoUXWt3mdWS3wWsTsP3kSqAWpbNFN1dCn6CYruMdsHiPsHpNrvwnbvh96tHmYdBiU46RODeWhjXYxRc2nUDsCdCO1IYpgc-WdiFaZIQvADzoLdt660KFd3CQnSV0JefYCmIdQr3HkdyWUMcr7ixUZ0NA9T5k9PWd5QcPzHYyXX2KLUOww4E_aWbWCgrAxXAEpEN3forRgNuyof1bfhSMQleRGuBYG9QLY077R8fAu5eYgIHtOdcquR56sK3EVT5-79aIbw45uwbCLeC9OPBGoLFc7dcFsFGfPSX-l0xCXzweCDoLtxwODIyvjKVg6ztukTV4SYUIofL7Xx9BMyq2xl1YV7lnzjZrZ3jgq9uvQfg1ULmn2inVBeIy67aLeUagmvLmFdPH-JezSdIdJxPCMU_42FgBx9QhjpzIuYLBYhZ8Fn3f8HOl-Mmu5qPTg6zZrwo0y5baW7oPL4LK0aNsO2_TIRPp7Wn509MXkVkVw-zDyYc_TaJpReHMOigk7vDrg%3D%3D&request_ab2=0&zoneid=4662728&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1280&wih=907&wiw=1280&wfc=0&pl=https%3A%2F%2Fopmetapodor.com%2F%3Fs%3D769067736944087664%26ssk%3D98629cd0d428ca851e6b1debdd905e13%26svar%3D1704923555%26z%3D5596087%26pz%3D4662709%26tb%3D4662728%26l%3DWGYVPKNMPvY53zb%26btz%3D%7Bbtz%7D%26bto%3D%7Bbto%7D&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&var=5596087&var3=769067736944087664&ymid=&rhd=1&os=windows&os_version=10.0.0&m=link HTTP/1.1 Host: opmetapodor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556; prefetchAd_4662728=true
2024-01-10 21:52:37 UTC	1360	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Trace-Id: f8fb8e5de6fc54f1a7818c20033c97c2 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=d36449c3fc5d2c86d4a195aa43f059a6; expires=Thu, 09 Jan 2025 21:52:37 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923556; expires=Thu, 09 Jan 2025 21:52:37 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hBdPnGhyMPo13XJef99mFdcMchmG5GSQkk5d9Lel7QeNh4oPl1dM3nLgZPHv99idXthbvl1V7UOGQCFg7pp2DPz51E7S3G%2FYG97BvrP%2Ff%2BdlDsMTHPbBR9ErOvjCFOKPIKM%3D"}],"group":"cf-nel","max_age":604800}
2024-01-10 21:52:37 UTC	149	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 34 33 38 32 35 65 39 62 39 64 30 34 32 30 35 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 843825e9b9d04205-EWRalt-svc: h3=":443"; ma=86400
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 62 63 36 0d 0a 7b 22 62 61 6e 6e 65 72 49 64 22 3a 31 39 31 32 30 34 37 35 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 37 34 38 31 39 37 37 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 2e 72 6f 75 74 65 73 2e 6e 61 6d 65 2f 36 35 31 37 35 34 35 61 66 31 61 37 31 65 30 30 30 31 64 65 34 31 36 61 3f 73 75 62 31 3d 34 36 36 32 37 32 38 5c 75 30 30 32 36 73 75 62 32 3d 37 34 38 31 39 37 37 5c 75 30 30 32 36 73 75 62 33 3d 62 72 6f 61 64 62 61 6e 64 5c 75 30 30 32 36 73 75 62 34 3d 63 68 72 6f 6d 65 5c 75 30 30 32 36 73 75 62 35 3d 77 69 6e 64 6f 77 73 5c 75 30 30 32 36 73 75 62 36 3d 55 53 5c 75 30 30 32 36 73 75 62 37 3d 31 39 31 32 30 34 37 35 5c 75 30 30 32 36 73 75 62 38 3d 64 65 74 20 61 66 72 69 63 61 20 70 74 79 20 6c 74 64 5c Data Ascii: bc6{"bannerId":19120475,"campaignId":7481977,"dstUrl":"https://track.routes.name/6517545af1a71e0001de416a?sub1=4662728\u0026sub2=7481977\u0026sub3=broadband\u0026sub4=chrome\u0026sub5=windows\u0026sub6=US\u0026sub7=19120475\u0026sub8=det africa pty ltd\
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 6e 4a 79 31 69 2d 54 38 78 61 57 59 51 4c 76 4b 73 4d 43 30 4c 6e 79 7a 4f 73 49 45 48 69 4b 42 31 6b 41 43 34 78 4b 69 46 36 64 36 62 32 65 4c 51 74 4e 7a 2d 4d 63 44 74 4d 53 6d 72 45 70 31 68 6b 54 50 70 70 45 45 38 31 72 49 6d 56 46 52 55 43 70 47 6b 32 6c 43 51 61 6e 75 62 56 42 6b 45 44 47 4d 70 64 79 2d 68 6d 67 4e 6d 4f 4d 61 45 5f 71 39 46 45 4f 78 7a 41 5f 5a 51 54 5f 2d 59 71 75 78 4a 79 79 30 73 4d 44 4e 67 37 55 48 4c 6b 74 35 57 64 70 35 52 68 38 45 51 49 65 77 47 44 63 65 57 48 4c 58 6d 47 44 32 31 44 52 34 56 4b 5f 38 6f 39 4a 6e 6e 68 52 37 56 4a 65 78 76 70 5a 36 6f 32 38 39 59 36 55 52 43 47 6e 69 6b 70 41 58 35 6b 6a 58 74 36 68 32 6c 51 7a 44 59 58 30 63 30 4c 70 72 71 35 55 36 31 65 55 72 6f 73 4f 35 48 4f 59 57 39 5f 43 61 6a 4d 53 Data Ascii: nJy1i-T8xaWYQLvKsMC0LnyzOsIEHiKB1kAC4xKiF6d6b2eLQtNz-McDtMSmrEp1hkTPppEE81rImVFRUCpGk2lCQanubVBkEDGMpdy-hmgNmOMaE_q9FEOxzA_ZQT_-YquxJyy0sMDNg7UHLkt5Wdp5Rh8EQIewGDceWHLXmGD21DR4VK_8o9JnnhR7VJexvpZ6o289Y6URCGnikpAX5kjXt6h2lQzDYX0c0Lprq5U61eUrosO5HOYW9_CajMS
2024-01-10 21:52:37 UTC	283	IN	Data Raw: 33 6b 49 37 48 34 62 62 68 53 70 47 61 57 39 57 54 35 32 56 4f 53 32 6e 47 65 79 63 7a 59 4a 37 68 35 37 50 4f 66 79 34 6e 43 68 46 6e 57 54 61 73 47 67 65 6e 56 69 77 79 64 32 78 5f 44 37 4f 77 64 36 74 44 63 64 44 56 2d 6a 51 6c 71 66 48 5f 66 4e 30 52 4e 48 51 6a 58 79 46 76 69 36 46 58 6e 36 65 73 54 71 30 4e 50 34 5a 6c 70 55 73 58 53 34 4b 70 65 38 73 50 75 41 33 58 71 37 4d 37 30 43 38 69 51 6d 76 75 4f 4f 76 5f 62 30 73 35 44 56 6d 71 56 78 48 35 4d 48 43 63 4e 30 33 7a 6d 52 6d 64 61 54 66 68 73 68 6a 50 30 41 66 39 4f 6b 32 72 65 58 46 42 61 50 36 4f 61 5f 58 72 75 71 37 6f 78 32 71 6a 76 6d 6e 57 4a 6d 50 32 64 72 30 54 31 48 77 46 64 68 34 56 57 6c 56 39 46 50 37 37 33 75 51 43 33 76 50 34 70 34 63 6c 67 34 31 72 37 57 58 75 76 6f 75 63 4d 32 Data Ascii: 3kI7H4bbhSpGaW9WT52VOS2nGeyczYJ7h57POfy4nChFnWTasGgenViwyd2x_D7Owd6tDcdDV-jQlqfH_fN0RNHQjXyFvi6FXn6esTq0NP4ZlpUsXS4Kpe8sPuA3Xq7M70C8iQmvuOOv_b0s5DVmqVxH5MHCcN03zmRmdaTfhshjP0Af9Ok2reXFBaP6Oa_Xruq7ox2qjvmnWJmP2dr0T1HwFdh4VWlV9FP773uQC3vP4p4clg41r7WXuvoucM2
2024-01-10 21:52:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.16	49939	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	632	OUT	GET /gid.js?userId=d36449c3fc5d2c86d4a195aa43f059a6 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://opmetapodor.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:37 UTC	703	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: https://opmetapodor.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:37 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:37 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 65 66 65 38 33 62 31 31 33 30 31 30 34 65 66 65 61 30 64 34 37 35 65 32 63 62 37 35 34 36 34 66 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.16	49947	104.21.30.34	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	526	OUT	GET /tag.min.js HTTP/1.1 Host: arvigorothan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:37 UTC	1220	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Trace-Id: fb596165f8ae3b95d17cf04f66867a3b Cache-Control: max-age=86400 Last-Modified: Tue, 09 Jan 2024 16:29:54 GMT Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Expires: Thu, 11 Jan 2024 06:28:48 GMT Timing-Allow-Origin: * CF-Cache-Status: HIT Age: 55429 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BT4WknJ7vtO0XYm07JoYp4Di2pP9lSvMlLl4lF8vsvUNZWlaZpYfQOzaSTMn5qzG0MD%2B%2Fu%2F7yA2J0eFBRP9JJX1sxGEmPBDjXzHb6nvx2F%2BO%2FROLEmERVYjyUnvp7U%2FX2zb5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825ea7e72395c-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:37 UTC	149	IN	Data Raw: 37 61 65 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 71 77 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 71 77 2e 71 3b 76 61 72 20 65 3d 71 77 2e 4c 28 29 2c 74 3d 71 77 2e 48 79 5b 71 77 2e 4a 79 5d 28 71 77 2e 76 29 5b 71 77 2e 7a 65 5d 28 29 5b 71 77 2e 5a 5d 28 71 77 2e 76 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 74 3d 65 5b 71 77 2e 41 5d 3b 74 72 79 7b 65 5b 71 77 2e 71 74 5d 3d 74 5b 71 77 2e 71 74 5d 7d 63 61 74 63 68 28 72 29 Data Ascii: 7aed(function(qw){!function(){qw.q;var e=qw.L(),t=qw.Hy[qw.Jy](qw.v)[qw.ze]()[qw.Z](qw.v);function n(){var t=e[qw.A];try{e[qw.qt]=t[qw.qt]}catch(r)
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 7b 76 61 72 20 6e 3d 5b 5d 5b 71 77 2e 57 70 5d 5b 71 77 2e 4b 65 5d 28 74 5b 71 77 2e 75 61 5d 28 71 77 2e 6f 77 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 77 2e 63 65 3d 3d 3d 65 5b 71 77 2e 63 5d 7d 29 3b 65 5b 71 77 2e 71 74 5d 3d 6e 26 26 6e 5b 71 77 2e 41 79 5d 5b 71 77 2e 71 74 5d 7d 7d 71 77 2e 77 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 65 5b 71 77 2e 50 5d 3d 77 69 6e 64 6f 77 2c 76 6f 69 64 20 71 77 2e 6a 21 3d 3d 77 69 6e 64 6f 77 5b 71 77 2e 74 77 5d 26 26 28 65 5b 71 77 2e 4b 79 5d 3d 77 69 6e 64 6f 77 5b 71 77 2e 74 77 5d 29 29 2c 71 77 2e 77 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 28 65 5b 71 77 2e 41 5d 3d 64 6f 63 75 6d 65 6e 74 2c 65 5b 71 77 2e 47 65 5d 3d 64 6f 63 75 6d 65 6e 74 5b Data Ascii: {var n=[][qw.Wp][qw.Ke](t[qw.ua](qw.ow),function(e){return qw.ce===e[qw.c]});e[qw.qt]=n&&n[qw.Ay][qw.qt]}}qw.w!=typeof window&&(e[qw.P]=window,void qw.j!==window[qw.tw]&&(e[qw.Ky]=window[qw.tw])),qw.w!=typeof document&&(e[qw.A]=document,e[qw.Ge]=document[
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 65 5d 7d 29 5b 71 77 2e 4d 5d 28 6e 65 77 20 52 65 67 45 78 70 28 71 77 2e 79 74 2c 71 77 2e 62 65 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4d 61 74 68 5b 71 77 2e 77 79 5d 28 4d 61 74 68 5b 71 77 2e 72 69 5d 28 29 2a 74 5b 71 77 2e 64 77 5d 29 2c 6e 3d 74 5b 65 5d 2c 72 3d 4d 61 74 68 5b 71 77 2e 48 73 5d 28 71 77 2e 56 77 2c 6e 5b 71 77 2e 64 77 5d 29 2c 6f 3d 4d 61 74 68 5b 71 77 2e 77 79 5d 28 4d 61 74 68 5b 71 77 2e 72 69 5d 28 29 2a 72 29 3b 72 65 74 75 72 6e 20 71 77 2e 76 5b 71 77 2e 6d 77 5d 28 6e 29 5b 71 77 2e 6d 77 5d 28 6f 29 5b 71 77 2e 52 74 5d 28 2d 71 77 2e 6b 2a 6e 5b 71 77 2e 64 77 5d 29 7d 29 3b 72 65 74 75 72 6e 20 71 77 2e 45 74 5b 71 77 2e 6d 77 5d 28 72 2c 71 77 2e 44 77 29 5b 71 77 2e 6d 77 5d 28 6f 2c 71 77 2e 44 Data Ascii: e]})[qw.M](new RegExp(qw.yt,qw.be),function(){var e=Math[qw.wy](Math[qw.ri]()t[qw.dw]),n=t[e],r=Math[qw.Hs](qw.Vw,n[qw.dw]),o=Math[qw.wy](Math[qw.ri]()r);return qw.v[qw.mw](n)[qw.mw](o)[qw.Rt](-qw.k*n[qw.dw])});return qw.Et[qw.mw](r,qw.Dw)[qw.mw](o,qw.D
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 6d 65 6e 74 5b 71 77 2e 51 65 5d 29 5b 71 77 2e 65 74 5d 28 66 29 2c 75 3d 71 77 2e 6b 2c 70 29 7d 76 61 72 20 66 3d 71 77 2e 65 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 71 77 2e 58 79 5d 28 66 2c 71 77 2e 69 61 29 2c 65 5b 71 77 2e 55 74 5d 28 66 29 2c 65 5b 71 77 2e 47 6f 5d 28 66 29 2c 21 71 77 2e 6a 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 71 77 2e 6b 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 5b 71 77 2e 45 70 5d 3d 71 77 2e 4c 28 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 71 77 2e 44 6f 5d 28 65 5b 71 77 2e 52 70 5d 2c 71 77 2e 64 77 2c 71 77 2e 4c 28 71 77 2e 61 72 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 Data Ascii: ment[qw.Qe])[qw.et](f),u=qw.k,p)}var f=qw.e,p=function(e){try{return e[qw.Xy](f,qw.ia),e[qw.Ut](f),e[qw.Go](f),!qw.j}catch(e){return!qw.k}},h=function(){function e(){this[qw.Ep]=qw.L()}return Object[qw.Do](e[qw.Rp],qw.dw,qw.L(qw.ar,function(){return Objec
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 71 77 2e 74 69 2b 65 29 2c 6f 5b 71 77 2e 49 74 5d 28 71 77 2e 6a 65 2c 69 2c 21 71 77 2e 6a 29 2c 6f 5b 71 77 2e 4f 74 5d 3d 21 71 77 2e 6a 2c 6f 5b 71 77 2e 50 74 5d 3d 74 2c 6f 5b 71 77 2e 66 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 6e 65 77 20 45 72 72 6f 72 28 71 77 2e 4b 61 29 29 7d 2c 6f 5b 71 77 2e 41 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 6e 65 77 20 45 72 72 6f 72 28 71 77 2e 4c 61 29 29 7d 2c 6f 5b 71 77 2e 53 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 4a 53 4f 4e 5b 71 77 2e 4e 75 5d 28 74 68 69 73 5b 71 77 2e 45 73 5d 29 5b 71 77 2e 6e 64 5d 3b 65 3f 6e 28 65 29 3a 72 28 6e 65 77 20 45 72 72 6f 72 28 71 77 2e 5a 66 29 29 7d 63 61 74 63 68 28 65 29 7b 72 28 6e Data Ascii: qw.ti+e),o[qw.It](qw.je,i,!qw.j),o[qw.Ot]=!qw.j,o[qw.Pt]=t,o[qw.f]=function(){return r(new Error(qw.Ka))},o[qw.At]=function(){return r(new Error(qw.La))},o[qw.St]=function(){try{var e=JSON[qw.Nu](this[qw.Es])[qw.nd];e?n(e):r(new Error(qw.Zf))}catch(e){r(n
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 2e 48 77 5d 5b 71 77 2e 74 77 5d 5b 71 77 2e 4c 77 5d 3b 29 4e 5b 71 77 2e 50 65 5d 28 55 5b 71 77 2e 48 77 5d 29 2c 55 3d 55 5b 71 77 2e 48 77 5d 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 76 61 72 20 61 3b 76 6f 69 64 20 71 77 2e 6a 3d 3d 3d 72 26 26 28 72 3d 71 77 2e 6a 29 2c 76 6f 69 64 20 71 77 2e 6a 3d 3d 3d 6f 26 26 28 6f 3d 71 77 2e 6a 29 3b 74 72 79 7b 61 3d 5f 5b 71 77 2e 63 5d 5b 71 77 2e 4a 79 5d 28 71 77 2e 44 77 29 5b 71 77 2e 6c 77 5d 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 76 61 72 20 63 3d 77 69 6e 64 6f 77 5b 71 77 2e 49 72 5d 5b 71 77 2e 51 65 5d 5b 71 77 2e 46 72 5d 5b 71 77 2e 56 79 5d 7c 7c 4c 2c 73 3d 77 69 6e 64 6f 77 5b 63 5d 5b 71 77 2e 44 72 5d 28 66 75 6e 63 74 Data Ascii: .Hw][qw.tw][qw.Lw];)N[qw.Pe](U[qw.Hw]),U=U[qw.Hw]}catch(e){}function F(e,t,n,r,o,i){var a;void qw.j===r&&(r=qw.j),void qw.j===o&&(o=qw.j);try{a=_[qw.c][qw.Jy](qw.Dw)[qw.lw]}catch(e){}try{var c=window[qw.Ir][qw.Qe][qw.Fr][qw.Vy]\|\|L,s=window[c][qw.Dr](funct
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 3b 76 61 72 20 74 3d 65 5b 71 77 2e 49 72 5d 5b 71 77 2e 51 65 5d 5b 71 77 2e 46 72 5d 5b 71 77 2e 56 79 5d 3b 65 5b 74 5d 3d 65 5b 74 5d 7c 7c 5b 5d 3b 74 72 79 7b 65 5b 4c 5d 3d 65 5b 4c 5d 7c 7c 5b 5d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 29 3b 76 61 72 20 42 3d 6e 65 77 20 52 65 67 45 78 70 28 71 77 2e 71 77 2c 71 77 2e 77 77 29 2c 71 3d 6e 65 77 20 52 65 67 45 78 70 28 71 77 2e 65 77 2c 71 77 2e 77 77 29 3b 66 75 6e 63 74 69 6f 6e 20 4b 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 3d 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 52 28 77 69 6e 64 6f 77 5b 71 77 2e 62 75 5d 5b 71 77 2e 6b 77 5d 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 5b 71 77 2e 4a 73 5d 28 71 77 2e 4b 73 29 2c 72 3d 5b 5d 5b 71 77 2e 52 74 5d 5b 71 77 2e 4b 65 5d 28 Data Ascii: ;var t=e[qw.Ir][qw.Qe][qw.Fr][qw.Vy];e[t]=e[t]\|\|[];try{e[L]=e[L]\|\|[]}catch(e){}});var B=new RegExp(qw.qw,qw.ww),q=new RegExp(qw.ew,qw.ww);function K(e,t,n,r,o){var i=n\|\|function(e){var t=R(window[qw.bu][qw.kw]),n=document[qw.Js](qw.Ks),r=[][qw.Rt][qw.Ke](
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 5b 71 77 2e 52 70 5d 5b 71 77 2e 4a 67 5d 5b 71 77 2e 4b 65 5d 28 74 2c 6f 29 26 26 28 65 5b 6f 5d 3d 74 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 57 5b 71 77 2e 72 6f 5d 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 29 7b 69 66 28 21 28 71 77 2e 56 3d 3d 74 3f 76 6f 69 64 20 71 77 2e 6a 3a 74 5b 71 77 2e 70 72 5d 29 26 26 21 28 71 77 2e 56 3d 3d 74 3f 76 6f 69 64 20 71 77 2e 6a 3a 74 5b 71 77 2e 46 74 5d 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 71 77 2e 6e 65 29 3b 76 61 72 20 6e 3d 71 77 2e 75 65 3d 3d 3d 28 71 77 2e 56 3d 3d 74 3f 76 6f 69 64 20 71 77 2e 6a 3a 74 5b 71 77 Data Ascii: ;n++)for(var o in t=arguments[n])Object[qw.Rp][qw.Jg][qw.Ke](t,o)&&(e[o]=t[o]);return e},W[qw.ro](this,arguments)};function H(e,t){if(!(qw.V==t?void qw.j:t[qw.pr])&&!(qw.V==t?void qw.j:t[qw.Ft]))throw new Error(qw.ne);var n=qw.ue===(qw.V==t?void qw.j:t[qw
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 78 70 28 71 77 2e 52 65 2c 71 77 2e 54 65 29 5b 71 77 2e 79 77 5d 28 58 29 2c 64 65 3d 6e 65 77 20 52 65 67 45 78 70 28 71 77 2e 59 65 2c 71 77 2e 76 29 5b 71 77 2e 79 77 5d 28 58 29 2c 66 65 3d 28 6e 65 77 20 52 65 67 45 78 70 28 71 77 2e 4e 79 2c 71 77 2e 76 29 5b 71 77 2e 79 77 5d 28 58 29 2c 6e 65 77 20 52 65 67 45 78 70 28 71 77 2e 4d 79 2c 71 77 2e 76 29 5b 71 77 2e 79 77 5d 28 58 29 29 2c 70 65 3d 28 6e 65 77 20 52 65 67 45 78 70 28 71 77 2e 71 75 2c 71 77 2e 76 29 5b 71 77 2e 79 77 5d 28 58 29 2c 64 65 7c 7c 73 65 29 2c 68 65 3d 6e 65 77 20 52 65 67 45 78 70 28 71 77 2e 55 65 2c 71 77 2e 77 77 29 5b 71 77 2e 79 77 5d 28 58 29 2c 6d 65 3d 68 65 26 26 73 65 2c 76 65 3d 64 65 26 26 6e 65 77 20 52 65 67 45 78 70 28 71 77 2e 77 75 2c 71 77 2e 76 29 5b Data Ascii: xp(qw.Re,qw.Te)[qw.yw](X),de=new RegExp(qw.Ye,qw.v)[qw.yw](X),fe=(new RegExp(qw.Ny,qw.v)[qw.yw](X),new RegExp(qw.My,qw.v)[qw.yw](X)),pe=(new RegExp(qw.qu,qw.v)[qw.yw](X),de\|\|se),he=new RegExp(qw.Ue,qw.ww)[qw.yw](X),me=he&&se,ve=de&&new RegExp(qw.wu,qw.v)[
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 74 68 5b 71 77 2e 61 61 5d 28 71 77 2e 56 77 2a 4d 61 74 68 5b 71 77 2e 72 69 5d 28 29 29 2b 71 77 2e 6b 2c 6e 3d 71 77 2e 6a 3b 6e 3c 74 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 4d 61 74 68 5b 71 77 2e 77 79 5d 28 71 77 2e 61 75 2a 4d 61 74 68 5b 71 77 2e 72 69 5d 28 29 29 2b 71 77 2e 73 61 3b 65 5b 71 77 2e 50 65 5d 28 53 74 72 69 6e 67 5b 71 77 2e 4a 61 5d 28 72 29 29 7d 72 65 74 75 72 6e 20 65 5b 71 77 2e 5a 5d 28 71 77 2e 76 29 7d 28 29 2c 52 65 3d 5b 5d 2c 42 65 3d 71 77 2e 6a 3b 66 75 6e 63 74 69 6f 6e 20 71 65 28 29 7b 72 65 74 75 72 6e 20 4e 65 7d 66 75 6e 63 74 69 6f 6e 20 4b 65 28 29 7b 76 61 72 20 65 3d 56 65 28 6f 5b 71 77 2e 41 5d 5b 71 77 2e 75 65 5d 29 2c 74 3d 4d 61 74 68 5b 71 77 2e 42 74 5d 28 6f 5b 71 77 2e 47 65 5d 5b 71 77 2e 6f 75 5d 2c Data Ascii: th[qw.aa](qw.VwMath[qw.ri]())+qw.k,n=qw.j;n<t;n++){var r=Math[qw.wy](qw.auMath[qw.ri]())+qw.sa;e[qw.Pe](String[qw.Ja](r))}return e[qw.Z](qw.v)}(),Re=[],Be=qw.j;function qe(){return Ne}function Ke(){var e=Ve(o[qw.A][qw.ue]),t=Math[qw.Bt](o[qw.Ge][qw.ou],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.16	49946	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	685	OUT	HEAD /convert/ HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/convert/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga=GA1.1.20077430.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923555.0.0.0
2024-01-10 21:52:37 UTC	666	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: text/html; charset=UTF-8 Connection: close Vary: Accept-Encoding X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5384 Last-Modified: Wed, 10 Jan 2024 20:22:53 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z%2Fpd8iNutbEZtm4mG8jVIAii84OxEQCKPu7s1QIUoYE8fclVmmVwM%2BsVpklsh%2BayuSeOXkAQH7dTACDuXcJF06R3bvdSZPtrFMoM%2BGQsIUCvO7yPhaBKMaTPRURXmonsjfZs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825ea8fef8232-IAD alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.16	49948	104.26.3.120	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	751	OUT	GET /api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0 HTTP/1.1 Host: dl--master--cdn.ytapis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:37 UTC	951	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Access-Control-Allow-Origin: * Set-Cookie: mp3_converter_pro_session=0zJSwNCTmKypJLfpQpmGSOEZH3rX2KAAo1n5zRAO; expires=Wed, 10-Jan-2024 23:52:37 GMT; Max-Age=7200; path=/; httponly; samesite=lax Strict-Transport-Security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jtDs54r2zqWhFCM0RZ5I9jB1JZpO1EanR0YMxO208XSYxdUNXEjgQ%2B7FiVa2zqSMUFRh4mHcKTDRgqtM4IklU6jAEBYj7wV%2BsJ70%2B1Qjb%2B3Bh47ttDQlWMbxWz9P6uhUA71gjyjBW8nhKOc4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825ea7ee0827b-IAD
2024-01-10 21:52:37 UTC	418	IN	Data Raw: 31 36 31 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 48 63 4e 64 39 31 7a 6e 71 47 74 49 30 63 67 36 73 6d 6a 71 43 63 65 6e 38 64 59 71 33 31 33 48 39 44 47 79 52 6a 34 51 22 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 Data Ascii: 1610<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="csrf-token" content="HcNd91znqGtI0cg6smjqCcen8dYq313H9DGyRj4Q"> <tit
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 61 70 70 2e 63 73 73 3f 69 64 3d 31 36 62 34 64 65 35 39 34 36 65 35 37 30 66 38 66 30 32 34 62 34 63 37 31 30 38 65 37 30 63 39 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 3e 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5d 2c 20 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 64 65 6c 61 79 5d 2c 20 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 5d 2c 20 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 69 6e 6c 69 6e 65 5d 2c 20 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 62 6c 6f 63 6b 5d 2c 20 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 66 6c 65 78 5d 2c 20 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 74 61 62 6c 65 5d 2c 20 Data Ascii: ="stylesheet" href="/css/app.css?id=16b4de5946e570f8f024b4c7108e70c9"> <style >[wire\:loading], [wire\:loading\.delay], [wire\:loading\.inline-block], [wire\:loading\.inline], [wire\:loading\.block], [wire\:loading\.flex], [wire\:loading\.table],
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 55 41 2d 37 34 36 35 37 30 33 38 2d 31 27 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 61 6e 73 20 74 65 78 74 2d 67 72 61 79 2d 39 30 30 20 61 6e 74 69 61 6c 69 61 73 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 72 6f 20 6d 69 6e Data Ascii: indow.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-74657038-1');</script> </head> <body> <div class="font-sans text-gray-900 antialiased"> <div class="hero min
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 73 6f 6c 75 74 65 20 69 6e 73 65 74 2d 30 20 62 67 2d 67 72 61 79 2d 35 30 30 20 6f 70 61 63 69 74 79 2d 37 35 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 72 6f 20 6d 69 6e 2d 68 2d 73 63 72 65 65 6e 20 62 67 2d 62 61 73 65 2d 32 30 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 72 6f 2d 63 6f 6e 74 65 6e 74 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 20 74 65 78 74 2d 77 68 69 74 65 20 74 72 61 6e 73 66 6f 72 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: solute inset-0 bg-gray-500 opacity-75"></div> </div> <div class="hero min-h-screen bg-base-200"> <div class="hero-content text-center"> <div class="text-center text-white transform">
2024-01-10 21:52:37 UTC	1131	IN	Data Raw: 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 74 75 72 62 6f 2d 65 76 61 6c 3d 22 66 61 6c 73 65 22 20 64 61 74 61 2d 74 75 72 62 6f 6c 69 6e 6b 73 2d 65 76 61 6c 3d 22 66 61 6c 73 65 22 20 3e 77 69 6e 64 6f 77 2e 6c 69 76 65 77 69 72 65 20 3d 20 6e 65 77 20 4c 69 76 65 77 69 72 65 28 29 3b 77 69 6e 64 6f 77 2e 4c 69 76 65 77 69 72 65 20 3d 20 77 69 6e 64 6f 77 2e 6c 69 76 65 77 69 72 65 3b 77 69 6e 64 6f 77 2e 6c 69 76 65 77 69 72 65 5f 61 70 70 5f 75 72 6c 20 3d 20 27 27 3b 77 69 6e 64 6f 77 2e 6c 69 76 65 77 69 72 65 5f 74 6f 6b 65 6e 20 3d 20 27 48 63 4e 64 39 31 7a 6e 71 47 74 49 30 63 67 36 73 6d 6a 71 43 63 65 6e 38 64 59 71 33 31 33 48 39 44 47 79 52 6a 34 51 27 3b 77 69 6e 64 6f 77 2e 64 65 66 65 72 4c 6f 61 64 69 6e 67 41 Data Ascii: ></script><script data-turbo-eval="false" data-turbolinks-eval="false" >window.livewire = new Livewire();window.Livewire = window.livewire;window.livewire_app_url = '';window.livewire_token = 'HcNd91znqGtI0cg6smjqCcen8dYq313H9DGyRj4Q';window.deferLoadingA
2024-01-10 21:52:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.16	49950	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	986	OUT	POST /zone?&pub=0&zone_id=4662709&is_mobile=false&domain=opmetapodor.com&var=5596087&ymid=769067736944087664&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1 Host: opmetapodor.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://opmetapodor.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
2024-01-10 21:52:37 UTC	828	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Length: 0 Connection: close X-Trace-Id: 167af5a31061f964fc827a4631bfbab0 Access-Control-Allow-Origin: https://opmetapodor.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wf55ROCgBYbUiwb%2FDkGHSuqwbqs9R5eDjWKPLgR%2BM3nwWYPhBgLuXIQAH%2BcGtIbrcSEFm8AtFLb4KZh%2FpcRlThO080MqrkH%2F8WehG5J10CeCIByUB8b7mDnY0bSGgcUJ%2FlY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825eaeded1879-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.16	49955	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	582	OUT	GET /19/4662728/?abt_opts=1&var=5596087&var3=769067736944087664&ymid=&rhd=1&os=windows&os_version=10.0.0 HTTP/1.1 Host: opmetapodor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556; prefetchAd_4662728=true
2024-01-10 21:52:37 UTC	1283	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Trace-Id: facfc98599f8f222cbdb48cba0d9be63 Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=d36449c3fc5d2c86d4a195aa43f059a6; expires=Thu, 09 Jan 2025 21:52:37 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923556; expires=Thu, 09 Jan 2025 21:52:37 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC
2024-01-10 21:52:37 UTC	405	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 4f 56 76 70 6b 6a 79 64 31 35 44 71 30 39 5a 67 4b 39 4d 35 55 52 35 48 32 4a 45 78 77 33 72 71 48 50 5a 61 36 43 61 30 75 72 52 44 42 69 73 62 77 4e 56 44 66 6f 33 49 6a 65 4c 52 79 48 59 6e 54 69 65 74 4a 50 47 72 73 76 71 4c 78 76 45 4e 4b 48 52 36 55 36 7a 4c 73 30 58 67 7a 4e 65 43 78 58 4b 47 46 72 6d 4b 35 51 46 63 77 64 4b 63 63 44 38 53 32 25 32 42 70 63 39 25 32 42 74 69 34 79 6a 6d 56 33 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OVvpkjyd15Dq09ZgK9M5UR5H2JExw3rqHPZa6Ca0urRDBisbwNVDfo3IjeLRyHYnTietJPGrsvqLxvENKHR6U6zLs0XgzNeCxXKGFrmK5QFcwdKccD8S2%2Bpc9%2Bti4yjmV3U%3D"}],"group":"cf-nel","max_age":604800}
2024-01-10 21:52:37 UTC	1050	IN	Data Raw: 62 36 62 0d 0a 7b 22 75 72 6c 22 3a 22 2f 2f 6f 70 6d 65 74 61 70 6f 64 6f 72 2e 63 6f 6d 2f 72 68 64 3f 72 62 3d 70 56 79 75 4d 47 54 6c 38 43 69 4a 6a 6a 4f 59 61 64 5a 4d 41 37 55 44 31 68 58 73 43 33 34 62 75 5f 75 61 6a 66 6f 46 51 4c 43 6e 58 48 78 68 30 35 2d 44 75 49 75 62 6f 61 50 75 43 62 42 76 6d 64 5f 64 6d 79 4f 45 41 77 61 61 45 64 7a 61 75 47 44 56 30 38 51 43 5f 35 6b 4a 77 34 57 68 53 47 51 79 74 6d 46 44 42 47 32 66 4c 66 65 79 79 6f 79 4e 56 32 33 6a 70 77 69 4c 6b 47 63 61 32 41 2d 44 44 69 64 6d 52 44 30 54 45 4a 6b 4a 4a 74 50 49 63 67 59 4d 6c 69 65 6c 32 44 4c 35 77 57 70 74 56 55 5f 62 6e 65 5a 35 42 34 78 4d 4d 4c 44 62 70 6b 6f 32 53 37 4c 31 58 66 58 77 79 79 5a 72 70 49 33 49 73 51 69 36 49 42 47 37 72 4d 48 4e 56 34 75 4d 78 Data Ascii: b6b{"url":"//opmetapodor.com/rhd?rb=pVyuMGTl8CiJjjOYadZMA7UD1hXsC34bu_uajfoFQLCnXHxh05-DuIuboaPuCbBvmd_dmyOEAwaaEdzauGDV08QC_5kJw4WhSGQytmFDBG2fLfeyyoyNV23jpwiLkGca2A-DDidmRD0TEJkJJtPIcgYMliel2DL5wWptVU_bneZ5B4xMMLDbpko2S7L1XfXwyyZrpI3IsQi6IBG7rMHNV4uMx
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 33 2d 32 32 61 61 2d 34 39 34 64 2d 62 65 39 61 2d 66 36 64 62 37 62 34 61 31 63 38 38 22 2c 22 70 70 75 54 69 6d 65 6f 75 74 22 3a 31 35 2c 22 73 74 61 72 74 54 69 6d 65 6f 75 74 22 3a 30 2c 22 73 74 61 72 74 43 6c 69 63 6b 73 22 3a 30 2c 22 73 65 73 73 69 6f 6e 43 6c 69 63 6b 73 22 3a 30 2c 22 61 64 64 4f 76 65 72 6c 61 79 22 3a 66 61 6c 73 65 2c 22 73 6d 61 72 74 4f 76 65 72 6c 61 79 22 3a 74 72 75 65 2c 22 63 6c 69 63 6b 41 6e 79 77 68 65 72 65 22 3a 74 72 75 65 2c 22 69 4f 53 43 6c 69 63 6b 46 69 78 22 3a 74 72 75 65 2c 22 61 6e 64 72 6f 69 64 43 6c 69 63 6b 46 69 78 22 3a 66 61 6c 73 65 2c 22 6e 6f 53 63 72 6f 6c 6c 50 6c 65 61 73 65 22 3a 66 61 6c 73 65 2c 22 74 72 79 54 6f 45 73 63 61 70 65 49 66 72 61 6d 65 22 3a 66 61 6c 73 65 2c 22 53 53 22 3a Data Ascii: 3-22aa-494d-be9a-f6db7b4a1c88","ppuTimeout":15,"startTimeout":0,"startClicks":0,"sessionClicks":0,"addOverlay":false,"smartOverlay":true,"clickAnywhere":true,"iOSClickFix":true,"androidClickFix":false,"noScrollPlease":false,"tryToEscapeIframe":false,"SS":
2024-01-10 21:52:37 UTC	511	IN	Data Raw: 6e 56 69 61 4d 6f 62 69 6c 65 50 6f 70 75 6e 64 65 72 41 6e 64 46 6f 6c 6c 6f 77 4c 69 6e 6b 73 22 3a 66 61 6c 73 65 2c 22 6f 70 65 6e 56 69 61 4d 6f 62 69 6c 65 50 6f 70 75 6e 64 65 72 41 6e 64 50 72 6f 70 61 67 61 74 65 46 6f 72 6d 53 75 62 6d 69 74 22 3a 66 61 6c 73 65 2c 22 70 6f 70 75 6e 64 65 72 56 69 65 77 44 65 61 64 6c 69 6e 65 54 69 6d 65 6f 75 74 22 3a 30 2c 22 70 6f 70 75 6e 64 65 72 56 69 65 77 44 65 61 64 6c 69 6e 65 43 6f 75 6e 74 22 3a 30 2c 22 75 73 65 72 47 65 6f 22 3a 22 75 73 22 2c 22 67 6d 74 4f 66 66 73 65 74 4d 69 6e 75 74 65 22 3a 2d 33 30 30 2c 22 69 73 50 72 6f 78 79 22 3a 74 72 75 65 2c 22 69 73 47 69 64 72 61 74 6f 72 43 6f 6f 6b 69 65 53 79 6e 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 44 65 76 50 6c 65 61 73 65 Data Ascii: nViaMobilePopunderAndFollowLinks":false,"openViaMobilePopunderAndPropagateFormSubmit":false,"popunderViewDeadlineTimeout":0,"popunderViewDeadlineCount":0,"userGeo":"us","gmtOffsetMinute":-300,"isProxy":true,"isGidratorCookieSyncEnabled":false,"noDevPlease
2024-01-10 21:52:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.16	49943	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	677	OUT	GET /gid.js?pub=0&userId=&zoneId=4662709&checkDuplicate=true&ymid=769067736944087664&var=5596087 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://opmetapodor.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:37 UTC	703	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: https://opmetapodor.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:37 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:37 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 65 66 65 38 33 62 31 31 33 30 31 30 34 65 66 65 61 30 64 34 37 35 65 32 63 62 37 35 34 36 34 66 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.16	49957	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	637	OUT	GET /zone?&pub=0&zone_id=4662709&is_mobile=false&domain=opmetapodor.com&var=5596087&ymid=769067736944087664&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=settings HTTP/1.1 Host: opmetapodor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556; prefetchAd_4662728=true
2024-01-10 21:52:37 UTC	874	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 796 Connection: close Vary: Accept-Encoding X-Trace-Id: 6dcc75d32e70ab4c78edef4daf6aac6f Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=73TX%2B%2BT5qQetoVF9kfu0m8FWY2yvGIHvXPRTof9HPlxi4qDidVBRkh3TE0S8VL7de4d%2BtNb6BGCJRh%2B2AHI8cWrPziDQ8wnbA37VKzWYhvb2xdUo4ZrtgtXT3jq05LHK3CM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825ec7dc31774-EWR alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:37 UTC	495	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 6a 73 54 61 67 50 61 72 61 6d 65 74 65 72 73 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 2c 22 75 6e 73 75 70 70 6f 72 74 65 64 22 3a 66 61 6c 73 65 2c 22 61 66 74 65 72 43 6c 6f 73 65 44 65 6c 61 79 22 3a 33 2c 22 61 6c 6c 6f 77 50 6f 70 75 70 49 66 48 74 74 70 73 44 65 6e 69 65 64 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 47 65 6f 22 3a 22 75 73 22 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 49 70 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 32 22 2c 22 64 69 73 61 62 6c 65 53 77 53 61 6e 69 74 79 22 3a 66 61 6c 73 65 2c 22 64 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 6f 75 74 65 65 74 75 2e 6e 65 74 22 2c 22 66 6f 72 63 65 53 74 61 6e 64 61 6c 6f 6e 65 22 3a 74 Data Ascii: {"status":true,"code":"jsTagParameters","message":"","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"102.165.48.42","disableSwSanity":false,"domain":"https://jouteetu.net","forceStandalone":t
2024-01-10 21:52:37 UTC	301	IN	Data Raw: 77 4e 61 6d 65 22 3a 22 73 77 2e 6a 73 22 2c 22 73 77 53 61 6e 69 74 79 34 30 34 6f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 73 77 54 69 6d 65 6f 75 74 22 3a 30 2c 22 75 73 65 52 74 4d 61 72 6b 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 77 69 6c 64 63 61 72 64 44 6f 6d 61 69 6e 22 3a 22 62 6f 75 73 74 61 68 65 2e 63 6f 6d 22 2c 22 7a 6f 6e 65 49 64 22 3a 34 36 36 32 37 30 39 2c 22 73 6b 69 6e 55 72 6c 22 3a 22 2f 70 66 65 2f 63 75 72 72 65 6e 74 2f 64 65 66 61 75 6c 74 53 6b 69 6e 2e 6d 69 6e 2e 6a 73 22 2c 22 70 6f 70 75 70 55 72 6c 22 3a 22 2f 70 66 65 2f 63 75 72 72 65 6e 74 2f 70 6f 70 75 70 2e 68 74 6d 6c 22 2c 22 66 6c 61 67 73 22 3a 7b 22 61 70 70 4c 6f 63 6b 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 71 75 69 65 74 65 72 4e 6f 74 69 66 69 63 61 74 Data Ascii: wName":"sw.js","swSanity404only":false,"swTimeout":0,"useRtMarkUser":false,"wildcardDomain":"boustahe.com","zoneId":4662709,"skinUrl":"/pfe/current/defaultSkin.min.js","popupUrl":"/pfe/current/popup.html","flags":{"appLockDisabled":false,"quieterNotificat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.16	49956	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	653	OUT	GET /?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto}&mprtr=1&os_version=10.0.0 HTTP/1.1 Host: opmetapodor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556; prefetchAd_4662728=true
2024-01-10 21:52:37 UTC	1305	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/7.4.33 Set-Cookie: reverse=GmjEjTX2IJ3kqkkF8yYr35GL72Kg6Q6dCVhloRYlPnM; expires=Wed, 10-Jan-2024 22:52:37 GMT; Max-Age=3600; path=/ Set-Cookie: OAID=d36449c3fc5d2c86d4a195aa43f059a6; expires=Fri, 20-Jan-2079 19:45:14 GMT; Max-Age=1736545957; path=/ Set-Cookie: oaidts=1704923556; expires=Fri, 20-Jan-2079 19:45:14 GMT; Max-Age=1736545957; path=/ Set-Cookie: syncedCookie=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WdTjMG0kvAmalAXitfGWqjKXBXWE2bh%2Fddm4yf6gfecdeHtIKzFYK%2BnNjMyvFn7rGJFpi%2FRxuXOfC2okidkFYikC7IVxwh0KIrVMuCaOWnur1Yata5viFP8jIA5mBZooWZE%3D"}],"group":"cf-nel","max_age":604800}
2024-01-10 21:52:37 UTC	149	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 34 33 38 32 35 65 63 38 61 37 38 63 33 34 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 843825ec8a78c34b-EWRalt-svc: h3=":443"; ma=86400
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 Data Ascii: 7ffa<!DOCTYPE html><html><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no"><meta http-equiv="X-UA-Compatible" content="ie=edge"><meta name="g
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 2e 6a 73 6f 6e 28 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 28 64 61 74 61 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 67 69 64 20 3d 20 64 61 74 61 2e 67 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 74 72 44 65 62 75 67 4c 6f 67 28 27 5b 67 65 74 47 69 64 5d 20 47 69 64 20 66 72 6f 6d 20 72 74 6d 61 72 6b 27 2c 20 67 69 64 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 69 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 79 6e 63 65 64 4f 61 69 64 56 61 6c 75 65 20 3d 20 67 69 64 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 65 78 70 44 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: .json()) .then((data) => { let gid = data.gid; rtrDebugLog('[getGid] Gid from rtmark', gid); if (gid) { syncedOaidValue = gid; let expDate = new Date();
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 20 20 20 20 69 73 4f 61 69 64 53 79 6e 63 46 69 6e 69 73 68 65 64 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 72 65 73 6f 6c 76 65 28 73 79 6e 63 65 64 4f 61 69 64 56 61 6c 75 65 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 29 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 61 64 64 55 52 4c 50 61 72 61 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 55 52 4c 50 61 72 61 6d 73 28 7b 75 72 6c 3a 74 2c 70 61 72 61 6d 73 3a 72 7d 29 7b 63 6f 6e 73 74 20 73 3d 22 68 74 74 70 73 3a 2f 2f 64 75 6d 6d 79 2e 63 6f 6d 22 3b 74 72 79 7b 74 2e 6d 61 74 63 68 28 2f 5e 28 68 74 74 70 73 3f 7c 66 74 70 29 3a 5c 2f 5c 2f 2f 69 29 7c 7c 28 74 3d 60 24 7b 73 7d 24 7b 74 Data Ascii: isOaidSyncFinished = true; resolve(syncedOaidValue); } })</script><script>var addURLParams=function(){"use strict";return function addURLParams({url:t,params:r}){const s="https://dummy.com";try{t.match(/^(https?\|ftp):\/\//i)\|\|(t=`${s}${t
2024-01-10 21:52:37 UTC	1369	IN	Data Raw: 6f 73 56 65 72 55 72 6c 50 61 72 61 6d 3a 72 2e 6f 73 56 65 72 55 72 6c 50 61 72 61 6d 2c 6f 73 56 65 72 4e 75 6d 3a 72 2e 6f 73 56 65 72 4e 75 6d 7d 29 7d 29 29 7d 65 6c 73 65 7b 63 6f 6e 73 74 20 65 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 2f 28 61 6e 64 72 6f 69 64 7c 69 70 68 6f 6e 65 7c 69 70 61 64 7c 69 70 6f 64 7c 77 69 6e 64 6f 77 73 20 70 68 6f 6e 65 7c 77 69 6e 64 6f 77 73 20 6e 74 7c 6d 61 63 20 6f 73 20 78 7c 6c 69 6e 75 78 7c 75 62 75 6e 74 75 7c 64 65 62 69 61 6e 7c 66 65 64 6f 72 61 7c 72 65 64 20 68 61 74 7c 73 75 73 65 7c 6f 73 20 76 65 72 73 69 6f 6e 29 5b 5c 2f 7c 5c 73 5d 28 5b 5e 5c 73 3b 5d 2a 29 2f 29 3b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 3e 3d Data Ascii: osVerUrlParam:r.osVerUrlParam,osVerNum:r.osVerNum})}))}else{const e=navigator.userAgent.toLowerCase().match(/(android\|iphone\|ipad\|ipod\|windows phone\|windows nt\|mac os x\|linux\|ubuntu\|debian\|fedora\|red hat\|suse\|os version)[\/\|\s]([^\s;]*)/);if(e&&e.length>=
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 61 62 65 74 2e 6c 65 6e 67 74 68 20 2d 20 31 29 5d 7d 2e 24 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 7d 60 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 73 79 6e 63 65 64 4f 61 69 64 56 61 6c 75 65 20 67 65 74 20 66 72 6f 6d 20 6f 61 69 64 50 72 6f 6d 69 73 65 2e 6a 73 0a 20 20 20 20 20 20 76 61 72 20 74 62 55 72 6c 20 3d 20 27 2f 73 75 62 6d 65 6e 75 2f 34 36 36 32 37 32 38 2f 3f 72 68 64 3d 31 26 76 61 72 3d 35 35 39 36 30 38 37 26 76 61 72 33 3d 37 36 39 30 36 37 37 33 36 39 34 34 30 38 37 36 36 34 27 20 2b 20 27 26 6f 61 69 64 3d 27 20 2b 20 73 79 6e 63 65 64 4f 61 69 64 56 61 6c 75 Data Ascii: abet.length - 1)]}.${window.location.host}`; } } </script><script> (function () { // syncedOaidValue get from oaidPromise.js var tbUrl = '/submenu/4662728/?rhd=1&var=5596087&var3=769067736944087664' + '&oaid=' + syncedOaidValu
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 76 72 64 50 61 72 61 6d 20 3d 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 69 6e 69 74 57 76 72 64 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 64 69 72 65 63 74 28 22 63 61 6e 74 73 75 62 73 63 72 69 62 65 22 2c 20 74 62 55 72 6c 29 7d 29 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 28 22 63 61 6e 74 73 75 62 73 63 72 69 62 65 22 2c 20 74 62 55 72 6c 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 28 29 3b 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 71 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 71 2e 71 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 2d 71 2e 79 21 3d 3d 6e 5b 71 2e 48 5d 28 71 2e Data Ascii: vrdParam == 1) { initWvrd(function() { redirect("cantsubscribe", tbUrl)}) } else { redirect("cantsubscribe", tbUrl); } })(); </script><script> (function(q){!function(){q.q;function n(n,e,t){return n+=-q.y!==n[q.H](q.
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 6e 5b 71 2e 48 65 5d 26 26 6e 5b 71 2e 47 65 5d 26 26 6e 5b 71 2e 68 77 5d 26 26 28 21 65 7c 7c 21 6f 29 26 26 21 61 29 7d 28 6e 2c 65 29 26 26 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6e 5b 71 2e 57 5d 2c 72 3d 6e 5b 71 2e 68 77 5d 2c 6f 3d 6e 5b 71 2e 6a 77 5d 2c 63 3d 6e 65 77 20 44 61 74 65 28 6e 65 77 20 44 61 74 65 28 2b 6e 65 77 20 44 61 74 65 2b 71 2e 65 72 2a 72 29 5b 71 2e 50 77 5d 28 29 29 5b 71 2e 50 77 5d 28 29 2c 75 3d 71 2e 6b 77 2b 6f 3b 21 71 2e 67 2c 69 3d 21 71 2e 67 2c 64 6f 63 75 6d 65 6e 74 5b 71 2e 61 77 5d 3d 75 2b 71 2e 66 65 2b 63 2b 71 2e 41 77 2c 66 65 74 63 68 28 74 2b 71 2e 4a 65 2c 71 2e 75 28 71 2e 72 72 2c 71 2e 74 72 29 29 5b 71 2e 74 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 71 2e Data Ascii: n[q.He]&&n[q.Ge]&&n[q.hw]&&(!e\|\|!o)&&!a)}(n,e)&&function(n,e){var t=n[q.W],r=n[q.hw],o=n[q.jw],c=new Date(new Date(+new Date+q.er*r)[q.Pw]())[q.Pw](),u=q.kw+o;!q.g,i=!q.g,document[q.aw]=u+q.fe+c+q.Aw,fetch(t+q.Je,q.u(q.rr,q.tr))[q.t](function(n){return q.
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 73 5b 71 2e 53 77 5d 5b 71 2e 65 77 5d 5b 71 2e 42 77 5d 3d 71 2e 44 77 29 2c 21 71 2e 67 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 71 2e 79 7d 7d 3b 76 61 72 20 6c 3d 73 3b 66 75 6e 63 74 69 6f 6e 20 70 28 6e 2c 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 28 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 20 65 3f 65 28 6e 29 3a 71 2e 50 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 20 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 2d 71 2e 79 3b 74 72 79 7b 65 3d 6e 5b 71 2e 54 72 5d 28 71 2e 59 72 29 7d 63 61 74 63 68 28 6e 29 7b 7d 72 65 74 75 72 6e 20 65 7d 2c 65 3d 74 68 69 73 3b 65 Data Ascii: s[q.Sw][q.ew][q.Bw]=q.Dw),!q.g)}catch(n){return!q.y}};var l=s;function p(n,e){try{return n()}catch(n){return e?e(n):q.P}}function v(e){return p(function(){var t,r=new function(){var n=function(n){var e=-q.y;try{e=n[q.Tr](q.Yr)}catch(n){}return e},e=this;e
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 3d 76 5b 71 2e 63 72 5d 5b 71 2e 59 5d 28 6e 65 77 20 52 65 67 45 78 70 28 71 2e 4d 72 2c 71 2e 77 29 29 2c 6d 3d 76 5b 71 2e 42 72 5d 2c 71 2e 75 28 71 2e 4c 65 2c 70 2c 71 2e 6b 65 2c 70 61 72 73 65 49 6e 74 28 68 5b 71 2e 67 5d 2c 71 2e 76 72 29 2c 71 2e 5a 65 2c 70 61 72 73 65 49 6e 74 28 68 5b 71 2e 79 5d 2c 71 2e 76 72 29 2c 71 2e 43 65 2c 6d 2c 71 2e 58 65 2c 69 28 6d 29 29 29 3b 65 5b 71 2e 4c 65 5d 3d 75 5b 71 2e 4c 65 5d 2c 65 5b 71 2e 6b 65 5d 3d 75 5b 71 2e 6b 65 5d 2c 65 5b 71 2e 5a 65 5d 3d 75 5b 71 2e 5a 65 5d 2c 65 5b 71 2e 43 65 5d 3d 75 5b 71 2e 43 65 5d 2c 65 5b 71 2e 58 65 5d 3d 75 5b 71 2e 58 65 5d 2c 65 5b 71 2e 4b 65 5d 3d 21 71 2e 67 7d 7d 65 6c 73 65 20 69 66 28 2d 71 2e 79 3d 3d 3d 6e 61 76 69 67 61 74 6f 72 5b 71 2e 4b 72 5d 5b Data Ascii: =v[q.cr][q.Y](new RegExp(q.Mr,q.w)),m=v[q.Br],q.u(q.Le,p,q.ke,parseInt(h[q.g],q.vr),q.Ze,parseInt(h[q.y],q.vr),q.Ce,m,q.Xe,i(m)));e[q.Le]=u[q.Le],e[q.ke]=u[q.ke],e[q.Ze]=u[q.Ze],e[q.Ce]=u[q.Ce],e[q.Xe]=u[q.Xe],e[q.Ke]=!q.g}}else if(-q.y===navigator[q.Kr][

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.16	49960	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	1560	OUT	GET /rhd?rb=Rdb6wZEO29zI5JtWbTgBMBMFK3Hq-MEScKP8etoUXWt3mdWS3wWsTsP3kSqAWpbNFN1dCn6CYruMdsHiPsHpNrvwnbvh96tHmYdBiU46RODeWhjXYxRc2nUDsCdCO1IYpgc-WdiFaZIQvADzoLdt660KFd3CQnSV0JefYCmIdQr3HkdyWUMcr7ixUZ0NA9T5k9PWd5QcPzHYyXX2KLUOww4E_aWbWCgrAxXAEpEN3forRgNuyof1bfhSMQleRGuBYG9QLY077R8fAu5eYgIHtOdcquR56sK3EVT5-79aIbw45uwbCLeC9OPBGoLFc7dcFsFGfPSX-l0xCXzweCDoLtxwODIyvjKVg6ztukTV4SYUIofL7Xx9BMyq2xl1YV7lnzjZrZ3jgq9uvQfg1ULmn2inVBeIy67aLeUagmvLmFdPH-JezSdIdJxPCMU_42FgBx9QhjpzIuYLBYhZ8Fn3f8HOl-Mmu5qPTg6zZrwo0y5baW7oPL4LK0aNsO2_TIRPp7Wn509MXkVkVw-zDyYc_TaJpReHMOigk7vDrg%3D%3D&request_ab2=0&zoneid=4662728&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1280&wih=907&wiw=1280&wfc=0&pl=https%3A%2F%2Fopmetapodor.com%2F%3Fs%3D769067736944087664%26ssk%3D98629cd0d428ca851e6b1debdd905e13%26svar%3D1704923555%26z%3D5596087%26pz%3D4662709%26tb%3D4662728%26l%3DWGYVPKNMPvY53zb%26btz%3D%7Bbtz%7D%26bto%3D%7Bbto%7D&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&var=5596087&var3=769067736944087664&ymid=&rhd=1&os=windows&os_version=10.0.0&m=link HTTP/1.1 Host: opmetapodor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; oaidts=1704923556; prefetchAd_4662728=true; syncedCookie=true; OAID=d36449c3fc5d2c86d4a195aa43f059a6
2024-01-10 21:52:38 UTC	1364	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Trace-Id: cda8d089f8f55e1d3294ff548687b736 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=d36449c3fc5d2c86d4a195aa43f059a6; expires=Thu, 09 Jan 2025 21:52:37 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923556; expires=Thu, 09 Jan 2025 21:52:37 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vi3FnIM4Jtz5qYl00LQKzab5PjjP9GpgqGO1SjV%2BjOqQWtVFvTzLbWLCYCmksu8J8dQB8Z%2Bg98e4b%2Fzh8yoj1ttvqGFJ0o8sLRsKB%2BTNUc6%2Bw1hClKFgk3mtLkkJNwYsevc%3D"}],"group":"cf-nel","max_age":604800}
2024-01-10 21:52:38 UTC	149	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 34 33 38 32 35 65 63 66 64 32 37 38 63 35 31 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 843825ecfd278c51-EWRalt-svc: h3=":443"; ma=86400
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 62 36 61 0d 0a 7b 22 62 61 6e 6e 65 72 49 64 22 3a 31 39 31 32 30 34 37 35 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 37 34 38 31 39 37 37 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 2e 72 6f 75 74 65 73 2e 6e 61 6d 65 2f 36 35 31 37 35 34 35 61 66 31 61 37 31 65 30 30 30 31 64 65 34 31 36 61 3f 73 75 62 31 3d 34 36 36 32 37 32 38 5c 75 30 30 32 36 73 75 62 32 3d 37 34 38 31 39 37 37 5c 75 30 30 32 36 73 75 62 33 3d 62 72 6f 61 64 62 61 6e 64 5c 75 30 30 32 36 73 75 62 34 3d 63 68 72 6f 6d 65 5c 75 30 30 32 36 73 75 62 35 3d 77 69 6e 64 6f 77 73 5c 75 30 30 32 36 73 75 62 36 3d 55 53 5c 75 30 30 32 36 73 75 62 37 3d 31 39 31 32 30 34 37 35 5c 75 30 30 32 36 73 75 62 38 3d 64 65 74 20 61 66 72 69 63 61 20 70 74 79 20 6c 74 64 5c Data Ascii: b6a{"bannerId":19120475,"campaignId":7481977,"dstUrl":"https://track.routes.name/6517545af1a71e0001de416a?sub1=4662728\u0026sub2=7481977\u0026sub3=broadband\u0026sub4=chrome\u0026sub5=windows\u0026sub6=US\u0026sub7=19120475\u0026sub8=det africa pty ltd\
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 54 7a 37 41 35 30 4c 72 6a 71 4c 59 5a 6a 45 34 31 43 64 53 47 6d 61 6d 69 78 46 62 33 4c 73 34 65 4e 30 31 6b 54 4d 58 53 72 67 4f 66 47 59 73 37 41 53 70 66 7a 73 76 5a 66 7a 72 32 38 41 30 5f 32 6a 71 43 73 5a 73 38 6b 77 62 73 68 65 2d 2d 30 47 79 4e 69 34 45 45 51 49 66 54 70 56 54 67 57 54 6b 47 54 74 62 72 75 56 4d 69 4f 74 50 62 72 36 4d 63 46 4c 43 53 61 45 49 6f 77 30 48 4a 6a 57 54 77 49 4b 67 47 6d 6b 57 39 2d 4d 37 6a 64 46 4c 4c 71 7a 6f 42 4b 62 48 36 78 53 67 62 70 5f 2d 35 54 73 69 70 63 48 38 75 43 6e 6e 42 31 50 7a 39 34 4e 57 6e 35 36 2d 48 4d 57 5a 4b 4d 69 43 36 59 72 4c 71 46 6d 53 71 48 51 47 57 44 58 37 34 34 75 6f 33 47 64 68 74 62 71 53 56 6f 76 72 63 6f 36 48 57 45 6b 58 42 66 38 34 67 4d 38 52 6c 56 67 73 42 4a 39 6a 77 75 77 Data Ascii: Tz7A50LrjqLYZjE41CdSGmamixFb3Ls4eN01kTMXSrgOfGYs7ASpfzsvZfzr28A0_2jqCsZs8kwbshe--0GyNi4EEQIfTpVTgWTkGTtbruVMiOtPbr6McFLCSaEIow0HJjWTwIKgGmkW9-M7jdFLLqzoBKbH6xSgbp_-5TsipcH8uCnnB1Pz94NWn56-HMWZKMiC6YrLqFmSqHQGWDX744uo3GdhtbqSVovrco6HWEkXBf84gM8RlVgsBJ9jwuw
2024-01-10 21:52:38 UTC	191	IN	Data Raw: 4c 33 53 30 44 6a 5a 63 47 58 4b 4f 75 4a 36 52 48 43 34 67 51 79 64 78 48 54 61 62 6e 75 48 75 32 53 7a 77 51 65 79 72 43 6c 5a 4e 73 52 39 53 74 33 35 76 49 74 48 45 76 5f 36 45 71 4e 41 51 6e 49 49 47 79 39 42 41 58 42 76 6f 74 69 38 4c 4f 38 32 65 45 70 47 70 6b 6e 34 6b 39 31 4c 64 2d 51 33 32 41 65 43 7a 57 49 69 34 6a 52 47 49 7a 58 53 38 4f 44 51 4e 77 76 36 46 4c 63 67 63 49 76 74 5a 41 4c 46 34 61 6f 49 52 6d 67 36 4b 62 56 70 72 77 61 75 53 5f 6e 6d 43 70 38 4e 53 6d 4d 46 59 48 6c 46 5f 35 7a 4b 55 45 41 4c 45 5a 54 56 4c 47 2d 72 46 44 38 3d 22 7d 0d 0a Data Ascii: L3S0DjZcGXKOuJ6RHC4gQydxHTabnuHu2SzwQeyrClZNsR9St35vItHEv_6EqNAQnIIGy9BAXBvoti8LO82eEpGpkn4k91Ld-Q32AeCzWIi4jRGIzXS8ODQNwv6FLcgcIvtZALF4aoIRmg6KbVprwauS_nmCp8NSmMFYHlF_5zKUEALEZTVLG-rFD8="}
2024-01-10 21:52:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.16	49951	139.45.197.244	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	566	OUT	GET /5/6026557/?oo=1&aab=1 HTTP/1.1 Host: doruffleton.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:37 UTC	1384	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: application/json Content-Length: 2859 Connection: close X-Trace-Id: c78ef03ac74333c776c93efdeda77379 Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=9261040a4f7248eba3a37ed35ddc868c; expires=Thu, 09 Jan 2025 21:52:37 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923557; expires=Thu, 09 Jan 2025 21:52:37 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-01-10 21:52:37 UTC	2859	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 2f 2f 64 6f 72 75 66 66 6c 65 74 6f 6e 2e 63 6f 6d 2f 3f 72 62 3d 52 78 53 63 5f 42 59 48 4b 56 6b 71 71 32 45 46 67 79 6a 62 58 46 36 68 6e 44 32 56 42 66 41 51 47 4b 33 6d 31 57 2d 62 62 31 65 6f 74 36 69 64 4c 39 32 62 34 5a 6a 59 44 37 72 4a 79 34 78 66 59 33 62 4a 63 68 71 4b 77 31 71 4f 4a 7a 4a 78 68 66 35 6f 6e 70 34 57 69 4b 69 59 65 7a 6b 66 54 30 66 33 59 46 76 6a 48 38 38 44 5a 79 4a 6f 6b 6b 5a 65 74 72 72 5a 6a 67 57 52 77 54 79 77 43 32 44 71 6f 50 6b 58 47 6b 61 34 45 56 4a 63 76 34 53 4d 6b 50 61 35 59 72 6a 4e 64 47 71 48 33 51 57 72 4a 52 48 42 32 42 48 67 57 35 2d 69 6c 61 52 36 55 35 73 30 6e 45 58 72 7a 4f 34 4f 74 76 2d 7a 6e 75 50 6f 31 73 34 59 5a 76 54 70 4b 6c 6b 67 72 43 39 4f 56 4a 41 6e 58 49 6c 75 75 Data Ascii: {"url":"//doruffleton.com/?rb=RxSc_BYHKVkqq2EFgyjbXF6hnD2VBfAQGK3m1W-bb1eot6idL92b4ZjYD7rJy4xfY3bJchqKw1qOJzJxhf5onp4WiKiYezkfT0f3YFvjH88DZyJokkZetrrZjgWRwTywC2DqoPkXGka4EVJcv4SMkPa5YrjNdGqH3QWrJRHB2BHgW5-ilaR6U5s0nEXrzO4Otv-znuPo1s4YZvTpKlkgrC9OVJAnXIluu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.16	49958	3.10.43.234	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	482	OUT	OPTIONS /video_d/1.0.0.11/dnl_settings.json HTTP/1.1 Host: videodown.site Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-requested-with Origin: null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:38 UTC	363	IN	HTTP/1.1 204 No Content Server: nginx/1.14.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: x-requested-with Access-Control-Expose-Headers: X-Additional-Info

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.16	49952	139.45.197.244	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	525	OUT	GET /tag.min.js HTTP/1.1 Host: doruffleton.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:38 UTC	949	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:37 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 81749 Connection: close X-Trace-Id: b522e1855a6acb63e0c91e4ae9141819 Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Accept-Ranges: bytes Last-Modified: Tue, 09 Jan 2024 16:29:54 GMT Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:38 UTC	15435	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 71 77 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 71 77 2e 71 3b 76 61 72 20 65 3d 71 77 2e 4c 28 29 2c 74 3d 71 77 2e 48 79 5b 71 77 2e 4a 79 5d 28 71 77 2e 76 29 5b 71 77 2e 7a 65 5d 28 29 5b 71 77 2e 5a 5d 28 71 77 2e 76 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 74 3d 65 5b 71 77 2e 41 5d 3b 74 72 79 7b 65 5b 71 77 2e 71 74 5d 3d 74 5b 71 77 2e 71 74 5d 7d 63 61 74 63 68 28 72 29 7b 76 61 72 20 6e 3d 5b 5d 5b 71 77 2e 57 70 5d 5b 71 77 2e 4b 65 5d 28 74 5b 71 77 2e 75 61 5d 28 71 77 2e 6f 77 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 77 2e 63 65 3d 3d 3d 65 5b 71 77 2e 63 5d 7d 29 3b 65 5b 71 77 2e 71 74 5d 3d 6e 26 26 6e 5b 71 77 2e 41 79 5d 5b 71 77 2e 71 74 5d 7d 7d 71 77 2e 77 21 3d Data Ascii: (function(qw){!function(){qw.q;var e=qw.L(),t=qw.Hy[qw.Jy](qw.v)[qw.ze]()[qw.Z](qw.v);function n(){var t=e[qw.A];try{e[qw.qt]=t[qw.qt]}catch(r){var n=[][qw.Wp][qw.Ke](t[qw.ua](qw.ow),function(e){return qw.ce===e[qw.c]});e[qw.qt]=n&&n[qw.Ay][qw.qt]}}qw.w!=
2024-01-10 21:52:38 UTC	16384	IN	Data Raw: 71 77 2e 65 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 5b 71 77 2e 4d 61 5d 26 26 65 5b 71 77 2e 77 70 5d 28 29 7d 29 7d 72 65 74 75 72 6e 20 65 5b 71 77 2e 52 70 5d 5b 71 77 2e 56 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 5b 71 77 2e 51 64 5d 3d 65 7d 2c 65 5b 71 77 2e 52 70 5d 5b 71 77 2e 42 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 5b 71 77 2e 53 69 5d 3d 65 7d 2c 65 5b 71 77 2e 52 70 5d 5b 71 77 2e 4e 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 5b 71 77 2e 4d 61 5d 3d 21 71 77 2e 6a 2c 74 68 69 73 5b 71 77 2e 42 66 5d 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 5b 71 77 2e 77 70 5d 28 29 7d 2c 71 77 2e 63 67 29 7d 2c 65 5b 71 77 Data Ascii: qw.es,function(){e[qw.Ma]&&e[qw.wp]()})}return e[qw.Rp][qw.Vo]=function(e){this[qw.Qd]=e},e[qw.Rp][qw.Bo]=function(e){this[qw.Si]=e},e[qw.Rp][qw.No]=function(){var e=this;this[qw.Ma]=!qw.j,this[qw.Bf]=setInterval(function(){return e[qw.wp]()},qw.cg)},e[qw
2024-01-10 21:52:38 UTC	16384	IN	Data Raw: 20 75 5b 71 77 2e 6b 77 5d 3d 5b 6e 5b 71 77 2e 53 75 5d 5b 71 77 2e 4d 5d 28 6e 65 77 20 52 65 67 45 78 70 28 71 77 2e 75 64 2c 71 77 2e 62 65 29 2c 71 77 2e 56 3d 3d 3d 28 61 3d 6e 5b 71 77 2e 69 72 5d 29 7c 7c 76 6f 69 64 20 71 77 2e 6a 3d 3d 3d 61 3f 76 6f 69 64 20 71 77 2e 6a 3a 61 5b 71 77 2e 66 79 5d 28 29 29 2c 6e 5b 71 77 2e 53 75 5d 5b 71 77 2e 71 65 5d 28 71 77 2e 74 72 29 3e 2d 71 77 2e 6b 3f 71 77 2e 79 72 3a 71 77 2e 74 72 2c 71 77 2e 70 70 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 5b 71 77 2e 6b 77 5d 29 5d 5b 71 77 2e 5a 5d 28 71 77 2e 76 29 2c 4c 65 28 71 77 2e 53 75 29 2c 5b 21 71 77 2e 6b 5d 3b 6e 5b 71 77 2e 6e 79 5d 26 26 73 6e 28 71 77 2e 4c 28 71 77 2e 6c 6f 2c 71 77 2e 7a 6f 2c 71 77 2e 6b 79 2c 6e 5b 71 77 2e Data Ascii: u[qw.kw]=[n[qw.Su][qw.M](new RegExp(qw.ud,qw.be),qw.V===(a=n[qw.ir])\|\|void qw.j===a?void qw.j:a[qw.fy]()),n[qw.Su][qw.qe](qw.tr)>-qw.k?qw.yr:qw.tr,qw.pp,encodeURIComponent(u[qw.kw])][qw.Z](qw.v),Le(qw.Su),[!qw.k];n[qw.ny]&&sn(qw.L(qw.lo,qw.zo,qw.ky,n[qw.
2024-01-10 21:52:38 UTC	16384	IN	Data Raw: 28 71 77 2e 48 77 2c 71 77 2e 55 6a 2c 71 77 2e 54 6a 29 2c 72 5b 71 77 2e 4c 79 5d 5b 71 77 2e 52 6a 5d 28 71 77 2e 57 61 2c 71 77 2e 49 6a 2c 71 77 2e 54 6a 29 2c 72 5b 71 77 2e 4c 79 5d 5b 71 77 2e 52 6a 5d 28 71 77 2e 52 79 2c 71 77 2e 4f 6a 2c 71 77 2e 54 6a 29 2c 72 5b 71 77 2e 4c 79 5d 5b 71 77 2e 52 6a 5d 28 71 77 2e 50 6a 2c 71 77 2e 41 72 2c 71 77 2e 54 6a 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 72 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 71 77 2e 41 69 5d 28 71 77 2e 53 73 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 71 77 2e 46 79 5d 28 71 77 2e 53 73 2c 74 29 7d 29 7d 7d 7d 76 61 72 20 56 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e Data Ascii: (qw.Hw,qw.Uj,qw.Tj),r[qw.Ly][qw.Rj](qw.Wa,qw.Ij,qw.Tj),r[qw.Ly][qw.Rj](qw.Ry,qw.Oj,qw.Tj),r[qw.Ly][qw.Rj](qw.Pj,qw.Ar,qw.Tj)}catch(e){}}(r,function(t){return e[qw.Ai](qw.Ss,t)},function(t){return e[qw.Fy](qw.Ss,t)})}}}var Vn=function(e,t,n,r){return new(n
2024-01-10 21:52:38 UTC	16384	IN	Data Raw: 42 78 71 6d 65 71 27 5d 2c 5b 27 6d 72 27 2c 27 79 61 6e 75 78 71 42 61 62 47 62 46 6d 64 73 71 66 4e 78 6d 7a 77 58 75 7a 77 65 27 5d 2c 5b 27 51 72 27 2c 27 79 61 6e 75 78 71 42 61 62 67 7a 70 71 64 46 6d 64 73 71 66 4e 78 6d 7a 77 58 75 7a 77 65 27 5d 2c 5b 27 57 72 27 2c 27 63 64 4f 61 70 71 27 5d 2c 5b 27 45 72 27 2c 27 66 71 79 62 78 6d 66 71 27 5d 2c 5b 27 52 72 27 2c 27 6f 74 71 6f 77 47 64 78 27 5d 2c 5b 27 54 72 27 2c 27 73 71 7a 71 64 6d 66 71 47 64 78 27 5d 2c 5b 27 59 72 27 2c 27 64 71 72 64 71 65 74 47 64 78 27 5d 2c 5b 27 55 72 27 2c 27 70 71 65 77 66 61 62 27 5d 2c 5b 27 49 72 27 2c 27 70 61 6f 67 79 71 7a 66 27 5d 2c 5b 27 4f 72 27 2c 27 7a 61 7a 71 27 5d 2c 5b 27 50 72 27 2c 27 72 75 6a 71 70 27 5d 2c 5b 27 41 72 27 2c 27 74 75 70 70 71 Data Ascii: Bxqmeq'],['mr','yanuxqBabGbFmdsqfNxmzwXuzwe'],['Qr','yanuxqBabgzpqdFmdsqfNxmzwXuzwe'],['Wr','cdOapq'],['Er','fqybxmfq'],['Rr','otqowGdx'],['Tr','sqzqdmfqGdx'],['Yr','dqrdqetGdx'],['Ur','pqewfab'],['Ir','paogyqzf'],['Or','zazq'],['Pr','rujqp'],['Ar','tuppq
2024-01-10 21:52:38 UTC	778	IN	Data Raw: 2a 20 3e 20 2a 20 3e 20 2a 27 5d 2c 5b 27 67 6c 27 2c 27 62 6a 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 2d 75 7a 70 71 6a 3a 20 27 5d 2c 5b 27 68 6c 27 2c 27 20 2b 27 5d 2c 5b 27 6a 6c 27 2c 27 5c 5c 2e 27 5d 2c 5b 27 6b 6c 27 2c 27 65 6f 64 75 62 66 65 27 5d 2c 5b 27 6c 6c 27 2c 27 62 67 65 74 47 64 78 27 5d 2c 5b 27 7a 6c 27 2c 27 65 78 75 70 71 64 47 64 78 27 5d 2c 5b 27 78 6c 27 2c 27 68 75 73 7a 71 66 66 71 47 64 78 27 5d 2c 5b 27 63 6c 27 2c 27 75 7a 42 6d 73 71 42 67 65 74 47 64 78 27 5d 2c 5b 27 76 6c 27 2c 27 71 6a 66 64 6d 41 7a 6f 78 75 6f 77 47 64 78 27 5d 2c 5b 27 62 6c 27 2c 27 75 7a 66 71 64 65 66 75 66 75 6d 78 47 64 78 27 5d 2c 5b 27 6e 6c 27 2c 27 62 67 65 74 45 66 6d 66 71 27 5d 2c 5b 27 6d 6c 27 2c 27 62 Data Ascii: * > * > *'],['gl','bj;\n l-uzpqj: '],['hl',' +'],['jl','\\.'],['kl','eodubfe'],['ll','bgetGdx'],['zl','exupqdGdx'],['xl','huszqffqGdx'],['cl','uzBmsqBgetGdx'],['vl','qjfdmAzoxuowGdx'],['bl','uzfqdefufumxGdx'],['nl','bgetEfmfq'],['ml','b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.16	49961	104.21.76.46	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	503	OUT	GET /convert/ HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _gat_gtag_UA_225406547_1=1; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923556.0.0.0; _ga=GA1.1.20077430.1704923498
2024-01-10 21:52:38 UTC	694	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1222 Last-Modified: Wed, 10 Jan 2024 21:32:16 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FSutnK%2FUDmcOKYxtA66Y7zRX02t6IumraftWQ88UHmf2%2FucMpus4R69QuhbJLYAy6phjGzBQk9junXZlLLa1iKqHANVBZJSQ0vMNmVbs%2FImOLgtsO5DrBqthv8FhHpqyp494"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825ed9bac0a07-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:38 UTC	675	IN	Data Raw: 37 63 66 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 59 54 4d 50 34 20 2d 20 59 6f 75 74 75 62 65 20 74 6f 20 4d 70 34 20 63 6f 6e 76 65 72 74 65 72 20 4f 6e 6c 69 6e 65 20 54 6f 6f 6c 20 5b Data Ascii: 7cfb<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="robots" content="index,follow" /><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title>YTMP4 - Youtube to Mp4 converter Online Tool [
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 32 33 33 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 63 6f 6e 76 65 72 74 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 66 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 66 72 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 74 68 22 20 68 72 65 66 Data Ascii: ome.css?ver=233"><link rel="canonical" href="https://www-ytmp4.com/convert/"><link rel="alternate" hreflang="en" href="https://www-ytmp4.com"><link rel="alternate" hreflang="fr" href="https://www-ytmp4.com/fr/"><link rel="alternate" hreflang="th" href
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 70 34 22 3e 3c 2f 61 3e 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 76 65 72 74 65 72 5f 77 72 61 70 70 65 72 22 3e 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 76 65 72 74 65 72 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 22 3e 44 6f 77 6e 6c 6f 61 64 65 64 20 76 69 64 65 6f 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 69 64 3d 22 6c 6f 61 64 69 6e 67 5f 69 6d 67 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 0a 3c 73 70 61 6e 3e 69 6e 69 74 69 61 6c 69 7a 65 3c 2f 73 70 61 6e 3e 20 3c 69 6d 67 20 69 64 3d 22 73 70 65 65 6e 22 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 73 70 69 6e 6e 69 6e 67 2d 77 68 65 65 6c 2e 70 6e 67 22 20 61 6c 74 3d 22 79 74 6d 70 34 22 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 66 72 61 6d 65 Data Ascii: p4"></a><div id="converter_wrapper"><div id="converter"><div id="title">Downloaded video</div><div id="loading_img" style="display: none;"><span>initialize</span> <img id="speen" src="/images/spinning-wheel.png" alt="ytmp4"></div><div class="iframe
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 20 6e 6f 20 6e 65 65 64 20 74 6f 20 72 65 71 75 69 72 65 20 61 6e 79 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 6f 72 20 70 61 69 64 20 73 6f 66 74 77 61 72 65 2e 20 4f 75 72 20 77 65 62 73 69 74 65 20 77 6f 72 6b 73 20 6f 6e 20 4d 6f 62 69 6c 65 2c 20 43 6f 6d 70 75 74 65 72 73 20 26 20 74 61 62 6c 65 74 73 20 64 65 76 69 63 65 73 2e 20 49 74 e2 80 99 73 20 74 6f 74 61 6c 6c 79 20 66 72 65 65 20 74 6f 6f 6c 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 59 6f 75 74 75 62 65 20 64 6f 65 73 6e e2 80 99 74 20 70 72 6f 76 69 64 65 20 41 6e 79 20 64 6f 77 6e 6c 6f 61 64 20 6f 70 74 69 6f 6e 73 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 74 68 65 20 79 74 6d 70 34 20 74 6f 6f 6c 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 65 73 74 20 41 6c 74 65 72 6e 61 74 69 76 65 Data Ascii: no need to require any registration or paid software. Our website works on Mobile, Computers & tablets devices. Its totally free tool.</p><p>Youtube doesnt provide Any download options. In this case, the ytmp4 tool is one of the best Alternative
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 6c 69 3e 44 6f 77 6e 6c 6f 61 64 20 79 6f 75 74 75 62 65 20 76 69 64 65 6f 73 20 77 69 74 68 20 33 36 30 70 2c 20 61 6e 64 20 37 32 30 70 20 71 75 61 6c 69 74 79 2e 3c 2f 6c 69 3e 0a 3c 6c 69 3e 45 61 73 79 20 74 6f 20 75 73 65 20 61 6e 64 20 43 6c 65 61 6e 20 69 6e 74 65 72 66 61 63 65 20 6f 75 72 20 74 68 69 73 20 74 6f 6f 6c 3c 2f 6c 69 3e 0a 3c 6c 69 3e 79 6f 75 20 63 61 6e 20 63 6f 6e 76 65 72 74 20 74 68 65 20 6d 70 34 20 66 69 6c 65 73 20 66 72 6f 6d 20 79 6f 75 74 75 62 65 2e 3c 2f 6c 69 3e 0a 3c 6c 69 3e 55 73 69 6e 67 20 74 68 65 73 65 20 74 6f 6f 6c 73 20 77 69 74 68 6f 75 74 20 61 6e 79 20 61 64 73 2e 20 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 70 3e 57 65 20 68 6f 70 65 20 79 6f 75 20 6c 69 6b 65 20 6f 75 72 20 79 74 6d 70 34 20 2d 20 79 6f 75 Data Ascii: li>Download youtube videos with 360p, and 720p quality.</li><li>Easy to use and Clean interface our this tool</li><li>you can convert the mp4 files from youtube.</li><li>Using these tools without any ads. </li></ul><p>We hope you like our ytmp4 - you
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 3e 3c 70 61 74 68 20 64 3d 22 4d 34 35 39 2e 33 37 20 31 35 31 2e 37 31 36 63 2e 33 32 35 20 34 2e 35 34 38 2e 33 32 35 20 39 2e 30 39 37 2e 33 32 35 20 31 33 2e 36 34 35 20 30 20 31 33 38 2e 37 32 2d 31 30 35 2e 35 38 33 20 32 39 38 2e 35 35 38 2d 32 39 38 2e 35 35 38 20 32 39 38 2e 35 35 38 2d 35 39 2e 34 35 32 20 30 2d 31 31 34 2e 36 38 2d 31 37 2e 32 31 39 2d 31 36 31 2e 31 33 37 2d 34 37 2e 31 30 36 20 38 2e 34 34 37 2e 39 37 34 20 31 36 2e 35 36 38 20 31 2e 32 39 39 20 32 35 2e 33 34 20 31 2e 32 39 39 20 34 39 2e 30 35 35 20 30 20 39 34 2e 32 31 33 2d 31 36 2e 35 36 38 20 31 33 30 2e 32 37 34 2d 34 34 2e 38 33 32 2d 34 36 2e 31 33 32 2d 2e 39 37 35 2d 38 34 2e 37 39 32 2d 33 31 2e 31 38 38 2d 39 Data Ascii: wBox="0 0 512 512"><path d="M459.37 151.716c.325 4.548.325 9.097.325 13.645 0 138.72-105.583 298.558-298.558 298.558-59.452 0-114.68-17.219-161.137-47.106 8.447.974 16.568 1.299 25.34 1.299 49.055 0 94.213-16.568 130.274-44.832-46.132-.975-84.792-31.188-9
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 34 2d 31 31 33 2e 34 20 30 2d 36 36 2e 32 2d 39 33 2e 39 2d 35 34 2e 32 2d 39 33 2e 39 20 32 35 2e 38 20 30 20 31 36 2e 38 20 32 2e 31 20 33 35 2e 34 20 39 2e 36 20 35 30 2e 37 2d 31 33 2e 38 20 35 39 2e 34 2d 34 32 20 31 34 37 2e 39 2d 34 32 20 32 30 39 2e 31 20 30 20 31 38 2e 39 20 32 2e 37 20 33 37 2e 35 20 34 2e 35 20 35 36 2e 34 20 33 2e 34 20 33 2e 38 20 31 2e 37 20 33 2e 34 20 36 2e 39 20 31 2e 35 20 35 30 2e 34 2d 36 39 20 34 38 2e 36 2d 38 32 2e 35 20 37 31 2e 34 2d 31 37 32 2e 38 20 31 32 2e 33 20 32 33 2e 34 20 34 34 2e 31 20 33 36 20 36 39 2e 33 20 33 36 20 31 30 36 2e 32 20 30 20 31 35 33 2e 39 2d 31 30 33 2e 35 20 31 35 33 2e 39 2d 31 39 36 2e 38 43 33 38 34 20 37 31 2e 33 20 32 39 38 2e 32 20 36 2e 35 20 32 30 34 20 36 2e 35 7a 22 20 66 69 Data Ascii: 4-113.4 0-66.2-93.9-54.2-93.9 25.8 0 16.8 2.1 35.4 9.6 50.7-13.8 59.4-42 147.9-42 209.1 0 18.9 2.7 37.5 4.5 56.4 3.4 3.8 1.7 3.4 6.9 1.5 50.4-69 48.6-82.5 71.4-172.8 12.3 23.4 44.1 36 69.3 36 106.2 0 153.9-103.5 153.9-196.8C384 71.3 298.2 6.5 204 6.5z" fi
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 2e 34 20 31 37 2e 37 20 36 38 2e 39 20 32 37 20 31 30 36 2e 31 20 32 37 68 2e 31 63 31 32 32 2e 33 20 30 20 32 32 34 2e 31 2d 39 39 2e 36 20 32 32 34 2e 31 2d 32 32 32 20 30 2d 35 39 2e 33 2d 32 35 2e 32 2d 31 31 35 2d 36 37 2e 31 2d 31 35 37 7a 6d 2d 31 35 37 20 33 34 31 2e 36 63 2d 33 33 2e 32 20 30 2d 36 35 2e 37 2d 38 2e 39 2d 39 34 2d 32 35 2e 37 6c 2d 36 2e 37 2d 34 2d 36 39 2e 38 20 31 38 2e 33 4c 37 32 20 33 35 39 2e 32 6c 2d 34 2e 34 2d 37 63 2d 31 38 2e 35 2d 32 39 2e 34 2d 32 38 2e 32 2d 36 33 2e 33 2d 32 38 2e 32 2d 39 38 2e 32 20 30 2d 31 30 31 2e 37 20 38 32 2e 38 2d 31 38 34 2e 35 20 31 38 34 2e 36 2d 31 38 34 2e 35 20 34 39 2e 33 20 30 20 39 35 2e 36 20 31 39 2e 32 20 31 33 30 2e 34 20 35 34 2e 31 20 33 34 2e 38 20 33 34 2e 39 20 35 36 2e Data Ascii: .4 17.7 68.9 27 106.1 27h.1c122.3 0 224.1-99.6 224.1-222 0-59.3-25.2-115-67.1-157zm-157 341.6c-33.2 0-65.7-8.9-94-25.7l-6.7-4-69.8 18.3L72 359.2l-4.4-7c-18.5-29.4-28.2-63.3-28.2-98.2 0-101.7 82.8-184.5 184.6-184.5 49.3 0 95.6 19.2 130.4 54.1 34.8 34.9 56.
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2d 33 2e 34 2e 31 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 63 75 73 74 6f 6d 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 20 20 20 20 24 28 27 23 72 65 73 75 6c 74 5f 65 72 72 6f 72 27 29 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 76 61 72 20 69 6e 70 75 74 5f 69 64 20 3d 20 27 27 3b 0a 20 20 20 20 76 61 72 20 69 6e 70 75 74 5f 69 64 20 3d 20 59 6f 75 54 75 62 65 47 65 74 49 44 28 69 6e 70 75 74 5f 69 64 29 3b 0a 0a 20 20 20 20 Data Ascii: <script src="/js/jquery-3.4.1.min.js"></script><script src="/js/custome.js"></script><script type="text/javascript"> $(document).ready(function(){ $('#result_error').hide(); var input_id = ''; var input_id = YouTubeGetID(input_id);
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 2e 79 3a 72 65 74 75 72 6e 20 75 2e 64 28 74 2c 24 2e 43 61 2c 74 29 2c 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 26 26 6e 5b 24 2e 43 63 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 43 69 5d 3b 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3b 7d 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 75 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 24 2e 43 46 5d 5b 24 2e 43 4a 5d 5b 24 2e 42 7a 5d 28 6e 2c 74 29 3b 7d 2c 75 2e 70 3d 24 2e 42 75 2c 75 28 75 2e 73 3d 24 2e 42 78 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 66 6f 72 28 24 2e 5f 42 3d 24 2e 42 44 3b 24 2e 5f 42 3c 24 2e 43 66 3b 24 2e 5f 42 2b Data Ascii: .y:return u.d(t,$.Ca,t),t;break;case $.BD:var t=n&&n[$.Cc]?function(){return n[$.Ci];}:function(){return n;};break;}}},u.o=function(n,t){return Object[$.CF][$.CJ][$.Bz](n,t);},u.p=$.Bu,u(u.s=$.Bx);break;case $.y:function u(n){for($._B=$.BD;$._B<$.Cf;$._B+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.16	49938	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:37 UTC	998	OUT	GET /sw-check-permissions/4662709?var=5596087&ymid=769067736944087664&uhd=1 HTTP/1.1 Host: opmetapodor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: reverse=19NWcSvOQIXonbK2ZnhecGJv7xN_NXDK29c-sBKQGmo; OAID=d36449c3fc5d2c86d4a195aa43f059a6; oaidts=1704923556
2024-01-10 21:52:38 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/7.4.33 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SYH2d2avtIa1Us2lzP1P4d4zyX4ojV8aNyllGeKrXmoiUIkDL66RmcQk%2F7PLjnCAubxnWWWd7K7flrNMnTIgpcKCyUCx14GaC3pjIIPaIPx6DSEcZoq5uiAf45FRzR7D54Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825ee1f1d0f6d-EWR alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:38 UTC	355	IN	Data Raw: 33 61 38 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 59 6d 69 64 28 29 20 7b 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 55 52 4c 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 79 6d 69 64 27 29 3b 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 65 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 56 61 72 28 29 20 7b 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 55 52 4c 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 76 Data Ascii: 3a8function getYmid() { try { return new URL(location.href).searchParams.get('ymid'); } catch (e) { console.warn(e); } return null;}function getVar() { try { return new URL(location.href).searchParams.get('v
2024-01-10 21:52:38 UTC	588	IN	Data Raw: 79 20 7b 0a 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 55 52 4c 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 76 61 72 5f 33 27 29 3b 0a 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 65 29 3b 0a 20 20 20 7d 0a 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 56 61 72 34 28 29 20 7b 0a 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 55 52 4c 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 76 61 72 5f 34 27 29 3b 0a 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 63 6f 6e 73 6f Data Ascii: y { return new URL(location.href).searchParams.get('var_3'); } catch (e) { console.warn(e); } return null;}function getVar4() { try { return new URL(location.href).searchParams.get('var_4'); } catch (e) { conso
2024-01-10 21:52:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.16	49959	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:38 UTC	428	OUT	GET /gid.js?userId=d36449c3fc5d2c86d4a195aa43f059a6 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:38 UTC	681	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:38 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:38 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 65 66 65 38 33 62 31 31 33 30 31 30 34 65 66 65 61 30 64 34 37 35 65 32 63 62 37 35 34 36 34 66 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.16	49965	104.26.3.120	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:38 UTC	660	OUT	GET /css/app.css?id=16b4de5946e570f8f024b4c7108e70c9 HTTP/1.1 Host: dl--master--cdn.ytapis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:38 UTC	752	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 18 Jan 2023 05:47:56 GMT Vary: Accept-Encoding ETag: W/"63c7880c-193d8" Expires: Wed, 10 Jan 2024 23:40:11 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 CF-Cache-Status: HIT Age: 36747 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z%2FeFmxf4VNgihtrvugfnXxr7xfpW5RQ9cZt8RVqpxO1zShfHGvlBCMstDraZHF7kvaeI0B0cswTkAjnpfuKfLXKjD4GTU8jFrNtHNTM96psrJH8XYoq2K2yot1KdOtduIaFDsWBcTN4avCMn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825ef3e2c59b5-IAD
2024-01-10 21:52:38 UTC	617	IN	Data Raw: 37 63 62 30 0d 0a 2f 2a 21 20 74 61 69 6c 77 69 6e 64 63 73 73 20 76 33 2e 30 2e 32 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 73 3a 2f 2f 74 61 69 6c 77 69 6e 64 63 73 73 2e 63 6f 6d 2a 2f 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 23 65 35 65 37 65 62 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 2d 2d 74 77 2d 63 6f 6e 74 65 6e 74 3a 22 22 7d 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 75 6e 69 74 6f 2c 75 69 2d 73 61 6e 73 2d 73 65 72 69 66 2c 73 79 73 74 65 6d 2d 75 69 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d Data Ascii: 7cb0/! tailwindcss v3.0.23 \| MIT License \| https://tailwindcss.com/*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}html{-webkit-text-size-adjust:100%;font-family:Nunito,ui-sans-serif,system-ui,-apple-system
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 75 69 2d 6d 6f 6e 6f 73 70 61 63 65 2c 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 2c 43 6f 75 72 69 65 72 20 4e 65 77 2c 6d 6f 6e 6f 73 70 61 63 65 Data Ascii: erline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 79 3a 31 7d 69 6e 70 75 74 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 74 65 78 74 61 72 65 61 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 39 63 61 33 61 66 3b 6f 70 61 63 69 74 79 3a 31 7d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 74 65 78 74 61 72 65 61 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 39 63 61 33 61 66 3b 6f 70 61 63 69 74 79 3a 31 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 2c 62 75 74 74 6f 6e 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 3a 64 69 73 61 62 6c 65 64 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 65 6d 62 65 64 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 6f 62 6a 65 63 74 2c 73 76 67 2c 76 Data Ascii: y:1}input:-ms-input-placeholder,textarea:-ms-input-placeholder{color:#9ca3af;opacity:1}input::placeholder,textarea::placeholder{color:#9ca3af;opacity:1}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,v
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 72 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 35 36 33 65 62 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 73 68 61 64 6f 77 29 2c 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 73 68 61 64 6f 77 29 2c 76 61 72 28 2d 2d 74 77 2d 73 68 61 64 6f 77 29 3b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 32 70 78 7d 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 74 65 78 74 61 72 65 61 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 36 62 37 32 38 30 3b 6f 70 61 63 69 74 79 3a 31 7d 69 6e 70 75 74 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c Data Ascii: r);border-color:#2563eb;box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow);outline:2px solid transparent;outline-offset:2px}input::-moz-placeholder,textarea::-moz-placeholder{color:#6b7280;opacity:1}input:-ms-input-placeholder,
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 69 6e 69 74 69 61 6c 3b 63 6f 6c 6f 72 2d 61 64 6a 75 73 74 3a 75 6e 73 65 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 37 35 72 65 6d 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 2d 77 65 62 6b 69 74 2d 70 72 69 6e 74 2d 63 6f 6c 6f 72 2d 61 64 6a 75 73 74 3a 65 78 61 63 74 3b 2d 2d 74 77 2d 73 68 61 64 6f 77 3a 30 20 30 20 23 30 30 30 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 72 69 67 69 6e 3a 62 6f 72 64 65 72 2d 62 Data Ascii: ckground-size:initial;color-adjust:unset;padding-right:.75rem}[type=checkbox],[type=radio]{-webkit-print-color-adjust:exact;--tw-shadow:0 0 #0000;-webkit-appearance:none;-moz-appearance:none;appearance:none;background-color:#fff;background-origin:border-b
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 33 43 70 61 74 68 20 64 3d 27 4d 31 32 2e 32 30 37 20 34 2e 37 39 33 61 31 20 31 20 30 20 30 20 31 20 30 20 31 2e 34 31 34 6c 2d 35 20 35 61 31 20 31 20 30 20 30 20 31 2d 31 2e 34 31 34 20 30 6c 2d 32 2d 32 61 31 20 31 20 30 20 30 20 31 20 31 2e 34 31 34 2d 31 2e 34 31 34 4c 36 2e 35 20 39 2e 30 38 36 6c 34 2e 32 39 33 2d 34 2e 32 39 33 61 31 20 31 20 30 20 30 20 31 20 31 2e 34 31 34 20 30 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 7d 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 63 68 65 63 6b 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 Data Ascii: xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M12.207 4.793a1 1 0 0 1 0 1.414l-5 5a1 1 0 0 1-1.414 0l-2-2a1 1 0 0 1 1.414-1.414L6.5 9.086l4.293-4.293a1 1 0 0 1 1.414 0z'/%3E%3C/svg%3E")}[type=radio]:checked{background-image:url("data:image/svg+xml;char
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 2c 31 29 29 7d 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 3a 72 6f 6f 74 7b 2d 2d 70 3a 32 35 39 20 39 34 25 20 35 31 25 3b 2d 2d 70 66 3a 32 35 39 20 39 34 25 20 34 31 25 3b 2d 2d 73 66 3a 33 31 34 20 31 30 30 25 20 33 38 25 3b 2d 2d 61 66 3a 31 37 34 20 36 30 25 20 34 31 25 3b 2d 2d 6e 66 3a 32 31 39 20 31 34 25 20 32 32 25 3b 2d 2d 69 6e 3a 31 39 38 20 39 33 25 20 36 30 25 3b 2d 2d 73 75 3a 31 35 38 20 36 34 25 20 35 32 25 3b 2d 2d 77 61 3a 34 33 20 39 36 25 20 35 36 25 3b 2d 2d 65 72 3a 30 20 39 31 25 20 37 31 25 3b 2d 2d 69 6e 63 3a 31 39 38 20 31 30 30 25 20 31 32 25 3b 2d 2d 73 75 63 3a 31 35 38 20 31 30 30 25 Data Ascii: -tw-text-opacity,1))}html{-webkit-tap-highlight-color:transparent}:root{--p:259 94% 51%;--pf:259 94% 41%;--sf:314 100% 38%;--af:174 60% 41%;--nf:219 14% 22%;--in:198 93% 60%;--su:158 64% 52%;--wa:43 96% 56%;--er:0 91% 71%;--inc:198 100% 12%;--suc:158 100%
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 6f 70 2d 62 6c 75 72 3a 20 3b 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 62 72 69 67 68 74 6e 65 73 73 3a 20 3b 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 63 6f 6e 74 72 61 73 74 3a 20 3b 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 67 72 61 79 73 63 61 6c 65 3a 20 3b 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 68 75 65 2d 72 6f 74 61 74 65 3a 20 3b 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 69 6e 76 65 72 74 3a 20 3b 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 6f 70 61 63 69 74 79 3a 20 3b 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 73 61 74 75 72 61 74 65 3a 20 3b 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 73 65 70 69 61 3a 20 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 34 30 70 78 29 Data Ascii: op-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: }.container{width:100%}@media (min-width:640px)
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 70 65 3a 6c 6f 77 65 72 2d 61 6c 70 68 61 7d 2e 70 72 6f 73 65 20 3a 77 68 65 72 65 28 6f 6c 5b 74 79 70 65 3d 49 5d 29 3a 6e 6f 74 28 3a 77 68 65 72 65 28 5b 63 6c 61 73 73 7e 3d 6e 6f 74 2d 70 72 6f 73 65 5d 20 2a 29 29 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 75 70 70 65 72 2d 72 6f 6d 61 6e 7d 2e 70 72 6f 73 65 20 3a 77 68 65 72 65 28 6f 6c 5b 74 79 70 65 3d 69 5d 29 3a 6e 6f 74 28 3a 77 68 65 72 65 28 5b 63 6c 61 73 73 7e 3d 6e 6f 74 2d 70 72 6f 73 65 5d 20 2a 29 29 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6c 6f 77 65 72 2d 72 6f 6d 61 6e 7d 2e 70 72 6f 73 65 20 3a 77 68 65 72 65 28 6f 6c 5b 74 79 70 65 3d 49 20 73 5d 29 3a 6e 6f 74 28 3a 77 68 65 72 65 28 5b 63 6c 61 73 73 7e 3d 6e 6f 74 2d 70 72 6f 73 65 5d 20 2a 29 29 7b 6c 69 Data Ascii: pe:lower-alpha}.prose :where(ol[type=I]):not(:where([class~=not-prose] )){list-style-type:upper-roman}.prose :where(ol[type=i]):not(:where([class~=not-prose] )){list-style-type:lower-roman}.prose :where(ol[type=I s]):not(:where([class~=not-prose] *)){li
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 63 6c 6f 73 65 2d 71 75 6f 74 65 7d 2e 70 72 6f 73 65 20 3a 77 68 65 72 65 28 68 31 29 3a 6e 6f 74 28 3a 77 68 65 72 65 28 5b 63 6c 61 73 73 7e 3d 6e 6f 74 2d 70 72 6f 73 65 5d 20 2a 29 29 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 77 2d 70 72 6f 73 65 2d 68 65 61 64 69 6e 67 73 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 32 35 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 31 31 31 31 31 31 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 38 38 38 38 38 38 39 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 70 72 6f 73 65 20 3a 77 68 65 72 65 28 68 31 20 73 74 72 6f 6e 67 29 3a 6e 6f 74 28 3a 77 68 65 72 65 28 5b 63 6c 61 73 73 7e 3d 6e 6f 74 2d 70 72 6f 73 65 5d 20 2a 29 29 7b 66 6f 6e 74 2d 77 65 69 Data Ascii: close-quote}.prose :where(h1):not(:where([class~=not-prose] )){color:var(--tw-prose-headings);font-size:2.25em;font-weight:800;line-height:1.1111111;margin-bottom:.8888889em;margin-top:0}.prose :where(h1 strong):not(:where([class~=not-prose] )){font-wei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.16	49963	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:38 UTC	473	OUT	GET /gid.js?pub=0&userId=&zoneId=4662709&checkDuplicate=true&ymid=769067736944087664&var=5596087 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:38 UTC	681	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:38 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:38 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 65 66 65 38 33 62 31 31 33 30 31 30 34 65 66 65 61 30 64 34 37 35 65 32 63 62 37 35 34 36 34 66 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.16	49972	104.26.3.120	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:38 UTC	650	OUT	GET /vendor/livewire/livewire.js?id=90730a3b0e7144480175 HTTP/1.1 Host: dl--master--cdn.ytapis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:38 UTC	770	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 13 Oct 2023 10:05:59 GMT Vary: Accept-Encoding ETag: W/"65291687-2aae3" Expires: Wed, 10 Jan 2024 22:27:33 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 CF-Cache-Status: HIT Age: 41105 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IzBLLNcNWRRVTMvP5PMQNpahotqKXbppax6G07kz37IsoA64fX6e9GSjBTNIn3hI8omnIDDy5QLksEtqzLKl%2BP%2FeTDVtheNvdiN5LEpxZdj9PLV%2BvoFarV01eZHXcWuD8W8EsTm9hLCdYqlY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825f10aa457ee-IAD
2024-01-10 21:52:38 UTC	599	IN	Data Raw: 37 63 39 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 2c 66 61 63 74 6f 72 79 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 61 63 74 6f 72 79 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 66 61 63 74 6f 72 79 29 3a 28 67 6c 6f 62 61 6c 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 67 6c 6f 62 61 6c 7c 7c 73 65 6c 66 29 2e 4c 69 76 65 77 69 72 65 3d 66 61 63 74 6f 72 79 28 29 7d 28 74 68 69 73 2c 28 66 Data Ascii: 7c9f!function(global,factory){"object"==typeof exports&&"undefined"!=typeof module?module.exports=factory():"function"==typeof define&&define.amd?define(factory):(global="undefined"!=typeof globalThis?globalThis:global\|\|self).Livewire=factory()}(this,(f
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 3d 3d 69 29 3b 5f 6e 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 72 72 29 7b 5f 64 3d 21 30 2c 5f 65 3d 65 72 72 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 5f 6e 26 26 6e 75 6c 6c 21 3d 5f 69 2e 72 65 74 75 72 6e 26 26 28 5f 72 3d 5f 69 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 5f 72 29 21 3d 3d 5f 72 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 5f 64 29 74 68 72 6f 77 20 5f 65 7d 7d 72 65 74 75 72 6e 20 5f 61 72 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 77 6e 4b 65 79 73 24 31 28 6f 62 6a 65 63 74 2c 65 6e 75 6d 65 72 61 62 6c 65 4f 6e 6c 79 29 7b 76 61 72 20 6b 65 79 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 62 6a 65 63 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b Data Ascii: ==i);_n=!0);}catch(err){_d=!0,_e=err}finally{try{if(!_n&&null!=_i.return&&(_r=_i.return(),Object(_r)!==_r))return}finally{if(_d)throw _e}}return _arr}}function ownKeys$1(object,enumerableOnly){var keys=Object.keys(object);if(Object.getOwnPropertySymbols){
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 65 74 2c 70 72 6f 70 73 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 70 72 6f 70 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 64 65 73 63 72 69 70 74 6f 72 3d 70 72 6f 70 73 5b 69 5d 3b 64 65 73 63 72 69 70 74 6f 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 64 65 73 63 72 69 70 74 6f 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 64 65 73 63 72 69 70 74 6f 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 64 65 73 63 72 69 70 74 6f 72 26 26 28 64 65 73 63 72 69 70 74 6f 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 61 72 67 65 74 2c 5f 74 6f 50 72 6f 70 65 72 74 79 4b 65 79 28 64 65 73 63 72 69 70 74 6f 72 2e 6b 65 79 29 2c 64 65 73 63 72 69 70 Data Ascii: et,props){for(var i=0;i<props.length;i++){var descriptor=props[i];descriptor.enumerable=descriptor.enumerable\|\|!1,descriptor.configurable=!0,"value"in descriptor&&(descriptor.writable=!0),Object.defineProperty(target,_toPropertyKey(descriptor.key),descrip
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 74 6f 74 79 70 65 4f 66 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 70 2c 6f 7d 2c 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6f 2c 70 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 73 4e 61 74 69 76 65 52 65 66 6c 65 63 74 43 6f 6e 73 74 72 75 63 74 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 7c 7c 21 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 29 72 65 74 75 72 6e 21 31 3b 69 66 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 72 6f 78 79 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 Data Ascii: totypeOf.bind():function(o,p){return o.__proto__=p,o},_setPrototypeOf(o,p)}function _isNativeReflectConstruct(){if("undefined"==typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 61 79 28 61 72 72 29 7c 7c 5f 6e 6f 6e 49 74 65 72 61 62 6c 65 52 65 73 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 6f 43 6f 6e 73 75 6d 61 62 6c 65 41 72 72 61 79 28 61 72 72 29 7b 72 65 74 75 72 6e 20 5f 61 72 72 61 79 57 69 74 68 6f 75 74 48 6f 6c 65 73 28 61 72 72 29 7c 7c 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 61 72 72 29 7c 7c 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 61 72 72 29 7c 7c 5f 6e 6f 6e 49 74 65 72 61 62 6c 65 53 70 72 65 61 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 61 72 72 61 79 57 69 74 68 6f 75 74 48 6f 6c 65 73 28 61 72 72 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 72 72 29 29 72 65 74 75 72 6e 20 5f 61 72 72 61 79 4c 69 6b 65 54 6f 41 72 72 61 79 28 61 72 72 29 Data Ascii: ay(arr)\|\|_nonIterableRest()}function _toConsumableArray(arr){return _arrayWithoutHoles(arr)\|\|_iterableToArray(arr)\|\|_unsupportedIterableToArray(arr)\|\|_nonIterableSpread()}function _arrayWithoutHoles(arr){if(Array.isArray(arr))return _arrayLikeToArray(arr)
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 70 75 74 2c 68 69 6e 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 69 6e 70 75 74 7c 7c 6e 75 6c 6c 3d 3d 3d 69 6e 70 75 74 29 72 65 74 75 72 6e 20 69 6e 70 75 74 3b 76 61 72 20 70 72 69 6d 3d 69 6e 70 75 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 70 72 69 6d 29 7b 76 61 72 20 72 65 73 3d 70 72 69 6d 2e 63 61 6c 6c 28 69 6e 70 75 74 2c 68 69 6e 74 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 72 65 73 29 72 65 74 75 72 6e 20 72 65 73 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 Data Ascii: put,hint){if("object"!=typeof input\|\|null===input)return input;var prim=input[Symbol.toPrimitive];if(void 0!==prim){var res=prim.call(input,hint\|\|"default");if("object"!=typeof res)return res;throw new TypeError("@@toPrimitive must return a primitive valu
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 5f 74 68 69 73 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 74 68 69 73 2e 65 6c 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 61 6d 65 73 28 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 7b 72 65 74 75 72 6e 20 6e 61 6d 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 77 69 72 65 3a 22 29 29 7d 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 7b 76 61 72 20 5f 6e 61 6d 65 24 72 65 70 6c 61 63 65 24 73 70 6c 69 74 32 3d 5f 74 6f 41 72 72 61 79 28 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 77 69 72 65 3a 22 29 2c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 29 2c 74 79 70 65 3d 5f 6e 61 6d 65 24 72 65 70 6c 61 63 65 24 73 70 6c 69 74 32 5b 30 5d 2c 6d Data Ascii: _this=this;return Array.from(this.el.getAttributeNames().filter((function(name){return name.match(new RegExp("wire:"))})).map((function(name){var _name$replace$split2=_toArray(name.replace(new RegExp("wire:"),"").split(".")),type=_name$replace$split2[0],m
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 53 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 22 73 22 2c 22 22 29 29 29 2c 64 75 72 61 74 69 6f 6e 49 6e 4d 69 6c 6c 69 53 65 63 6f 6e 64 73 7c 7c 64 65 66 61 75 6c 74 44 75 72 61 74 69 6f 6e 7d 7d 2c 7b 6b 65 79 3a 22 70 61 72 73 65 4f 75 74 4d 65 74 68 6f 64 41 6e 64 50 61 72 61 6d 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 72 61 77 4d 65 74 68 6f 64 29 7b 76 61 72 20 6d 65 74 68 6f 64 3d 72 61 77 4d 65 74 68 6f 64 2c 70 61 72 61 6d 73 3d 5b 5d 2c 6d 65 74 68 6f 64 41 6e 64 50 61 72 61 6d 53 74 72 69 6e 67 3d 6d 65 74 68 6f 64 2e 6d 61 74 63 68 28 2f 28 5b 5c 73 5c 53 5d 2a 3f 29 5c 28 28 5b 5c 73 5c 53 5d 2a 29 5c 29 2f 29 3b 6d 65 74 68 6f 64 41 6e 64 50 61 72 61 6d 53 74 72 69 6e 67 26 26 28 6d 65 74 68 6f 64 3d 6d 65 74 68 6f 64 41 6e 64 Data Ascii: String.replace("s",""))),durationInMilliSeconds\|\|defaultDuration}},{key:"parseOutMethodAndParams",value:function(rawMethod){var method=rawMethod,params=[],methodAndParamString=method.match(/([\s\S]?)$([\s\S])$/);methodAndParamString&&(method=methodAnd
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 6f 77 24 6c 69 76 65 77 69 72 65 5f 74 6f 6b 65 3d 77 69 6e 64 6f 77 2e 6c 69 76 65 77 69 72 65 5f 74 6f 6b 65 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 5f 77 69 6e 64 6f 77 24 6c 69 76 65 77 69 72 65 5f 74 6f 6b 65 3f 5f 77 69 6e 64 6f 77 24 6c 69 76 65 77 69 72 65 5f 74 6f 6b 65 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 62 61 62 43 61 73 65 28 73 75 62 6a 65 63 74 29 7b 72 65 74 75 72 6e 20 73 75 62 6a 65 63 74 2e 72 65 70 6c 61 63 65 28 2f 28 5b 61 2d 7a 5d 29 28 5b 41 2d 5a 5d 29 2f 67 2c 22 24 31 2d 24 32 22 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5f 5c 73 5d 2f 2c 22 2d 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 0a 2f 2a 21 0a 20 20 20 2a 20 69 73 6f 62 6a 65 63 74 20 3c 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 6f Data Ascii: ow$livewire_toke=window.livewire_token)&&void 0!==_window$livewire_toke?_window$livewire_toke:void 0}function kebabCase(subject){return subject.replace(/([a-z])([A-Z])/g,"$1-$2").replace(/[_\s]/,"-").toLowerCase()}/! isobject <https://github.com/jo
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 5d 5d 2c 6a 6f 69 6e 43 68 61 72 2c 6f 70 74 69 6f 6e 73 29 2c 68 61 73 50 72 6f 70 3d 70 72 6f 70 20 69 6e 20 74 61 72 67 65 74 29 7b 69 66 28 21 69 73 56 61 6c 69 64 28 70 72 6f 70 2c 74 61 72 67 65 74 2c 6f 70 74 69 6f 6e 73 29 29 72 65 74 75 72 6e 20 6f 70 74 69 6f 6e 73 2e 64 65 66 61 75 6c 74 3b 74 61 72 67 65 74 3d 74 61 72 67 65 74 5b 70 72 6f 70 5d 2c 69 64 78 3d 6e 2d 31 3b 62 72 65 61 6b 7d 69 66 28 21 68 61 73 50 72 6f 70 29 72 65 74 75 72 6e 20 6f 70 74 69 6f 6e 73 2e 64 65 66 61 75 6c 74 7d 7d 77 68 69 6c 65 28 2b 2b 69 64 78 3c 6c 65 6e 26 26 69 73 56 61 6c 69 64 4f 62 6a 65 63 74 28 74 61 72 67 65 74 29 29 3b 72 65 74 75 72 6e 20 69 64 78 3d 3d 3d 6c 65 6e 3f 74 61 72 67 65 74 3a 6f 70 74 69 6f 6e 73 2e 64 65 66 61 75 6c 74 7d 3b 0a 2f 2a Data Ascii: ]],joinChar,options),hasProp=prop in target){if(!isValid(prop,target,options))return options.default;target=target[prop],idx=n-1;break}if(!hasProp)return options.default}}while(++idx<len&&isValidObject(target));return idx===len?target:options.default};/*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.16	49964	139.45.197.244	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:38 UTC	611	OUT	GET /5/5588625/?oo=1&js_build=iclick-v1.653.0&os=windows&os_version=10.0.0 HTTP/1.1 Host: piteevoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:38 UTC	1384	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: application/json Content-Length: 2970 Connection: close X-Trace-Id: db0e0b018b822112a0f42db0e9fda127 Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=e3413ec454e843729f4692724efd3be8; expires=Thu, 09 Jan 2025 21:52:38 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923558; expires=Thu, 09 Jan 2025 21:52:38 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-01-10 21:52:38 UTC	2970	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 2f 2f 70 69 74 65 65 76 6f 6f 2e 63 6f 6d 2f 3f 72 62 3d 58 44 30 79 64 67 54 7a 79 43 73 78 36 55 75 47 6b 77 6d 7a 72 63 66 74 64 6f 43 79 38 59 61 7a 6d 64 73 6e 70 55 74 6b 57 61 64 55 4d 56 49 37 47 66 61 32 49 43 6a 37 69 55 45 37 4b 69 58 48 2d 33 63 76 51 4e 61 52 4f 76 67 61 62 4a 4b 4f 39 69 31 62 33 2d 53 67 72 37 2d 36 36 34 48 68 4e 31 6e 2d 46 4b 48 74 6b 63 64 48 47 61 66 51 77 34 64 7a 66 47 48 48 58 78 6f 4a 4f 33 53 42 5f 74 48 4d 4e 4e 4b 30 69 34 45 70 4f 58 6d 59 4e 5a 6a 75 6c 76 41 6b 32 51 62 38 41 69 56 4b 7a 37 41 65 76 73 70 5f 4b 68 41 6f 34 50 38 74 4c 69 36 66 77 4c 37 77 43 69 31 64 49 71 6d 75 38 77 52 65 30 7a 32 53 76 55 6b 5f 62 44 4f 78 38 53 36 4a 51 51 44 47 30 2d 2d 57 78 6e 6d 66 57 62 56 45 Data Ascii: {"url":"//piteevoo.com/?rb=XD0ydgTzyCsx6UuGkwmzrcftdoCy8YazmdsnpUtkWadUMVI7Gfa2ICj7iUE7KiXH-3cvQNaROvgabJKO9i1b3-Sgr7-664HhN1n-FKHtkcdHGafQw4dzfGHHXxoJO3SB_tHMNNK0i4EpOXmYNZjulvAk2Qb8AiVKz7Aevsp_KhAo4P8tLi6fwL7wCi1dIqmu8wRe0z2SvUk_bDOx8S6JQQDG0--WxnmfWbVE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.16	49973	104.17.24.14	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:38 UTC	590	OUT	GET /ajax/libs/iframe-resizer/4.3.2/iframeResizer.contentWindow.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dl--master--cdn.ytapis.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:38 UTC	957	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"60c3228f-13e9" Last-Modified: Fri, 11 Jun 2021 08:45:03 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 54441 Expires: Mon, 30 Dec 2024 21:52:38 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uk4EOzQjxjjJ%2BwdBLkv%2BlC%2BtjnMRwwCt3DJZ8EuiyttghBzuXSYdOCUK7gjSGGspjoEM0xt7PvoL7QMYMmO26x7Ha8f2kUdLJyOVMlIFuBkBwEadxjvK6UZSOVHS213hVJstPU2Y"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 843825f1ad869c2b-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:38 UTC	412	IN	Data Raw: 33 35 32 66 0d 0a 2f 2a 21 20 69 46 72 61 6d 65 20 52 65 73 69 7a 65 72 20 28 69 66 72 61 6d 65 53 69 7a 65 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 6d 69 6e 2e 6a 73 29 20 2d 20 76 34 2e 33 2e 32 20 2d 20 32 30 32 31 2d 30 34 2d 32 36 0a 20 2a 20 20 44 65 73 63 3a 20 49 6e 63 6c 75 64 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 70 61 67 65 20 62 65 69 6e 67 20 6c 6f 61 64 65 64 20 69 6e 74 6f 20 61 6e 20 69 66 72 61 6d 65 0a 20 2a 20 20 20 20 20 20 20 20 74 6f 20 66 6f 72 63 65 20 74 68 65 20 69 66 72 61 6d 65 20 74 6f 20 72 65 73 69 7a 65 20 74 6f 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 2e 0a 20 2a 20 20 52 65 71 75 69 72 65 73 3a 20 69 66 72 61 6d 65 52 65 73 69 7a 65 72 2e 6d 69 6e 2e 6a 73 20 6f 6e 20 68 6f 73 74 20 70 Data Ascii: 352f/! iFrame Resizer (iframeSizer.contentWindow.min.js) - v4.3.2 - 2021-04-26 Desc: Include this file in any page being loaded into an iframe * to force the iframe to resize to the content size. * Requires: iframeResizer.min.js on host p
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 3d 22 22 2c 73 3d 6e 75 6c 6c 2c 64 3d 22 22 2c 6c 3d 21 31 2c 66 3d 7b 72 65 73 69 7a 65 3a 31 2c 63 6c 69 63 6b 3a 31 7d 2c 6d 3d 31 32 38 2c 68 3d 21 30 2c 67 3d 31 2c 6e 3d 22 62 6f 64 79 4f 66 66 73 65 74 22 2c 70 3d 6e 2c 76 3d 21 30 2c 79 3d 22 22 2c 77 3d 7b 7d 2c 62 3d 33 32 2c 54 3d 6e 75 6c 6c 2c 45 3d 21 31 2c 4f 3d 21 31 2c 53 3d 22 5b 69 46 72 61 6d 65 53 69 7a 65 72 5d 22 2c 4d 3d 53 2e 6c 65 6e 67 74 68 2c 49 3d 22 22 2c 4e 3d 7b 6d 61 78 3a 31 2c 6d 69 6e 3a 31 2c 62 6f 64 79 53 63 72 6f 6c 6c 3a 31 2c 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 53 63 72 6f 6c 6c 3a 31 7d 2c 41 3d 22 63 68 69 6c 64 22 2c 43 3d 21 30 2c 7a 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2c 6b 3d 22 2a 22 2c 52 3d 30 2c 78 3d 21 31 2c 65 3d 6e 75 6c 6c 2c 4c 3d Data Ascii: ="",s=null,d="",l=!1,f={resize:1,click:1},m=128,h=!0,g=1,n="bodyOffset",p=n,v=!0,y="",w={},b=32,T=null,E=!1,O=!1,S="[iFrameSizer]",M=S.length,I="",N={max:1,min:1,bodyScroll:1,documentElementScroll:1},A="child",C=!0,z=window.parent,k="*",R=0,x=!1,e=null,L=
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 65 28 22 62 6f 74 74 6f 6d 22 2c 62 65 28 29 29 29 7d 2c 74 61 67 67 65 64 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 65 28 22 62 6f 74 74 6f 6d 22 2c 22 64 61 74 61 2d 69 66 72 61 6d 65 2d 68 65 69 67 68 74 22 29 7d 7d 2c 24 3d 7b 62 6f 64 79 53 63 72 6f 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 57 69 64 74 68 7d 2c 62 6f 64 79 4f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6f 66 66 73 65 74 57 69 64 74 68 7d 2c 63 75 73 74 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 2e 77 69 64 74 68 28 29 7d 2c 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 53 63 Data Ascii: e("bottom",be()))},taggedElement:function(){return we("bottom","data-iframe-height")}},$={bodyScroll:function(){return document.body.scrollWidth},bodyOffset:function(){return document.body.offsetWidth},custom:function(){return W.width()},documentElementSc
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 6d 65 73 73 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 28 29 3b 69 65 28 22 6f 6e 4d 65 73 73 61 67 65 20 63 61 6c 6c 65 64 20 66 72 6f 6d 20 70 61 72 65 6e 74 3a 20 22 2b 65 29 2c 6a 28 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 29 2c 69 65 28 22 20 2d 2d 22 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 61 74 61 2e 73 70 6c 69 74 28 22 5d 22 29 5b 31 5d 2e 73 70 6c 69 74 28 22 3a 22 29 5b 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 61 74 61 2e 73 75 62 73 74 72 28 74 2e 64 61 74 61 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 2b 31 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 61 74 61 2e 73 70 6c 69 74 28 22 3a 22 29 5b 32 5d 69 6e 7b 74 72 75 Data Ascii: message:function(){var e=i();ie("onMessage called from parent: "+e),j(JSON.parse(e)),ie(" --")}};function o(){return t.data.split("]")[1].split(":")[0]}function i(){return t.data.substr(t.data.indexOf(":")+1)}function r(){return t.data.split(":")[2]in{tru
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 32 5d 29 2c 41 3d 63 21 3d 3d 74 5b 31 33 5d 3f 74 5b 31 33 5d 3a 41 2c 50 3d 63 21 3d 3d 74 5b 31 34 5d 3f 74 5b 31 34 5d 3a 50 2c 4f 3d 63 21 3d 3d 74 5b 31 35 5d 3f 42 6f 6f 6c 65 61 6e 28 74 5b 31 35 5d 29 3a 4f 2c 69 65 28 22 49 6e 69 74 69 61 6c 69 73 69 6e 67 20 69 46 72 61 6d 65 20 28 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2b 22 29 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 69 65 28 22 53 65 74 75 70 20 63 75 73 74 6f 6d 20 22 2b 74 2b 22 43 61 6c 63 4d 65 74 68 6f 64 22 29 2c 57 5b 74 5d 3d 65 2c 65 3d 22 63 75 73 74 6f 6d 22 29 2c 65 7d 22 69 46 72 61 6d 65 52 65 73 69 7a 65 72 22 69 6e Data Ascii: 2]),A=c!==t[13]?t[13]:A,P=c!==t[14]?t[14]:P,O=c!==t[15]?Boolean(t[15]):O,ie("Initialising iFrame ("+window.location.href+")"),function(){function e(e,t){return"function"==typeof e&&(ie("Setup custom "+t+"CalcMethod"),W[t]=e,e="custom"),e}"iFrameResizer"in
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 4e 65 28 30 2c 30 2c 22 63 6c 6f 73 65 22 29 7d 2c 67 65 74 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 2c 67 65 74 50 61 67 65 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 48 3d 65 2c 4e 65 28 30 2c 30 2c 22 70 61 67 65 49 6e 66 6f 22 29 29 3a 28 48 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 4e 65 28 30 2c 30 2c 22 70 61 67 65 49 6e 66 6f 53 74 6f 70 22 29 29 7d 2c 6d 6f 76 65 54 6f 41 6e 63 68 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 2e 66 69 6e 64 54 61 72 67 65 74 28 65 29 7d 2c 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 49 65 28 22 70 61 72 65 6e 74 49 46 72 61 6d 65 2e 72 65 73 65 74 22 29 7d Data Ascii: lose:function(){Ne(0,0,"close")},getId:function(){return I},getPageInfo:function(e){"function"==typeof e?(H=e,Ne(0,0,"pageInfo")):(H=function(){},Ne(0,0,"pageInfoStop"))},moveToAnchor:function(e){w.findTarget(e)},reset:function(){Ie("parentIFrame.reset")}
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 22 2b 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 22 22 21 3d 3d 65 26 26 22 23 22 21 3d 3d 65 26 26 6e 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 61 5b 68 72 65 66 5e 3d 22 23 22 5d 27 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 23 22 21 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 26 26 74 65 28 65 2c 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 Data Ascii: "+n))}function e(){var e=window.location.hash,t=window.location.href;""!==e&&"#"!==e&&n(t)}function t(){Array.prototype.forEach.call(document.querySelectorAll('a[href^="#"]'),function(e){"#"!==e.getAttribute("href")&&te(e,"click",function(e){e.preventDefa
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 65 29 7b 73 65 28 7b 6d 65 74 68 6f 64 3a 65 2c 65 76 65 6e 74 54 79 70 65 3a 22 41 6e 69 6d 61 74 69 6f 6e 20 53 74 61 72 74 22 2c 65 76 65 6e 74 4e 61 6d 65 73 3a 5b 22 61 6e 69 6d 61 74 69 6f 6e 73 74 61 72 74 22 2c 22 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 53 74 61 72 74 22 5d 7d 29 2c 73 65 28 7b 6d 65 74 68 6f 64 3a 65 2c 65 76 65 6e 74 54 79 70 65 3a 22 41 6e 69 6d 61 74 69 6f 6e 20 49 74 65 72 61 74 69 6f 6e 22 2c 65 76 65 6e 74 4e 61 6d 65 73 3a 5b 22 61 6e 69 6d 61 74 69 6f 6e 69 74 65 72 61 74 69 6f 6e 22 2c 22 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 49 74 65 72 61 74 69 6f 6e 22 5d 7d 29 2c 73 65 28 7b 6d 65 74 68 6f 64 3a 65 2c 65 76 65 6e 74 54 79 70 65 3a 22 41 6e Data Ascii: ventType)}function de(e){se({method:e,eventType:"Animation Start",eventNames:["animationstart","webkitAnimationStart"]}),se({method:e,eventType:"Animation Iteration",eventNames:["animationiteration","webkitAnimationIteration"]}),se({method:e,eventType:"An
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 6e 64 22 5d 7d 29 2c 22 63 68 69 6c 64 22 3d 3d 3d 41 26 26 73 65 28 7b 6d 65 74 68 6f 64 3a 65 2c 65 76 65 6e 74 54 79 70 65 3a 22 49 46 72 61 6d 65 20 52 65 73 69 7a 65 64 22 2c 65 76 65 6e 74 4e 61 6d 65 3a 22 72 65 73 69 7a 65 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 2c 74 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 74 21 3d 3d 65 26 26 28 65 20 69 6e 20 6e 7c 7c 28 72 65 28 65 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 6f 70 74 69 6f 6e 20 66 6f 72 20 22 2b 6f 2b 22 43 61 6c 63 75 6c 61 74 69 6f 6e 4d 65 74 68 6f 64 2e 22 29 2c 65 3d 74 29 2c 69 65 28 6f 2b 27 20 63 61 6c 63 75 6c 61 74 69 6f 6e 20 6d 65 74 68 6f 64 20 73 65 74 20 74 6f 20 22 27 2b 65 2b 27 22 27 29 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 29 7b 70 3d 6c 65 28 Data Ascii: nd"]}),"child"===A&&se({method:e,eventType:"IFrame Resized",eventName:"resize"})}function le(e,t,n,o){return t!==e&&(e in n\|\|(re(e+" is not a valid option for "+o+"CalculationMethod."),e=t),ie(o+' calculation method set to "'+e+'"')),e}function fe(){p=le(
2024-01-10 21:52:38 UTC	1369	IN	Data Raw: 63 74 65 72 44 61 74 61 4f 6c 64 56 61 6c 75 65 3a 21 31 2c 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 2c 73 7d 28 29 3b 72 65 74 75 72 6e 7b 64 69 73 63 6f 6e 6e 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 64 69 73 63 6f 6e 6e 65 63 74 22 69 6e 20 73 26 26 28 69 65 28 22 44 69 73 63 6f 6e 6e 65 63 74 20 62 6f 64 79 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 29 2c 73 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 75 2e 66 6f 72 45 61 63 68 28 6f 29 29 7d 7d 7d 28 29 3a 28 69 65 28 22 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 21 22 29 2c 67 65 28 29 29 29 3a 69 65 28 22 41 75 74 6f 20 52 65 73 69 7a 65 20 64 69 73 61 62 Data Ascii: cterDataOldValue:!1,childList:!0,subtree:!0}),s}();return{disconnect:function(){"disconnect"in s&&(ie("Disconnect body MutationObserver"),s.disconnect(),u.forEach(o))}}}():(ie("MutationObserver not supported in this browser!"),ge())):ie("Auto Resize disab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.16	49970	3.10.43.234	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:38 UTC	569	OUT	GET /video_d/1.0.0.11/dnl_settings.json HTTP/1.1 Host: videodown.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:38 UTC	389	IN	HTTP/1.1 200 OK Server: nginx/1.14.0 (Ubuntu) Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: application/json; charset=utf-8 Content-Length: 63 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Additional-Info Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache ETag: W/"3f-UBFKnP6sVj3rZTraiDRoSqW4Iow"
2024-01-10 21:52:38 UTC	63	IN	Data Raw: 7b 22 68 65 61 64 65 72 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 2a 22 7d 5d 7d Data Ascii: {"headers":[{"key":"Access-Control-Allow-Origin","value":"*"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.16	49967	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:38 UTC	634	OUT	GET /gid.js?userId=9261040a4f7248eba3a37ed35ddc868c HTTP/1.1 Host: my.rtmark.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:38 UTC	704	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:38 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:38 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 65 66 65 38 33 62 31 31 33 30 31 30 34 65 66 65 61 30 64 34 37 35 65 32 63 62 37 35 34 36 34 66 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.16	49969	139.45.197.244	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:38 UTC	426	OUT	GET /5/6026557/?oo=1&aab=1 HTTP/1.1 Host: doruffleton.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=9261040a4f7248eba3a37ed35ddc868c; oaidts=1704923557
2024-01-10 21:52:38 UTC	1295	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:38 GMT Content-Type: application/json Content-Length: 2825 Connection: close X-Trace-Id: 1600b3a0c5f416216e18be6a670702ac Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=9261040a4f7248eba3a37ed35ddc868c; expires=Thu, 09 Jan 2025 21:52:38 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923557; expires=Thu, 09 Jan 2025 21:52:38 GMT; path=/; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-01-10 21:52:38 UTC	2825	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 2f 2f 64 6f 72 75 66 66 6c 65 74 6f 6e 2e 63 6f 6d 2f 3f 72 62 3d 7a 74 4c 63 64 2d 6e 77 75 48 54 4f 4f 62 42 42 45 32 74 41 58 62 54 72 57 6c 78 72 4c 43 58 45 4b 79 4b 6d 72 62 61 4d 47 43 46 73 46 54 42 34 47 55 43 67 42 6e 68 48 43 39 65 51 41 4b 73 44 42 2d 38 41 41 49 41 72 77 4a 56 54 37 49 4d 4f 76 39 4a 4a 5f 64 38 4f 52 4d 66 71 51 61 4a 37 4d 41 5f 2d 54 35 7a 45 47 55 52 68 32 68 49 62 54 33 46 65 6e 38 31 37 4a 58 32 75 53 6d 33 31 4c 53 31 54 5f 62 56 42 4b 52 67 52 66 65 42 76 5a 4a 74 52 45 46 5a 37 59 4f 5f 67 41 38 39 67 70 6b 54 72 57 36 2d 74 46 58 6a 38 59 52 63 36 78 6c 73 41 4f 38 4e 5f 32 39 49 50 6f 55 52 33 34 63 52 32 65 66 4a 32 49 39 4b 61 6e 6d 38 4f 34 68 47 70 62 2d 50 47 72 61 31 6c 59 59 4c 37 78 Data Ascii: {"url":"//doruffleton.com/?rb=ztLcd-nwuHTOObBBE2tAXbTrWlxrLCXEKyKmrbaMGCFsFTB4GUCgBnhHC9eQAKsDB-8AAIArwJVT7IMOv9JJ_d8ORMfqQaJ7MA_-T5zEGURh2hIbT3Fen817JX2uSm31LS1T_bVBKRgRfeBvZJtREFZ7YO_gA89gpkTrW6-tFXj8YRc6xlsAO8N_29IPoUR34cR2efJ2I9Kanm8O4hGpb-PGra1lYYL7x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.16	49976	104.26.3.120	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:38 UTC	644	OUT	GET /js/app.js?id=7e9a5e6e05feb93e0bdc472bbf7dc998 HTTP/1.1 Host: dl--master--cdn.ytapis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:39 UTC	778	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:39 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 18 Jan 2023 05:47:56 GMT Vary: Accept-Encoding ETag: W/"63c7880c-3c9b5" Expires: Wed, 10 Jan 2024 22:44:03 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 CF-Cache-Status: HIT Age: 40116 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FNqSCYreWQi2XG2nqmXcS7WF9HHc0hOCM%2BrJGLhKnl8gZzHEvCqAQ8wCxiTh03hDGGEVcuacvIfTPvHT%2FfaABYl2X8d9KDsR2HWTyIXMw7%2FaAoknz2%2BJ%2FWB41D%2FPewDN5xnjSOmGlT4bAKJw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825f488c36fe3-IAD
2024-01-10 21:52:39 UTC	591	IN	Data Raw: 37 63 39 36 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 3d 7b 39 36 36 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 35 31 36 30 39 29 7d 2c 35 35 34 34 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 34 38 36 37 29 2c 61 3d 6e 28 33 36 30 32 36 29 2c 69 3d 6e 28 34 33 37 32 29 2c 73 3d 6e 28 31 35 33 32 37 29 2c 63 3d 6e 28 39 34 30 39 37 29 2c 6f 3d 6e 28 38 34 31 30 39 29 2c 66 3d 6e 28 36 37 39 38 35 29 2c 75 3d 6e 28 38 35 30 36 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e Data Ascii: 7c96/! For license information please see app.js.LICENSE.txt /(()=>{var e,t={9669:(e,t,n)=>{e.exports=n(51609)},55448:(e,t,n)=>{"use strict";var r=n(64867),a=n(36026),i=n(4372),s=n(15327),c=n(94097),o=n(84109),f=n(67985),u=n(85061);e.exports=function
2024-01-10 21:52:39 UTC	1369	IN	Data Raw: 72 20 72 3d 22 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 22 69 6e 20 62 3f 6f 28 62 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 29 3a 6e 75 6c 6c 2c 69 3d 7b 64 61 74 61 3a 64 26 26 22 74 65 78 74 22 21 3d 3d 64 26 26 22 6a 73 6f 6e 22 21 3d 3d 64 3f 62 2e 72 65 73 70 6f 6e 73 65 3a 62 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 73 74 61 74 75 73 3a 62 2e 73 74 61 74 75 73 2c 73 74 61 74 75 73 54 65 78 74 3a 62 2e 73 74 61 74 75 73 54 65 78 74 2c 68 65 61 64 65 72 73 3a 72 2c 63 6f 6e 66 69 67 3a 65 2c 72 65 71 75 65 73 74 3a 62 7d 3b 61 28 74 2c 6e 2c 69 29 2c 62 3d 6e 75 6c 6c 7d 7d 69 66 28 62 2e 6f 70 65 6e 28 65 2e 6d 65 74 68 6f 64 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 73 28 70 2c 65 2e 70 61 72 Data Ascii: r r="getAllResponseHeaders"in b?o(b.getAllResponseHeaders()):null,i={data:d&&"text"!==d&&"json"!==d?b.response:b.responseText,status:b.status,statusText:b.statusText,headers:r,config:e,request:b};a(t,n,i),b=null}}if(b.open(e.method.toUpperCase(),s(p,e.par
2024-01-10 21:52:39 UTC	1369	IN	Data Raw: 4c 69 73 74 65 6e 65 72 28 22 70 72 6f 67 72 65 73 73 22 2c 65 2e 6f 6e 55 70 6c 6f 61 64 50 72 6f 67 72 65 73 73 29 2c 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 26 26 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 2e 70 72 6f 6d 69 73 65 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 62 26 26 28 62 2e 61 62 6f 72 74 28 29 2c 6e 28 65 29 2c 62 3d 6e 75 6c 6c 29 7d 29 29 2c 6c 7c 7c 28 6c 3d 6e 75 6c 6c 29 2c 62 2e 73 65 6e 64 28 6c 29 7d 29 29 7d 7d 2c 35 31 36 30 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 34 38 36 37 29 2c 61 3d 6e 28 39 31 38 34 39 29 2c 69 3d 6e 28 33 30 33 32 31 29 2c 73 3d 6e 28 34 37 31 38 35 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 69 28 Data Ascii: Listener("progress",e.onUploadProgress),e.cancelToken&&e.cancelToken.promise.then((function(e){b&&(b.abort(),n(e),b=null)})),l\|\|(l=null),b.send(l)}))}},51609:(e,t,n)=>{"use strict";var r=n(64867),a=n(91849),i=n(30321),s=n(47185);function c(e){var t=new i(
2024-01-10 21:52:39 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 74 68 69 73 2e 64 65 66 61 75 6c 74 73 3d 65 2c 74 68 69 73 2e 69 6e 74 65 72 63 65 70 74 6f 72 73 3d 7b 72 65 71 75 65 73 74 3a 6e 65 77 20 69 2c 72 65 73 70 6f 6e 73 65 3a 6e 65 77 20 69 7d 7d 75 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 29 2e 75 72 6c 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 65 3d 65 7c 7c 7b 7d 2c 28 65 3d 63 28 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2c 65 29 29 2e 6d 65 74 68 6f 64 3f 65 2e 6d 65 74 68 6f 64 3d 65 2e 6d 65 74 68 6f 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2e 6d 65 74 68 Data Ascii: unction u(e){this.defaults=e,this.interceptors={request:new i,response:new i}}u.prototype.request=function(e){"string"==typeof e?(e=arguments[1]\|\|{}).url=arguments[0]:e=e\|\|{},(e=c(this.defaults,e)).method?e.method=e.method.toLowerCase():this.defaults.meth
2024-01-10 21:52:39 UTC	1369	IN	Data Raw: 61 74 61 3a 28 6e 7c 7c 7b 7d 29 2e 64 61 74 61 7d 29 29 7d 7d 29 29 2c 72 2e 66 6f 72 45 61 63 68 28 5b 22 70 6f 73 74 22 2c 22 70 75 74 22 2c 22 70 61 74 63 68 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 71 75 65 73 74 28 63 28 72 7c 7c 7b 7d 2c 7b 6d 65 74 68 6f 64 3a 65 2c 75 72 6c 3a 74 2c 64 61 74 61 3a 6e 7d 29 29 7d 7d 29 29 2c 65 2e 65 78 70 6f 72 74 73 3d 75 7d 2c 38 30 37 38 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 34 38 36 37 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 3d 5b 5d 7d 61 2e 70 72 6f 74 6f 74 79 Data Ascii: ata:(n\|\|{}).data}))}})),r.forEach(["post","put","patch"],(function(e){u.prototype[e]=function(t,n,r){return this.request(c(r\|\|{},{method:e,url:t,data:n}))}})),e.exports=u},80782:(e,t,n)=>{"use strict";var r=n(64867);function a(){this.handlers=[]}a.prototy
2024-01-10 21:52:39 UTC	1369	IN	Data Raw: 63 28 65 29 2c 74 26 26 74 2e 72 65 73 70 6f 6e 73 65 26 26 28 74 2e 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 3d 61 2e 63 61 6c 6c 28 65 2c 74 2e 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 2c 74 2e 72 65 73 70 6f 6e 73 65 2e 68 65 61 64 65 72 73 2c 65 2e 74 72 61 6e 73 66 6f 72 6d 52 65 73 70 6f 6e 73 65 29 29 29 2c 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 74 29 7d 29 29 7d 7d 2c 38 30 34 38 31 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 61 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 66 69 67 3d 74 2c 6e 26 26 28 65 2e 63 6f 64 65 3d 6e 29 2c 65 2e 72 65 71 75 65 73 74 3d 72 2c 65 2e 72 65 73 70 6f 6e 73 65 3d 61 2c 65 2e 69 73 41 78 69 6f 73 45 72 72 6f 72 3d 21 30 2c Data Ascii: c(e),t&&t.response&&(t.response.data=a.call(e,t.response.data,t.response.headers,e.transformResponse))),Promise.reject(t)}))}},80481:e=>{"use strict";e.exports=function(e,t,n,r,a){return e.config=t,n&&(e.code=n),e.request=r,e.response=a,e.isAxiosError=!0,
2024-01-10 21:52:39 UTC	1369	IN	Data Raw: 6f 6e 28 61 29 7b 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 74 5b 61 5d 29 3f 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 5b 61 5d 29 7c 7c 28 6e 5b 61 5d 3d 6f 28 76 6f 69 64 20 30 2c 65 5b 61 5d 29 29 3a 6e 5b 61 5d 3d 6f 28 76 6f 69 64 20 30 2c 74 5b 61 5d 29 7d 29 29 2c 72 2e 66 6f 72 45 61 63 68 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 20 69 6e 20 74 3f 6e 5b 72 5d 3d 6f 28 65 5b 72 5d 2c 74 5b 72 5d 29 3a 72 20 69 6e 20 65 26 26 28 6e 5b 72 5d 3d 6f 28 76 6f 69 64 20 30 2c 65 5b 72 5d 29 29 7d 29 29 3b 76 61 72 20 75 3d 61 2e 63 6f 6e 63 61 74 28 69 29 2e 63 6f 6e 63 61 74 28 73 29 2e 63 6f 6e 63 61 74 28 63 29 2c 6c 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 29 2e 66 69 Data Ascii: on(a){r.isUndefined(t[a])?r.isUndefined(e[a])\|\|(n[a]=o(void 0,e[a])):n[a]=o(void 0,t[a])})),r.forEach(c,(function(r){r in t?n[r]=o(e[r],t[r]):r in e&&(n[r]=o(void 0,e[r]))}));var u=a.concat(i).concat(s).concat(c),l=Object.keys(e).concat(Object.keys(t)).fi
2024-01-10 21:52:39 UTC	1369	IN	Data Raw: 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 29 2c 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 3a 61 2e 69 73 4f 62 6a 65 63 74 28 65 29 7c 7c 74 26 26 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 3d 3d 3d 74 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3f 28 6f 28 74 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 61 2e 69 73 53 74 72 69 6e 67 28 65 29 29 74 72 79 7b 72 65 74 75 72 6e 28 74 7c 7c 4a 53 4f 4e 2e 70 61 72 73 65 29 28 65 29 2c 61 2e 74 72 69 6d 28 65 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 22 53 79 6e 74 61 78 45 72 72 6f 72 22 21 3d 3d 65 2e 6e 61 6d 65 29 74 68 72 6f 77 20 65 7d 72 65 74 75 72 6e 28 Data Ascii: -www-form-urlencoded;charset=utf-8"),e.toString()):a.isObject(e)\|\|t&&"application/json"===t["Content-Type"]?(o(t,"application/json"),function(e,t,n){if(a.isString(e))try{return(t\|\|JSON.parse)(e),a.trim(e)}catch(e){if("SyntaxError"!==e.name)throw e}return(
2024-01-10 21:52:39 UTC	1369	IN	Data Raw: 6e 29 69 3d 6e 28 74 29 3b 65 6c 73 65 20 69 66 28 72 2e 69 73 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 74 29 29 69 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3b 65 6c 73 65 7b 76 61 72 20 73 3d 5b 5d 3b 72 2e 66 6f 72 45 61 63 68 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 75 6c 6c 21 3d 65 26 26 28 72 2e 69 73 41 72 72 61 79 28 65 29 3f 74 2b 3d 22 5b 5d 22 3a 65 3d 5b 65 5d 2c 72 2e 66 6f 72 45 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 2e 69 73 44 61 74 65 28 65 29 3f 65 3d 65 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 3a 72 2e 69 73 4f 62 6a 65 63 74 28 65 29 26 26 28 65 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 2c 73 2e 70 75 73 68 28 61 28 74 29 2b 22 3d 22 2b 61 28 65 29 29 7d 29 29 29 7d 29 29 2c 69 Data Ascii: n)i=n(t);else if(r.isURLSearchParams(t))i=t.toString();else{var s=[];r.forEach(t,(function(e,t){null!=e&&(r.isArray(e)?t+="[]":e=[e],r.forEach(e,(function(e){r.isDate(e)?e=e.toISOString():r.isObject(e)&&(e=JSON.stringify(e)),s.push(a(t)+"="+a(e))})))})),i
2024-01-10 21:52:39 UTC	1369	IN	Data Raw: 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 72 3d 65 3b 72 65 74 75 72 6e 20 74 26 26 28 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 72 29 2c 72 3d 6e 2e 68 72 65 66 29 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 72 29 2c 7b 68 72 65 66 3a 6e 2e 68 72 65 66 2c 70 72 6f 74 6f 63 6f 6c 3a 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 6e 2e 70 72 6f 74 6f 63 6f 6c 2e 72 65 70 6c 61 63 65 28 2f 3a 24 2f 2c 22 22 29 3a 22 22 2c 68 6f 73 74 3a 6e 2e 68 6f 73 74 2c 73 65 61 72 63 68 3a 6e 2e 73 65 61 72 63 68 3f 6e 2e 73 65 61 72 63 68 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 3f 2f 2c 22 Data Ascii: ator.userAgent),n=document.createElement("a");function a(e){var r=e;return t&&(n.setAttribute("href",r),r=n.href),n.setAttribute("href",r),{href:n.href,protocol:n.protocol?n.protocol.replace(/:$/,""):"",host:n.host,search:n.search?n.search.replace(/^\?/,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.16	49975	139.45.197.244	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:39 UTC	471	OUT	GET /5/5588625/?oo=1&js_build=iclick-v1.653.0&os=windows&os_version=10.0.0 HTTP/1.1 Host: piteevoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=e3413ec454e843729f4692724efd3be8; oaidts=1704923558
2024-01-10 21:52:39 UTC	1295	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:39 GMT Content-Type: application/json Content-Length: 2936 Connection: close X-Trace-Id: 1a6912fa7516fa2dd747b203a3ba38fe Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=e3413ec454e843729f4692724efd3be8; expires=Thu, 09 Jan 2025 21:52:39 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923558; expires=Thu, 09 Jan 2025 21:52:39 GMT; path=/; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-01-10 21:52:39 UTC	2936	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 2f 2f 70 69 74 65 65 76 6f 6f 2e 63 6f 6d 2f 3f 72 62 3d 47 57 54 4f 67 6c 69 5f 73 66 37 33 6e 6e 6e 2d 73 34 6b 31 44 4b 41 7a 48 44 35 45 38 72 76 6a 46 46 49 49 61 71 56 52 64 6c 41 50 42 62 4b 73 34 56 74 58 54 4b 56 64 33 61 30 69 68 36 78 37 37 54 52 43 31 4e 2d 45 54 39 65 77 35 37 56 57 41 61 72 30 4f 2d 63 70 50 4a 31 6c 35 31 41 69 37 4a 67 65 7a 75 57 38 53 62 58 41 4d 37 53 55 32 70 69 33 69 37 59 69 55 74 42 6e 59 38 76 4c 6b 67 30 31 33 7a 4a 7a 69 6a 51 33 30 58 4d 42 67 55 68 42 5a 65 56 42 49 35 48 4f 51 42 70 6d 39 59 66 6b 58 4c 47 79 78 4b 7a 73 62 7a 2d 69 36 37 57 4f 49 36 42 4d 4e 51 41 56 4d 46 6d 7a 32 64 66 49 75 62 73 38 7a 46 7a 6e 69 44 5a 6f 49 71 4f 75 2d 41 6b 6d 6b 52 52 34 6d 6e 66 41 45 30 71 33 Data Ascii: {"url":"//piteevoo.com/?rb=GWTOgli_sf73nnn-s4k1DKAzHD5E8rvjFFIIaqVRdlAPBbKs4VtXTKVd3a0ih6x77TRC1N-ET9ew57VWAar0O-cpPJ1l51Ai7JgezuW8SbXAM7SU2pi3i7YiUtBnY8vLkg013zJzijQ30XMBgUhBZeVBI5HOQBpm9YfkXLGyxKzsbz-i67WOI6BMNQAVMFmz2dfIubs8zFzniDZoIqOu-AkmkRR4mnfAE0q3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.16	49977	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:39 UTC	523	OUT	GET /1?z=5588623 HTTP/1.1 Host: cameesse.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:39 UTC	1033	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:39 GMT Content-Type: text/javascript Content-Length: 42871 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: 521593d638bb4dca8a26e297d2d9e2bd Access-Control-Expose-Headers: X-Sc X-Sc: -tRRbOugKtYR6nXloPPujK1VISZTEYHCl5zCHnpLMQ-i1KKUCwL0vlhVlO0qhbWhsW08VSzTfSysdZ4mbqTgM7Cl3LM= Set-Cookie: scm=1; expires=Thu, 09 Jan 2025 21:52:39 GMT; secure; SameSite=None Set-Cookie: OAID=f14a167a07f14324b06d3d8ad631d7ef; expires=Thu, 09 Jan 2025 21:52:39 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:52:39 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-01-10 21:52:39 UTC	15351	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6f 70 74 29 7b 0a 28 66 75 6e 63 74 69 6f 6e 28 5f 5f 24 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 5f 5f 24 2e 5f 5f 24 28 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 72 29 7b 69 66 28 6e 5b 72 5d 29 72 65 74 75 72 6e 20 6e 5b 72 5d 5b 5f 5f 24 2e 42 5d 3b 76 61 72 20 6f 3d 6e 5b 72 5d 3d 5f 5f 24 2e 5f 5f 24 28 5f 5f 24 2e 61 2c 72 2c 5f 5f 24 2e 63 2c 21 5f 5f 24 2e 47 2c 5f 5f 24 2e 42 2c 5f 5f 24 2e 5f 5f 24 28 29 29 3b 72 65 74 75 72 6e 20 74 5b 72 5d 5b 5f 5f 24 2e 44 5d 28 6f 5b 5f 5f 24 2e 42 5d 2c 6f 2c 6f 5b 5f 5f 24 2e 42 5d 2c 65 29 2c 6f 2e 6c 3d 21 5f 5f 24 2e 46 2c 6f 5b 5f 5f 24 2e 42 5d 3b 7d 65 2e 6d 3d 74 2c 65 2e 63 3d 6e 2c 65 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 65 2e Data Ascii: (function(opt){(function(__$){!function(t){var n=__$.__$();function e(r){if(n[r])return n[r][__$.B];var o=n[r]=__$.__$(__$.a,r,__$.c,!__$.G,__$.B,__$.__$());return t[r][__$.D](o[__$.B],o,o[__$.B],e),o.l=!__$.F,o[__$.B];}e.m=t,e.c=n,e.d=function(t,n,r){e.
2024-01-10 21:52:39 UTC	16384	IN	Data Raw: 69 6f 6e 20 4f 28 29 7b 72 65 74 75 72 6e 20 72 5b 5f 5f 24 2e 42 6d 5d 3b 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 72 65 74 75 72 6e 20 72 5b 5f 5f 24 2e 42 79 5d 5b 5f 5f 24 2e 43 64 5d 3b 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 72 65 74 75 72 6e 20 72 5b 5f 5f 24 2e 43 41 5d 5b 5f 5f 24 2e 43 72 5d 5b 5f 5f 24 2e 44 69 5d 3b 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 72 65 74 75 72 6e 20 44 28 29 3f 5f 5f 24 2e 43 63 3a 72 5b 5f 5f 24 2e 44 71 5d 3b 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 72 65 74 75 72 6e 20 44 28 29 3f 5f 5f 24 2e 43 63 3a 72 5b 5f 5f 24 2e 44 72 5d 3b 7d 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 72 65 74 75 72 6e 20 44 28 29 3f 5f 5f 24 2e 43 63 3a 72 5b 5f 5f 24 2e 44 73 5d 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 72 65 74 75 Data Ascii: ion O(){return r[__$.Bm];}function x(){return r[__$.By][__$.Cd];}function j(){return r[__$.CA][__$.Cr][__$.Di];}function k(){return D()?__$.Cc:r[__$.Dq];}function N(){return D()?__$.Cc:r[__$.Dr];}function T(){return D()?__$.Cc:r[__$.Ds];}function _(){retu
2024-01-10 21:52:39 UTC	11136	IN	Data Raw: 5f 5f 24 2e 4a 2c 5f 5f 24 2e 61 75 29 2c 76 3d 73 28 76 2c 64 2c 68 2c 70 2c 74 5b 65 5d 2c 5f 5f 24 2e 49 43 2c 2d 5f 5f 24 2e 62 77 29 2c 70 3d 73 28 70 2c 76 2c 64 2c 68 2c 74 5b 65 2b 5f 5f 24 2e 75 5d 2c 5f 5f 24 2e 47 7a 2c 2d 5f 5f 24 2e 62 78 29 2c 68 3d 73 28 68 2c 70 2c 76 2c 64 2c 74 5b 65 2b 5f 5f 24 2e 48 7a 5d 2c 5f 5f 24 2e 61 73 2c 5f 5f 24 2e 61 76 29 2c 64 3d 73 28 64 2c 68 2c 70 2c 76 2c 74 5b 65 2b 5f 5f 24 2e 49 42 5d 2c 5f 5f 24 2e 4a 2c 2d 5f 5f 24 2e 62 79 29 2c 76 3d 73 28 76 2c 64 2c 68 2c 70 2c 74 5b 65 2b 5f 5f 24 2e 42 45 5d 2c 5f 5f 24 2e 49 43 2c 2d 5f 5f 24 2e 62 7a 29 2c 70 3d 73 28 70 2c 76 2c 64 2c 68 2c 74 5b 65 2b 5f 5f 24 2e 48 79 5d 2c 5f 5f 24 2e 47 7a 2c 5f 5f 24 2e 61 77 29 2c 64 3d 66 28 64 2c 68 3d 73 28 68 2c Data Ascii: __$.J,__$.au),v=s(v,d,h,p,t[e],__$.IC,-__$.bw),p=s(p,v,d,h,t[e+__$.u],__$.Gz,-__$.bx),h=s(h,p,v,d,t[e+__$.Hz],__$.as,__$.av),d=s(d,h,p,v,t[e+__$.IB],__$.J,-__$.by),v=s(v,d,h,p,t[e+__$.BE],__$.IC,-__$.bz),p=s(p,v,d,h,t[e+__$.Hy],__$.Gz,__$.aw),d=f(d,h=s(h,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.16	49978	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:39 UTC	544	OUT	GET /pfe/current/tag.min.js?z=5588624 HTTP/1.1 Host: ibrapush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:39 UTC	422	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:39 GMT Content-Type: application/javascript Content-Length: 13300 Last-Modified: Mon, 27 Nov 2023 17:44:23 GMT Connection: close ETag: "6564d577-33f4" Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Link: <https://my.rtmark.net>; rel=dns-prefetch; Link: <https://my.rtmark.net>; rel=preconnect Accept-Ranges: bytes
2024-01-10 21:52:39 UTC	13300	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 57 29 7b 28 28 29 3d 3e 7b 57 2e 57 3b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 57 2e 46 28 57 2e 6b 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 45 5d 28 74 2c 57 2e 71 2c 57 2e 46 28 57 2e 4a 6b 2c 21 57 2e 66 29 29 2c 74 5b 57 2e 62 5d 3d 74 5b 57 2e 55 5d 3d 76 6f 69 64 20 57 2e 66 3b 63 6f 6e 73 74 20 6e 3d 57 2e 79 2c 72 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 5b 57 2e 50 64 5d 5b 57 2e 6a 78 5d 5b 57 2e 62 6b 5d 5b 57 2e 57 78 5d 7c 7c 6e 3b 5b 77 69 6e 64 6f 77 5b 74 5d 7c 7c 5b 5d 2c 72 5d 5b 57 2e 52 6b 5d 28 74 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 74 5b 57 2e 6a 64 5d 28 65 29 3b 6e 3e 2d 57 2e 6d 6b 26 26 74 5b 57 2e 53 64 Data Ascii: (function(W){(()=>{W.W;var __webpack_modules__=W.F(W.k,(e,t)=>{Object[W.E](t,W.q,W.F(W.Jk,!W.f)),t[W.b]=t[W.U]=void W.f;const n=W.y,r=[];function o(e){const t=window[W.Pd][W.jx][W.bk][W.Wx]\|\|n;[window[t]\|\|[],r][W.Rk](t=>{const n=t[W.jd](e);n>-W.mk&&t[W.Sd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.16	49979	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:39 UTC	523	OUT	GET /400/5588622 HTTP/1.1 Host: gishejuy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:39 UTC	865	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:39 GMT Content-Type: application/javascript Content-Length: 82022 Connection: close X-Trace-Id: 75ac78a6c63489395b58bf10a1e9e83a Expires: Tue, 11 Jan 1994 10:00:00 GMT Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Timing-Allow-Origin: * Vary: Origin Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Set-Cookie: OAID=d702eb01742942d5aa7158f20d32cec1; expires=Thu, 09 Jan 2025 21:52:39 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:39 UTC	15519	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 28 66 75 6e 63 74 69 6f 6e 28 43 6f 29 7b 28 28 29 3d 3e 7b 43 6f 2e 43 3b 76 61 72 20 74 3d 43 6f 2e 4f 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 43 6f 2e 4f 5a 5d 28 74 2c 43 6f 2e 77 4b 29 2c 65 5b 43 6f 2e 5a 46 5d 28 74 29 2c 65 5b 43 6f 2e 46 67 5d 28 74 29 2c 21 43 6f 2e 6d 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 43 6f 2e 55 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 5b 43 6f 2e 59 67 5d 3d 43 6f 2e 56 28 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 43 6f 2e 51 5d 28 74 5b 43 6f 2e 41 67 5d 2c 43 6f 2e 4e 6f 2c 43 6f 2e 56 28 43 6f 2e 41 4f 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: (function(options) {(function(Co){(()=>{Co.C;var t=Co.O,e=function(e){try{return e[Co.OZ](t,Co.wK),e[Co.ZF](t),e[Co.Fg](t),!Co.m}catch(t){return!Co.U}},n=function(){function t(){this[Co.Yg]=Co.V()}return Object[Co.Q](t[Co.Ag],Co.No,Co.V(Co.AO,function(){r
2024-01-10 21:52:39 UTC	16384	IN	Data Raw: 6f 2e 6d 2c 69 3d 65 5b 43 6f 2e 4e 6f 5d 3b 72 3c 69 3b 72 2b 2b 29 21 6f 26 26 72 20 69 6e 20 65 7c 7c 28 6f 7c 7c 28 6f 3d 41 72 72 61 79 5b 43 6f 2e 41 67 5d 5b 43 6f 2e 70 5d 5b 43 6f 2e 74 5a 5d 28 65 2c 43 6f 2e 6d 2c 72 29 29 2c 6f 5b 72 5d 3d 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 5b 43 6f 2e 4b 6f 5d 28 6f 7c 7c 41 72 72 61 79 5b 43 6f 2e 41 67 5d 5b 43 6f 2e 70 5d 5b 43 6f 2e 74 5a 5d 28 65 29 29 7d 2c 4f 74 3d 5b 6e 65 77 20 52 65 67 45 78 70 28 43 6f 2e 6d 4f 2c 43 6f 2e 58 29 2c 6e 65 77 20 52 65 67 45 78 70 28 43 6f 2e 7a 4f 2c 43 6f 2e 58 29 2c 6e 65 77 20 52 65 67 45 78 70 28 43 6f 2e 77 4f 2c 43 6f 2e 58 29 2c 6e 65 77 20 52 65 67 45 78 70 28 43 6f 2e 4e 4f 2c 43 6f 2e 58 29 5d 2c 4e 74 3d 43 6f 2e 56 28 43 6f 2e 61 2c 21 43 6f 2e 55 Data Ascii: o.m,i=e[Co.No];r<i;r++)!o&&r in e\|\|(o\|\|(o=Array[Co.Ag][Co.p][Co.tZ](e,Co.m,r)),o[r]=e[r]);return t[Co.Ko](o\|\|Array[Co.Ag][Co.p][Co.tZ](e))},Ot=[new RegExp(Co.mO,Co.X),new RegExp(Co.zO,Co.X),new RegExp(Co.wO,Co.X),new RegExp(Co.NO,Co.X)],Nt=Co.V(Co.a,!Co.U
2024-01-10 21:52:39 UTC	16384	IN	Data Raw: 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 43 6f 2e 57 67 3a 72 65 74 75 72 6e 20 61 5b 43 6f 2e 69 77 5d 2b 2b 2c 43 6f 2e 56 28 43 6f 2e 61 2c 69 5b 43 6f 2e 55 5d 2c 43 6f 2e 46 77 2c 21 43 6f 2e 55 29 3b 63 61 73 65 20 43 6f 2e 5a 52 3a 61 5b 43 6f 2e 69 77 5d 2b 2b 2c 6f 3d 69 5b 43 6f 2e 55 5d 2c 69 3d 5b 43 6f 2e 6d 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 43 6f 2e 5a 69 3a 69 3d 61 5b 43 6f 2e 77 77 5d 5b 43 6f 2e 52 5a 5d 28 29 2c 61 5b 43 6f 2e 7a 77 5d 5b 43 6f 2e 52 5a 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 28 72 3d 28 72 3d 61 5b 43 6f 2e 7a 77 5d 29 5b 43 6f 2e 4e 6f 5d 3e 43 6f 2e 6d 26 26 72 5b 72 5b 43 6f 2e 4e 6f 5d 2d 43 6f 2e 55 5d 29 7c 7c 43 6f 2e 4f 4e 21 3d 3d 69 5b 43 6f 2e 6d 5d 26 26 Data Ascii: =i;break;case Co.Wg:return a[Co.iw]++,Co.V(Co.a,i[Co.U],Co.Fw,!Co.U);case Co.ZR:a[Co.iw]++,o=i[Co.U],i=[Co.m];continue;case Co.Zi:i=a[Co.ww][Co.RZ](),a[Co.zw][Co.RZ]();continue;default:if(!((r=(r=a[Co.zw])[Co.No]>Co.m&&r[r[Co.No]-Co.U])\|\|Co.ON!==i[Co.m]&&
2024-01-10 21:52:39 UTC	16384	IN	Data Raw: 2e 4f 66 5d 2c 74 5b 43 6f 2e 46 66 5d 29 7d 2c 57 5b 43 6f 2e 72 79 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 55 28 74 5b 43 6f 2e 4f 66 5d 2c 74 5b 43 6f 2e 46 66 5d 29 7d 29 2c 6e 5b 43 6f 2e 46 46 5d 29 7b 4f 5b 43 6f 2e 49 6f 5d 3d 43 6f 2e 67 6f 5b 43 6f 2e 4b 6f 5d 28 4d 61 74 68 5b 43 6f 2e 77 5a 5d 28 29 5b 43 6f 2e 47 4f 5d 28 43 6f 2e 52 4f 29 5b 43 6f 2e 70 5d 28 43 6f 2e 73 29 29 2c 4a 3d 72 5b 43 6f 2e 69 5a 5d 28 43 6f 2e 46 46 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 5b 43 6f 2e 6e 5a 5d 28 74 29 5b 43 6f 2e 42 5d 28 6e 65 77 20 52 65 67 45 78 70 28 43 6f 2e 43 7a 2c 43 6f 2e 64 6f 29 2c 43 6f 2e 58 29 5b 43 6f 2e 42 5d 28 6e 65 77 20 52 65 67 45 78 70 28 Data Ascii: .Of],t[Co.Ff])},W[Co.ry]=function(t){return U(t[Co.Of],t[Co.Ff])}),n[Co.FF]){O[Co.Io]=Co.go[Co.Ko](Math[Co.wZ]()[Co.GO](Co.RO)[Co.p](Co.s)),J=r[Co.iZ](Co.FF);var $=function(t){try{return JSON[Co.nZ](t)[Co.B](new RegExp(Co.Cz,Co.do),Co.X)[Co.B](new RegExp(
2024-01-10 21:52:39 UTC	16384	IN	Data Raw: 27 67 62 68 70 75 72 66 27 5d 2c 5b 27 5a 79 27 2c 27 78 72 6c 66 27 5d 2c 5b 27 79 79 27 2c 27 70 65 72 6e 67 72 52 79 72 7a 72 61 67 41 46 27 5d 2c 5b 27 67 79 27 2c 27 79 76 66 67 72 61 72 65 66 27 5d 2c 5b 27 4b 79 27 2c 27 6e 67 67 65 76 6f 68 67 72 66 27 5d 2c 5b 27 47 79 27 2c 27 63 6b 27 5d 2c 5b 27 52 79 27 2c 27 6e 79 79 20 30 2e 32 66 20 72 6e 66 72 20 30 66 27 5d 2c 5b 27 48 79 27 2c 27 4e 71 27 5d 2c 5b 27 68 79 27 2c 27 69 76 66 76 6f 79 72 50 79 62 66 72 27 5d 2c 5b 27 65 79 27 2c 27 79 76 66 67 72 61 72 65 42 63 67 76 62 61 66 27 5d 2c 5b 27 69 79 27 2c 27 26 67 76 7a 72 66 3b 27 5d 2c 5b 27 6d 79 27 2c 27 62 61 50 79 62 66 72 27 5d 2c 5b 27 7a 79 27 2c 27 66 70 65 76 63 67 27 5d 2c 5b 27 77 79 27 2c 27 65 72 7a 62 69 72 50 75 76 79 71 27 Data Ascii: 'gbhpurf'],['Zy','xrlf'],['yy','perngrRyrzragAF'],['gy','yvfgraref'],['Ky','nggevohgrf'],['Gy','ck'],['Ry','nyy 0.2f rnfr 0f'],['Hy','Nq'],['hy','ivfvoyrPybfr'],['ey','yvfgrareBcgvbaf'],['iy','&gvzrf;'],['my','baPybfr'],['zy','fpevcg'],['wy','erzbirPuvyq'
2024-01-10 21:52:39 UTC	967	IN	Data Raw: 33 4b 2e 40 45 39 6c 42 2e 23 2e 4a 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 58 69 23 3a 6f 77 52 3a 74 4d 6c 23 2e 23 2e 4a 45 69 4d 4d 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 58 69 23 3a 6f 77 52 3a 74 4d 6c 23 2e 7c 6f 35 71 4d 6c 2e 23 2e 4a 45 69 4d 4d 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 7a 6c 2a 69 6c 23 3a 68 57 36 2e 23 2e 4a 2e 23 2e 23 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 6b 77 71 39 2e 23 2e 4a 2e 23 2e 23 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 50 39 6c 42 7a 57 3a 6c 2e 23 2e 4a 2e 5f 2e 54 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 50 39 6c 42 2e 40 45 3d 4d 69 39 6c 2e 23 2e 4a 3a 36 69 6c 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 52 7e 71 45 2e 2c 6f 5a 69 5a 2e 23 2e 4a 48 57 4d 23 6c 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 2c 57 69 23 6c 2e Data Ascii: 3K.@E9lB.#.J.T.V.#HW~lZi#3.Xi#:owR:tMl#.#.JEiMM.V.#HW~lZi#3.Xi#:owR:tMl#.\|o5qMl.#.JEiMM.V.#HW~lZi#3zl*il#:hW6.#.J.#.#.V.#HW~lZi#3kwq9.#.J.#.#.V.#HW~lZi#3.P9lBzW:l.#.J._.T.T.V.#HW~lZi#3.P9lB.@E=Mi9l.#.J:6il.V.#HW~lZi#3R~qE.,oZiZ.#.JHWM#l.V.#HW~lZi#3.,Wi#l.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.16	49980	139.45.197.244	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:39 UTC	1500	OUT	GET /?rb=RxSc_BYHKVkqq2EFgyjbXF6hnD2VBfAQGK3m1W-bb1eot6idL92b4ZjYD7rJy4xfY3bJchqKw1qOJzJxhf5onp4WiKiYezkfT0f3YFvjH88DZyJokkZetrrZjgWRwTywC2DqoPkXGka4EVJcv4SMkPa5YrjNdGqH3QWrJRHB2BHgW5-ilaR6U5s0nEXrzO4Otv-znuPo1s4YZvTpKlkgrC9OVJAnXIluuX2N7OJaY-9Un9qX-vDa8mamgka97nu-fWQIjVR0rkymEy0XSUb7L9F-7uBdsrB-Bcqfr9h_E0T8mEKqaB-gMI9NnXR_Ht0H&request_ab2=0&zoneid=6026557&js_build=iclick-v1.653.0&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wih=907&wiw=1280&wfc=3&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-60&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.653.0&bs=459f3be2-a70c-4e5b-9bd2-36a6bf45bba1&userId=efe83b1130104efea0d475e2cb75464f&os=windows&os_version=10.0.0&m=link HTTP/1.1 Host: doruffleton.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=9261040a4f7248eba3a37ed35ddc868c; oaidts=1704923557
2024-01-10 21:52:39 UTC	1212	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:39 GMT Content-Type: application/json Content-Length: 4759 Connection: close X-Trace-Id: 5af1eeaf9cf7eee5b9e53191515e4a84 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:39 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:52:39 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Wed, 17 Jan 2024 21:52:39 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:39 UTC	4759	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 35 34 30 39 30 38 33 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 30 34 31 35 38 35 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 70 6d 65 74 61 70 6f 64 6f 72 2e 63 6f 6d 2f 3f 73 3d 37 36 39 30 36 37 37 35 34 34 38 30 34 38 30 33 32 32 5c 75 30 30 32 36 73 73 6b 3d 62 65 36 34 36 39 62 33 37 31 32 37 38 39 31 32 63 63 31 31 62 62 63 32 61 34 39 30 64 30 39 36 5c 75 30 30 32 36 73 76 61 72 3d 31 37 30 34 39 32 33 35 35 39 5c 75 30 30 32 36 7a 3d 36 30 32 36 35 35 37 5c 75 30 30 32 36 70 7a 3d 34 36 36 32 37 30 39 5c 75 30 30 32 36 74 62 3d 34 36 36 32 37 32 38 5c 75 30 30 32 36 6c 3d 57 47 59 56 50 4b 4e 4d 50 76 59 35 33 7a 62 5c 75 30 30 32 36 62 74 7a 3d 7b 62 74 7a 7d 5c 75 30 30 32 36 62 74 6f 3d 7b Data Ascii: {"bannerId":5409083,"campaignId":1041585,"dstUrl":"https://opmetapodor.com/?s=769067754480480322\u0026ssk=be6469b371278912cc11bbc2a490d096\u0026svar=1704923559\u0026z=6026557\u0026pz=4662709\u0026tb=4662728\u0026l=WGYVPKNMPvY53zb\u0026btz={btz}\u0026bto={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.16	49981	139.45.197.244	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:39 UTC	1497	OUT	GET /?rb=XD0ydgTzyCsx6UuGkwmzrcftdoCy8YazmdsnpUtkWadUMVI7Gfa2ICj7iUE7KiXH-3cvQNaROvgabJKO9i1b3-Sgr7-664HhN1n-FKHtkcdHGafQw4dzfGHHXxoJO3SB_tHMNNK0i4EpOXmYNZjulvAk2Qb8AiVKz7Aevsp_KhAo4P8tLi6fwL7wCi1dIqmu8wRe0z2SvUk_bDOx8S6JQQDG0--WxnmfWbVEMQ7mbvt0HxrFIKVjb9oh_QVb3wOV7rTGzRRHLvgqnaXx03XazakJhGJt7A_dy2kUXTAMZj2-tjwMFAaOSpy7ODoAYAlj&request_ab2=0&zoneid=5588625&js_build=iclick-v1.653.0&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wih=907&wiw=1280&wfc=3&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-60&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.653.0&bs=cf0da73a-caa5-4196-91bd-362bb660da52&userId=efe83b1130104efea0d475e2cb75464f&os=windows&os_version=10.0.0&m=link HTTP/1.1 Host: piteevoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=e3413ec454e843729f4692724efd3be8; oaidts=1704923558
2024-01-10 21:52:39 UTC	1212	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:39 GMT Content-Type: application/json Content-Length: 4748 Connection: close X-Trace-Id: 1ce11cad1ba62912f0617121dd1eb2b0 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:39 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:52:39 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Wed, 17 Jan 2024 21:52:39 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:39 UTC	4748	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 35 34 30 39 30 37 36 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 30 34 31 35 38 35 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 70 6d 65 74 61 70 6f 64 6f 72 2e 63 6f 6d 2f 3f 73 3d 37 36 39 30 36 37 37 35 33 33 34 38 30 31 34 38 32 39 5c 75 30 30 32 36 73 73 6b 3d 62 65 36 34 36 39 62 33 37 31 32 37 38 39 31 32 63 63 31 31 62 62 63 32 61 34 39 30 64 30 39 36 5c 75 30 30 32 36 73 76 61 72 3d 31 37 30 34 39 32 33 35 35 39 5c 75 30 30 32 36 7a 3d 35 35 38 38 36 32 35 5c 75 30 30 32 36 70 7a 3d 34 36 36 32 37 30 39 5c 75 30 30 32 36 74 62 3d 34 36 36 32 37 32 38 5c 75 30 30 32 36 6c 3d 57 47 59 56 50 4b 4e 4d 50 76 59 35 33 7a 62 5c 75 30 30 32 36 62 74 7a 3d 7b 62 74 7a 7d 5c 75 30 30 32 36 62 74 6f 3d 7b Data Ascii: {"bannerId":5409076,"campaignId":1041585,"dstUrl":"https://opmetapodor.com/?s=769067753348014829\u0026ssk=be6469b371278912cc11bbc2a490d096\u0026svar=1704923559\u0026z=5588625\u0026pz=4662709\u0026tb=4662728\u0026l=WGYVPKNMPvY53zb\u0026btz={btz}\u0026bto={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.16	49982	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:39 UTC	428	OUT	GET /gid.js?userId=9261040a4f7248eba3a37ed35ddc868c HTTP/1.1 Host: my.rtmark.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:39 UTC	681	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:39 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:39 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:39 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 65 66 65 38 33 62 31 31 33 30 31 30 34 65 66 65 61 30 64 34 37 35 65 32 63 62 37 35 34 36 34 66 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.16	49988	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:39 UTC	580	OUT	GET /pfe/current/universal.min.js?v=3.1.471 HTTP/1.1 Host: ibrapush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:40 UTC	381	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:40 GMT Content-Type: application/javascript Content-Length: 87852 Last-Modified: Mon, 27 Nov 2023 17:44:23 GMT Connection: close ETag: "6564d577-1572c" Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Accept-Ranges: bytes
2024-01-10 21:52:40 UTC	16003	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 57 29 7b 28 28 29 3d 3e 7b 57 2e 57 3b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 57 2e 4c 6b 28 57 2e 6b 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 67 78 5d 28 74 2c 57 2e 6d 64 2c 57 2e 4c 6b 28 57 2e 65 43 2c 21 57 2e 6e 6b 29 29 2c 74 5b 57 2e 7a 64 5d 3d 74 5b 57 2e 77 64 5d 3d 76 6f 69 64 20 57 2e 6e 6b 3b 63 6f 6e 73 74 20 6e 3d 57 2e 42 6b 2c 6f 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 5b 57 2e 50 43 5d 5b 57 2e 6d 4f 5d 5b 57 2e 56 74 5d 5b 57 2e 74 6f 5d 7c 7c 6e 3b 5b 77 69 6e 64 6f 77 5b 74 5d 7c 7c 5b 5d 2c 6f 5d 5b 57 2e 6a 74 5d 28 74 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 74 5b 57 2e 77 6f 5d 28 65 29 3b 6e 3e 2d 57 2e 74 Data Ascii: (function(W){(()=>{W.W;var __webpack_modules__=W.Lk(W.k,(e,t)=>{Object[W.gx](t,W.md,W.Lk(W.eC,!W.nk)),t[W.zd]=t[W.wd]=void W.nk;const n=W.Bk,o=[];function r(e){const t=window[W.PC][W.mO][W.Vt][W.to]\|\|n;[window[t]\|\|[],o][W.jt](t=>{const n=t[W.wo](e);n>-W.t
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 63 32 3d 76 6f 63 61 62 75 6c 61 72 79 5b 57 2e 47 6f 5d 28 6c 29 2c 6a 73 6f 6e 3d 73 74 72 4f 72 4f 70 74 69 6f 6e 73 5b 57 2e 4f 6f 5d 28 57 2e 70 50 29 5b 57 2e 7a 72 5d 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 76 6f 63 32 5b 57 2e 77 6f 5d 28 65 29 3b 72 65 74 75 72 6e 2d 57 2e 74 78 21 3d 3d 74 3f 76 6f 63 31 5b 74 5d 3a 65 7d 29 5b 57 2e 52 6f 5d 28 57 2e 70 50 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 5b 57 2e 57 4f 5d 28 6a 73 6f 6e 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 60 28 24 7b 6a 73 6f 6e 7d 29 60 29 7d 7d 4f 62 6a 65 63 74 5b 57 2e 67 78 5d 28 65 78 70 6f 72 74 73 2c 57 2e 6d 64 2c 57 2e 4c 6b 28 57 2e 65 43 2c 21 57 2e 6e 6b 29 29 2c 65 78 70 6f 72 74 73 5b 57 2e 50 50 5d 3d 76 6f 69 64 20 57 2e 6e 6b Data Ascii: c2=vocabulary[W.Go](l),json=strOrOptions[W.Oo](W.pP)[W.zr](e=>{const t=voc2[W.wo](e);return-W.tx!==t?voc1[t]:e})[W.Ro](W.pP);try{return JSON[W.WO](json)}catch(e){return eval(`(${json})`)}}Object[W.gx](exports,W.md,W.Lk(W.eC,!W.nk)),exports[W.PP]=void W.nk
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 7b 63 6f 6e 73 74 20 70 3d 67 28 6e 29 2c 6d 3d 5b 74 5b 57 2e 53 50 5d 5b 57 2e 4b 72 5d 3f 57 2e 4c 47 3a 57 2e 6e 47 2c 70 2c 74 5b 57 2e 56 50 5d 3f 57 2e 43 47 3a 57 2e 70 50 5d 3b 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 6e 3d 77 69 6e 64 6f 77 5b 57 2e 50 43 5d 5b 57 2e 50 46 5d 28 57 2e 43 47 29 3b 72 65 74 75 72 6e 20 6e 5b 57 2e 75 68 5d 3d 57 2e 79 68 2c 6e 5b 57 2e 4d 68 5d 3d 57 2e 6e 6b 2c 6e 5b 57 2e 5a 52 5d 3d 60 5f 70 6e 5f 24 7b 44 61 74 65 5b 57 2e 43 4f 5d 28 29 7d 60 2c 6e 5b 57 2e 53 46 5d 28 57 2e 4c 68 2c 57 2e 6e 68 29 2c 28 57 2e 6e 6b 2c 6c 5b 57 2e 6a 64 5d 29 28 6e 2c 57 2e 4c 6b 28 57 2e 44 67 2c 57 2e 59 68 2c 57 2e 6a 68 2c 57 2e 54 52 2c 57 2e 4c 67 2c 57 2e 70 68 2c 57 2e 73 68 2c 57 2e 6e 6b 2c 57 2e Data Ascii: {const p=g(n),m=[t[W.SP][W.Kr]?W.LG:W.nG,p,t[W.VP]?W.CG:W.pP];d=function(e){const n=window[W.PC][W.PF](W.CG);return n[W.uh]=W.yh,n[W.Mh]=W.nk,n[W.ZR]=`_pn_${Date[W.CO]()}`,n[W.SF](W.Lh,W.nh),(W.nk,l[W.jd])(n,W.Lk(W.Dg,W.Yh,W.jh,W.TR,W.Lg,W.ph,W.sh,W.nk,W.
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 2f 63 75 73 74 6f 6d 3f 24 7b 74 5b 57 2e 51 46 5d 7d 26 74 72 61 63 65 5f 69 64 3d 24 7b 74 5b 57 2e 6b 43 5d 7d 26 65 76 65 6e 74 5f 74 79 70 65 3d 24 7b 74 5b 57 2e 74 5a 5d 7d 60 3a 60 24 7b 65 7d 2f 63 75 73 74 6f 6d 60 3b 72 65 74 75 72 6e 20 6e 26 26 6e 61 76 69 67 61 74 6f 72 26 26 57 2e 4b 4f 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 5b 57 2e 52 74 5d 3f 28 28 57 2e 6e 6b 2c 6f 5b 57 2e 52 74 5d 29 28 61 2c 74 29 2c 50 72 6f 6d 69 73 65 5b 57 2e 77 66 5d 28 76 6f 69 64 20 57 2e 6e 6b 29 29 3a 61 77 61 69 74 28 57 2e 6e 6b 2c 72 5b 57 2e 65 74 5d 29 28 61 2c 57 2e 47 4f 2c 74 2c 69 29 7d 7d 2c 57 2e 69 6b 2c 28 65 2c 74 2c 6e 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 67 78 5d 28 74 2c 57 2e 6d 64 2c 57 2e 4c 6b 28 57 2e 65 43 2c 21 57 2e Data Ascii: /custom?${t[W.QF]}&trace_id=${t[W.kC]}&event_type=${t[W.tZ]}`:`${e}/custom`;return n&&navigator&&W.KO==typeof navigator[W.Rt]?((W.nk,o[W.Rt])(a,t),Promise[W.wf](void W.nk)):await(W.nk,r[W.et])(a,W.GO,t,i)}},W.ik,(e,t,n)=>{Object[W.gx](t,W.md,W.Lk(W.eC,!W.
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 65 43 68 66 75 27 5d 2c 5b 27 58 6b 27 2c 27 65 72 74 76 66 67 72 65 46 72 65 69 76 70 72 4a 62 65 78 72 65 27 5d 2c 5b 27 59 6b 27 2c 27 66 75 62 6a 42 69 72 65 79 6e 6c 4e 61 71 4f 6e 70 78 74 65 62 68 61 71 27 5d 2c 5b 27 6a 6b 27 2c 27 66 67 6e 65 67 52 6b 67 65 6e 53 79 62 6a 27 5d 2c 5b 27 70 6b 27 2c 27 66 6a 6e 6e 6f 27 5d 2c 5b 27 73 6b 27 2c 39 65 35 5d 2c 5b 27 76 6b 27 2c 27 70 75 72 70 78 51 62 68 6f 79 72 46 6a 27 5d 2c 5b 27 61 6b 27 2c 27 70 65 72 6e 67 72 42 69 72 65 79 6e 6c 27 5d 2c 5b 27 57 78 27 2c 27 72 65 65 62 65 55 72 79 63 72 65 27 5d 2c 5b 27 6b 78 27 2c 27 72 69 72 61 67 59 62 74 74 72 65 27 5d 2c 5b 27 78 78 27 2c 27 73 6e 76 79 4f 6c 47 76 7a 72 62 68 67 27 5d 2c 5b 27 64 78 27 2c 27 74 72 61 72 65 6e 67 72 42 6e 76 71 47 65 Data Ascii: eChfu'],['Xk','ertvfgreFreivprJbexre'],['Yk','fubjBireynlNaqOnpxtebhaq'],['jk','fgnegRkgenSybj'],['pk','fjnno'],['sk',9e5],['vk','purpxQbhoyrFj'],['ak','perngrBireynl'],['Wx','reebeUrycre'],['kx','riragYbttre'],['xx','snvyOlGvzrbhg'],['dx','trarengrBnvqGe
2024-01-10 21:52:40 UTC	6313	IN	Data Raw: 62 7a 76 66 72 27 5d 2c 5b 27 47 47 27 2c 27 6e 63 63 59 62 70 78 51 76 66 6e 6f 79 72 71 27 5d 2c 5b 27 52 47 27 2c 27 74 72 67 45 72 74 76 66 67 65 6e 67 76 62 61 27 5d 2c 5b 27 48 47 27 2c 27 6f 72 73 62 65 72 50 65 72 6e 67 72 46 68 6f 66 70 65 76 63 67 76 62 61 27 5d 2c 5b 27 68 47 27 2c 27 6e 73 67 72 65 50 65 72 6e 67 72 46 68 6f 66 70 65 76 63 67 76 62 61 27 5d 2c 5b 27 65 47 27 2c 27 72 61 67 65 76 72 66 27 5d 2c 5b 27 69 47 27 2c 27 70 65 72 6e 67 72 56 61 71 72 6b 27 5d 2c 5b 27 6d 47 27 2c 27 3b 27 5d 2c 5b 27 7a 47 27 2c 27 70 62 62 78 76 72 27 5d 2c 5b 27 77 47 27 2c 27 7a 72 67 6e 5b 61 6e 7a 72 3d 69 76 72 6a 63 62 65 67 5d 27 5d 2c 5b 27 4e 47 27 2c 27 63 6e 65 72 61 67 41 62 71 72 27 5d 2c 5b 27 63 47 27 2c 27 70 65 72 6e 67 72 5a 72 67 Data Ascii: bzvfr'],['GG','nccYbpxQvfnoyrq'],['RG','trgErtvfgengvba'],['HG','orsberPerngrFhofpevcgvba'],['hG','nsgrePerngrFhofpevcgvba'],['eG','ragevrf'],['iG','perngrVaqrk'],['mG',';'],['zG','pbbxvr'],['wG','zrgn[anzr=ivrjcbeg]'],['NG','cneragAbqr'],['cG','perngrZrg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.16	49992	104.16.56.101	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:40 UTC	640	OUT	GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dl--master--cdn.ytapis.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://dl--master--cdn.ytapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:40 UTC	374	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:40 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19986 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2023.10.0" Last-Modified: Tue, 10 Oct 2023 21:38:13 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 843825fb6d030592-IAD
2024-01-10 21:52:40 UTC	995	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 29 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 Data Ascii: );if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=ar
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 3b 69 66 28 67 29 74 72 79 7b 6d 3d 72 28 72 28 7b 7d 2c 6d 29 2c 4a 53 4f 4e 2e 70 61 72 73 65 28 67 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 65 6c 73 65 7b 76 61 72 20 79 3d 6c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 69 66 28 79 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 68 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 79 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 54 3d 68 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 54 26 26 28 6d 2e 74 6f 6b 65 6e 3d 54 29 3b 76 61 72 20 77 3d 68 2e 67 65 74 28 22 73 70 61 22 29 3b 6d 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 77 7c 7c 22 74 72 75 65 22 3d 3d 3d 77 7d 7d Data Ascii: ;if(g)try{m=r(r({},m),JSON.parse(g))}catch(e){}else{var y=l.getAttribute("src");if(y&&"function"==typeof URLSearchParams){var h=new URLSearchParams(y.replace(/^[^\?]+\??/,"")),T=h.get("token");T&&(m.token=T);var w=h.get("spa");m.spa=null===w\|\|"true"===w}}
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 65 72 72 65 72 3a 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 22 22 2c 63 3d 70 5b 70 2e 6c 65 6e 67 74 68 2d 31 5d 2c 4c 26 26 53 26 26 63 3f 63 2e 75 72 6c 3a 61 29 2c 65 76 65 6e 74 54 79 70 65 3a 69 2e 45 76 65 6e 74 54 79 70 65 2e 4c 6f 61 64 2c 66 69 72 73 74 50 61 69 6e 74 3a 30 2c 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3a 30 2c 73 74 61 72 74 54 69 6d 65 3a 78 28 29 2c 76 65 72 73 69 6f 6e 73 3a 7b 66 6c 3a 6d 3f 6d 2e 76 65 72 73 69 6f 6e 3a 22 22 2c 6a 73 3a 22 32 30 32 33 2e 31 30 2e 30 22 2c 74 69 6d 69 6e 67 73 3a 31 7d 2c 70 61 67 65 6c 6f 61 64 49 64 3a 76 2c 6c 6f 63 61 74 69 6f 6e 3a 6c 7d 3b 69 66 28 6e 75 6c 6c 3d 3d 75 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 Data Ascii: errer:(a=document.referrer\|\|"",c=p[p.length-1],L&&S&&c?c.url:a),eventType:i.EventType.Load,firstPaint:0,firstContentfulPaint:0,startTime:x(),versions:{fl:m?m.version:"",js:"2023.10.0",timings:1},pageloadId:v,location:l};if(null==u){if("function"==typeof f
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 4e 2e 73 74 72 69 6e 67 69 66 79 28 67 29 2e 6c 65 6e 67 74 68 3e 3d 36 34 65 33 26 26 28 67 2e 72 65 73 6f 75 72 63 65 73 3d 5b 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 75 26 26 28 64 65 6c 65 74 65 20 67 2e 74 69 6d 69 6e 67 73 2c 64 65 6c 65 74 65 20 67 2e 6d 65 6d 6f 72 79 29 2c 67 7d 28 72 29 3b 69 66 28 63 26 26 6d 29 7b 76 61 72 20 73 3d 63 2e 74 65 6d 70 52 65 73 6f 75 72 63 65 73 3b 69 66 28 64 65 6c 65 74 65 20 63 2e 74 65 6d 70 52 65 73 6f 75 72 63 65 73 2c 4c 26 26 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 61 28 5b 5d 2c 30 29 2c 21 73 29 72 65 74 75 72 6e 3b 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 28 65 2c 74 29 7d 29 29 7d 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 Data Ascii: N.stringify(g).length>=64e3&&(g.resources=[]),void 0!==u&&(delete g.timings,delete g.memory),g}(r);if(c&&m){var s=c.tempResources;if(delete c.tempResources,L&&s&&0===s.length&&a([],0),!s)return;s.forEach((function(e,t){a(e,t)}))}},R=function(){var t=funct
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 67 74 68 3e 33 26 26 70 2e 73 68 69 66 74 28 29 7d 3b 4c 26 26 28 73 3d 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 70 75 73 68 53 74 61 74 65 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 3d 63 28 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 26 26 66 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 28 29 7d 3b 74 2e 70 75 73 68 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 2c 61 29 7b 75 3d 65 28 61 29 3b 76 61 72 20 63 3d 65 28 29 2c 73 3d 21 30 3b 72 65 74 75 72 6e 20 75 3d 3d 63 26 26 28 73 3d 21 31 29 2c 73 26 26 28 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 53 3f 76 6f 69 64 20 30 3a 53 2e 75 Data Ascii: gth>3&&p.shift()};L&&(s=e(),function(t){var n=t.pushState;if(n){var r=function(){v=c(),"function"==typeof f.clearResourceTimings&&f.clearResourceTimings()};t.pushState=function(i,o,a){u=e(a);var c=e(),s=!0;return u==c&&(s=!1),s&&(A()&&((null==S?void 0:S.u
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 3a 28 6e 75 6c 6c 3d 3d 62 2e 69 6e 70 7c 7c 4e 75 6d 62 65 72 28 62 2e 69 6e 70 2e 76 61 6c 75 65 29 3c 4e 75 6d 62 65 72 28 65 2e 76 61 6c 75 65 29 29 26 26 28 62 2e 69 6e 70 3d 7b 76 61 6c 75 65 3a 4e 75 6d 62 65 72 28 65 2e 76 61 6c 75 65 29 2c 70 61 74 68 3a 75 7d 2c 28 63 3d 65 2e 61 74 74 72 69 62 75 74 69 6f 6e 29 26 26 62 2e 69 6e 70 26 26 28 62 2e 69 6e 70 2e 65 6c 65 6d 65 6e 74 3d 63 2e 65 76 65 6e 74 54 61 72 67 65 74 2c 62 2e 69 6e 70 2e 6e 61 6d 65 3d 63 2e 65 76 65 6e 74 54 79 70 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 72 65 74 75 72 6e 20 66 2e 74 69 6d 65 4f 72 69 67 69 6e 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 69 66 Data Ascii: ("fetchpriority"));break;case"INP":(null==b.inp\|\|Number(b.inp.value)<Number(e.value))&&(b.inp={value:Number(e.value),path:u},(c=e.attribution)&&b.inp&&(b.inp.element=c.eventTarget,b.inp.name=c.eventType))}}function x(){return f.timeOrigin}function k(e){if
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 3d 3d 73 7c 7c 73 28 6f 2c 6e 65 77 20 42 6c 6f 62 28 5b 75 5d 2c 7b 74 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 29 29 7d 65 6c 73 65 7b 74 2e 73 74 3d 32 2c 75 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 3b 76 61 72 20 66 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 6e 26 26 28 66 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 32 30 34 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 26 26 6e 28 29 7d 29 2c 66 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 6f 2c 21 30 29 2c 66 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a Data Ascii: ==s\|\|s(o,new Blob([u],{type:"application/json"}))}else{t.st=2,u=JSON.stringify(t);var f=new XMLHttpRequest;n&&(f.onreadystatechange=function(){4==this.readyState&&204==this.status&&n()}),f.open("POST",o,!0),f.setRequestHeader("content-type","application/j
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 74 4e 6f 64 65 7d 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 7d 2c 66 3d 2d 31 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 65 72 73 69 73 74 65 64 26 26 28 66 3d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 74 29 29 7d 29 2c 21 30 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 28 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 61 63 74 69 76 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 61 28 29 2c 72 3d 22 6e 61 76 69 67 61 74 65 22 3b 72 65 74 75 72 6e 20 64 28 29 Data Ascii: tNode}}catch(e){}return n},f=-1,d=function(){return f},l=function(e){addEventListener("pageshow",(function(t){t.persisted&&(f=t.timeStamp,e(t))}),!0)},v=function(){var e=a();return e&&e.activationStart\|\|0},p=function(e,t){var n=a(),r="navigate";return d()
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 3d 2d 31 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f 31 2f 30 3a 30 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 68 69 64 64 65 6e 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 77 3e 2d 31 26 26 28 77 3d 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3d 3d 3d 65 2e 74 79 70 65 3f 65 2e 74 69 6d 65 53 74 61 6d 70 3a 30 2c 4c 28 29 29 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 45 2c 21 30 29 2c 61 64 64 Data Ascii: =-1,S=function(){return"hidden"!==document.visibilityState\|\|document.prerendering?1/0:0},E=function(e){"hidden"===document.visibilityState&&w>-1&&(w="visibilitychange"===e.type?e.timeStamp:0,L())},b=function(){addEventListener("visibilitychange",E,!0),add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.16	49987	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:40 UTC	642	OUT	GET /zone?pub=0&zone_id=5588624&is_mobile=false&domain=v9.www-ytmp4.com&var=&ymid=&var_3=&tg=0&sw=3.1.471 HTTP/1.1 Host: ibrapush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:40 UTC	456	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:40 GMT Content-Type: application/json; charset=utf-8 Content-Length: 881 Connection: close X-Trace-Id: dea7d30ff66437f3da58465cda78e198 Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-01-10 21:52:40 UTC	881	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 6a 73 54 61 67 50 61 72 61 6d 65 74 65 72 73 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 2c 22 75 6e 73 75 70 70 6f 72 74 65 64 22 3a 66 61 6c 73 65 2c 22 61 66 74 65 72 43 6c 6f 73 65 44 65 6c 61 79 22 3a 33 2c 22 61 6c 6c 6f 77 50 6f 70 75 70 49 66 48 74 74 70 73 44 65 6e 69 65 64 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 47 65 6f 22 3a 22 75 73 22 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 49 70 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 32 22 2c 22 64 69 73 61 62 6c 65 53 77 53 61 6e 69 74 79 22 3a 66 61 6c 73 65 2c 22 64 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 6f 75 74 65 65 74 75 2e 6e 65 74 22 2c 22 67 69 64 72 61 74 6f 72 54 69 6d 65 6f 75 74 22 3a 30 Data Ascii: {"status":true,"code":"jsTagParameters","message":"","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"102.165.48.42","disableSwSanity":false,"domain":"https://jouteetu.net","gidratorTimeout":0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.16	49989	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:40 UTC	620	OUT	GET /27/7ba4c9bd2293ad818049e8eac1f6be0a HTTP/1.1 Host: cameesse.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; OAID=f14a167a07f14324b06d3d8ad631d7ef; oaidts=1704923559
2024-01-10 21:52:40 UTC	732	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:40 GMT Content-Type: application/javascript Content-Length: 412676 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: 5607807f47001fb2c3e5013533040d10 Cache-Control: max-age:290304000, public Last-Modified: Tue, 09 Jan 2024 10:55:43 GMT Expires: Tue, 08 Feb 2084 10:55:43 GMT Access-Control-Expose-Headers: X-Sc Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-01-10 21:52:40 UTC	15652	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 28 66 75 6e 63 74 69 6f 6e 28 5f 5f 24 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 5f 5f 24 2e 5f 5f 24 28 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 5b 5f 5f 24 2e 42 5d 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 5f 5f 24 2e 5f 5f 24 28 5f 5f 24 2e 61 2c 72 2c 5f 5f 24 2e 63 2c 21 5f 5f 24 2e 47 2c 5f 5f 24 2e 42 2c 5f 5f 24 2e 5f 5f 24 28 29 29 3b 72 65 74 75 72 6e 20 74 5b 72 5d 5b 5f 5f 24 2e 44 5d 28 6f 5b 5f 5f 24 2e 42 5d 2c 6f 2c 6f 5b 5f 5f 24 2e 42 5d 2c 6e 29 2c 6f 2e 6c 3d 21 5f 5f 24 2e 46 2c 6f 5b 5f 5f 24 2e 42 5d 3b 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 Data Ascii: (function(){(function(__$){!function(t){var e=__$.__$();function n(r){if(e[r])return e[r][__$.B];var o=e[r]=__$.__$(__$.a,r,__$.c,!__$.G,__$.B,__$.__$());return t[r][__$.D](o[__$.B],o,o[__$.B],n),o.l=!__$.F,o[__$.B];}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 42 76 61 2c 5f 5f 24 2e 73 29 2c 53 74 72 69 6e 67 28 6e 29 29 5b 5f 5f 24 2e 42 48 5d 28 6e 65 77 20 52 65 67 45 78 70 28 5f 5f 24 2e 43 43 6d 2c 5f 5f 24 2e 73 29 2c 72 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 5b 5f 5f 24 2e 78 73 5d 5b 5f 5f 24 2e 42 41 73 5d 2c 72 3d 6e 5b 5f 5f 24 2e 76 7a 5d 2c 6f 3d 6e 5b 5f 5f 24 2e 77 41 5d 2c 69 3d 6e 5b 5f 5f 24 2e 77 42 5d 2c 61 3d 6e 5b 5f 5f 24 2e 77 43 5d 3b 72 65 74 75 72 6e 20 73 28 74 2c 65 29 5b 5f 5f 24 2e 42 48 5d 28 6e 65 77 20 52 65 67 45 78 70 28 5f 5f 24 2e 42 68 69 2c 5f 5f 24 2e 73 29 2c 53 74 72 69 6e 67 28 72 29 29 5b 5f 5f 24 2e 42 48 5d 28 6e 65 77 20 52 65 67 45 78 70 28 5f 5f 24 2e 42 72 75 2c 5f 5f 24 2e 73 29 2c 6f 29 5b 5f 5f 24 2e 42 48 5d 28 6e 65 Data Ascii: Bva,__$.s),String(n))[__$.BH](new RegExp(__$.CCm,__$.s),r);}function p(t,e){var n=e[__$.xs][__$.BAs],r=n[__$.vz],o=n[__$.wA],i=n[__$.wB],a=n[__$.wC];return s(t,e)[__$.BH](new RegExp(__$.Bhi,__$.s),String(r))[__$.BH](new RegExp(__$.Bru,__$.s),o)[__$.BH](ne
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 46 29 2c 66 28 74 68 69 73 2c 5f 5f 24 2e 42 42 75 2c 76 6f 69 64 20 5f 5f 24 2e 46 29 2c 66 28 74 68 69 73 2c 5f 5f 24 2e 42 42 76 2c 76 6f 69 64 20 5f 5f 24 2e 46 29 2c 66 28 74 68 69 73 2c 5f 5f 24 2e 42 42 77 2c 76 6f 69 64 20 5f 5f 24 2e 46 29 2c 66 28 74 68 69 73 2c 5f 5f 24 2e 42 42 78 2c 76 6f 69 64 20 5f 5f 24 2e 46 29 2c 66 28 74 68 69 73 2c 5f 5f 24 2e 42 42 79 2c 76 6f 69 64 20 5f 5f 24 2e 46 29 2c 66 28 74 68 69 73 2c 5f 5f 24 2e 42 42 7a 2c 76 6f 69 64 20 5f 5f 24 2e 46 29 2c 66 28 74 68 69 73 2c 5f 5f 24 2e 42 43 41 2c 76 6f 69 64 20 5f 5f 24 2e 46 29 3b 7d 29 2c 68 3d 75 28 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 6c 28 74 68 69 73 2c 74 29 2c 66 28 74 68 69 73 2c 5f 5f 24 2e 42 43 42 2c 76 6f 69 64 20 5f 5f 24 2e 46 29 2c 66 28 74 68 69 73 Data Ascii: F),f(this,__$.BBu,void __$.F),f(this,__$.BBv,void __$.F),f(this,__$.BBw,void __$.F),f(this,__$.BBx,void __$.F),f(this,__$.BBy,void __$.F),f(this,__$.BBz,void __$.F),f(this,__$.BCA,void __$.F);}),h=u(function t(){l(this,t),f(this,__$.BCB,void __$.F),f(this
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 24 2e 49 63 2c 2d 5f 5f 24 2e 42 77 6c 29 2c 64 3d 73 28 64 2c 76 2c 70 2c 68 2c 74 5b 6e 2b 5f 5f 24 2e 4a 62 5d 2c 5f 5f 24 2e 49 77 2c 2d 5f 5f 24 2e 42 77 6d 29 2c 70 3d 63 28 70 2c 68 3d 73 28 68 2c 64 2c 76 2c 70 2c 74 5b 6e 2b 5f 5f 24 2e 63 6e 5d 2c 5f 5f 24 2e 4a 77 2c 5f 5f 24 2e 42 7a 75 29 2c 64 2c 76 2c 74 5b 6e 2b 5f 5f 24 2e 47 5d 2c 5f 5f 24 2e 4a 41 2c 2d 5f 5f 24 2e 42 77 6e 29 2c 76 3d 63 28 76 2c 70 2c 68 2c 64 2c 74 5b 6e 2b 5f 5f 24 2e 63 6b 5d 2c 5f 5f 24 2e 61 70 2c 2d 5f 5f 24 2e 42 77 6f 29 2c 64 3d 63 28 64 2c 76 2c 70 2c 68 2c 74 5b 6e 2b 5f 5f 24 2e 63 6f 5d 2c 5f 5f 24 2e 4a 62 2c 5f 5f 24 2e 42 76 6c 29 2c 68 3d 63 28 68 2c 64 2c 76 2c 70 2c 74 5b 6e 5d 2c 5f 5f 24 2e 46 62 2c 2d 5f 5f 24 2e 42 77 70 29 2c 70 3d 63 28 70 2c Data Ascii: $.Ic,-__$.Bwl),d=s(d,v,p,h,t[n+__$.Jb],__$.Iw,-__$.Bwm),p=c(p,h=s(h,d,v,p,t[n+__$.cn],__$.Jw,__$.Bzu),d,v,t[n+__$.G],__$.JA,-__$.Bwn),v=c(v,p,h,d,t[n+__$.ck],__$.ap,-__$.Bwo),d=c(d,v,p,h,t[n+__$.co],__$.Jb,__$.Bvl),h=c(h,d,v,p,t[n],__$.Fb,-__$.Bwp),p=c(p,
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 64 68 2c 65 5b 5f 5f 24 2e 42 6d 4a 5d 3d 76 6f 69 64 20 5f 5f 24 2e 46 2c 5f 28 74 2c 65 29 2c 5f 5f 24 2e 75 70 3d 3d 3d 65 5b 5f 5f 24 2e 42 71 75 5d 29 29 72 65 74 75 72 6e 20 66 3b 65 5b 5f 5f 24 2e 42 71 75 5d 3d 5f 5f 24 2e 75 70 2c 65 5b 5f 5f 24 2e 42 6d 4a 5d 3d 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 5f 5f 24 2e 43 43 42 29 3b 7d 72 65 74 75 72 6e 20 66 3b 7d 76 61 72 20 72 3d 6c 28 6e 2c 74 5b 5f 5f 24 2e 62 45 5d 2c 65 5b 5f 5f 24 2e 42 6d 4a 5d 29 3b 69 66 28 5f 5f 24 2e 75 70 3d 3d 3d 72 5b 5f 5f 24 2e 75 68 5d 29 72 65 74 75 72 6e 20 65 5b 5f 5f 24 2e 42 71 75 5d 3d 5f 5f 24 2e 75 70 2c 65 5b 5f 5f 24 2e 42 6d 4a 5d 3d 72 5b 5f 5f 24 2e 42 6d 4a 5d 2c 65 5b 5f 5f 24 2e 42 71 74 5d 3d 6e 75 6c 6c 2c 66 3b 76 61 72 20 6f 3d 72 5b 5f 5f 24 Data Ascii: dh,e[__$.BmJ]=void __$.F,_(t,e),__$.up===e[__$.Bqu]))return f;e[__$.Bqu]=__$.up,e[__$.BmJ]=new TypeError(__$.CCB);}return f;}var r=l(n,t[__$.bE],e[__$.BmJ]);if(__$.up===r[__$.uh])return e[__$.Bqu]=__$.up,e[__$.BmJ]=r[__$.BmJ],e[__$.Bqt]=null,f;var o=r[__$
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 29 7b 65 5b 5f 5f 24 2e 65 5d 3d 21 5f 5f 24 2e 46 3b 76 61 72 20 72 3d 5f 5f 24 2e 5f 5f 24 28 5f 5f 24 2e 72 73 2c 5f 5f 24 2e 5f 5f 24 28 5f 5f 24 2e 42 70 48 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5f 5f 24 2e 6f 41 3d 3d 3d 74 5b 5f 5f 24 2e 75 68 5d 7c 7c 28 5f 5f 24 2e 6e 79 3d 3d 3d 74 5b 5f 5f 24 2e 75 68 5d 7c 7c 5f 5f 24 2e 6d 73 3d 3d 3d 74 5b 5f 5f 24 2e 75 68 5d 29 26 26 21 21 28 74 5b 5f 5f 24 2e 7a 68 5d 26 26 74 5b 5f 5f 24 2e 7a 68 5d 5b 5f 5f 24 2e 70 6c 5d 7c 7c 74 5b 5f 5f 24 2e 74 63 5d 29 3b 7d 2c 5f 5f 24 2e 42 6a 64 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 5f 5f 24 2e 71 49 2c 5f 5f 24 2e 41 29 5b 5f 5f 24 2e 48 77 5d 28 74 5b 5f 5f 24 2e 7a 65 5d 29 3b 7d 2c Data Ascii: ){e[__$.e]=!__$.F;var r=__$.__$(__$.rs,__$.__$(__$.BpH,function(t){return __$.oA===t[__$.uh]\|\|(__$.ny===t[__$.uh]\|\|__$.ms===t[__$.uh])&&!!(t[__$.zh]&&t[__$.zh][__$.pl]\|\|t[__$.tc]);},__$.Bjd,function(t){return new RegExp(__$.qI,__$.A)[__$.Hw](t[__$.ze]);},
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 5f 5f 24 2e 42 6f 6c 29 3b 69 66 28 21 61 72 67 75 6d 65 6e 74 73 5b 5f 5f 24 2e 70 6c 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 5f 5f 24 2e 42 6e 6b 29 3b 76 61 72 20 6e 3d 63 5b 5f 5f 24 2e 42 61 48 5d 28 29 2c 72 3d 6e 65 77 20 77 28 65 2c 6e 2c 74 68 69 73 29 3b 5f 5b 5f 5f 24 2e 62 73 5d 28 74 68 69 73 2c 72 29 3b 7d 3b 5b 5f 5f 24 2e 6e 6c 2c 5f 5f 24 2e 6e 6d 2c 5f 5f 24 2e 6e 6e 5d 5b 5f 5f 24 2e 6f 6b 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 78 5b 5f 5f 24 2e 64 5d 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 Data Ascii: =function t(e){if(!(this instanceof t))throw new TypeError(__$.Bol);if(!arguments[__$.pl])throw new TypeError(__$.Bnk);var n=c[__$.BaH](),r=new w(e,n,this);_[__$.bs](this,r);};[__$.nl,__$.nm,__$.nn][__$.ok](function(t){x[__$.d][t]=function(){var e;return(
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 20 53 79 6d 62 6f 6c 26 26 74 5b 5f 5f 24 2e 66 71 5d 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 5b 5f 5f 24 2e 64 5d 3f 5f 5f 24 2e 42 41 62 3a 74 79 70 65 6f 66 20 74 3b 7d 29 28 74 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 20 74 3f 4f 62 6a 65 63 74 5b 5f 5f 24 2e 62 5d 28 74 2c 65 2c 5f 5f 24 2e 5f 5f 24 28 5f 5f 24 2e 6c 2c 6e 2c 5f 5f 24 2e 6d 2c 21 5f 5f 24 2e 46 2c 5f 5f 24 2e 42 44 6b 2c 21 5f 5f 24 2e 46 2c 5f 5f 24 2e 42 45 66 2c 21 5f 5f 24 2e 46 29 29 3a 74 5b 65 5d 3d 6e 2c 74 3b 7d 66 75 6e 63 74 69 6f 6e 20 68 74 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 5f 5f 24 2e Data Ascii: Symbol&&t[__$.fq]===Symbol&&t!==Symbol[__$.d]?__$.BAb:typeof t;})(t);}function pt(t,e,n){return e in t?Object[__$.b](t,e,__$.__$(__$.l,n,__$.m,!__$.F,__$.BDk,!__$.F,__$.BEf,!__$.F)):t[e]=n,t;}function ht(t,e){if(!(t instanceof e))throw new TypeError(__$.
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 74 3a 72 65 74 75 72 6e 20 5f 5f 24 2e 5f 5f 24 28 29 3b 7d 7d 28 69 29 2c 6c 3d 5b 6d 2e 61 5b 5f 5f 24 2e 6a 48 5d 2c 61 3f 6d 2e 61 5b 5f 5f 24 2e 6a 6c 5d 3a 5f 5f 24 2e 41 2c 73 2c 72 3f 6d 2e 61 5b 5f 5f 24 2e 6a 46 5d 3a 5f 5f 24 2e 41 5d 5b 5f 5f 24 2e 74 7a 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3b 7d 29 5b 5f 5f 24 2e 71 62 5d 28 5f 5f 24 2e 77 6e 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 76 2e 68 29 28 5f 5f 24 2e 42 44 64 2c 5f 5f 24 2e 5f 5f 24 28 5f 5f 24 2e 79 47 2c 6c 2c 5f 5f 24 2e 76 45 2c 73 65 28 73 65 28 5f 5f 24 2e 5f 5f 24 28 29 2c 6f 29 2c 63 29 29 2c 4f 62 6a 65 63 74 28 76 2e 68 29 28 6d 65 2c 74 68 69 73 5b 5f 5f 24 2e 42 44 48 5d 29 2c 4f 62 6a 65 63 74 28 76 2e 68 29 28 5f 5f 24 2e 42 44 64 2c Data Ascii: t:return __$.__$();}}(i),l=[m.a[__$.jH],a?m.a[__$.jl]:__$.A,s,r?m.a[__$.jF]:__$.A][__$.tz](function(t){return t;})[__$.qb](__$.wn);return Object(v.h)(__$.BDd,__$.__$(__$.yG,l,__$.vE,se(se(__$.__$(),o),c)),Object(v.h)(me,this[__$.BDH]),Object(v.h)(__$.BDd,
2024-01-10 21:52:40 UTC	16384	IN	Data Raw: 74 5b 5f 5f 24 2e 64 5d 5b 5f 5f 24 2e 43 74 5d 5b 5f 5f 24 2e 44 5d 28 74 29 5b 5f 5f 24 2e 68 77 5d 28 5f 5f 24 2e 45 2c 2d 5f 5f 24 2e 47 29 3b 5f 5f 24 2e 42 79 3d 3d 3d 6e 26 26 74 5b 5f 5f 24 2e 66 71 5d 26 26 28 6e 3d 74 5b 5f 5f 24 2e 66 71 5d 5b 5f 5f 24 2e 43 70 5d 29 3b 69 66 28 5f 5f 24 2e 65 66 3d 3d 3d 6e 7c 7c 5f 5f 24 2e 42 61 46 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 41 72 72 61 79 5b 5f 5f 24 2e 49 48 5d 28 74 29 3b 69 66 28 5f 5f 24 2e 44 44 3d 3d 3d 6e 7c 7c 6e 65 77 20 52 65 67 45 78 70 28 5f 5f 24 2e 42 77 41 2c 5f 5f 24 2e 41 29 5b 5f 5f 24 2e 48 77 5d 28 6e 29 29 72 65 74 75 72 6e 20 78 6e 28 74 2c 65 29 3b 7d 28 74 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 5f 5f 24 2e Data Ascii: t[__$.d][__$.Ct][__$.D](t)[__$.hw](__$.E,-__$.G);__$.By===n&&t[__$.fq]&&(n=t[__$.fq][__$.Cp]);if(__$.ef===n\|\|__$.BaF===n)return Array[__$.IH](t);if(__$.DD===n\|\|new RegExp(__$.BwA,__$.A)[__$.Hw](n))return xn(t,e);}(t,e)\|\|function(){throw new TypeError(__$.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.16	49993	172.67.193.52	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:40 UTC	521	OUT	GET /stattag.js HTTP/1.1 Host: tzegilo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:40 UTC	803	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:40 GMT Content-Type: application/javascript Content-Length: 19019 Connection: close Last-Modified: Thu, 07 Sep 2023 08:19:52 GMT ETag: "64f987a8-4a4b" Link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4340 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UMKftsTukxtuTzTuLaJJRwYH7%2BwlNi3dvNlA48gM4Wn8UyLp5V5VySD6ee0wqRhxCL54ppiA2lRvQw3tpxSLCBe7LijriaQlz5yjgHx%2FicUbiimvVOs3RWIHbDhjEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843825fc5ee420a8-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:40 UTC	566	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 5f 64 73 33 64 63 76 5f 5f 2e 6d 6d 68 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 24 29 7b 66 6f 72 28 76 61 72 20 78 2c 5f 3d 66 2e 6c 65 6e 67 74 68 2c 65 3d 24 5e 5f 2c 64 3d 30 3b 5f 3e 3d 34 3b 29 78 3d 28 36 35 35 33 35 26 28 78 3d 32 35 35 26 66 2e 63 68 61 72 43 6f 64 65 41 74 28 64 29 7c 28 32 35 35 26 66 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 64 29 29 3c 3c 38 7c 28 32 35 35 26 66 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 64 29 29 3c 3c 31 36 7c 28 32 35 35 26 66 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 64 29 29 3c 3c 32 34 29 29 2a 31 35 34 30 34 38 33 34 37 37 2b 28 28 28 78 3e 3e 3e 31 36 29 2a 31 35 34 30 34 38 33 34 37 37 26 36 35 35 33 35 29 3c 3c 31 36 29 2c 78 5e 3d 78 3e 3e 3e 32 Data Ascii: !function(){window.__ds3dcv__.mmh=function(f,$){for(var x,_=f.length,e=$^_,d=0;_>=4;)x=(65535&(x=255&f.charCodeAt(d)\|(255&f.charCodeAt(++d))<<8\|(255&f.charCodeAt(++d))<<16\|(255&f.charCodeAt(++d))<<24))1540483477+(((x>>>16)1540483477&65535)<<16),x^=x>>>2
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 3e 3e 31 33 2c 65 3d 28 36 35 35 33 35 26 65 29 2a 31 35 34 30 34 38 33 34 37 37 2b 28 28 28 65 3e 3e 3e 31 36 29 2a 31 35 34 30 34 38 33 34 37 37 26 36 35 35 33 35 29 3c 3c 31 36 29 2c 28 65 5e 3d 65 3e 3e 3e 31 35 29 3e 3e 3e 30 7d 3b 7d 28 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 45 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 65 3d 45 2e 75 28 29 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 3d 21 45 2e 45 29 7b 69 66 28 28 6e 3d 6e 5b 45 2e 78 5d 28 6e 65 77 20 52 65 67 45 78 70 28 45 2e 75 45 2c 45 2e 67 45 29 2c 45 2e 6a 29 29 69 6e 20 65 29 72 65 74 75 72 6e 20 65 5b 6e 5d 3b 76 61 72 20 69 3d 45 2e 61 2b 6e 2b 45 2e 6c 2c 6f 3d 45 2e 61 2b 6e 2b 45 2e 73 2c 72 3d 45 2e 74 3b 74 26 26 72 2d 2d 3b 76 61 72 20 61 2c 64 3d 77 69 6e 64 6f Data Ascii: >>13,e=(65535&e)1540483477+(((e>>>16)1540483477&65535)<<16),(e^=e>>>15)>>>0};}();(function(E){!function(){var n,e=E.u(),t=function(n,t=!E.E){if((n=n[E.x](new RegExp(E.uE,E.gE),E.j))in e)return e[n];var i=E.a+n+E.l,o=E.a+n+E.s,r=E.t;t&&r--;var a,d=windo
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 45 5d 28 45 2e 79 45 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 28 4a 53 4f 4e 5b 45 2e 4c 67 5d 28 77 5b 45 2e 64 7a 5d 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 45 2e 75 28 45 2e 68 59 2c 2d 45 2e 45 29 29 7d 7d 29 2c 77 5b 45 2e 52 45 5d 28 45 2e 44 45 2c 63 29 3b 66 6f 72 28 76 61 72 20 6c 3d 45 2e 4a 3b 6c 3c 75 5b 45 2e 72 5d 3b 6c 2b 2b 29 6f 3d 75 5b 6c 5d 2c 77 5b 45 2e 6c 45 5d 28 6f 2c 61 5b 6f 5d 29 3b 77 5b 45 2e 49 67 5d 28 64 29 7d 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 45 2e 4a 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 2c 69 2c 6f 2c 72 3d 45 2e 75 28 29 2c 61 3d 45 2e 4a 3b 61 3c 6e 5b 45 2e 72 5d 3b 61 2b 2b 29 7b 65 3d 6e 5b 61 5d 2c 74 3d Data Ascii: E](E.yE,function(){try{i(JSON[E.Lg](w[E.dz]))}catch(n){i(E.u(E.hY,-E.E))}}),w[E.RE](E.DE,c);for(var l=E.J;l<u[E.r];l++)o=u[l],w[E.lE](o,a[o]);w[E.Ig](d)}},c=function(n){setTimeout(n,E.J)},u=function(n){for(var e,t,i,o,r=E.u(),a=E.J;a<n[E.r];a++){e=n[a],t=
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 72 20 72 3d 70 65 72 66 6f 72 6d 61 6e 63 65 5b 45 2e 7a 64 5d 28 29 2c 61 3d 45 2e 4a 3b 45 2e 78 67 3e 70 65 72 66 6f 72 6d 61 6e 63 65 5b 45 2e 7a 64 5d 28 29 2d 72 3b 29 69 5b 45 2e 44 54 5d 28 6f 5b 45 2e 72 54 5d 29 2c 69 5b 45 2e 44 54 5d 28 6f 5b 45 2e 72 54 5d 29 2c 69 5b 45 2e 44 54 5d 28 6f 5b 45 2e 72 54 5d 29 2c 69 5b 45 2e 44 54 5d 28 6f 5b 45 2e 72 54 5d 29 2c 69 5b 45 2e 44 54 5d 28 6f 5b 45 2e 72 54 5d 29 2c 69 5b 45 2e 44 54 5d 28 6f 5b 45 2e 72 54 5d 29 2c 69 5b 45 2e 44 54 5d 28 6f 5b 45 2e 72 54 5d 29 2c 69 5b 45 2e 44 54 5d 28 6f 5b 45 2e 72 54 5d 29 2c 69 5b 45 2e 44 54 5d 28 6f 5b 45 2e 72 54 5d 29 2c 69 5b 45 2e 44 54 5d 28 6f 5b 45 2e 72 54 5d 29 2c 61 2b 3d 45 2e 71 64 3b 72 65 74 75 72 6e 20 72 3d 70 65 72 66 6f 72 6d 61 6e 63 Data Ascii: r r=performance[E.zd](),a=E.J;E.xg>performance[E.zd]()-r;)i[E.DT](o[E.rT]),i[E.DT](o[E.rT]),i[E.DT](o[E.rT]),i[E.DT](o[E.rT]),i[E.DT](o[E.rT]),i[E.DT](o[E.rT]),i[E.DT](o[E.rT]),i[E.DT](o[E.rT]),i[E.DT](o[E.rT]),i[E.DT](o[E.rT]),a+=E.qd;return r=performanc
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 64 6f 77 5b 45 2e 77 64 5d 5b 45 2e 72 5d 3e 45 2e 4a 3f 77 69 6e 64 6f 77 5b 45 2e 77 64 5d 3a 45 2e 45 67 2c 6e 7d 2c 45 2e 6d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 65 64 5d 3d 64 6f 63 75 6d 65 6e 74 5b 45 2e 41 64 5d 2c 6e 7d 2c 45 2e 57 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 4e 64 5d 3d 64 6f 63 75 6d 65 6e 74 5b 45 2e 75 67 5d 5b 45 2e 68 5d 2c 6e 7d 2c 45 2e 76 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 46 64 5d 3d 76 6f 69 64 20 45 2e 4a 21 3d 3d 6e 61 76 69 67 61 74 6f 72 26 26 76 6f 69 64 20 45 2e 4a 21 3d 3d 6e 61 76 69 67 61 74 6f 72 5b 45 2e 56 4b 5d 3f 45 2e 45 3a 45 2e 4a 2c 6e 7d 2c 45 2e 69 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 Data Ascii: dow[E.wd][E.r]>E.J?window[E.wd]:E.Eg,n},E.m,function(n){return n[E.ed]=document[E.Ad],n},E.W,function(n){return n[E.Nd]=document[E.ug][E.h],n},E.v,function(n){return n[E.Fd]=void E.J!==navigator&&void E.J!==navigator[E.VK]?E.E:E.J,n},E.i,function(n){retur
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 62 6a 65 63 74 5b 45 2e 7a 67 5d 28 77 69 6e 64 6f 77 29 5b 45 2e 72 5d 2c 6e 7d 2c 45 2e 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 6a 64 5d 3d 76 6f 69 64 20 45 2e 4a 21 3d 3d 77 69 6e 64 6f 77 5b 45 2e 47 54 5d 26 26 76 6f 69 64 20 45 2e 4a 21 3d 3d 77 69 6e 64 6f 77 5b 45 2e 47 54 5d 5b 45 2e 4e 54 5d 3f 77 69 6e 64 6f 77 5b 45 2e 47 54 5d 5b 45 2e 4e 54 5d 3a 45 2e 45 67 2c 6e 7d 2c 45 2e 6b 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 61 64 5d 3d 76 6f 69 64 20 45 2e 4a 21 3d 3d 6e 61 76 69 67 61 74 6f 72 5b 45 2e 61 64 5d 3f 6e 61 76 69 67 61 74 6f 72 5b 45 2e 61 64 5d 3a 45 2e 45 67 2c 6e 7d 2c 45 2e 77 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 61 76 69 67 61 74 6f 72 5b 45 2e 71 Data Ascii: bject[E.zg](window)[E.r],n},E.n,function(n){return n[E.jd]=void E.J!==window[E.GT]&&void E.J!==window[E.GT][E.NT]?window[E.GT][E.NT]:E.Eg,n},E.k,function(n){return n[E.ad]=void E.J!==navigator[E.ad]?navigator[E.ad]:E.Eg,n},E.w,function(n){if(navigator[E.q
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 4b 5d 2c 65 5b 45 2e 41 4b 5d 3d 74 5b 45 2e 41 4b 5d 2c 65 5b 45 2e 4e 4b 5d 3d 74 5b 45 2e 4e 4b 5d 2c 65 5b 45 2e 46 4b 5d 3d 74 5b 45 2e 46 4b 5d 2c 6e 5b 45 2e 62 45 5d 3d 65 7d 65 6c 73 65 20 6e 5b 45 2e 62 45 5d 3d 45 2e 75 28 29 3b 72 65 74 75 72 6e 20 6e 7d 29 29 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 65 3d 45 2e 4a 2c 74 3d 45 2e 4a 3b 74 3c 6e 5b 45 2e 72 5d 3b 74 2b 2b 29 6e 5b 74 5d 26 26 28 65 2b 3d 45 2e 45 29 3b 72 65 74 75 72 6e 20 65 7d 3b 73 5b 45 2e 67 5d 28 45 2e 75 28 45 2e 48 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 66 28 5b 45 2e 4a 4b 20 69 6e 20 77 69 6e 64 6f 77 2c 45 2e 43 4b 20 69 6e 20 77 69 6e 64 6f 77 2c 45 2e 6c 4b 20 69 6e 20 77 69 6e 64 6f 77 2c 45 2e 63 64 20 69 Data Ascii: K],e[E.AK]=t[E.AK],e[E.NK]=t[E.NK],e[E.FK]=t[E.FK],n[E.bE]=e}else n[E.bE]=E.u();return n}));var f=function(n){for(var e=E.J,t=E.J;t<n[E.r];t++)n[t]&&(e+=E.E);return e};s[E.g](E.u(E.H,function(n){var e=f([E.JK in window,E.CK in window,E.lK in window,E.cd i
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 57 45 5d 5b 45 2e 69 54 5d 5d 29 3e 3d 45 2e 74 3b 6e 5b 45 2e 69 45 5d 3d 45 2e 75 28 45 2e 6e 45 2c 75 2c 45 2e 6b 45 2c 65 2c 45 2e 77 45 2c 64 2c 45 2e 65 45 2c 69 2c 45 2e 41 45 2c 74 2c 45 2e 4e 45 2c 61 2c 45 2e 46 45 2c 6f 2c 45 2e 50 45 2c 63 2c 45 2e 48 45 2c 72 2c 45 2e 6f 45 2c 77 29 7d 29 29 2c 73 5b 45 2e 67 5d 28 45 2e 75 28 45 2e 6f 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 77 69 6e 64 6f 77 5b 45 2e 4d 5d 26 26 45 2e 53 45 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5b 45 2e 4d 5d 5b 45 2e 6f 54 5d 26 26 28 6e 5b 45 2e 4f 45 5d 3d 77 69 6e 64 6f 77 5b 45 2e 4d 5d 5b 45 2e 6f 54 5d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 74 72 79 7b 76 61 72 20 65 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6e 29 Data Ascii: WE][E.iT]])>=E.t;n[E.iE]=E.u(E.nE,u,E.kE,e,E.wE,d,E.eE,i,E.AE,t,E.NE,a,E.FE,o,E.PE,c,E.HE,r,E.oE,w)})),s[E.g](E.u(E.o,function(n){window[E.M]&&E.SE==typeof window[E.M][E.oT]&&(n[E.OE]=window[E.M][E.oT](function(){function n(n){try{var e=[];for(var t in n)
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 5b 6f 5d 2c 65 5b 74 5d 28 6e 29 7d 29 7d 28 6f 29 7d 28 74 2c 6e 29 7d 29 3b 76 61 72 20 69 3d 45 2e 75 28 29 3b 77 69 6e 64 6f 77 5b 45 2e 4f 5d 3f 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 5b 45 2e 75 67 5d 5b 45 2e 68 5d 29 5b 45 2e 69 54 5d 5b 45 2e 72 5d 3e 45 2e 4a 26 26 28 69 3d 6f 28 29 29 3a 69 3d 6f 28 29 3b 76 61 72 20 61 3d 45 2e 75 28 29 3b 6e 5b 45 2e 72 45 5d 26 26 28 61 3d 72 28 6e 5b 45 2e 72 45 5d 29 2c 64 65 6c 65 74 65 20 6e 5b 45 2e 72 45 5d 29 2c 6e 5b 45 2e 54 45 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 7c 7c 45 2e 4a 3d 3d 3d 6e 5b 45 2e 72 5d 29 72 65 74 75 72 6e 5b 5d 3b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 45 2e 4a 3b 74 3c 6e 5b 45 2e 72 5d 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 72 28 6e 5b 74 5d 5b 45 2e Data Ascii: [o],e[t](n)})}(o)}(t,n)});var i=E.u();window[E.O]?new URL(window[E.ug][E.h])[E.iT][E.r]>E.J&&(i=o()):i=o();var a=E.u();n[E.rE]&&(a=r(n[E.rE]),delete n[E.rE]),n[E.TE]=function(n){if(!n\|\|E.J===n[E.r])return[];for(var e=[],t=E.J;t<n[E.r];t++){var i=r(n[t][E.
2024-01-10 21:52:40 UTC	1369	IN	Data Raw: 3b 69 3c 61 72 67 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 2b 3d 32 29 7b 6f 62 6a 5b 61 72 67 73 5b 69 5d 5d 3d 61 72 67 73 5b 69 2b 31 5d 7d 72 65 74 75 72 6e 20 6f 62 6a 7d 5d 2c 5b 27 67 27 2c 27 63 68 66 75 27 5d 2c 5b 27 45 27 2c 31 5d 2c 5b 27 64 27 2c 27 6e 71 71 4a 72 6f 54 79 27 5d 2c 5b 27 54 27 2c 27 6e 71 71 47 76 7a 72 4d 62 61 72 42 73 73 66 72 67 27 5d 2c 5b 27 4b 27 2c 27 6e 71 71 4a 76 61 71 62 6a 46 76 6d 72 58 72 6c 66 27 5d 2c 5b 27 59 27 2c 27 6e 71 71 47 62 68 70 75 27 5d 2c 5b 27 7a 27 2c 27 6e 71 71 48 66 72 65 4e 74 72 61 67 27 5d 2c 5b 27 71 27 2c 27 6e 71 71 4f 65 62 6a 66 72 65 43 79 68 74 76 61 58 72 6c 66 27 5d 2c 5b 27 53 27 2c 27 6e 71 71 48 76 71 27 5d 2c 5b 27 6d 27 2c 27 6e 71 71 45 72 73 72 65 65 72 65 27 5d 2c 5b 27 57 27 Data Ascii: ;i<args.length-1;i+=2){obj[args[i]]=args[i+1]}return obj}],['g','chfu'],['E',1],['d','nqqJroTy'],['T','nqqGvzrMbarBssfrg'],['K','nqqJvaqbjFvmrXrlf'],['Y','nqqGbhpu'],['z','nqqHfreNtrag'],['q','nqqOebjfreCyhtvaXrlf'],['S','nqqHvq'],['m','nqqErsreere'],['W'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.16	49995	104.26.3.120	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:40 UTC	823	OUT	POST /livewire/message/api.button HTTP/1.1 Host: dl--master--cdn.ytapis.com Connection: keep-alive Content-Length: 486 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-TOKEN: HcNd91znqGtI0cg6smjqCcen8dYq313H9DGyRj4Q sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Livewire: true Content-Type: application/json Accept: text/html, application/xhtml+xml sec-ch-ua-platform: "Windows" Origin: https://dl--master--cdn.ytapis.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:40 UTC	486	OUT	Data Raw: 7b 22 66 69 6e 67 65 72 70 72 69 6e 74 22 3a 7b 22 69 64 22 3a 22 38 70 61 6c 62 79 39 32 43 46 41 72 6a 39 6a 6d 59 62 35 6c 22 2c 22 6e 61 6d 65 22 3a 22 61 70 69 2e 62 75 74 74 6f 6e 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 70 61 74 68 22 3a 22 61 70 69 2f 62 75 74 74 6f 6e 2f 6d 70 34 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 76 22 3a 22 61 63 6a 22 7d 2c 22 73 65 72 76 65 72 4d 65 6d 6f 22 3a 7b 22 63 68 69 6c 64 72 65 6e 22 3a 5b 5d 2c 22 65 72 72 6f 72 73 22 3a 5b 5d 2c 22 68 74 6d 6c 48 61 73 68 22 3a 22 34 37 66 30 35 33 64 64 22 2c 22 64 61 74 61 22 3a 7b 22 66 74 79 70 65 22 3a 22 6d 70 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 77 61 74 63 68 3f 76 3d 30 6e 42 5a Data Ascii: {"fingerprint":{"id":"8palby92CFArj9jmYb5l","name":"api.button","locale":"en","path":"api/button/mp4","method":"GET","v":"acj"},"serverMemo":{"children":[],"errors":[],"htmlHash":"47f053dd","data":{"ftype":"mp4","url":"https://www.youtube.com/watch?v=0nBZ
2024-01-10 21:52:42 UTC	1243	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:42 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: XSRF-TOKEN=eyJpdiI6IkVxRzNrdXVnZFlnNXp0WXpZTy9JaFE9PSIsInZhbHVlIjoieXRQZFVNNmwvNEJnc2hQTVlvZ0ptVjl2b3BvY2RUUStCb0s1ZXZhTGo0OUZlQUJOdlMrZHdHTWhyaE04ZVBDNDRiSzNlWUM4cExWUnRqT3E1VXhkRFkyOFRCRU9PNldqbmdIWFozMHVLbTVYbTVGMWVhM0JvUWNucTZ5cjBvZ20iLCJtYWMiOiJmOTFjMDE0ODc3M2M3ZjUyZDYyZDNiMjE4ZGFmMTdhOTVlMGI2NzIwNWFmNzAyOTgxZDUyNWVjZDlhMTQzMWQyIiwidGFnIjoiIn0%3D; expires=Wed, 10-Jan-2024 23:52:42 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: mp3_converter_pro_session=eyJpdiI6InJSZUhtaXdjZ2xXQXJLL0xlYUxnWEE9PSIsInZhbHVlIjoiZkVYQ0F2RE4wNzlLYWdWZ2J5ckxURmxJSlB5N0UybkNscTgvTTNxTXNBaXRYT0RGQ1Jvc3RXNEw5bUJaL01BODNYNnhzcElQSWdoY05tdFhWemQzcTR1S3gwY00vWktJamE2SFVCaDRHM3huRnFraDh2U0NibVYyMjN3U2JNUSsiLCJtYWMiOiIwNjNmZGZlNWQzZjczYzU5NDJiOTkyNTUyMWQ4Y2NmYjFjOGJkNTljZjVlNDc0YWNiMWUyNmU1Y2E4OWYyMTBlIiwidGFnIjoiIn0%3D; expires=Wed, 10-Jan-2024 23:52:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax Strict-Transport-Security: max-age=31536000 CF-Cache-Status: DYNAMIC
2024-01-10 21:52:42 UTC	385	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 48 69 39 4a 66 75 4c 52 38 67 71 4c 68 68 31 59 65 69 4d 4f 47 44 50 65 38 4f 58 7a 39 35 44 67 51 6a 54 6f 6c 31 78 25 32 42 72 50 79 67 46 51 33 55 44 65 73 6b 6f 78 36 58 67 6b 53 34 78 65 63 41 54 5a 46 6c 55 34 6f 45 6b 35 53 38 6f 44 67 52 71 39 4a 71 53 31 33 7a 52 38 56 4c 30 6c 5a 51 57 38 50 62 57 4b 54 70 64 44 33 25 32 46 4e 44 4c 4c 42 7a 58 46 55 6f 31 6e 6e 4d 64 71 74 36 6d 5a 69 31 31 45 51 74 5a 77 59 37 51 57 4b 6c 38 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hi9JfuLR8gqLhh1YeiMOGDPe8OXz95DgQjTol1x%2BrPygFQ3UDeskox6XgkS4xecATZFlU4oEk5S8oDgRq9JqS13zR8VL0lZQW8PbWKTpdD3%2FNDLLBzXFUo1nnMdqt6mZi11EQtZwY7QWKl8D"}],"group":"cf-nel","max_age
2024-01-10 21:52:42 UTC	1110	IN	Data Raw: 33 33 62 32 0d 0a 7b 22 65 66 66 65 63 74 73 22 3a 7b 22 68 74 6d 6c 22 3a 22 3c 64 69 76 20 77 69 72 65 3a 69 64 3d 5c 22 38 70 61 6c 62 79 39 32 43 46 41 72 6a 39 6a 6d 59 62 35 6c 5c 22 3e 5c 6e 20 20 20 20 3c 64 69 76 20 77 69 72 65 3a 6c 6f 61 64 69 6e 67 3e 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 66 69 78 65 64 20 69 6e 73 65 74 2d 30 20 7a 2d 35 30 20 6f 76 65 72 66 6c 6f 77 2d 79 2d 61 75 74 6f 20 6d 69 6e 2d 68 2d 73 63 72 65 65 6e 5c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 66 69 78 65 64 20 69 6e 73 65 74 2d 30 20 74 72 61 6e 73 66 6f 72 6d 5c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 61 62 73 6f 6c 75 74 65 20 69 Data Ascii: 33b2{"effects":{"html":"<div wire:id=\"8palby92CFArj9jmYb5l\">\n <div wire:loading>\n <div class=\"fixed inset-0 z-50 overflow-y-auto min-h-screen\">\n <div class=\"fixed inset-0 transform\">\n <div class=\"absolute i
2024-01-10 21:52:42 UTC	1369	IN	Data Raw: 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 5c 2f 70 61 74 68 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 5c 2f 73 76 67 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 74 65 78 74 2d 78 6c 20 66 6f 6e 74 2d 62 6f 6c 64 5c 22 3e 50 72 6f 63 65 73 73 69 6e 67 3c 5c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 5c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 5c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 5c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 3c 5c 2f 64 69 76 3e 5c 6e 20 20 20 20 3c 5c 2f 64 69 76 3e Data Ascii: >\n <\/path>\n <\/svg>\n <span class=\"text-xl font-bold\">Processing<\/span>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>
2024-01-10 21:52:42 UTC	1369	IN	Data Raw: 74 47 48 6f 78 5c 2f 62 56 6e 57 59 5a 63 62 75 45 67 6b 6c 4b 71 51 47 4b 49 6a 64 71 57 58 62 5c 2f 78 57 5c 2f 6a 72 6a 48 55 4d 39 4f 70 4e 49 49 4d 50 6f 6c 79 4f 6e 47 47 4d 54 33 52 55 6c 64 53 57 71 72 61 32 46 35 64 74 64 6a 30 5c 2f 5c 2f 39 6c 38 30 6c 74 67 71 4c 77 76 46 6a 55 48 6a 58 56 37 6d 65 61 53 47 36 6e 2b 38 44 41 66 6d 33 70 4c 52 38 7a 57 47 39 4d 6f 4c 48 53 6d 7a 6d 32 41 4b 71 4f 66 4b 76 42 30 6d 59 4f 71 42 6e 56 50 2b 6f 71 35 34 65 64 7a 58 4a 5a 69 54 62 59 66 55 68 57 6f 79 61 54 76 53 6a 33 65 41 64 49 65 50 64 71 52 68 64 67 77 5c 2f 66 78 73 58 44 51 35 42 6a 6b 6a 36 61 68 5c 2f 30 67 79 61 70 4d 76 36 61 55 71 75 63 4c 6d 7a 64 79 57 71 32 5c 2f 44 61 65 4b 4e 6e 39 50 74 35 73 5c 2f 6f 78 6c 4a 4d 6a 31 63 58 70 75 Data Ascii: tGHox\/bVnWYZcbuEgklKqQGKIjdqWXb\/xW\/jrjHUM9OpNIIMPolyOnGGMT3RUldSWqra2F5dtdj0\/\/9l80ltgqLwvFjUHjXV7meaSG6n+8DAfm3pLR8zWG9MoLHSmzm2AKqOfKvB0mYOqBnVP+oq54edzXJZiTbYfUhWoyaTvSj3eAdIePdqRhdgw\/fxsXDQ5Bjkj6ah\/0gyapMv6aUqucLmzdyWq2\/DaeKNn9Pt5s\/oxlJMj1cXpu
2024-01-10 21:52:42 UTC	1369	IN	Data Raw: 31 58 61 45 76 56 69 68 34 52 4c 65 44 5a 36 53 51 74 50 58 35 35 5c 2f 70 52 36 2b 79 4f 76 39 38 70 34 2b 59 49 71 4c 49 67 35 6a 4d 46 53 4b 5a 49 54 53 47 4d 42 74 68 56 71 6c 41 50 49 49 46 73 61 58 78 69 64 54 75 33 6f 6d 50 66 52 69 4b 69 69 33 49 58 38 46 34 43 37 31 2b 65 45 35 73 46 51 4d 6d 57 38 66 7a 32 48 67 38 77 72 5c 2f 39 75 4c 70 63 6b 46 48 6e 51 5a 59 57 6b 49 4d 44 30 48 74 74 79 57 66 46 50 72 4e 4a 75 77 63 7a 6d 61 32 39 63 65 34 4c 7a 68 53 50 53 4f 2b 4e 6c 4e 5c 2f 52 46 59 65 54 46 68 37 2b 6b 57 43 79 32 4c 74 6a 56 73 30 47 4c 38 5c 2f 73 52 69 6f 66 67 65 57 6b 65 6d 76 6c 71 63 75 5c 2f 58 63 6d 32 6f 56 62 56 73 47 55 59 77 32 70 66 48 65 5a 38 65 64 78 78 62 31 43 78 73 5c 2f 78 39 77 72 69 44 5a 2b 45 45 4f 64 62 42 72 Data Ascii: 1XaEvVih4RLeDZ6SQtPX55\/pR6+yOv98p4+YIqLIg5jMFSKZITSGMBthVqlAPIIFsaXxidTu3omPfRiKii3IX8F4C71+eE5sFQMmW8fz2Hg8wr\/9uLpckFHnQZYWkIMD0HttyWfFPrNJuwczma29ce4LzhSPSO+NlN\/RFYeTFh7+kWCy2LtjVs0GL8\/sRiofgeWkemvlqcu\/Xcm2oVbVsGUYw2pfHeZ8edxxb1Cxs\/x9wriDZ+EEOdbBr
2024-01-10 21:52:42 UTC	1369	IN	Data Raw: 6d 63 68 39 46 50 71 47 41 77 4b 68 35 37 46 5a 53 57 4d 56 68 38 5c 2f 6d 54 49 76 49 65 71 57 58 30 58 7a 43 62 2b 7a 52 39 6d 63 2b 43 31 79 6c 46 53 47 79 4e 6a 49 73 31 2b 4f 45 75 46 6e 56 6d 4d 5c 2f 69 36 4c 6d 73 64 56 75 69 79 31 37 30 30 56 4d 51 61 69 33 79 51 69 61 7a 6a 5a 44 72 58 69 71 51 51 38 75 38 48 70 75 71 48 6c 58 31 59 52 72 42 6e 47 63 51 36 42 35 6f 52 78 4f 47 5a 44 4b 57 56 77 4b 6b 4a 43 53 62 71 66 71 7a 7a 4b 67 6d 49 56 43 4a 43 76 2b 46 4d 56 78 64 32 35 37 77 6a 4f 45 78 4f 65 4d 4c 50 66 4b 49 6e 66 30 38 33 6b 38 56 6a 62 41 49 58 62 64 51 73 45 45 6d 37 70 62 54 57 62 49 52 61 67 73 6e 6e 64 38 78 7a 62 74 39 55 47 55 70 45 39 30 46 4e 39 44 62 38 55 53 2b 71 66 6e 5c 2f 79 39 76 6c 38 4c 2b 35 44 5a 50 53 6e 41 68 4a Data Ascii: mch9FPqGAwKh57FZSWMVh8\/mTIvIeqWX0XzCb+zR9mc+C1ylFSGyNjIs1+OEuFnVmM\/i6LmsdVuiy1700VMQai3yQiazjZDrXiqQQ8u8HpuqHlX1YRrBnGcQ6B5oRxOGZDKWVwKkJCSbqfqzzKgmIVCJCv+FMVxd257wjOExOeMLPfKInf083k8VjbAIXbdQsEEm7pbTWbIRagsnnd8xzbt9UGUpE90FN9Db8US+qfn\/y9vl8L+5DZPSnAhJ
2024-01-10 21:52:42 UTC	1369	IN	Data Raw: 78 7a 52 50 41 74 4e 31 62 32 51 6e 6d 73 33 71 37 67 77 45 79 43 58 64 6b 4f 4f 47 6d 75 64 6b 55 51 43 5a 30 78 70 69 58 68 6d 62 34 49 68 48 45 4c 6d 58 33 6a 73 46 7a 53 30 6f 56 72 61 31 64 30 50 52 7a 67 59 58 73 69 2b 6f 35 69 52 70 6b 58 47 6e 35 35 6d 45 75 67 34 33 5c 2f 47 6b 34 79 75 35 66 54 75 6d 6c 75 44 43 78 36 77 33 33 33 72 51 6d 72 44 6c 78 43 76 37 49 65 59 66 64 50 6f 38 6c 59 4e 5c 2f 69 77 61 45 6e 33 4b 39 64 79 5c 2f 44 41 55 75 65 5a 44 73 49 68 75 43 54 34 7a 42 46 6f 74 69 58 49 34 39 67 5c 2f 49 66 46 58 57 71 7a 4b 2b 39 42 30 48 57 70 45 62 49 5a 46 43 42 75 4d 64 30 76 31 64 79 47 59 67 68 47 61 51 5c 2f 46 55 74 38 59 38 79 55 5c 2f 44 37 71 38 61 6c 77 34 76 70 39 72 6d 6b 6d 35 4d 65 37 61 62 62 6b 30 4a 46 45 6c 6d 36 Data Ascii: xzRPAtN1b2Qnms3q7gwEyCXdkOOGmudkUQCZ0xpiXhmb4IhHELmX3jsFzS0oVra1d0PRzgYXsi+o5iRpkXGn55mEug43\/Gk4yu5fTumluDCx6w333rQmrDlxCv7IeYfdPo8lYN\/iwaEn3K9dy\/DAUueZDsIhuCT4zBFotiXI49g\/IfFXWqzK+9B0HWpEbIZFCBuMd0v1dyGYghGaQ\/FUt8Y8yU\/D7q8alw4vp9rmkm5Me7abbk0JFElm6
2024-01-10 21:52:42 UTC	1369	IN	Data Raw: 48 38 69 56 70 45 77 68 47 45 35 35 6c 35 6e 51 74 62 63 43 4e 49 5c 2f 77 49 4f 78 32 42 39 37 78 33 77 6d 38 53 43 6b 4c 36 7a 52 4d 6e 2b 39 57 41 65 47 52 42 78 78 5c 2f 4d 4d 44 77 3d 27 29 5c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 65 78 74 2d 32 78 6c 20 74 72 61 63 6b 69 6e 67 2d 77 69 64 65 20 75 70 70 65 72 63 61 73 65 5c 22 3e 20 6d 70 34 3c 5c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 20 33 36 30 70 20 3c 5c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: H8iVpEwhGE55l5nQtbcCNI\/wIOx2B97x3wm8SCkL6zRMn+9WAeGRBxx\/MMDw=')\">\n <div class=\"text-2xl tracking-wide uppercase\"> mp4<\/div>\n <div> 360p <\/div>\n
2024-01-10 21:52:42 UTC	1369	IN	Data Raw: 5c 2f 78 79 56 6f 50 37 44 4f 4a 34 58 42 6c 58 51 4b 70 6a 49 76 56 4c 44 77 67 59 31 66 71 61 79 70 47 6e 61 5a 78 61 4b 59 64 78 72 56 61 59 65 2b 63 59 52 35 66 6d 46 5c 2f 6b 53 6e 30 55 4d 6f 4f 5a 47 36 41 69 72 46 7a 58 5a 33 66 62 56 68 75 6b 59 58 75 46 79 48 39 67 70 36 75 6a 64 4b 76 67 5c 2f 66 57 66 5c 2f 79 65 56 76 54 2b 5c 2f 33 38 59 4d 55 79 43 37 6a 57 57 63 30 64 72 6d 33 4e 46 42 61 53 45 38 77 38 54 36 75 32 76 50 41 58 46 67 62 4e 59 70 32 58 79 43 6f 5c 2f 62 4c 30 67 31 6e 6a 37 35 61 39 4e 46 61 48 58 43 74 67 6e 45 65 63 6e 4f 79 74 4d 69 71 42 74 38 63 68 34 36 70 5c 2f 7a 73 79 50 4c 6c 51 48 5c 2f 49 4b 43 64 47 61 68 6b 4c 77 67 54 38 51 5c 2f 6a 37 65 79 6b 70 50 65 39 32 32 55 33 48 73 53 62 32 48 51 61 38 72 79 7a 44 48 Data Ascii: \/xyVoP7DOJ4XBlXQKpjIvVLDwgY1fqaypGnaZxaKYdxrVaYe+cYR5fmF\/kSn0UMoOZG6AirFzXZ3fbVhukYXuFyH9gp6ujdKvg\/fWf\/yeVvT+\/38YMUyC7jWWc0drm3NFBaSE8w8T6u2vPAXFgbNYp2XyCo\/bL0g1nj75a9NFaHXCtgnEecnOytMiqBt8ch46p\/zsyPLlQH\/IKCdGahkLwgT8Q\/j7eykpPe922U3HsSb2HQa8ryzDH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.16	49990	139.45.197.244	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:40 UTC	1313	OUT	GET /?rb=RxSc_BYHKVkqq2EFgyjbXF6hnD2VBfAQGK3m1W-bb1eot6idL92b4ZjYD7rJy4xfY3bJchqKw1qOJzJxhf5onp4WiKiYezkfT0f3YFvjH88DZyJokkZetrrZjgWRwTywC2DqoPkXGka4EVJcv4SMkPa5YrjNdGqH3QWrJRHB2BHgW5-ilaR6U5s0nEXrzO4Otv-znuPo1s4YZvTpKlkgrC9OVJAnXIluuX2N7OJaY-9Un9qX-vDa8mamgka97nu-fWQIjVR0rkymEy0XSUb7L9F-7uBdsrB-Bcqfr9h_E0T8mEKqaB-gMI9NnXR_Ht0H&request_ab2=0&zoneid=6026557&js_build=iclick-v1.653.0&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wih=907&wiw=1280&wfc=3&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-60&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.653.0&bs=459f3be2-a70c-4e5b-9bd2-36a6bf45bba1&userId=efe83b1130104efea0d475e2cb75464f&os=windows&os_version=10.0.0&m=link HTTP/1.1 Host: doruffleton.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=efe83b1130104efea0d475e2cb75464f; oaidts=1704923559; syncedCookie=true
2024-01-10 21:52:40 UTC	1189	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:40 GMT Content-Type: application/json Content-Length: 4667 Connection: close X-Trace-Id: 9cdf265b3de759ce4d50324cee7b49f3 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:40 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923560; expires=Thu, 09 Jan 2025 21:52:40 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Wed, 17 Jan 2024 21:52:40 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:40 UTC	4667	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 35 34 30 39 30 39 36 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 30 34 31 35 38 35 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 70 6d 65 74 61 70 6f 64 6f 72 2e 63 6f 6d 2f 3f 73 3d 37 36 39 30 36 37 37 35 38 34 30 36 33 34 34 39 38 30 5c 75 30 30 32 36 73 73 6b 3d 66 65 37 38 36 37 33 32 30 34 37 30 61 37 34 36 36 61 34 34 31 30 61 30 39 30 34 61 62 36 39 33 5c 75 30 30 32 36 73 76 61 72 3d 31 37 30 34 39 32 33 35 36 30 5c 75 30 30 32 36 7a 3d 36 30 32 36 35 35 37 5c 75 30 30 32 36 70 7a 3d 34 36 36 32 37 30 39 5c 75 30 30 32 36 74 62 3d 34 36 36 32 37 32 38 5c 75 30 30 32 36 6c 3d 57 47 59 56 50 4b 4e 4d 50 76 59 35 33 7a 62 5c 75 30 30 32 36 62 74 7a 3d 7b 62 74 7a 7d 5c 75 30 30 32 36 62 74 6f 3d 7b Data Ascii: {"bannerId":5409096,"campaignId":1041585,"dstUrl":"https://opmetapodor.com/?s=769067758406344980\u0026ssk=fe7867320470a7466a4410a0904ab693\u0026svar=1704923560\u0026z=6026557\u0026pz=4662709\u0026tb=4662728\u0026l=WGYVPKNMPvY53zb\u0026btz={btz}\u0026bto={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.16	49996	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:40 UTC	849	OUT	OPTIONS /500/5588622?excludes=&oaid=efe83b1130104efea0d475e2cb75464f&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=60&os=windows&os_version=10.0.0&js_build=8&sw_version=v1.313.0 HTTP/1.1 Host: gishejuy.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://v9.www-ytmp4.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:40 UTC	757	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:40 GMT Content-Length: 0 Connection: close Allow: GET, OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.16	49999	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:40 UTC	436	OUT	GET /zone?pub=0&zone_id=5588624&is_mobile=false&domain=v9.www-ytmp4.com&var=&ymid=&var_3=&tg=0&sw=3.1.471 HTTP/1.1 Host: ibrapush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:41 UTC	433	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:41 GMT Content-Type: application/json; charset=utf-8 Content-Length: 881 Connection: close X-Trace-Id: db5cf69feef3539cb8d12587aca3e4cf Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-01-10 21:52:41 UTC	881	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 6a 73 54 61 67 50 61 72 61 6d 65 74 65 72 73 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 2c 22 75 6e 73 75 70 70 6f 72 74 65 64 22 3a 66 61 6c 73 65 2c 22 61 66 74 65 72 43 6c 6f 73 65 44 65 6c 61 79 22 3a 33 2c 22 61 6c 6c 6f 77 50 6f 70 75 70 49 66 48 74 74 70 73 44 65 6e 69 65 64 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 47 65 6f 22 3a 22 75 73 22 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 49 70 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 32 22 2c 22 64 69 73 61 62 6c 65 53 77 53 61 6e 69 74 79 22 3a 66 61 6c 73 65 2c 22 64 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 6f 75 74 65 65 74 75 2e 6e 65 74 22 2c 22 67 69 64 72 61 74 6f 72 54 69 6d 65 6f 75 74 22 3a 30 Data Ascii: {"status":true,"code":"jsTagParameters","message":"","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"102.165.48.42","disableSwSanity":false,"domain":"https://jouteetu.net","gidratorTimeout":0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.16	49991	139.45.197.244	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:40 UTC	1310	OUT	GET /?rb=XD0ydgTzyCsx6UuGkwmzrcftdoCy8YazmdsnpUtkWadUMVI7Gfa2ICj7iUE7KiXH-3cvQNaROvgabJKO9i1b3-Sgr7-664HhN1n-FKHtkcdHGafQw4dzfGHHXxoJO3SB_tHMNNK0i4EpOXmYNZjulvAk2Qb8AiVKz7Aevsp_KhAo4P8tLi6fwL7wCi1dIqmu8wRe0z2SvUk_bDOx8S6JQQDG0--WxnmfWbVEMQ7mbvt0HxrFIKVjb9oh_QVb3wOV7rTGzRRHLvgqnaXx03XazakJhGJt7A_dy2kUXTAMZj2-tjwMFAaOSpy7ODoAYAlj&request_ab2=0&zoneid=5588625&js_build=iclick-v1.653.0&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wih=907&wiw=1280&wfc=3&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-60&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.653.0&bs=cf0da73a-caa5-4196-91bd-362bb660da52&userId=efe83b1130104efea0d475e2cb75464f&os=windows&os_version=10.0.0&m=link HTTP/1.1 Host: piteevoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=efe83b1130104efea0d475e2cb75464f; oaidts=1704923559; syncedCookie=true
2024-01-10 21:52:41 UTC	1189	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:41 GMT Content-Type: application/json Content-Length: 4660 Connection: close X-Trace-Id: 0a8db63ec6b37575ed817a8014916f2a Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:41 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1704923561; expires=Thu, 09 Jan 2025 21:52:41 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Wed, 17 Jan 2024 21:52:41 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:41 UTC	4660	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 35 34 30 39 30 38 33 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 30 34 31 35 38 35 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 70 6d 65 74 61 70 6f 64 6f 72 2e 63 6f 6d 2f 3f 73 3d 37 36 39 30 36 37 37 35 39 35 38 39 31 34 33 34 31 33 5c 75 30 30 32 36 73 73 6b 3d 66 62 32 64 38 63 33 63 36 65 39 64 38 66 37 62 37 66 66 64 30 64 37 65 39 35 33 35 31 32 36 39 5c 75 30 30 32 36 73 76 61 72 3d 31 37 30 34 39 32 33 35 36 31 5c 75 30 30 32 36 7a 3d 35 35 38 38 36 32 35 5c 75 30 30 32 36 70 7a 3d 34 36 36 32 37 30 39 5c 75 30 30 32 36 74 62 3d 34 36 36 32 37 32 38 5c 75 30 30 32 36 6c 3d 57 47 59 56 50 4b 4e 4d 50 76 59 35 33 7a 62 5c 75 30 30 32 36 62 74 7a 3d 7b 62 74 7a 7d 5c 75 30 30 32 36 62 74 6f 3d 7b Data Ascii: {"bannerId":5409083,"campaignId":1041585,"dstUrl":"https://opmetapodor.com/?s=769067759589143413\u0026ssk=fb2d8c3c6e9d8f7b7ffd0d7e95351269\u0026svar=1704923561\u0026z=5588625\u0026pz=4662709\u0026tb=4662728\u0026l=WGYVPKNMPvY53zb\u0026btz={btz}\u0026bto={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.16	50002	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:41 UTC	374	OUT	GET /pfe/current/universal.min.js?v=3.1.471 HTTP/1.1 Host: ibrapush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:41 UTC	326	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:41 GMT Content-Type: application/javascript Content-Length: 87852 Last-Modified: Mon, 27 Nov 2023 13:38:02 GMT Connection: close ETag: "65649bba-1572c" Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Accept-Ranges: bytes
2024-01-10 21:52:41 UTC	16058	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 57 29 7b 28 28 29 3d 3e 7b 57 2e 57 3b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 57 2e 4c 6b 28 57 2e 6b 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 67 78 5d 28 74 2c 57 2e 6d 64 2c 57 2e 4c 6b 28 57 2e 65 43 2c 21 57 2e 6e 6b 29 29 2c 74 5b 57 2e 7a 64 5d 3d 74 5b 57 2e 77 64 5d 3d 76 6f 69 64 20 57 2e 6e 6b 3b 63 6f 6e 73 74 20 6e 3d 57 2e 42 6b 2c 6f 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 5b 57 2e 50 43 5d 5b 57 2e 6d 4f 5d 5b 57 2e 56 74 5d 5b 57 2e 74 6f 5d 7c 7c 6e 3b 5b 77 69 6e 64 6f 77 5b 74 5d 7c 7c 5b 5d 2c 6f 5d 5b 57 2e 6a 74 5d 28 74 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 74 5b 57 2e 77 6f 5d 28 65 29 3b 6e 3e 2d 57 2e 74 Data Ascii: (function(W){(()=>{W.W;var __webpack_modules__=W.Lk(W.k,(e,t)=>{Object[W.gx](t,W.md,W.Lk(W.eC,!W.nk)),t[W.zd]=t[W.wd]=void W.nk;const n=W.Bk,o=[];function r(e){const t=window[W.PC][W.mO][W.Vt][W.to]\|\|n;[window[t]\|\|[],o][W.jt](t=>{const n=t[W.wo](e);n>-W.t
2024-01-10 21:52:41 UTC	16384	IN	Data Raw: 7a 72 5d 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 76 6f 63 32 5b 57 2e 77 6f 5d 28 65 29 3b 72 65 74 75 72 6e 2d 57 2e 74 78 21 3d 3d 74 3f 76 6f 63 31 5b 74 5d 3a 65 7d 29 5b 57 2e 52 6f 5d 28 57 2e 70 50 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 5b 57 2e 57 4f 5d 28 6a 73 6f 6e 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 60 28 24 7b 6a 73 6f 6e 7d 29 60 29 7d 7d 4f 62 6a 65 63 74 5b 57 2e 67 78 5d 28 65 78 70 6f 72 74 73 2c 57 2e 6d 64 2c 57 2e 4c 6b 28 57 2e 65 43 2c 21 57 2e 6e 6b 29 29 2c 65 78 70 6f 72 74 73 5b 57 2e 50 50 5d 3d 76 6f 69 64 20 57 2e 6e 6b 2c 65 78 70 6f 72 74 73 5b 57 2e 50 50 5d 3d 64 65 63 6f 64 65 4f 70 74 69 6f 6e 73 2c 65 78 70 6f 72 74 73 5b 57 2e 70 78 5d 3d 64 65 63 6f 64 65 4f 70 74 69 6f 6e Data Ascii: zr](e=>{const t=voc2[W.wo](e);return-W.tx!==t?voc1[t]:e})[W.Ro](W.pP);try{return JSON[W.WO](json)}catch(e){return eval(`(${json})`)}}Object[W.gx](exports,W.md,W.Lk(W.eC,!W.nk)),exports[W.PP]=void W.nk,exports[W.PP]=decodeOptions,exports[W.px]=decodeOption
2024-01-10 21:52:41 UTC	16384	IN	Data Raw: 3a 57 2e 70 50 5d 3b 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 6e 3d 77 69 6e 64 6f 77 5b 57 2e 50 43 5d 5b 57 2e 50 46 5d 28 57 2e 43 47 29 3b 72 65 74 75 72 6e 20 6e 5b 57 2e 75 68 5d 3d 57 2e 79 68 2c 6e 5b 57 2e 4d 68 5d 3d 57 2e 6e 6b 2c 6e 5b 57 2e 5a 52 5d 3d 60 5f 70 6e 5f 24 7b 44 61 74 65 5b 57 2e 43 4f 5d 28 29 7d 60 2c 6e 5b 57 2e 53 46 5d 28 57 2e 4c 68 2c 57 2e 6e 68 29 2c 28 57 2e 6e 6b 2c 6c 5b 57 2e 6a 64 5d 29 28 6e 2c 57 2e 4c 6b 28 57 2e 44 67 2c 57 2e 59 68 2c 57 2e 6a 68 2c 57 2e 54 52 2c 57 2e 4c 67 2c 57 2e 70 68 2c 57 2e 73 68 2c 57 2e 6e 6b 2c 57 2e 76 68 2c 57 2e 6e 6b 2c 57 2e 61 68 2c 57 2e 57 65 2c 57 2e 6b 65 2c 57 2e 57 65 2c 57 2e 78 65 2c 57 2e 64 65 2c 57 2e 49 79 2c 57 2e 6e 6b 2c 57 2e 4a 79 2c 57 2e Data Ascii: :W.pP];d=function(e){const n=window[W.PC][W.PF](W.CG);return n[W.uh]=W.yh,n[W.Mh]=W.nk,n[W.ZR]=`_pn_${Date[W.CO]()}`,n[W.SF](W.Lh,W.nh),(W.nk,l[W.jd])(n,W.Lk(W.Dg,W.Yh,W.jh,W.TR,W.Lg,W.ph,W.sh,W.nk,W.vh,W.nk,W.ah,W.We,W.ke,W.We,W.xe,W.de,W.Iy,W.nk,W.Jy,W.
2024-01-10 21:52:42 UTC	16384	IN	Data Raw: 2e 74 5a 5d 7d 60 3a 60 24 7b 65 7d 2f 63 75 73 74 6f 6d 60 3b 72 65 74 75 72 6e 20 6e 26 26 6e 61 76 69 67 61 74 6f 72 26 26 57 2e 4b 4f 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 5b 57 2e 52 74 5d 3f 28 28 57 2e 6e 6b 2c 6f 5b 57 2e 52 74 5d 29 28 61 2c 74 29 2c 50 72 6f 6d 69 73 65 5b 57 2e 77 66 5d 28 76 6f 69 64 20 57 2e 6e 6b 29 29 3a 61 77 61 69 74 28 57 2e 6e 6b 2c 72 5b 57 2e 65 74 5d 29 28 61 2c 57 2e 47 4f 2c 74 2c 69 29 7d 7d 2c 57 2e 69 6b 2c 28 65 2c 74 2c 6e 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 67 78 5d 28 74 2c 57 2e 6d 64 2c 57 2e 4c 6b 28 57 2e 65 43 2c 21 57 2e 6e 6b 29 29 2c 74 5b 57 2e 41 78 5d 3d 76 6f 69 64 20 57 2e 6e 6b 3b 63 6f 6e 73 74 20 6f 3d 6e 28 57 2e 52 6b 29 3b 74 5b 57 2e 41 78 5d 3d 61 73 79 6e 63 20 66 75 Data Ascii: .tZ]}`:`${e}/custom`;return n&&navigator&&W.KO==typeof navigator[W.Rt]?((W.nk,o[W.Rt])(a,t),Promise[W.wf](void W.nk)):await(W.nk,r[W.et])(a,W.GO,t,i)}},W.ik,(e,t,n)=>{Object[W.gx](t,W.md,W.Lk(W.eC,!W.nk)),t[W.Ax]=void W.nk;const o=n(W.Rk);t[W.Ax]=async fu
2024-01-10 21:52:42 UTC	16384	IN	Data Raw: 6e 6c 4e 61 71 4f 6e 70 78 74 65 62 68 61 71 27 5d 2c 5b 27 6a 6b 27 2c 27 66 67 6e 65 67 52 6b 67 65 6e 53 79 62 6a 27 5d 2c 5b 27 70 6b 27 2c 27 66 6a 6e 6e 6f 27 5d 2c 5b 27 73 6b 27 2c 39 65 35 5d 2c 5b 27 76 6b 27 2c 27 70 75 72 70 78 51 62 68 6f 79 72 46 6a 27 5d 2c 5b 27 61 6b 27 2c 27 70 65 72 6e 67 72 42 69 72 65 79 6e 6c 27 5d 2c 5b 27 57 78 27 2c 27 72 65 65 62 65 55 72 79 63 72 65 27 5d 2c 5b 27 6b 78 27 2c 27 72 69 72 61 67 59 62 74 74 72 65 27 5d 2c 5b 27 78 78 27 2c 27 73 6e 76 79 4f 6c 47 76 7a 72 62 68 67 27 5d 2c 5b 27 64 78 27 2c 27 74 72 61 72 65 6e 67 72 42 6e 76 71 47 65 6e 70 72 56 71 27 5d 2c 5b 27 50 78 27 2c 27 74 72 67 42 79 71 42 63 67 76 62 61 66 27 5d 2c 5b 27 74 78 27 2c 31 5d 2c 5b 27 72 78 27 2c 27 74 76 71 50 62 62 78 76 Data Ascii: nlNaqOnpxtebhaq'],['jk','fgnegRkgenSybj'],['pk','fjnno'],['sk',9e5],['vk','purpxQbhoyrFj'],['ak','perngrBireynl'],['Wx','reebeUrycre'],['kx','riragYbttre'],['xx','snvyOlGvzrbhg'],['dx','trarengrBnvqGenprVq'],['Px','trgByqBcgvbaf'],['tx',1],['rx','tvqPbbxv
2024-01-10 21:52:42 UTC	6258	IN	Data Raw: 27 5d 2c 5b 27 48 47 27 2c 27 6f 72 73 62 65 72 50 65 72 6e 67 72 46 68 6f 66 70 65 76 63 67 76 62 61 27 5d 2c 5b 27 68 47 27 2c 27 6e 73 67 72 65 50 65 72 6e 67 72 46 68 6f 66 70 65 76 63 67 76 62 61 27 5d 2c 5b 27 65 47 27 2c 27 72 61 67 65 76 72 66 27 5d 2c 5b 27 69 47 27 2c 27 70 65 72 6e 67 72 56 61 71 72 6b 27 5d 2c 5b 27 6d 47 27 2c 27 3b 27 5d 2c 5b 27 7a 47 27 2c 27 70 62 62 78 76 72 27 5d 2c 5b 27 77 47 27 2c 27 7a 72 67 6e 5b 61 6e 7a 72 3d 69 76 72 6a 63 62 65 67 5d 27 5d 2c 5b 27 4e 47 27 2c 27 63 6e 65 72 61 67 41 62 71 72 27 5d 2c 5b 27 63 47 27 2c 27 70 65 72 6e 67 72 5a 72 67 6e 47 6e 74 27 5d 2c 5b 27 44 47 27 2c 31 2e 30 30 30 31 5d 2c 5b 27 41 47 27 2c 27 62 69 72 65 73 79 62 6a 4b 27 5d 2c 5b 27 54 47 27 2c 27 62 69 72 65 73 79 62 6a Data Ascii: '],['HG','orsberPerngrFhofpevcgvba'],['hG','nsgrePerngrFhofpevcgvba'],['eG','ragevrf'],['iG','perngrVaqrk'],['mG',';'],['zG','pbbxvr'],['wG','zrgn[anzr=ivrjcbeg]'],['NG','cneragAbqr'],['cG','perngrZrgnGnt'],['DG',1.0001],['AG','biresybjK'],['TG','biresybj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.16	50004	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:41 UTC	505	OUT	OPTIONS /custom HTTP/1.1 Host: ibrapush.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://v9.www-ytmp4.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:41 UTC	486	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:41 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid Access-Control-Max-Age: 86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.16	50001	139.45.195.254	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:41 UTC	653	OUT	POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1 Host: fleraprt.com Connection: keep-alive Content-Length: 2023 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:41 UTC	2023	OUT	Data Raw: 4c 1b 52 52 1f 1c 26 1c 14 05 67 1f 1c 4b 12 03 01 05 50 0e 4c 5f 05 00 11 1a 58 16 10 4a 4f 40 79 27 3e 75 24 4a 46 2c 1d 5b 09 01 52 15 13 60 0f 08 12 09 1b 42 09 47 4a 17 51 4a 46 38 05 5d 08 19 64 51 52 52 1f 16 59 2c 10 14 51 0a 1c 19 49 39 1b 09 08 51 1c 02 1e 19 1b 06 02 54 49 58 45 21 08 2d 3c 10 48 46 4e 38 05 5d 08 19 64 51 52 52 1f 16 59 0c 07 0b 4e 0c 0b 10 43 46 4c 19 04 16 54 4f 70 56 5c 51 16 01 59 21 1b 01 16 49 51 7e 0e 05 09 07 17 1d 4c 41 15 4b 43 46 58 5e 40 44 57 16 42 06 5b 03 4c 5c 5e 47 50 43 19 4f 0d 08 01 0e 4a 48 5b 1f 1d 40 02 50 41 0d 4d 48 19 02 05 16 54 5c 05 01 03 1a 58 13 10 00 57 58 01 59 4e 15 43 1d 16 49 48 04 42 4f 40 40 11 0c 4a 48 5b 01 0d 40 02 59 55 1b 16 0c 0d 49 48 07 42 4f 44 58 5b 14 40 5d 41 5c 59 40 4b 01 5b Data Ascii: LRR&gKPL_XJO@y'>u$JF,[R`BGJQJF8]dQRRY,QI9QTIXE!-<HFN8]dQRRYNCFLTOpV\QY!IQ~LAKCFX^@DWB[L\^GPCOJH[@PAMHT\XWXYNCIHBO@@JH[@YUIHBODX[@]A\Y@K[
2024-01-10 21:52:41 UTC	469	IN	HTTP/1.1 200 OK Server: nginx/1.19.10 Date: Wed, 10 Jan 2024 21:52:43 GMT Content-Type: application/json; charset=utf-8 Content-Length: 12 Connection: close Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-01-10 21:52:41 UTC	12	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 7d Data Ascii: {"status":2}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.16	50006	104.26.3.120	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:41 UTC	706	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: dl--master--cdn.ytapis.com Connection: keep-alive Content-Length: 4217 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://dl--master--cdn.ytapis.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:41 UTC	4217	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 31 39 30 34 32 39 35 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 38 35 37 38 32 32 37 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 75 6e 69 74 6f 3a 77 67 68 74 40 34 30 30 3b 36 30 30 3b 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 2c 22 73 22 3a 31 30 31 34 2e 35 2c 22 64 22 3a 36 34 35 2e 33 2c 22 69 22 3a 22 6c 69 6e 6b 22 2c 22 70 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 Data Ascii: {"memory":{"totalJSHeapSize":11904295,"usedJSHeapSize":8578227,"jsHeapSizeLimit":2172649472},"resources":[{"n":"https://fonts.googleapis.com/css2?family=Nunito:wght@400;600;700&display=swap","s":1014.5,"d":645.3,"i":"link","p":"http/1.1","rs":0,"re":0,"fs
2024-01-10 21:52:41 UTC	383	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 21:52:41 GMT Connection: close access-control-allow-origin: https://dl--master--cdn.ytapis.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 84382603488629bc-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.16	50005	172.67.187.174	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:41 UTC	703	OUT	GET /sw.js HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/convert/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923556.0.0.0; _ga=GA1.1.20077430.1704923498; prefetchAd_6026557=true; prefetchAd_5588625=true
2024-01-10 21:52:41 UTC	815	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Cf-Bgj: minify Cf-Polished: origSize=5236 ETag: W/"65952b69-1474" Expires: Wed, 10 Jan 2024 21:53:41 GMT Last-Modified: Wed, 03 Jan 2024 09:39:53 GMT Vary: Accept-Encoding X-Cache: HIT CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VNLOPG1aTCMnAUcmAM41uDhcFI%2BqmG%2FqXZZUmAoRVWgycdx3IToCLlhG7So%2Bp6r8s%2Bx189wQmI7HfvXaz%2FzDFRNAiZdGwSR9nFiDKzipknwz1MvcAemo8MBALPv2hDuGkpqo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843826043a465773-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:41 UTC	554	IN	Data Raw: 31 34 35 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 2e 5a 28 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 5b 4f 2e 69 5d 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 4f 2e 5a 28 4f 2e 42 2c 72 2c 4f 2e 77 2c 21 4f 2e 58 2c 4f 2e 69 2c 4f 2e 5a 28 29 29 3b 72 65 74 75 72 6e 20 65 5b 72 5d 5b 4f 2e 7a 5d 28 69 5b 4f 2e 69 5d 2c 69 2c 69 5b 4f 2e 69 5d 2c 6e 29 2c 69 5b 4f 2e 77 5d 3d 21 4f 2e 4e 2c 69 5b 4f 2e 69 5d 7d 6e 5b 4f 2e 79 5d 3d 65 2c 6e 5b 4f 2e 67 5d 3d 74 2c 6e 5b 4f 2e 4b 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 5b 4f 2e 68 5d 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 5b 4f 2e 62 5d 28 65 2c 74 2c 4f 2e 5a 28 4f 2e Data Ascii: 1459(function(O){!function(e){var t=O.Z();function n(r){if(t[r])return t[r][O.i];var i=t[r]=O.Z(O.B,r,O.w,!O.X,O.i,O.Z());return e[r][O.z](i[O.i],i,i[O.i],n),i[O.w]=!O.N,i[O.i]}n[O.y]=e,n[O.g]=t,n[O.K]=function(e,t,r){n[O.h](e,t)\|\|Object[O.b](e,t,O.Z(O.
2024-01-10 21:52:41 UTC	1369	IN	Data Raw: 43 2c 4f 2e 5a 28 4f 2e 47 4f 2c 21 4f 2e 4e 2c 4f 2e 70 2c 65 29 29 2c 4f 2e 64 26 74 26 26 4f 2e 6f 4f 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 6e 5b 4f 2e 4b 5d 28 72 2c 69 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 5b 4f 2e 66 4f 5d 28 4f 2e 71 2c 69 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6e 5b 4f 2e 48 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 5b 4f 2e 55 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 5b 4f 2e 43 5d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 6e 5b 4f 2e 4b 5d 28 74 2c 4f 2e 4f 4f 2c 74 29 2c 74 7d 2c 6e 5b 4f 2e 68 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 Data Ascii: C,O.Z(O.GO,!O.N,O.p,e)),O.d&t&&O.oO!=typeof e)for(var i in e)n[O.K](r,i,function(t){return e[t]}[O.fO](O.q,i));return r},n[O.H]=function(e){var t=e&&e[O.U]?function(){return e[O.C]}:function(){return e};return n[O.K](t,O.OO,t),t},n[O.h]=function(e,t){retu
2024-01-10 21:52:41 UTC	1369	IN	Data Raw: 4f 2e 42 4f 29 5b 4f 2e 67 4f 5d 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 69 3d 72 5b 4f 2e 74 4f 5d 28 5b 4f 2e 6c 4f 5d 2c 4f 2e 72 4f 29 5b 4f 2e 78 4f 5d 28 4f 2e 6c 4f 29 5b 4f 2e 57 4f 5d 28 4f 2e 5a 28 4f 2e 56 2c 65 2c 4f 2e 64 4f 2c 6e 65 77 20 44 61 74 65 28 29 5b 4f 2e 43 4f 5d 28 29 29 29 3b 69 5b 4f 2e 79 4f 5d 28 4f 2e 45 4f 2c 74 29 2c 69 5b 4f 2e 79 4f 5d 28 4f 2e 6e 4f 2c 6e 29 7d 29 7d 29 7d 2c 74 5b 4f 2e 49 5d 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 28 4f 2e 42 4f 29 5b 4f 2e 67 4f 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6e 5b 4f 2e 74 4f 5d 28 5b 4f 2e 6c 4f 5d 2c 4f Data Ascii: O.BO)[O.gO](function(r){var i=r[O.tO]([O.lO],O.rO)[O.xO](O.lO)[O.WO](O.Z(O.V,e,O.dO,new Date()[O.CO]()));i[O.yO](O.EO,t),i[O.yO](O.nO,n)})})},t[O.I]=async function(e,t){var n=await new Promise(function(e,t){r(O.BO)[O.gO](function(n){var r=n[O.tO]([O.lO],O
2024-01-10 21:52:41 UTC	1369	IN	Data Raw: 66 6f 72 28 6c 65 74 20 69 3d 30 3b 69 3c 61 72 67 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 2b 3d 32 29 7b 6f 62 6a 5b 61 72 67 73 5b 69 5d 5d 3d 61 72 67 73 5b 69 2b 31 5d 7d 72 65 74 75 72 6e 20 6f 62 6a 7d 5d 2c 5b 27 79 27 2c 27 7a 27 5d 2c 5b 27 67 27 2c 27 70 27 5d 2c 5b 27 4b 27 2c 27 71 27 5d 2c 5b 27 47 27 2c 27 65 27 5d 2c 5b 27 52 27 2c 27 67 27 5d 2c 5b 27 48 27 2c 27 61 27 5d 2c 5b 27 68 27 2c 27 62 27 5d 2c 5b 27 65 27 2c 27 63 27 5d 2c 5b 27 69 27 2c 27 72 6b 63 62 65 67 66 27 5d 2c 5b 27 6d 27 2c 27 66 27 5d 2c 5b 27 7a 27 2c 27 70 6e 79 79 27 5d 2c 5b 27 77 27 2c 27 79 27 5d 2c 5b 27 4e 27 2c 30 5d 2c 5b 27 63 27 2c 27 62 63 67 76 62 61 66 27 5d 2c 5b 27 44 27 2c 27 79 6e 65 6c 27 5d 2c 5b 27 41 27 2c 27 77 62 76 61 27 5d 2c 5b 27 54 27 2c 27 Data Ascii: for(let i=0;i<args.length-1;i+=2){obj[args[i]]=args[i+1]}return obj}],['y','z'],['g','p'],['K','q'],['G','e'],['R','g'],['H','a'],['h','b'],['e','c'],['i','rkcbegf'],['m','f'],['z','pnyy'],['w','y'],['N',0],['c','bcgvbaf'],['D','ynel'],['A','wbva'],['T','
2024-01-10 21:52:41 UTC	556	IN	Data Raw: 27 6c 4f 27 2c 27 71 62 7a 6e 76 61 66 27 5d 2c 5b 27 58 4f 27 2c 27 65 72 66 68 79 67 27 5d 2c 5b 27 59 4f 27 2c 27 7a 72 67 75 62 71 27 5d 2c 5b 27 6a 4f 27 2c 27 70 65 72 71 72 61 67 76 6e 79 66 27 5d 2c 5b 27 70 4f 27 2c 27 76 61 70 79 68 71 72 27 5d 2c 5b 27 73 4f 27 2c 27 6f 62 71 6c 27 5d 2c 5b 27 76 4f 27 2c 27 75 72 6e 71 72 65 66 27 5d 2c 5b 27 61 4f 27 2c 27 78 72 6c 43 6e 67 75 27 5d 2c 5b 27 57 4f 27 2c 27 63 68 67 27 5d 2c 5b 27 6b 4f 27 2c 27 67 62 78 72 61 27 5d 2c 5b 27 78 4f 27 2c 27 62 6f 77 72 70 67 46 67 62 65 72 27 5d 2c 5b 27 64 4f 27 2c 27 70 65 72 6e 67 72 71 4e 67 27 5d 2c 5b 27 50 4f 27 2c 27 74 72 67 4e 79 79 27 5d 2c 5b 27 74 4f 27 2c 27 67 65 6e 61 66 6e 70 67 76 62 61 27 5d 2c 5b 27 72 4f 27 2c 27 65 72 6e 71 6a 65 76 67 72 Data Ascii: 'lO','qbznvaf'],['XO','erfhyg'],['YO','zrgubq'],['jO','perqragvnyf'],['pO','vapyhqr'],['sO','obql'],['vO','urnqref'],['aO','xrlCngu'],['WO','chg'],['kO','gbxra'],['xO','bowrpgFgber'],['dO','perngrqNg'],['PO','trgNyy'],['tO','genafnpgvba'],['rO','ernqjevgr
2024-01-10 21:52:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.16	50003	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:41 UTC	972	OUT	GET /500/5588622?excludes=&oaid=efe83b1130104efea0d475e2cb75464f&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=60&os=windows&os_version=10.0.0&js_build=8&sw_version=v1.313.0 HTTP/1.1 Host: gishejuy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=d702eb01742942d5aa7158f20d32cec1
2024-01-10 21:52:42 UTC	835	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 10 Jan 2024 21:52:41 GMT Connection: close X-Trace-Id: 3540f10aa322ce0f243d6a2d0300cf27 Expires: Tue, 11 Jan 1994 10:00:00 GMT Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Timing-Allow-Origin: * Vary: Origin Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:41 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.16	50012	104.21.76.46	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:42 UTC	522	OUT	GET /sw.js HTTP/1.1 Host: v9.www-ytmp4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1593360693.1704923498; _ga_EY1ZDY2CV0=GS1.1.1704923498.1.1.1704923556.0.0.0; _ga=GA1.1.20077430.1704923498; prefetchAd_6026557=true; prefetchAd_5588625=true
2024-01-10 21:52:42 UTC	815	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:42 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Cf-Bgj: minify Cf-Polished: origSize=5236 ETag: W/"65952b69-1474" Expires: Wed, 10 Jan 2024 21:53:42 GMT Last-Modified: Wed, 03 Jan 2024 09:39:53 GMT Vary: Accept-Encoding X-Cache: HIT CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dc8aEK%2FMA546xy9g646KuSqcwJKEygC55EVch8axVVIOrR%2FyfjNdfd%2FP6kdFg0LsvskC13uwoU%2FClaTQhFP5EGS2CnuLtDCunC%2FfNSpU1gOHJiR3DvTdhkd6b2G6oQ0jOC6h"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843826083fe48257-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:52:42 UTC	554	IN	Data Raw: 31 34 35 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 2e 5a 28 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 5b 4f 2e 69 5d 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 4f 2e 5a 28 4f 2e 42 2c 72 2c 4f 2e 77 2c 21 4f 2e 58 2c 4f 2e 69 2c 4f 2e 5a 28 29 29 3b 72 65 74 75 72 6e 20 65 5b 72 5d 5b 4f 2e 7a 5d 28 69 5b 4f 2e 69 5d 2c 69 2c 69 5b 4f 2e 69 5d 2c 6e 29 2c 69 5b 4f 2e 77 5d 3d 21 4f 2e 4e 2c 69 5b 4f 2e 69 5d 7d 6e 5b 4f 2e 79 5d 3d 65 2c 6e 5b 4f 2e 67 5d 3d 74 2c 6e 5b 4f 2e 4b 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 5b 4f 2e 68 5d 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 5b 4f 2e 62 5d 28 65 2c 74 2c 4f 2e 5a 28 4f 2e Data Ascii: 1459(function(O){!function(e){var t=O.Z();function n(r){if(t[r])return t[r][O.i];var i=t[r]=O.Z(O.B,r,O.w,!O.X,O.i,O.Z());return e[r][O.z](i[O.i],i,i[O.i],n),i[O.w]=!O.N,i[O.i]}n[O.y]=e,n[O.g]=t,n[O.K]=function(e,t,r){n[O.h](e,t)\|\|Object[O.b](e,t,O.Z(O.
2024-01-10 21:52:42 UTC	1369	IN	Data Raw: 43 2c 4f 2e 5a 28 4f 2e 47 4f 2c 21 4f 2e 4e 2c 4f 2e 70 2c 65 29 29 2c 4f 2e 64 26 74 26 26 4f 2e 6f 4f 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 6e 5b 4f 2e 4b 5d 28 72 2c 69 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 5b 4f 2e 66 4f 5d 28 4f 2e 71 2c 69 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6e 5b 4f 2e 48 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 5b 4f 2e 55 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 5b 4f 2e 43 5d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 6e 5b 4f 2e 4b 5d 28 74 2c 4f 2e 4f 4f 2c 74 29 2c 74 7d 2c 6e 5b 4f 2e 68 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 Data Ascii: C,O.Z(O.GO,!O.N,O.p,e)),O.d&t&&O.oO!=typeof e)for(var i in e)n[O.K](r,i,function(t){return e[t]}[O.fO](O.q,i));return r},n[O.H]=function(e){var t=e&&e[O.U]?function(){return e[O.C]}:function(){return e};return n[O.K](t,O.OO,t),t},n[O.h]=function(e,t){retu
2024-01-10 21:52:42 UTC	1369	IN	Data Raw: 4f 2e 42 4f 29 5b 4f 2e 67 4f 5d 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 69 3d 72 5b 4f 2e 74 4f 5d 28 5b 4f 2e 6c 4f 5d 2c 4f 2e 72 4f 29 5b 4f 2e 78 4f 5d 28 4f 2e 6c 4f 29 5b 4f 2e 57 4f 5d 28 4f 2e 5a 28 4f 2e 56 2c 65 2c 4f 2e 64 4f 2c 6e 65 77 20 44 61 74 65 28 29 5b 4f 2e 43 4f 5d 28 29 29 29 3b 69 5b 4f 2e 79 4f 5d 28 4f 2e 45 4f 2c 74 29 2c 69 5b 4f 2e 79 4f 5d 28 4f 2e 6e 4f 2c 6e 29 7d 29 7d 29 7d 2c 74 5b 4f 2e 49 5d 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 28 4f 2e 42 4f 29 5b 4f 2e 67 4f 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6e 5b 4f 2e 74 4f 5d 28 5b 4f 2e 6c 4f 5d 2c 4f Data Ascii: O.BO)[O.gO](function(r){var i=r[O.tO]([O.lO],O.rO)[O.xO](O.lO)[O.WO](O.Z(O.V,e,O.dO,new Date()[O.CO]()));i[O.yO](O.EO,t),i[O.yO](O.nO,n)})})},t[O.I]=async function(e,t){var n=await new Promise(function(e,t){r(O.BO)[O.gO](function(n){var r=n[O.tO]([O.lO],O
2024-01-10 21:52:42 UTC	1369	IN	Data Raw: 66 6f 72 28 6c 65 74 20 69 3d 30 3b 69 3c 61 72 67 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 2b 3d 32 29 7b 6f 62 6a 5b 61 72 67 73 5b 69 5d 5d 3d 61 72 67 73 5b 69 2b 31 5d 7d 72 65 74 75 72 6e 20 6f 62 6a 7d 5d 2c 5b 27 79 27 2c 27 7a 27 5d 2c 5b 27 67 27 2c 27 70 27 5d 2c 5b 27 4b 27 2c 27 71 27 5d 2c 5b 27 47 27 2c 27 65 27 5d 2c 5b 27 52 27 2c 27 67 27 5d 2c 5b 27 48 27 2c 27 61 27 5d 2c 5b 27 68 27 2c 27 62 27 5d 2c 5b 27 65 27 2c 27 63 27 5d 2c 5b 27 69 27 2c 27 72 6b 63 62 65 67 66 27 5d 2c 5b 27 6d 27 2c 27 66 27 5d 2c 5b 27 7a 27 2c 27 70 6e 79 79 27 5d 2c 5b 27 77 27 2c 27 79 27 5d 2c 5b 27 4e 27 2c 30 5d 2c 5b 27 63 27 2c 27 62 63 67 76 62 61 66 27 5d 2c 5b 27 44 27 2c 27 79 6e 65 6c 27 5d 2c 5b 27 41 27 2c 27 77 62 76 61 27 5d 2c 5b 27 54 27 2c 27 Data Ascii: for(let i=0;i<args.length-1;i+=2){obj[args[i]]=args[i+1]}return obj}],['y','z'],['g','p'],['K','q'],['G','e'],['R','g'],['H','a'],['h','b'],['e','c'],['i','rkcbegf'],['m','f'],['z','pnyy'],['w','y'],['N',0],['c','bcgvbaf'],['D','ynel'],['A','wbva'],['T','
2024-01-10 21:52:42 UTC	556	IN	Data Raw: 27 6c 4f 27 2c 27 71 62 7a 6e 76 61 66 27 5d 2c 5b 27 58 4f 27 2c 27 65 72 66 68 79 67 27 5d 2c 5b 27 59 4f 27 2c 27 7a 72 67 75 62 71 27 5d 2c 5b 27 6a 4f 27 2c 27 70 65 72 71 72 61 67 76 6e 79 66 27 5d 2c 5b 27 70 4f 27 2c 27 76 61 70 79 68 71 72 27 5d 2c 5b 27 73 4f 27 2c 27 6f 62 71 6c 27 5d 2c 5b 27 76 4f 27 2c 27 75 72 6e 71 72 65 66 27 5d 2c 5b 27 61 4f 27 2c 27 78 72 6c 43 6e 67 75 27 5d 2c 5b 27 57 4f 27 2c 27 63 68 67 27 5d 2c 5b 27 6b 4f 27 2c 27 67 62 78 72 61 27 5d 2c 5b 27 78 4f 27 2c 27 62 6f 77 72 70 67 46 67 62 65 72 27 5d 2c 5b 27 64 4f 27 2c 27 70 65 72 6e 67 72 71 4e 67 27 5d 2c 5b 27 50 4f 27 2c 27 74 72 67 4e 79 79 27 5d 2c 5b 27 74 4f 27 2c 27 67 65 6e 61 66 6e 70 67 76 62 61 27 5d 2c 5b 27 72 4f 27 2c 27 65 72 6e 71 6a 65 76 67 72 Data Ascii: 'lO','qbznvaf'],['XO','erfhyg'],['YO','zrgubq'],['jO','perqragvnyf'],['pO','vapyhqr'],['sO','obql'],['vO','urnqref'],['aO','xrlCngu'],['WO','chg'],['kO','gbxra'],['xO','bowrpgFgber'],['dO','perngrqNg'],['PO','trgNyy'],['tO','genafnpgvba'],['rO','ernqjevgr
2024-01-10 21:52:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.16	50007	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:42 UTC	602	OUT	POST /custom HTTP/1.1 Host: ibrapush.com Connection: keep-alive Content-Length: 456 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:42 UTC	456	OUT	Data Raw: 7b 22 7a 6f 6e 65 5f 69 64 22 3a 35 35 38 38 36 32 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 34 37 31 22 2c 22 70 75 62 5f 7a 6f 6e 65 5f 69 64 22 3a 35 35 38 38 36 32 34 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 32 35 32 61 61 63 65 66 2d 64 33 63 34 2d 34 61 33 66 2d 39 32 32 37 2d 38 35 34 31 64 65 38 34 31 35 38 65 22 2c 22 6f 61 69 64 22 3a 22 65 32 61 37 62 63 31 39 39 38 38 30 34 61 34 35 62 30 39 37 35 66 36 37 39 36 36 33 31 37 34 62 22 2c 22 69 70 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 32 22 2c 22 67 65 6f 22 3a 22 75 73 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 63 6f 6e 76 65 72 74 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 76 39 2e 77 77 77 2d 79 74 6d Data Ascii: {"zone_id":5588624,"sw_version":"3.1.471","pub_zone_id":5588624,"trace_id":"252aacef-d3c4-4a3f-9227-8541de84158e","oaid":"e2a7bc1998804a45b0975f679663174b","ip":"102.165.48.42","geo":"us","location":"https://v9.www-ytmp4.com/convert/","domain":"v9.www-ytm
2024-01-10 21:52:42 UTC	455	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:42 GMT Content-Type: application/json; charset=utf-8 Content-Length: 39 Connection: close X-Trace-Id: cc8c9f0cc475926a7278effad1486e51 Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-01-10 21:52:42 UTC	39	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":"","message":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.16	50008	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:42 UTC	774	OUT	OPTIONS /9?z=5588623&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&oaid=efe83b1130104efea0d475e2cb75464f HTTP/1.1 Host: cameesse.net Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://v9.www-ytmp4.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:42 UTC	541	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 10 Jan 2024 21:52:42 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.16	50010	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:42 UTC	602	OUT	POST /custom HTTP/1.1 Host: ibrapush.com Connection: keep-alive Content-Length: 962 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:42 UTC	962	OUT	Data Raw: 7b 22 7a 6f 6e 65 5f 69 64 22 3a 35 35 38 38 36 32 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 34 37 31 22 2c 22 70 75 62 5f 7a 6f 6e 65 5f 69 64 22 3a 35 35 38 38 36 32 34 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 32 35 32 61 61 63 65 66 2d 64 33 63 34 2d 34 61 33 66 2d 39 32 32 37 2d 38 35 34 31 64 65 38 34 31 35 38 65 22 2c 22 6f 61 69 64 22 3a 22 65 32 61 37 62 63 31 39 39 38 38 30 34 61 34 35 62 30 39 37 35 66 36 37 39 36 36 33 31 37 34 62 22 2c 22 69 70 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 32 22 2c 22 67 65 6f 22 3a 22 75 73 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 63 6f 6e 76 65 72 74 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 76 39 2e 77 77 77 2d 79 74 6d Data Ascii: {"zone_id":5588624,"sw_version":"3.1.471","pub_zone_id":5588624,"trace_id":"252aacef-d3c4-4a3f-9227-8541de84158e","oaid":"e2a7bc1998804a45b0975f679663174b","ip":"102.165.48.42","geo":"us","location":"https://v9.www-ytmp4.com/convert/","domain":"v9.www-ytm
2024-01-10 21:52:42 UTC	455	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:42 GMT Content-Type: application/json; charset=utf-8 Content-Length: 39 Connection: close X-Trace-Id: 2d7cd03d9df9d9fba884f713e517a342 Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-01-10 21:52:42 UTC	39	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":"","message":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.16	50011	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:42 UTC	504	OUT	OPTIONS /event HTTP/1.1 Host: ibrapush.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://v9.www-ytmp4.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:42 UTC	486	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:42 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid Access-Control-Max-Age: 86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.16	50009	139.45.195.254	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:42 UTC	384	OUT	GET /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1 Host: fleraprt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:42 UTC	454	IN	HTTP/1.1 400 Bad Request Server: nginx/1.19.10 Date: Wed, 10 Jan 2024 21:52:44 GMT Content-Type: application/json; charset=utf-8 Content-Length: 25 Connection: close Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-01-10 21:52:42 UTC	25	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 22 3a 31 30 30 31 7d Data Ascii: {"status":0,"error":1001}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.16	50014	104.26.3.120	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:42 UTC	705	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: dl--master--cdn.ytapis.com Connection: keep-alive Content-Length: 528 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://dl--master--cdn.ytapis.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://dl--master--cdn.ytapis.com/api/button/mp4?url=https://www.youtube.com/watch?v=0nBZLHxmUd0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:42 UTC	528	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 33 2e 31 30 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 33 2e 31 30 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 31 38 66 36 63 66 39 35 2d 39 32 39 33 2d 34 62 39 63 2d 39 38 63 63 2d 62 61 65 64 66 39 63 33 38 30 30 32 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6c 2d 2d 6d 61 73 74 65 72 2d 2d 63 64 6e 2e 79 74 61 70 69 73 2e 63 6f 6d 2f 61 70 69 2f 62 75 74 74 6f 6e 2f 6d 70 34 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 61 70 69 2f 62 75 74 74 6f 6e 2f 6d 70 34 22 2c 22 73 74 61 72 74 54 Data Ascii: {"referrer":"https://v9.www-ytmp4.com/","eventType":3,"versions":{"js":"2023.10.0","fl":"2023.10.0"},"pageloadId":"18f6cf95-9293-4b9c-98cc-baedf9c38002","location":"https://dl--master--cdn.ytapis.com/api/button/mp4","landingPath":"/api/button/mp4","startT
2024-01-10 21:52:42 UTC	383	IN	HTTP/1.1 204 No Content Date: Wed, 10 Jan 2024 21:52:42 GMT Connection: close access-control-allow-origin: https://dl--master--cdn.ytapis.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 8438260b6ec481d5-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.16	50015	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:42 UTC	944	OUT	POST /9?z=5588623&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&oaid=efe83b1130104efea0d475e2cb75464f HTTP/1.1 Host: cameesse.net Connection: keep-alive Content-Length: 260 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; OAID=f14a167a07f14324b06d3d8ad631d7ef; oaidts=1704923559
2024-01-10 21:52:42 UTC	260	OUT	Data Raw: 7b 22 74 69 74 6c 65 22 3a 22 59 54 4d 50 34 20 2d 20 59 6f 75 74 75 62 65 20 74 6f 20 4d 70 34 20 63 6f 6e 76 65 72 74 65 72 20 4f 6e 6c 69 6e 65 20 54 6f 6f 6c 20 5b 31 30 30 25 20 57 6f 72 6b 69 6e 67 5d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4f 75 72 20 59 54 4d 50 34 20 69 73 20 61 20 66 72 65 65 20 59 6f 75 74 75 62 65 20 74 6f 20 6d 70 34 20 63 6f 6e 76 65 72 74 65 72 20 6f 72 20 59 54 20 74 6f 20 6d 70 34 20 6f 6e 6c 69 6e 65 20 74 6f 6f 6c 2e 20 79 6f 75 20 63 61 6e 20 63 6f 6e 76 65 72 74 20 61 6e 64 20 64 6f 77 6e 6c 6f 61 64 20 79 6f 75 74 75 62 65 20 76 69 64 65 6f 73 20 74 6f 20 6d 70 34 2e 20 49 74 27 73 20 74 6f 74 61 6c 6c 79 20 66 72 65 65 20 61 6e 64 20 31 30 30 25 20 77 6f 72 6b 69 6e 67 2e 22 2c 22 6b 65 79 77 6f 72 64 73 Data Ascii: {"title":"YTMP4 - Youtube to Mp4 converter Online Tool [100% Working]","description":"Our YTMP4 is a free Youtube to mp4 converter or YT to mp4 online tool. you can convert and download youtube videos to mp4. It's totally free and 100% working.","keywords
2024-01-10 21:52:43 UTC	876	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:43 GMT Content-Type: application/json Content-Length: 6296 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: 24ea1ec30b2b5d3ae8bb4ed88c91a769 Access-Control-Expose-Headers: X-Sc Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:43 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:52:43 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-01-10 21:52:43 UTC	6296	IN	Data Raw: 7b 22 7a 6f 6e 65 49 64 22 3a 35 35 38 38 36 32 33 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 30 31 31 30 31 36 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 76 32 2e 35 32 31 2e 30 22 2c 22 72 65 71 75 65 73 74 56 61 72 22 3a 22 22 2c 22 72 65 71 75 65 73 74 56 61 72 49 64 22 3a 30 2c 22 72 65 71 75 65 73 74 42 61 67 22 3a 22 6b 41 78 4e 59 69 78 56 6b 55 78 77 77 69 33 5f 33 70 66 4c 41 4b 67 73 4d 55 44 34 6e 77 65 36 57 79 51 52 61 52 5a 59 31 33 5a 74 50 37 4d 77 7a 31 71 70 4f 50 53 71 71 37 61 49 56 53 41 4b 79 55 34 5a 77 67 67 67 54 49 38 33 63 58 7a 54 6f 4b 45 4f 69 76 45 6b 32 65 31 75 42 79 61 47 53 6f 63 41 4d 43 67 31 6f 53 6e 44 31 59 44 54 41 4c 7a 6d 38 42 5a 48 73 65 6a 33 4f 69 51 69 5a 63 6f 74 36 42 68 66 31 69 7a 38 59 62 75 68 33 70 4b 42 31 Data Ascii: {"zoneId":5588623,"time":"2024011016","version":"v2.521.0","requestVar":"","requestVarId":0,"requestBag":"kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.16	50016	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:43 UTC	601	OUT	POST /event HTTP/1.1 Host: ibrapush.com Connection: keep-alive Content-Length: 859 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:43 UTC	859	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 65 72 72 6f 72 5f 6a 73 6f 6e 22 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 34 37 31 22 2c 22 75 73 65 72 5f 6b 65 79 22 3a 7b 22 75 73 65 72 22 3a 22 65 32 61 37 62 63 31 39 39 38 38 30 34 61 34 35 62 30 39 37 35 66 36 37 39 36 36 33 31 37 34 62 22 2c 22 70 75 62 22 3a 30 7d 2c 22 65 72 72 6f 72 5f 6c 65 76 65 6c 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 22 3a 22 66 61 69 6c 65 64 5f 74 6f 5f 63 68 65 63 6b 5f 73 77 20 28 66 61 6c 6c 62 61 63 6b 20 74 6f 20 70 6f 70 75 70 29 3a 20 7a 6f 6e 65 3a 20 35 35 38 38 36 32 34 20 70 75 62 5a 6f 6e 65 49 64 3a 20 35 35 38 38 36 32 34 20 70 6f 70 75 70 3a 20 75 6e 64 65 66 69 6e 65 64 20 73 77 4e 61 6d 65 3a 20 73 77 2e 6a 73 2c 20 Data Ascii: {"code":"error_json","sw_version":"3.1.471","user_key":{"user":"e2a7bc1998804a45b0975f679663174b","pub":0},"error_level":"universal","error_message":"failed_to_check_sw (fallback to popup): zone: 5588624 pubZoneId: 5588624 popup: undefined swName: sw.js,
2024-01-10 21:52:43 UTC	409	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:43 GMT Content-Type: application/json; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-01-10 21:52:43 UTC	94	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 65 76 65 6e 74 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 34 31 36 34 61 34 37 65 2d 33 64 64 64 2d 33 64 62 36 2d 39 65 37 31 2d 32 39 39 37 32 30 62 63 34 35 36 30 22 7d 0a Data Ascii: {"status":true,"code":"event","message":"","trace_id":"4164a47e-3ddd-3db6-9e71-299720bc4560"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.16	50018	104.26.2.120	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:43 UTC	377	OUT	GET /livewire/message/api.button HTTP/1.1 Host: dl--master--cdn.ytapis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:43 UTC	615	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 10 Jan 2024 21:52:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close allow: POST Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TKMkcVjR9BrBkEG47TNUwPQDQbxhvXuIo%2BRVMWf9F75Y8ixbGNC5op1yV9myEfF035xh07TPR8BvBtHA4cNMoY9xB%2BWu6qNubsdcQDnfrByoNLroyRHWUxQbvAF6IAgC5RO0TZ89unn8XDs5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438260e9af50a93-IAD
2024-01-10 21:52:43 UTC	754	IN	Data Raw: 34 62 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 2c 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 6e 20 45 72 72 6f 72 20 4f 63 63 75 72 72 65 64 3a 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 20 66 6f 6e 74 3a Data Ascii: 4bd<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8" /> <meta name="robots" content="noindex,nofollow,noarchive" /> <title>An Error Occurred: Method Not Allowed</title> <style>body { background-color: #fff; color: #222; font:
2024-01-10 21:52:43 UTC	466	IN	Data Raw: 20 73 6f 6f 6e 20 61 73 20 70 6f 73 73 69 62 6c 65 2e 20 53 6f 72 72 79 20 66 6f 72 20 61 6e 79 20 69 6e 63 6f 6e 76 65 6e 69 65 6e 63 65 20 63 61 75 73 65 64 2e 0a 20 20 20 20 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 6e 2e 6a 73 2f 76 38 34 61 33 61 34 30 31 32 64 65 39 34 63 65 31 61 36 38 36 62 61 38 63 31 36 37 63 33 35 39 63 31 36 39 36 39 37 33 38 39 33 33 31 37 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 65 75 6f 46 47 6f 77 68 6c 61 4c 71 58 73 50 57 51 34 38 71 53 6b 42 53 43 46 73 33 44 50 52 79 69 77 56 75 33 46 6a 52 39 36 63 4d 50 78 2b Data Ascii: soon as possible. Sorry for any inconvenience caused. </p></div><script defer src="https://static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317" integrity="sha512-euoFGowhlaLqXsPWQ48qSkBSCFs3DPRyiwVu3FjR96cMPx+
2024-01-10 21:52:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.16	50017	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:43 UTC	342	OUT	GET /custom HTTP/1.1 Host: ibrapush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:43 UTC	432	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:43 GMT Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close X-Trace-Id: 83f678da3f36c4c80551b5c56c24ee94 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-01-10 21:52:43 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 77 72 6f 6e 67 20 72 65 71 75 65 73 74 22 7d 0a Data Ascii: {"status":false,"code":"error","message":"wrong request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.16	49986	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:43 UTC	686	OUT	GET /gid.js?pub=0&userId=e2a7bc1998804a45b0975f679663174b&zoneId=5588624&checkDuplicate=true&ymid=&var= HTTP/1.1 Host: my.rtmark.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:43 UTC	704	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:43 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:43 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:43 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 65 66 65 38 33 62 31 31 33 30 31 30 34 65 66 65 61 30 64 34 37 35 65 32 63 62 37 35 34 36 34 66 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.16	50021	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:43 UTC	341	OUT	GET /event HTTP/1.1 Host: ibrapush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:44 UTC	386	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:44 GMT Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-01-10 21:52:44 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 77 72 6f 6e 67 20 72 65 71 75 65 73 74 22 7d 0a Data Ascii: {"status":false,"code":"error","message":"wrong request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.16	50019	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:43 UTC	1318	OUT	GET /11?rnd=3665909097&z=5588623&b=5362695&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&os=windows&os_version=10.0.0&ot=1583 HTTP/1.1 Host: cameesse.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:44 UTC	867	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:44 GMT Content-Type: image/jpeg Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: 26b21b41b9b9e7429f7a4c7be28818fc Access-Control-Expose-Headers: X-Sc Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:44 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:52:44 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.16	50020	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:43 UTC	342	OUT	GET /custom HTTP/1.1 Host: ibrapush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:44 UTC	432	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:44 GMT Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close X-Trace-Id: 1505f3ca49b479d0f92ba6ac60573c23 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-01-10 21:52:44 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 77 72 6f 6e 67 20 72 65 71 75 65 73 74 22 7d 0a Data Ascii: {"status":false,"code":"error","message":"wrong request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.16	50022	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:44 UTC	684	OUT	GET /9?z=5588623&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&oaid=efe83b1130104efea0d475e2cb75464f HTTP/1.1 Host: cameesse.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:44 UTC	852	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:44 GMT Content-Type: application/json Content-Length: 6297 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: 8851dc12adcdb5c64195c66ad490743e Access-Control-Expose-Headers: X-Sc Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:44 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:52:44 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-01-10 21:52:44 UTC	6297	IN	Data Raw: 7b 22 7a 6f 6e 65 49 64 22 3a 35 35 38 38 36 32 33 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 30 31 31 30 31 36 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 76 32 2e 35 32 31 2e 30 22 2c 22 72 65 71 75 65 73 74 56 61 72 22 3a 22 22 2c 22 72 65 71 75 65 73 74 56 61 72 49 64 22 3a 30 2c 22 72 65 71 75 65 73 74 42 61 67 22 3a 22 2d 70 76 47 55 46 6b 39 70 63 63 66 46 34 49 46 46 77 69 6e 31 34 55 55 39 43 76 46 4a 45 79 52 71 4f 2d 62 6c 38 32 76 65 37 54 32 4f 31 62 38 76 45 42 32 73 64 6d 6d 41 75 59 4c 76 79 34 41 4a 69 50 67 39 62 78 6b 38 38 30 6a 47 4e 70 61 6d 64 6b 75 75 6d 38 39 73 52 58 37 46 6d 79 5a 4d 45 39 75 78 50 74 47 5f 55 48 4c 50 72 77 39 2d 4a 77 37 74 36 2d 32 55 46 38 50 44 4b 4f 54 7a 7a 73 62 68 4d 47 2d 6b 6d 53 73 65 54 43 57 48 53 47 34 68 Data Ascii: {"zoneId":5588623,"time":"2024011016","version":"v2.521.0","requestVar":"","requestVarId":0,"requestBag":"-pvGUFk9pccfF4IFFwin14UU9CvFJEyRqO-bl82ve7T2O1b8vEB2sdmmAuYLvy4AJiPg9bxk880jGNpamdkuum89sRX7FmyZME9uxPtG_UHLPrw9-Jw7t6-2UF8PDKOTzzsbhMG-kmSseTCWHSG4h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.16	50023	139.45.197.151	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:44 UTC	2165	OUT	GET /?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26bag%3DydU9kaAfa6I%3D%26ruid%3Dab37d699-010f-450d-8692-ddfdc6930388%26os%3Dwindows%26os_version%3D10.0.0%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fconvert%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D984%26cw%3D1263%26wiw%3D1280%26wih%3D907%26wfc%3D3%26sah%3D984%26drf%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fsearch%252F%26hil%3D1%26ist%3D0%26os%3Dwindows%26os_version%3D10.0.0%26tbc%3D1 HTTP/1.1 Host: interstitial-08.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:44 UTC	1038	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/7.4.33 Set-Cookie: reverse=HySKS1JsRDVAI_8eCOCoHTBLplik8DObewG5Y89nKb4; expires=Wed, 10-Jan-2024 22:52:44 GMT; Max-Age=3600; path=/ Set-Cookie: OAID=d03757e2f0f06bdc8ae79c2045d6002a; expires=Fri, 20-Jan-2079 19:45:28 GMT; Max-Age=1736545964; path=/ Set-Cookie: oaidts=1704923564; expires=Fri, 20-Jan-2079 19:45:28 GMT; Max-Age=1736545964; path=/ Set-Cookie: syncedCookie=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
2024-01-10 21:52:44 UTC	15346	IN	Data Raw: 35 61 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 20 20 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 64 22 20 63 6f 6e 74 65 6e 74 3d 22 32 30 37 38 31 33 3b 37 30 38 38 3b 32 31 35 38 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 0a 20 20 3c 73 74 79 6c 65 20 Data Ascii: 5a8<!DOCTYPE html><html><head> <meta charset="utf-8" /> <meta name="land" content="207813;7088;21588"> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no"> <style
2024-01-10 21:52:44 UTC	6664	IN	Data Raw: 74 36 42 68 66 31 69 7a 38 59 62 75 68 33 70 4b 42 31 57 69 44 79 66 4b 76 76 31 62 55 6e 53 34 35 46 47 45 38 38 6a 6b 74 6a 33 45 68 6c 65 74 55 4d 67 77 61 75 73 34 61 45 61 51 58 49 2d 7a 6e 43 63 31 39 4c 56 55 48 39 4e 78 38 4c 33 36 54 59 78 62 4b 74 6d 59 69 30 34 71 56 59 34 41 30 36 48 78 55 43 64 5f 67 52 53 65 74 6b 6b 67 4d 6e 4d 47 31 69 68 39 48 72 6f 47 57 5f 77 61 4d 34 65 78 6b 46 42 7a 61 50 55 4c 72 58 42 48 38 7a 38 68 75 47 2d 75 61 4b 33 49 63 54 56 4d 54 30 33 46 71 58 35 56 67 52 44 71 4d 33 6b 4c 56 70 6b 57 71 45 2d 73 70 30 77 33 32 26 62 61 67 3d 79 64 55 39 6b 61 41 66 61 36 49 3d 26 72 75 69 64 3d 61 62 33 37 64 36 39 39 2d 30 31 30 66 2d 34 35 30 64 2d 38 36 39 32 2d 64 64 66 64 63 36 39 33 30 33 38 38 26 6f 73 3d 77 69 6e Data Ascii: t6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&bag=ydU9kaAfa6I=&ruid=ab37d699-010f-450d-8692-ddfdc6930388&os=win

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.16	50024	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:44 UTC	480	OUT	GET /gid.js?pub=0&userId=e2a7bc1998804a45b0975f679663174b&zoneId=5588624&checkDuplicate=true&ymid=&var= HTTP/1.1 Host: my.rtmark.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:44 UTC	681	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:44 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:44 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:52:44 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 65 66 65 38 33 62 31 31 33 30 31 30 34 65 66 65 61 30 64 34 37 35 65 32 63 62 37 35 34 36 34 66 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.16	50025	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:44 UTC	572	OUT	GET /pfe/current/defaultSkin.min.js HTTP/1.1 Host: ibrapush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:44 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:44 GMT Content-Type: application/javascript Content-Length: 57187 Last-Modified: Mon, 27 Nov 2023 17:44:23 GMT Connection: close ETag: "6564d577-df63" Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Accept-Ranges: bytes
2024-01-10 21:52:44 UTC	16004	IN	Data Raw: 7b 22 69 66 72 61 6d 65 22 3a 7b 0a 09 22 64 65 66 61 75 6c 74 73 22 3a 7b 22 69 63 6f 6e 22 3a 22 22 7d 2c 0a 09 22 68 74 6d 6c 22 3a 22 3c 68 74 6d 6c 20 6c 61 6e 67 3d 5c 22 65 6e 5c 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 5c 22 55 54 46 2d 38 5c 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 5c 22 72 6f 62 6f 74 73 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 6e 6f 69 6e 64 65 78 5c 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 5c 22 76 69 65 77 70 6f 72 74 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 5c 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 5c 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: {"iframe":{"defaults":{"icon":""},"html":"<html lang=\"en\"><head><meta charset=\"UTF-8\"><meta name=\"robots\" content=\"noindex\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><meta http-equiv=\"X-UA-Compatible\" content=
2024-01-10 21:52:44 UTC	16384	IN	Data Raw: 78 3b 72 69 67 68 74 3a 33 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 73 63 2e 73 63 2d 2d 64 65 73 6b 74 6f 70 20 2e 73 63 5f 5f 73 77 5f 5f 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 5c 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 79 4e 43 49 67 61 47 56 70 5a 32 68 30 50 53 49 79 4e 43 49 2b 50 48 42 68 64 47 Data Ascii: x;right:30px;font-size:15px;white-space:nowrap;text-overflow:ellipsis;overflow:hidden}.sc.sc--desktop .sc__sw__icon{background-image:url(\"data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIyNCIgaGVpZ2h0PSIyNCI+PHBhdG
2024-01-10 21:52:44 UTC	16384	IN	Data Raw: 72 6f 77 73 65 72 28 29 7d 7d 2c 7b 6b 65 79 3a 5c 22 67 65 74 42 72 6f 77 73 65 72 4e 61 6d 65 5c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 53 74 72 69 6e 67 28 74 68 69 73 2e 67 65 74 42 72 6f 77 73 65 72 28 29 2e 6e 61 6d 65 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 5c 22 5c 22 3a 74 68 69 73 2e 67 65 74 42 72 6f 77 73 65 72 28 29 2e 6e 61 6d 65 7c 7c 5c 22 5c 22 7d 7d 2c 7b 6b 65 79 3a 5c 22 67 65 74 42 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 5c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 42 72 6f 77 73 65 72 28 29 2e 76 65 72 73 69 6f 6e 7d 7d 2c 7b 6b 65 79 3a 5c 22 67 65 74 4f 53 5c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: rowser()}},{key:\"getBrowserName\",value:function(e){return e?String(this.getBrowser().name).toLowerCase()\|\|\"\":this.getBrowser().name\|\|\"\"}},{key:\"getBrowserVersion\",value:function(){return this.getBrowser().version}},{key:\"getOS\",value:function(){
2024-01-10 21:52:44 UTC	8415	IN	Data Raw: 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4e 75 6d 62 65 72 28 53 74 72 69 6e 67 28 65 2e 67 65 74 4f 53 56 65 72 73 69 6f 6e 28 29 29 2e 73 70 6c 69 74 28 5c 22 2e 5c 22 29 5b 30 5d 29 3b 72 65 74 75 72 6e 5c 22 61 6e 64 72 6f 69 64 5c 22 3d 3d 3d 65 2e 67 65 74 4f 53 4e 61 6d 65 28 21 30 29 26 26 74 3e 3d 33 7d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 73 7d 7d 7d 2c 7b 74 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5c 22 61 6e 64 72 6f 69 64 5c 22 3d 3d 3d 65 2e 67 65 74 4f 53 4e 61 6d 65 28 21 30 29 7d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 61 7d 7d 7d 2c 7b 74 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 Data Ascii: ion(e){var t=Number(String(e.getOSVersion()).split(\".\")[0]);return\"android\"===e.getOSName(!0)&&t>=3},describe:function(){return{type:s}}},{test:function(e){return\"android\"===e.getOSName(!0)},describe:function(){return{type:a}}},{test:function(e){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.16	50026	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:44 UTC	1112	OUT	GET /11?rnd=3665909097&z=5588623&b=5362695&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&os=windows&os_version=10.0.0&ot=1583 HTTP/1.1 Host: cameesse.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:45 UTC	843	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:45 GMT Content-Type: image/jpeg Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: 10f21bc6f7ad4a26ee62d607a6e329a6 Access-Control-Expose-Headers: X-Sc Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:45 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:52:45 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.16	50030	172.67.10.98	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:44 UTC	612	OUT	GET /interstital/templates/inapp/Players/_gen-carousel-3d/css/style.css?v=1518177503492 HTTP/1.1 Host: littlecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://interstitial-08.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:45 UTC	730	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:45 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 05 Dec 2023 12:54:54 GMT Vary: Accept-Encoding ETag: W/"656f1d9e-30c9" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Cache-Control: max-age=3600 CF-Cache-Status: HIT Age: 4722 Server: cloudflare CF-RAY: 8438261a0e5d07c7-IAD
2024-01-10 21:52:45 UTC	639	IN	Data Raw: 33 30 63 39 0d 0a 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 70 75 6c 6c 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 61 67 65 6c 69 6e 6b 2c 2e 77 72 61 70 2c 62 6f 64 79 2c 68 74 6d 6c 7b 77 69 64 74 68 3a Data Ascii: 30c9*,:after,:before{-moz-box-sizing:border-box;box-sizing:border-box}.clearfix:after,.clearfix:before{content:"";display:table}.clearfix:after{clear:both}.pull-left{float:left!important}.pull-right{float:right!important}.pagelink,.wrap,body,html{width:
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: 74 6f 6e 73 2c 2e 66 2d 62 75 74 74 6f 6e 73 20 2e 62 74 6e 7b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 2d 6d 6f 7a 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 66 2d 62 75 74 74 6f 6e 73 7b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 7d 2e 66 2d 62 75 74 74 6f 6e 73 20 2e 62 74 6e 7b 2d 6d 6f 7a 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 66 6c 65 78 3a 30 20 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 30 20 31 25 Data Ascii: tons,.f-buttons .btn{display:-moz-box;display:flex;box-orient:horizontal;box-pack:center;box-direction:normal;box-align:stretch;-moz-box-pack:center;justify-content:center}.f-buttons{flex-wrap:nowrap}.f-buttons .btn{-moz-box-flex:0;flex:0 auto;margin:0 1%
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 70 6f 72 74 72 61 69 74 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 30 30 70 78 29 7b 62 6f 64 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 36 65 6d 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 37 35 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 70 6f 72 74 72 61 69 74 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 33 37 35 70 78 29 7b 62 6f 64 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 34 65 6d 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 Data Ascii: 00px),screen and (orientation:portrait) and (max-width:400px){body{font-size:1.6em}}@media screen and (orientation:landscape) and (max-height:375px),screen and (orientation:portrait) and (max-width:375px){body{font-size:1.4em}}@media screen and (orientati
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: 67 68 74 3a 32 2e 35 65 6d 7d 2e 77 69 6e 64 6f 77 5f 5f 68 65 61 64 65 72 73 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 2e 35 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 70 6f 72 74 72 61 69 74 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 32 35 70 78 29 7b 2e 77 69 6e 64 6f 77 5f 5f 68 65 61 64 65 72 73 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 65 6d 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 38 30 30 Data Ascii: ght:2.5em}.window__headers{margin:0 0 1em;padding-top:1.5em;text-align:center}@media screen and (orientation:portrait) and (max-width:425px){.window__headers{padding-top:1em;margin-bottom:.5em}}@media screen and (orientation:landscape) and (max-height:800
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 7b 2e 77 69 6e 64 6f 77 5f 5f 74 65 78 74 73 2e 74 6f 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 38 30 30 70 78 29 7b 2e 77 69 6e 64 6f 77 5f 5f 74 65 78 74 73 2e 74 6f 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 65 6d 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 34 32 35 70 78 29 7b 2e 77 69 6e 64 6f 77 5f 5f 74 65 78 74 73 2e 74 6f 70 7b 64 Data Ascii: and (orientation:landscape){.window__texts.top{margin-bottom:1em}}@media screen and (orientation:landscape) and (max-height:800px){.window__texts.top{margin-bottom:.5em}}@media screen and (orientation:landscape) and (max-height:425px){.window__texts.top{d
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 30 70 78 29 7b 2e 63 61 72 6f 75 73 65 6c 7b 77 69 64 74 68 3a 34 30 25 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 37 35 70 78 29 7b 2e 63 61 72 6f 75 73 65 6c 7b 77 69 64 74 68 3a 33 30 25 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 35 30 70 78 29 7b 2e 63 61 72 6f 75 73 65 6c 7b 77 69 64 74 68 3a 32 35 25 3b 6d 61 72 67 69 6e 2d 62 6f Data Ascii: en and (orientation:landscape) and (max-height:400px){.carousel{width:40%}}@media screen and (orientation:landscape) and (max-height:375px){.carousel{width:30%}}@media screen and (orientation:landscape) and (max-height:350px){.carousel{width:25%;margin-bo
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 36 35 30 70 78 29 7b 2e 63 61 72 6f 75 73 65 6c 5f 5f 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 31 34 65 6d 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 36 30 30 70 78 29 7b 2e 63 61 72 6f 75 73 65 6c 5f 5f 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 31 33 65 6d 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 35 35 30 70 78 29 7b 2e 63 61 72 6f 75 73 65 6c 5f 5f 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 31 32 65 6d 7d 7d 40 6d 65 64 69 Data Ascii: and (max-height:650px){.carousel__wrapper{height:14em}}@media screen and (orientation:landscape) and (max-height:600px){.carousel__wrapper{height:13em}}@media screen and (orientation:landscape) and (max-height:550px){.carousel__wrapper{height:12em}}@medi
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: 75 73 65 6c 5f 5f 77 72 61 70 70 65 72 20 2e 69 74 65 6d 2e 76 69 73 69 62 6c 65 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 63 61 72 6f 75 73 65 6c 5f 5f 77 72 61 70 70 65 72 20 2e 69 74 65 6d 2e 63 65 6e 74 65 72 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 20 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 20 73 63 61 6c 65 28 31 29 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 63 61 72 6f 75 73 65 6c 5f 5f 77 72 61 70 70 65 72 20 2e 69 74 65 6d 2e 6c 65 66 74 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 33 30 25 2c 30 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 33 30 25 2c Data Ascii: usel__wrapper .item.visible{opacity:1}.carousel__wrapper .item.center{-moz-transform:translateZ(0) scale(1);transform:translateZ(0) scale(1);z-index:2}.carousel__wrapper .item.left{-moz-transform:translate3d(-30%,0,0) scale(.8);transform:translate3d(-30%,
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: 72 2e 6c 6f 61 64 69 6e 67 3a 61 66 74 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 40 6d 65 64 69 61 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 70 6f 72 74 72 61 69 74 29 7b 2e 63 61 72 6f 75 73 65 6c 5f 5f 77 72 61 70 70 65 72 2e 70 6f 72 74 72 61 69 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 7d 40 6d 65 64 69 61 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 7b 2e 63 61 72 6f 75 73 65 6c 5f 5f 77 72 61 70 70 65 72 2e 6c 61 6e 64 73 63 61 70 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 7d 2e 66 2d 62 75 74 74 6f 6e 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 65 6d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 70 6f 72 74 72 61 69 74 29 20 61 6e 64 20 28 6d 61 78 2d Data Ascii: r.loading:after{opacity:1}@media (orientation:portrait){.carousel__wrapper.portrait{display:block}}@media (orientation:landscape){.carousel__wrapper.landscape{display:block}}.f-buttons{margin-bottom:1.5em}@media screen and (orientation:portrait) and (max-
2024-01-10 21:52:45 UTC	906	IN	Data Raw: 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 35 35 30 70 78 29 7b 2e 66 2d 62 75 74 74 6f 6e 73 20 2e 62 74 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 39 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 39 65 6d 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 35 30 30 70 78 29 7b 2e 66 2d 62 75 74 74 6f 6e 73 20 2e 62 74 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 38 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 38 65 6d 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 Data Ascii: en and (orientation:landscape) and (max-height:550px){.f-buttons .btn{padding-top:.9em;padding-bottom:.9em}}@media screen and (orientation:landscape) and (max-height:500px){.f-buttons .btn{padding-top:.8em;padding-bottom:.8em}}@media screen and (orientati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.16	50029	172.67.10.98	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:44 UTC	647	OUT	GET /interstital/templates/inapp/Players/_gen-carousel-3d/images/audible.png HTTP/1.1 Host: littlecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interstitial-08.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:45 UTC	744	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:45 GMT Content-Type: image/png Content-Length: 3429 Connection: close Last-Modified: Tue, 05 Dec 2023 12:54:54 GMT Vary: Accept-Encoding ETag: "656f1d9e-d65" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Cache-Control: max-age=3600 CF-Cache-Status: HIT Age: 6372 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8438261a1a9f81c3-IAD
2024-01-10 21:52:45 UTC	625	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 36 00 00 01 36 08 03 00 00 00 dc 62 4e 9b 00 00 00 a8 50 4c 54 45 f7 99 1c ff ff ff ea 93 1e ec 93 1e ff fe fb f7 9b 1f ff fc f7 f9 b0 4f f7 9d 23 fe ed d7 ff fa f3 f8 a2 2f fe f0 dc fb c6 7f f9 b5 5a fd e2 bd f8 a4 34 f7 9e 27 fa c3 78 fa be 6f fe f8 f0 fe f2 e2 fb ce 91 f9 b8 60 f8 a6 38 f9 ad 49 fe f5 ea fd e8 cb fb d0 95 fb ca 8a f8 aa 40 f8 a0 2a fd e4 c2 fc d9 ab f8 ab 44 e2 8f 21 fe f7 ec fc d2 9a fb c8 84 fc dd b3 f8 a8 3c f9 b3 55 fa bc 69 f0 95 1d fc df b7 fd e0 ba fe f4 e6 fc d7 a5 fd e6 c7 fa ba 65 fc d5 a2 fd eb d2 fc db af fd ea cf fa c1 73 fc d4 9f f1 d3 d5 0d 00 00 0c 78 49 44 41 54 78 da ec d4 b1 0d 03 31 10 03 41 41 2a 45 a1 fa ef cf 76 6e 06 fa e0 c1 60 b6 84 c1 1d c7 de 7b ea aa Data Ascii: PNGIHDR66bNPLTEO#/Z4'xo`8I@D!<UiesxIDATx1AAEvn`{
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: e1 21 86 d6 a5 5d 15 33 1b b1 34 78 98 b5 3e 42 e7 44 cc 76 16 ad 7d 7e 74 1e 4e bc 6c c4 1a c3 c3 cd f5 d3 ff 12 e1 b2 b9 43 78 8a f1 c9 8d 13 2c 1b cb e1 69 86 29 fa 23 54 36 b5 c0 70 05 5e 4f 56 1b 1e 50 6b 6b 18 06 63 b2 61 b8 19 d5 9d 22 ce 35 09 6e b5 4c d0 0f 81 b2 11 6a 57 f5 d2 56 0b 9a 7a a4 aa 3a cb 82 70 af 40 73 92 f3 7b e2 84 c9 c6 f6 a5 c3 ec 0b ca ea cf e3 6d 1d 73 0e 0d 69 06 fa 22 4a 36 e2 60 b8 c4 36 23 b9 c9 0b 48 ac 8d 06 8d 84 53 f4 49 8c 6c 1f d4 dd 69 93 9a 40 10 06 e0 ee aa 19 50 04 3c 00 01 0f 50 cb bb 74 3d b3 f9 ff ff 2c 67 85 24 84 ed 19 1a 90 3c 9f 93 d4 e6 15 b7 c7 9e 9e 71 d5 c5 3c 31 9d 9b 9c f2 36 f0 9e 6b d4 37 b9 fd 27 b1 c9 79 fe 51 b3 76 c7 14 d8 a4 39 ee a2 b6 67 fa 3f c4 96 3c 72 99 2d c3 4e 75 ff fc 5c 3b b9 c0 6c Data Ascii: !]34x>BDv}~tNlCx,i)#T6p^OVPkkca"5nLjWVz:p@s{msi"J6`6#HSIli@P<Pt=,g$<q<16k7'yQv9g?<r-Nu\;l
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: 7b 61 22 81 12 1a f8 11 a3 07 84 de 12 b1 ae d8 e8 d2 c0 27 cd ed e9 ef bd 3e 61 9f 72 03 e2 c4 8e 9e e6 72 fd dd c7 5a 63 23 3e 9c 33 f5 46 c5 db 54 c6 f9 c3 6b b0 63 1f 0b d0 1f 0e 93 2b 62 2d b1 d1 a5 81 af e3 51 57 66 8b 85 d7 29 ce cd 22 06 43 74 4b 01 3f 36 b2 07 cf 17 6d 7c 54 e0 6f 22 ad f7 29 dd f8 3a d8 88 15 c5 76 47 5a d6 e6 6b f6 96 00 b1 cc 2a 0e b5 f3 2e ee 29 5d 0a 68 67 c5 d8 e0 7d 8d 24 4b ad 93 c6 bf 8c 31 1f 46 af e8 74 89 6e 29 f0 54 fe 9f 8e 24 62 23 5f 85 fc 6e 36 9f 74 7c d4 e4 3b 12 80 da 79 37 e6 92 77 da 39 5b 70 11 b1 d1 cb bf fc 86 19 57 32 c5 12 a6 c9 87 67 f6 55 36 2c e5 dc c0 0c b9 bc a7 63 cb 2a 0c 29 70 f9 d7 96 69 cb 4e b0 16 6e b1 d0 db e3 a6 8d 19 62 c5 40 c6 a6 ff 20 3c 7b bc 51 a4 d2 4e 29 e4 75 ba f8 0d 39 8c 91 5e Data Ascii: {a"'>arrZc#>3FTkc+b-QWf)"CtK?6m\|To"):vGZk.)]hg}$K1Ftn)T$b#_n6t\|;y7w9[pW2gU6,c)piNnb@ <{QN)u9^
2024-01-10 21:52:45 UTC	66	IN	Data Raw: c3 d6 11 36 6c 31 6c 1d 61 c3 16 c3 d6 11 b6 63 b6 39 e7 a5 ad 16 19 b5 83 98 e9 c7 bc ed 8c 6c 8c f1 68 ab 8f 6c b1 dd da 0a db 29 db 0b d4 03 11 34 31 81 43 6f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 6l1lac9lhl)41CoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.16	50027	139.45.197.151	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:45 UTC	2131	OUT	GET /contents/s/2d/3f/7f/35d1f144fa688a67ba834d0931/0100657458245.jpeg HTTP/1.1 Host: interstitial-08.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26bag%3DydU9kaAfa6I%3D%26ruid%3Dab37d699-010f-450d-8692-ddfdc6930388%26os%3Dwindows%26os_version%3D10.0.0%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fconvert%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D984%26cw%3D1263%26wiw%3D1280%26wih%3D907%26wfc%3D3%26sah%3D984%26drf%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fsearch%252F%26hil%3D1%26ist%3D0%26os%3Dwindows%26os_version%3D10.0.0%26tbc%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:45 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:45 GMT Content-Type: image/jpeg Content-Length: 53472 Last-Modified: Thu, 31 Jan 2019 11:14:34 GMT Connection: close Vary: Accept-Encoding ETag: "5c52d89a-d0e0" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Accept-Ranges: bytes
2024-01-10 21:52:45 UTC	15734	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 08 ff c4 00 52 10 00 02 01 03 03 02 04 03 06 03 05 03 09 05 05 09 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 b1 23 42 c1 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("R!1AQa"q2#B
2024-01-10 21:52:45 UTC	16384	IN	Data Raw: d3 4f 82 9f 0c 98 9e 07 b1 68 e2 94 c6 1d 8f 20 72 7a f0 5b d3 90 0f 14 5b cd 35 d5 3c c3 b4 3b 8d c5 57 24 02 73 c0 27 ad 48 d8 58 59 97 82 59 84 ae ac 0b 06 66 c6 e3 db 81 c8 e3 9e 49 a9 1b d6 b4 08 e0 61 11 7b 29 ce d3 9e 83 d7 8e b5 83 9b be 0d 54 6d 5b 65 22 48 37 61 18 7c f9 c0 cf ad 35 6d d0 9c b6 41 53 90 d8 f7 a9 bb b5 89 a6 70 ae 1c 01 92 71 4d 5d 37 2b 6e 19 5a dd 48 c9 c4 6d 6f 31 46 84 12 4a ab 33 1e e0 e7 14 79 a3 2c 0e d0 49 ce 08 14 97 90 52 4e 4e 57 db a6 29 45 90 c6 dc 73 92 5b e9 d2 80 5d 53 1b 45 19 33 28 52 06 7a 7b d1 e5 84 c2 e4 bb 10 41 00 ed 3c 8a 12 21 47 ca f1 c6 72 29 f9 64 b9 55 72 9f 33 28 57 07 d8 9a 2c 95 1b e0 4e c6 77 b1 bb 13 db ce db 78 2a c0 f2 08 3d f3 d4 7b 1e b5 a3 e8 bf 13 23 88 43 14 d0 c7 13 1e 0e 06 e2 ed ea 58 Data Ascii: Oh rz[[5<;W$s'HXYYfIa{)Tm[e"H7a\|5mASpqM]7+nZHmo1FJ3y,IRNNW)Es[]SE3(Rz{A<!Gr)dUr3(W,Nwx*={#CX
2024-01-10 21:52:45 UTC	16384	IN	Data Raw: e5 cf 4f 71 8e dd cd 64 e4 93 05 d1 31 6d 85 bb 46 81 e2 46 59 4c 84 b3 1f 52 47 03 9a 9a d4 ee b5 1b ab 72 96 77 51 e1 be 57 0c 38 fd 73 55 4b 5b 52 23 62 ae 64 65 1d 86 42 fd 69 e1 96 24 8d 59 26 79 24 ec 83 e5 e7 3d 49 f4 ac 27 91 f4 99 9b 82 6e d8 22 b9 ba 81 cc 17 12 31 23 24 aa ed da 33 d0 e0 54 b5 9c e2 ed 15 26 8a 41 8c 28 66 50 a4 9c fb 36 4e 7e 95 0e d7 f9 52 56 15 0f fa 0a 7b 6b 78 89 18 12 38 12 60 97 6c 60 e6 b0 9b 6d 74 2a 11 d5 21 92 d5 d9 66 cb 46 49 21 be f1 67 24 7a 70 00 02 a2 83 90 4e d0 3a e0 81 53 97 77 a9 3c 6a 83 05 70 79 3d b8 e4 fe 02 a1 2e c2 67 11 e7 68 1c 00 69 e3 7c 53 18 93 46 b2 0d b9 05 8e 3e 63 d0 57 16 3c 1e d8 cf fa e2 91 50 4e 42 b8 dc df 28 07 24 e7 d7 1e 95 d8 9a 55 0a ad 92 46 0e 71 fb d6 d4 2a 26 f4 4d 5a e7 48 97 Data Ascii: Oqd1mFFYLRGrwQW8sUK[R#bdeBi$Y&y$=I'n"1#$3T&A(fP6N~RV{kx8`l`mt!fFI!g$zpN:Sw<jpy=.ghi\|SF>cW<PNB($UFq&MZH
2024-01-10 21:52:45 UTC	4970	IN	Data Raw: 4a 3c a0 e7 6a 6d 04 82 42 b6 01 c1 cd 76 69 12 64 90 32 30 57 6d c7 04 71 ec 32 3d aa 92 62 23 b2 c4 01 81 c0 ce 47 07 ad 71 81 31 82 bc 90 79 1e a6 ac 3a 46 9f 73 ab 4e e9 a7 59 cb 34 ca 9b 98 ae 38 1d 39 24 d3 36 84 42 f2 db dd 09 63 68 dc ab 46 57 69 52 0f 20 d6 6a 49 b7 14 f9 45 bc 52 da a4 d7 0f c9 0f 6e d8 94 12 32 01 c9 e7 a0 a5 1d 76 95 24 8c 9c e7 8e 9c d4 a4 bf 66 ea 9b 15 f1 80 59 48 c8 a2 c9 1d bc 91 6d 8c 44 ac 06 ed dc fd ef 4f a6 2a a9 91 44 70 52 c3 24 81 90 54 8c 73 9a 72 4a aa b0 27 e6 21 71 4e da 3b 5c 7f 0c 21 1b ba 07 c6 01 14 83 5a a6 d6 d8 46 ee c4 b0 ce 3a 0c d2 0b a1 29 0e dd c0 8f 97 a7 1d b9 e2 8b 81 e5 83 dc 54 88 b2 56 b7 24 31 c0 c6 4f 19 27 e9 48 c1 a7 ef 2d 82 fc 0c f2 29 09 5d 8c d7 0c 18 33 80 d8 dc 33 ea 2b 90 16 89 b6 Data Ascii: J<jmBvid20Wmq2=b#Gq1y:FsNY489$6BchFWiR jIERn2v$fYHmDO*DpR$TsrJ'!qN;\!ZF:)TV$1O'H-)]33+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.16	50028	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:45 UTC	366	OUT	GET /pfe/current/defaultSkin.min.js HTTP/1.1 Host: ibrapush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:45 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:45 GMT Content-Type: application/javascript Content-Length: 57187 Last-Modified: Mon, 27 Nov 2023 13:38:02 GMT Connection: close ETag: "65649bba-df63" Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Accept-Ranges: bytes
2024-01-10 21:52:45 UTC	16059	IN	Data Raw: 7b 22 69 66 72 61 6d 65 22 3a 7b 0a 09 22 64 65 66 61 75 6c 74 73 22 3a 7b 22 69 63 6f 6e 22 3a 22 22 7d 2c 0a 09 22 68 74 6d 6c 22 3a 22 3c 68 74 6d 6c 20 6c 61 6e 67 3d 5c 22 65 6e 5c 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 5c 22 55 54 46 2d 38 5c 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 5c 22 72 6f 62 6f 74 73 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 6e 6f 69 6e 64 65 78 5c 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 5c 22 76 69 65 77 70 6f 72 74 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 5c 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 5c 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: {"iframe":{"defaults":{"icon":""},"html":"<html lang=\"en\"><head><meta charset=\"UTF-8\"><meta name=\"robots\" content=\"noindex\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><meta http-equiv=\"X-UA-Compatible\" content=
2024-01-10 21:52:45 UTC	16384	IN	Data Raw: 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 73 63 2e 73 63 2d 2d 64 65 73 6b 74 6f 70 20 2e 73 63 5f 5f 73 77 5f 5f 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 5c 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 79 4e 43 49 67 61 47 56 70 5a 32 68 30 50 53 49 79 4e 43 49 2b 50 48 42 68 64 47 67 67 5a 44 30 69 54 54 45 79 49 44 49 79 59 7a 45 75 4d 53 41 77 49 44 49 74 4c 6a 6b 67 4d 69 30 79 61 43 30 30 59 54 49 67 4d 69 41 77 49 44 41 67 4d 43 41 79 49 Data Ascii: rflow:ellipsis;overflow:hidden}.sc.sc--desktop .sc__sw__icon{background-image:url(\"data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIyNCIgaGVpZ2h0PSIyNCI+PHBhdGggZD0iTTEyIDIyYzEuMSAwIDItLjkgMi0yaC00YTIgMiAwIDAgMCAyI
2024-01-10 21:52:45 UTC	16384	IN	Data Raw: 74 75 72 6e 20 65 3f 53 74 72 69 6e 67 28 74 68 69 73 2e 67 65 74 42 72 6f 77 73 65 72 28 29 2e 6e 61 6d 65 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 5c 22 5c 22 3a 74 68 69 73 2e 67 65 74 42 72 6f 77 73 65 72 28 29 2e 6e 61 6d 65 7c 7c 5c 22 5c 22 7d 7d 2c 7b 6b 65 79 3a 5c 22 67 65 74 42 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 5c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 42 72 6f 77 73 65 72 28 29 2e 76 65 72 73 69 6f 6e 7d 7d 2c 7b 6b 65 79 3a 5c 22 67 65 74 4f 53 5c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 6f 73 3f 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 6f 73 3a 74 68 69 73 2e 70 Data Ascii: turn e?String(this.getBrowser().name).toLowerCase()\|\|\"\":this.getBrowser().name\|\|\"\"}},{key:\"getBrowserVersion\",value:function(){return this.getBrowser().version}},{key:\"getOS\",value:function(){return this.parsedResult.os?this.parsedResult.os:this.p
2024-01-10 21:52:45 UTC	8360	IN	Data Raw: 22 29 5b 30 5d 29 3b 72 65 74 75 72 6e 5c 22 61 6e 64 72 6f 69 64 5c 22 3d 3d 3d 65 2e 67 65 74 4f 53 4e 61 6d 65 28 21 30 29 26 26 74 3e 3d 33 7d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 73 7d 7d 7d 2c 7b 74 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5c 22 61 6e 64 72 6f 69 64 5c 22 3d 3d 3d 65 2e 67 65 74 4f 53 4e 61 6d 65 28 21 30 29 7d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 61 7d 7d 7d 2c 7b 74 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5c 22 6d 61 63 6f 73 5c 22 3d 3d 3d 65 2e 67 65 74 4f 53 4e 61 6d 65 28 21 30 29 7d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: ")[0]);return\"android\"===e.getOSName(!0)&&t>=3},describe:function(){return{type:s}}},{test:function(e){return\"android\"===e.getOSName(!0)},describe:function(){return{type:a}}},{test:function(e){return\"macos\"===e.getOSName(!0)},describe:function(){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.16	50031	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:45 UTC	602	OUT	POST /custom HTTP/1.1 Host: ibrapush.com Connection: keep-alive Content-Length: 388 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:45 UTC	388	OUT	Data Raw: 7b 22 7a 6f 6e 65 5f 69 64 22 3a 35 35 38 38 36 32 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 34 37 31 22 2c 22 70 75 62 5f 7a 6f 6e 65 5f 69 64 22 3a 35 35 38 38 36 32 34 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 32 35 32 61 61 63 65 66 2d 64 33 63 34 2d 34 61 33 66 2d 39 32 32 37 2d 38 35 34 31 64 65 38 34 31 35 38 65 22 2c 22 6f 61 69 64 22 3a 22 65 32 61 37 62 63 31 39 39 38 38 30 34 61 34 35 62 30 39 37 35 66 36 37 39 36 36 33 31 37 34 62 22 2c 22 69 70 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 32 22 2c 22 67 65 6f 22 3a 22 75 73 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 76 39 2e 77 77 77 2d 79 74 6d 70 34 2e 63 6f 6d 2f 63 6f 6e 76 65 72 74 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 76 39 2e 77 77 77 2d 79 74 6d Data Ascii: {"zone_id":5588624,"sw_version":"3.1.471","pub_zone_id":5588624,"trace_id":"252aacef-d3c4-4a3f-9227-8541de84158e","oaid":"e2a7bc1998804a45b0975f679663174b","ip":"102.165.48.42","geo":"us","location":"https://v9.www-ytmp4.com/convert/","domain":"v9.www-ytm
2024-01-10 21:52:45 UTC	455	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:45 GMT Content-Type: application/json; charset=utf-8 Content-Length: 39 Connection: close X-Trace-Id: d926da2f7662daf8acfe3991af85a2ea Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-01-10 21:52:45 UTC	39	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":"","message":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.16	50032	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:45 UTC	1497	OUT	GET /15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A1%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A3.379%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1 Host: cameesse.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:45 UTC	830	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 10 Jan 2024 21:52:45 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: 0d7b2c284f9c72928876e0817e0f298e Access-Control-Expose-Headers: X-Sc Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:45 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:52:45 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.16	50034	104.22.24.116	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:45 UTC	408	OUT	GET /interstital/templates/inapp/Players/_gen-carousel-3d/images/audible.png HTTP/1.1 Host: littlecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:45 UTC	744	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:45 GMT Content-Type: image/png Content-Length: 3429 Connection: close Last-Modified: Tue, 05 Dec 2023 12:54:54 GMT Vary: Accept-Encoding ETag: "656f1d9e-d65" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Cache-Control: max-age=3600 CF-Cache-Status: HIT Age: 1787 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8438261d8b0e1775-IAD
2024-01-10 21:52:45 UTC	625	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 36 00 00 01 36 08 03 00 00 00 dc 62 4e 9b 00 00 00 a8 50 4c 54 45 f7 99 1c ff ff ff ea 93 1e ec 93 1e ff fe fb f7 9b 1f ff fc f7 f9 b0 4f f7 9d 23 fe ed d7 ff fa f3 f8 a2 2f fe f0 dc fb c6 7f f9 b5 5a fd e2 bd f8 a4 34 f7 9e 27 fa c3 78 fa be 6f fe f8 f0 fe f2 e2 fb ce 91 f9 b8 60 f8 a6 38 f9 ad 49 fe f5 ea fd e8 cb fb d0 95 fb ca 8a f8 aa 40 f8 a0 2a fd e4 c2 fc d9 ab f8 ab 44 e2 8f 21 fe f7 ec fc d2 9a fb c8 84 fc dd b3 f8 a8 3c f9 b3 55 fa bc 69 f0 95 1d fc df b7 fd e0 ba fe f4 e6 fc d7 a5 fd e6 c7 fa ba 65 fc d5 a2 fd eb d2 fc db af fd ea cf fa c1 73 fc d4 9f f1 d3 d5 0d 00 00 0c 78 49 44 41 54 78 da ec d4 b1 0d 03 31 10 03 41 41 2a 45 a1 fa ef cf 76 6e 06 fa e0 c1 60 b6 84 c1 1d c7 de 7b ea aa Data Ascii: PNGIHDR66bNPLTEO#/Z4'xo`8I@D!<UiesxIDATx1AAEvn`{
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: e1 21 86 d6 a5 5d 15 33 1b b1 34 78 98 b5 3e 42 e7 44 cc 76 16 ad 7d 7e 74 1e 4e bc 6c c4 1a c3 c3 cd f5 d3 ff 12 e1 b2 b9 43 78 8a f1 c9 8d 13 2c 1b cb e1 69 86 29 fa 23 54 36 b5 c0 70 05 5e 4f 56 1b 1e 50 6b 6b 18 06 63 b2 61 b8 19 d5 9d 22 ce 35 09 6e b5 4c d0 0f 81 b2 11 6a 57 f5 d2 56 0b 9a 7a a4 aa 3a cb 82 70 af 40 73 92 f3 7b e2 84 c9 c6 f6 a5 c3 ec 0b ca ea cf e3 6d 1d 73 0e 0d 69 06 fa 22 4a 36 e2 60 b8 c4 36 23 b9 c9 0b 48 ac 8d 06 8d 84 53 f4 49 8c 6c 1f d4 dd 69 93 9a 40 10 06 e0 ee aa 19 50 04 3c 00 01 0f 50 cb bb 74 3d b3 f9 ff ff 2c 67 85 24 84 ed 19 1a 90 3c 9f 93 d4 e6 15 b7 c7 9e 9e 71 d5 c5 3c 31 9d 9b 9c f2 36 f0 9e 6b d4 37 b9 fd 27 b1 c9 79 fe 51 b3 76 c7 14 d8 a4 39 ee a2 b6 67 fa 3f c4 96 3c 72 99 2d c3 4e 75 ff fc 5c 3b b9 c0 6c Data Ascii: !]34x>BDv}~tNlCx,i)#T6p^OVPkkca"5nLjWVz:p@s{msi"J6`6#HSIli@P<Pt=,g$<q<16k7'yQv9g?<r-Nu\;l
2024-01-10 21:52:45 UTC	1369	IN	Data Raw: 7b 61 22 81 12 1a f8 11 a3 07 84 de 12 b1 ae d8 e8 d2 c0 27 cd ed e9 ef bd 3e 61 9f 72 03 e2 c4 8e 9e e6 72 fd dd c7 5a 63 23 3e 9c 33 f5 46 c5 db 54 c6 f9 c3 6b b0 63 1f 0b d0 1f 0e 93 2b 62 2d b1 d1 a5 81 af e3 51 57 66 8b 85 d7 29 ce cd 22 06 43 74 4b 01 3f 36 b2 07 cf 17 6d 7c 54 e0 6f 22 ad f7 29 dd f8 3a d8 88 15 c5 76 47 5a d6 e6 6b f6 96 00 b1 cc 2a 0e b5 f3 2e ee 29 5d 0a 68 67 c5 d8 e0 7d 8d 24 4b ad 93 c6 bf 8c 31 1f 46 af e8 74 89 6e 29 f0 54 fe 9f 8e 24 62 23 5f 85 fc 6e 36 9f 74 7c d4 e4 3b 12 80 da 79 37 e6 92 77 da 39 5b 70 11 b1 d1 cb bf fc 86 19 57 32 c5 12 a6 c9 87 67 f6 55 36 2c e5 dc c0 0c b9 bc a7 63 cb 2a 0c 29 70 f9 d7 96 69 cb 4e b0 16 6e b1 d0 db e3 a6 8d 19 62 c5 40 c6 a6 ff 20 3c 7b bc 51 a4 d2 4e 29 e4 75 ba f8 0d 39 8c 91 5e Data Ascii: {a"'>arrZc#>3FTkc+b-QWf)"CtK?6m\|To"):vGZk.)]hg}$K1Ftn)T$b#_n6t\|;y7w9[pW2gU6,c)piNnb@ <{QN)u9^
2024-01-10 21:52:45 UTC	66	IN	Data Raw: c3 d6 11 36 6c 31 6c 1d 61 c3 16 c3 d6 11 b6 63 b6 39 e7 a5 ad 16 19 b5 83 98 e9 c7 bc ed 8c 6c 8c f1 68 ab 8f 6c b1 dd da 0a db 29 db 0b d4 03 11 34 31 81 43 6f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 6l1lac9lhl)41CoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.16	50033	139.45.197.151	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:45 UTC	2131	OUT	GET /contents/s/54/58/11/b0a815692a6ca16dd9a46924ab/0933414948049.jpeg HTTP/1.1 Host: interstitial-08.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26bag%3DydU9kaAfa6I%3D%26ruid%3Dab37d699-010f-450d-8692-ddfdc6930388%26os%3Dwindows%26os_version%3D10.0.0%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fconvert%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D984%26cw%3D1263%26wiw%3D1280%26wih%3D907%26wfc%3D3%26sah%3D984%26drf%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fsearch%252F%26hil%3D1%26ist%3D0%26os%3Dwindows%26os_version%3D10.0.0%26tbc%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:46 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:45 GMT Content-Type: image/jpeg Content-Length: 14651 Last-Modified: Wed, 15 Aug 2018 10:56:50 GMT Connection: close Vary: Accept-Encoding ETag: "5b7406f2-393b" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Accept-Ranges: bytes
2024-01-10 21:52:46 UTC	14651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 15 0e 0c 0b 0b 0c 19 12 13 0f 15 1e 1b 20 1f 1e 1b 1d 1d 21 25 30 29 21 23 2d 24 1d 1d 2a 39 2a 2d 31 33 36 36 36 20 28 3b 3f 3a 34 3e 30 35 36 33 ff db 00 43 01 09 09 09 0c 0b 0c 18 0e 0e 18 33 22 1d 22 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 ff c2 00 11 08 01 63 01 63 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 45 22 40 38 02 98 Data Ascii: JFIFC !%0)!#-$9-13666 (;?:4>0563C3""33333333333333333333333333333333333333333333333333ccE"@8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.16	50036	172.67.10.98	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:45 UTC	597	OUT	GET /interstital/templates/inapp/Players/_gen-carousel-3d/js/script.js?v=1518177503494 HTTP/1.1 Host: littlecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://interstitial-08.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:46 UTC	743	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:46 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 05 Dec 2023 12:54:54 GMT Vary: Accept-Encoding ETag: W/"656f1d9e-58b" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Cache-Control: max-age=3600 CF-Cache-Status: HIT Age: 2026 Server: cloudflare CF-RAY: 843826206d2572ed-IAD
2024-01-10 21:52:46 UTC	626	IN	Data Raw: 35 38 62 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 69 74 65 6d 22 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 4d 61 6e 79 28 22 6c 65 66 74 22 2c 22 63 65 6e 74 65 72 22 2c 22 72 69 67 68 74 22 2c 22 76 69 73 69 62 6c 65 22 29 7d 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 69 74 65 6d 3a 6e 74 68 2d 63 68 69 6c 64 28 22 2b 28 74 3c 3d 31 3f 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 69 74 65 6d 22 29 2e 6c Data Ascii: 58b"use strict";!function(e,t){function l(e,t){Array.prototype.slice.call(e.querySelectorAll(".item")).forEach(function(e){e.classList.removeMany("left","center","right","visible")}),e.querySelector(".item:nth-child("+(t<=1?e.querySelectorAll(".item").l
2024-01-10 21:52:46 UTC	800	IN	Data Raw: 22 29 26 26 28 72 2e 70 6f 72 74 72 61 69 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 6c 6f 61 64 69 6e 67 22 29 2c 6c 28 72 2e 70 6f 72 74 72 61 69 74 2c 65 2e 70 29 29 2c 65 2e 70 2b 2b 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 3e 72 2e 70 6f 72 74 72 61 69 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 69 74 65 6d 22 29 2e 6c 65 6e 67 74 68 26 26 28 65 2e 70 3d 31 29 2c 6c 28 72 2e 70 6f 72 74 72 61 69 74 2c 65 2e 70 29 2c 65 2e 70 2b 2b 7d 2c 33 65 33 29 29 2c 72 2e 6c 61 6e 64 73 63 61 70 65 26 26 28 72 2e 6c 61 6e 64 73 63 61 70 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 6c 6f 61 64 69 6e 67 22 29 26 26 28 72 2e 6c 61 6e 64 73 63 61 70 65 2e 63 6c 61 73 73 Data Ascii: ")&&(r.portrait.classList.remove("loading"),l(r.portrait,e.p)),e.p++,setInterval(function(){e.p>r.portrait.querySelectorAll(".item").length&&(e.p=1),l(r.portrait,e.p),e.p++},3e3)),r.landscape&&(r.landscape.classList.contains("loading")&&(r.landscape.class
2024-01-10 21:52:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.16	50035	139.45.197.250	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:46 UTC	342	OUT	GET /custom HTTP/1.1 Host: ibrapush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:46 UTC	432	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close X-Trace-Id: a2f54f276f086ba9ffc19d66c2f26e96 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-01-10 21:52:46 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 77 72 6f 6e 67 20 72 65 71 75 65 73 74 22 7d 0a Data Ascii: {"status":false,"code":"error","message":"wrong request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.16	50037	139.45.197.151	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:46 UTC	2131	OUT	GET /contents/s/4e/61/84/4a7532ee6d30450abd6bb2a1da/0350025199145.jpeg HTTP/1.1 Host: interstitial-08.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26bag%3DydU9kaAfa6I%3D%26ruid%3Dab37d699-010f-450d-8692-ddfdc6930388%26os%3Dwindows%26os_version%3D10.0.0%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fconvert%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D984%26cw%3D1263%26wiw%3D1280%26wih%3D907%26wfc%3D3%26sah%3D984%26drf%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fsearch%252F%26hil%3D1%26ist%3D0%26os%3Dwindows%26os_version%3D10.0.0%26tbc%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:46 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:46 GMT Content-Type: image/jpeg Content-Length: 35607 Last-Modified: Tue, 17 Jul 2018 10:46:08 GMT Connection: close Vary: Accept-Encoding ETag: "5b4dc8f0-8b17" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Accept-Ranges: bytes
2024-01-10 21:52:46 UTC	15734	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 09 07 06 0a 09 08 09 0b 0b 0a 0c 0f 19 10 0f 0e 0e 0f 1e 16 17 12 19 24 20 26 25 23 20 23 22 28 2d 39 30 28 2a 36 2b 22 23 32 44 32 36 3b 3d 40 40 40 26 30 46 4b 45 3e 4a 39 3f 40 3d ff db 00 43 01 0b 0b 0b 0f 0d 0f 1d 10 10 1d 3d 29 23 29 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d ff c2 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 02 01 08 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 d9 80 00 00 00 00 Data Ascii: JFIFC$ &%# #"(-90(*6+"#2D26;=@@@&0FKE>J9?@=C=)#)=================================================="
2024-01-10 21:52:46 UTC	16384	IN	Data Raw: f2 27 5a 4a 4a 1a 4a d2 94 9d 28 69 28 7b 13 a5 27 62 52 50 d0 d2 7d cf ff c4 00 44 10 00 01 02 02 06 05 0a 02 08 05 04 03 01 00 00 00 01 00 02 03 11 10 12 21 31 41 51 04 13 22 61 71 20 32 40 42 81 91 a1 b1 c1 d1 52 f0 14 23 30 62 72 92 a2 e1 50 82 b2 c2 f1 05 33 d2 e2 43 53 63 f2 ff da 00 08 01 01 00 0d 3f 01 e8 3e 69 c6 ab 78 db 34 6d 00 1f 55 2b 4f 59 0b cd c8 5e e7 ae e5 2c 28 f8 19 87 6a 16 34 2f 14 45 d5 a7 24 0d 81 cd 9b 7b 32 4e bb f8 8b 36 df e8 9d 61 3f d4 53 1d 50 21 6b 09 c7 72 6f 54 db 34 04 ad d8 57 09 21 f1 63 c5 75 9d 8b 93 86 c8 47 7d aa fe 08 e2 8f c4 ab 1f e2 32 9d 63 9a 87 0e a3 0f 1a aa 2b e7 f3 d9 2e f5 77 6a 16 66 b2 9c bc d0 c2 91 72 de 87 8a 37 27 09 8a d6 2b cf 40 c9 05 9c d1 cc ac e7 62 39 95 b9 6f 28 e3 35 b8 cd 65 59 64 b2 e8 Data Ascii: 'ZJJJ(i({'bRP}D!1AQ"aq 2@BR#0brP3CSc?>ix4mU+OY^,(j4/E${2N6a?SP!kroT4W!cuG}2c+.wjfr7'+@b9o(5eYd
2024-01-10 21:52:46 UTC	3489	IN	Data Raw: 99 56 dc f2 c3 dd 11 aa 48 f6 08 41 7d 6f a9 ce 85 a7 31 eb 15 a9 76 fe 29 85 82 19 96 86 25 df a7 e1 87 e1 94 10 40 b8 7f e6 e1 67 81 5a 36 c7 79 37 f4 bb bd 82 83 c4 1a 97 7f 91 ee 18 1a bb c7 ca 74 c5 ba 9e 6c b5 0d b1 d9 36 67 8e 59 69 7a 3a d4 41 d7 5c 47 33 83 51 2d 18 8d f7 a9 4a a2 0c 2d 90 dc f3 e2 08 f2 c0 64 d4 7e 54 df bb 51 34 26 00 09 c9 04 66 db e6 d2 e2 b6 c1 d6 a2 f5 31 f5 ef 98 8f 53 17 5f 72 fd c5 92 dc ee 77 fc 71 0b d9 6a 57 43 92 27 3b 95 62 3b b8 82 32 dd 90 1b 86 f0 4a 3f 08 41 7e bf 88 c0 f7 82 06 08 20 82 08 10 ff 00 c9 b6 a5 8d 1e 61 76 b7 5f 24 62 5d ab 57 9c b6 cc 24 18 0f 15 2e 73 04 8e 75 0d 5c 43 f3 61 7e 08 e2 88 bf 8b 5e b0 42 b8 60 22 0c 1a 8e a3 29 29 1e a2 72 60 45 df 66 3e ee 08 f9 8d 61 bd 59 6b bb 48 96 16 f9 de 25 Data Ascii: VHA}o1v)%@gZ6y7tl6gYiz:A\G3Q-J-d~TQ4&f1S_rwqjWC';b;2J?A~ av_$b]W$.su\Ca~^B`"))r`Ef>aYkH%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.16	50041	172.67.10.98	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:46 UTC	646	OUT	GET /interstital/templates/inapp/Players/_gen-carousel-3d/images/player.png HTTP/1.1 Host: littlecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interstitial-08.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:46 UTC	745	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:46 GMT Content-Type: image/png Content-Length: 28527 Connection: close Last-Modified: Tue, 05 Dec 2023 12:54:54 GMT Vary: Accept-Encoding ETag: "656f1d9e-6f6f" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Cache-Control: max-age=3600 CF-Cache-Status: HIT Age: 579 Accept-Ranges: bytes Server: cloudflare CF-RAY: 843826230cc238fb-IAD
2024-01-10 21:52:46 UTC	624	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b6 00 00 00 4c 08 06 00 00 01 76 70 a2 2d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 Data Ascii: PNGIHDRLvp-pHYsMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R
2024-01-10 21:52:46 UTC	1369	IN	Data Raw: d2 76 00 40 7e f3 2d 8c 1a 0b 91 00 10 67 34 32 79 f7 00 00 93 bf f9 8f 40 2b 01 00 cd 97 a4 e3 00 00 bc e8 18 5c a8 94 17 4c c6 08 00 00 44 a0 81 2a b0 41 07 0c c1 14 ac c0 0e 9c c1 1d bc c0 17 02 61 06 44 40 0c 24 c0 3c 10 42 06 e4 80 1c 0a a1 18 96 41 19 54 c0 3a d8 04 b5 b0 03 1a a0 11 9a e1 10 b4 c1 31 38 0d e7 e0 12 5c 81 eb 70 17 06 60 18 9e c2 18 bc 86 09 04 41 c8 08 13 61 21 3a 88 11 62 8e d8 22 ce 08 17 99 8e 04 22 61 48 34 92 80 a4 20 e9 88 14 51 22 c5 c8 72 a4 02 a9 42 6a 91 5d 48 23 f2 2d 72 14 39 8d 5c 40 fa 90 db c8 20 32 8a fc 8a bc 47 31 94 81 b2 51 03 d4 02 75 40 b9 a8 1f 1a 8a c6 a0 73 d1 74 34 0f 5d 80 96 a2 6b d1 1a b4 1e 3d 80 b6 a2 a7 d1 4b e8 75 74 00 7d 8a 8e 63 80 d1 31 0e 66 8c d9 61 5c 8c 87 45 60 89 58 1a 26 c7 16 63 e5 58 35 Data Ascii: v@~-g42y@+\LD*AaD@$<BAT:18\p`Aa!:b""aH4 Q"rBj]H#-r9\@ 2G1Qu@st4]k=Kut}c1fa\E`X&cX5
2024-01-10 21:52:46 UTC	1369	IN	Data Raw: 52 2b 79 91 19 92 b9 23 f3 4d 56 44 d6 de ac cf d9 71 d9 2d 39 94 9c 94 9c a3 52 0d 69 96 b4 2b d7 30 b7 28 b7 4f 66 2b 2b 93 0d e4 79 e6 6d ca 1b 93 87 ca f7 e4 23 f9 73 f3 db 15 6c 85 4c d1 a3 b4 52 ae 50 0e 16 4c 2f a8 2b 78 5b 18 5b 78 b8 48 bd 48 5a d4 33 df 66 fe ea f9 23 0b 82 16 7c bd 90 b0 50 b8 b0 b3 d8 b8 78 59 f1 e0 22 bf 45 bb 16 23 8b 53 17 77 2e 31 5d 52 ba 64 78 69 f0 d2 7d cb 68 cb b2 96 fd 50 e2 58 52 55 f2 6a 79 dc f2 8e 52 83 d2 a5 a5 43 2b 82 57 34 95 a9 94 c9 cb 6e ae f4 5a b9 63 15 61 95 64 55 ef 6a 97 d5 5b 56 7f 2a 17 95 5f ac 70 ac a8 ae f8 b0 46 b8 e6 e2 57 4e 5f d5 7c f5 79 6d da da de 4a b7 ca ed eb 48 eb a4 eb 6e ac f7 59 bf af 4a bd 6a 41 d5 d0 86 f0 0d ad 1b f1 8d e5 1b 5f 6d 4a de 74 a1 7a 6a f5 8e cd b4 cd ca cd 03 35 61 Data Ascii: R+y#MVDq-9Ri+0(Of++ym#slLRPL/+x[[xHHZ3f#\|PxY"E#Sw.1]Rdxi}hPXRUjyRC+W4nZcadUj[V*_pFWN_\|ymJHnYJjA_mJtzj5a
2024-01-10 21:52:46 UTC	1369	IN	Data Raw: 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 31 38 2d 30 32 2d 30 38 54 32 30 3a 31 34 3a 33 39 2b 30 33 3a 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 32 30 31 38 2d 30 32 2d 30 38 54 32 30 3a 31 34 3a 33 39 2b 30 33 3a 30 Data Ascii: " xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2017 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2018-02-08T20:14:39+03:00</xmp:CreateDate> <xmp:MetadataDate>2018-02-08T20:14:39+03:0
2024-01-10 21:52:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 3c 2f 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 2f 3c 2f 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 53 65 71 3e 0a 20 20 20 20 20 20 20 20 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 20 20 20 20 20 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 0a 20 20 20 20 20 20 20 Data Ascii: <stEvt:softwareAgent>Adobe Photoshop CC 2017 (Windows)</stEvt:softwareAgent> <stEvt:changed>/</stEvt:changed> </rdf:li> </rdf:Seq> </xmpMM:History> <photoshop:DocumentAncestors>
2024-01-10 21:52:46 UTC	1369	IN	Data Raw: 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 39 37 46 42 35 38 39 41 42 36 44 46 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 41 36 35 39 39 30 38 46 34 32 36 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 32 44 35 33 32 39 41 46 45 43 37 45 31 31 31 38 36 33 30 38 36 41 46 34 34 42 35 30 36 30 31 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 41 46 46 42 37 45 39 30 45 46 44 45 31 31 31 41 41 39 45 39 41 35 42 43 31 42 36 44 37 Data Ascii: p.did:018011740720681192B097FB589AB6DF</rdf:li> <rdf:li>xmp.did:05801174072068118DBBFA659908F426</rdf:li> <rdf:li>xmp.did:12D5329AFEC7E111863086AF44B50601</rdf:li> <rdf:li>xmp.did:1AFFB7E90EFDE111AA9E9A5BC1B6D7
2024-01-10 21:52:46 UTC	1369	IN	Data Raw: 74 69 6f 6e 55 6e 69 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 31 3c 2f 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 50 69 78 65 6c 58 44 69 6d 65 6e 73 69 6f 6e 3e 34 33 38 3c 2f 65 78 69 66 3a 50 69 78 65 6c 58 44 69 6d 65 6e 73 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 50 69 78 65 6c 59 44 69 6d 65 6e 73 69 6f 6e 3e 37 36 3c 2f 65 78 69 66 3a 50 69 78 65 6c 59 44 69 6d 65 6e 73 69 6f 6e 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 3c 2f 72 64 66 3a 52 44 46 3e 0a 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: tionUnit> <exif:ColorSpace>1</exif:ColorSpace> <exif:PixelXDimension>438</exif:PixelXDimension> <exif:PixelYDimension>76</exif:PixelYDimension> </rdf:Description> </rdf:RDF></x:xmpmeta>
2024-01-10 21:52:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-01-10 21:52:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-01-10 21:52:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.16	50038	139.45.197.151	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:46 UTC	408	OUT	GET /contents/s/2d/3f/7f/35d1f144fa688a67ba834d0931/0100657458245.jpeg HTTP/1.1 Host: interstitial-08.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:46 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:46 GMT Content-Type: image/jpeg Content-Length: 53472 Last-Modified: Thu, 31 Jan 2019 11:14:34 GMT Connection: close Vary: Accept-Encoding ETag: "5c52d89a-d0e0" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Accept-Ranges: bytes
2024-01-10 21:52:46 UTC	15734	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 08 ff c4 00 52 10 00 02 01 03 03 02 04 03 06 03 05 03 09 05 05 09 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 b1 23 42 c1 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("R!1AQa"q2#B
2024-01-10 21:52:46 UTC	16384	IN	Data Raw: d3 4f 82 9f 0c 98 9e 07 b1 68 e2 94 c6 1d 8f 20 72 7a f0 5b d3 90 0f 14 5b cd 35 d5 3c c3 b4 3b 8d c5 57 24 02 73 c0 27 ad 48 d8 58 59 97 82 59 84 ae ac 0b 06 66 c6 e3 db 81 c8 e3 9e 49 a9 1b d6 b4 08 e0 61 11 7b 29 ce d3 9e 83 d7 8e b5 83 9b be 0d 54 6d 5b 65 22 48 37 61 18 7c f9 c0 cf ad 35 6d d0 9c b6 41 53 90 d8 f7 a9 bb b5 89 a6 70 ae 1c 01 92 71 4d 5d 37 2b 6e 19 5a dd 48 c9 c4 6d 6f 31 46 84 12 4a ab 33 1e e0 e7 14 79 a3 2c 0e d0 49 ce 08 14 97 90 52 4e 4e 57 db a6 29 45 90 c6 dc 73 92 5b e9 d2 80 5d 53 1b 45 19 33 28 52 06 7a 7b d1 e5 84 c2 e4 bb 10 41 00 ed 3c 8a 12 21 47 ca f1 c6 72 29 f9 64 b9 55 72 9f 33 28 57 07 d8 9a 2c 95 1b e0 4e c6 77 b1 bb 13 db ce db 78 2a c0 f2 08 3d f3 d4 7b 1e b5 a3 e8 bf 13 23 88 43 14 d0 c7 13 1e 0e 06 e2 ed ea 58 Data Ascii: Oh rz[[5<;W$s'HXYYfIa{)Tm[e"H7a\|5mASpqM]7+nZHmo1FJ3y,IRNNW)Es[]SE3(Rz{A<!Gr)dUr3(W,Nwx*={#CX
2024-01-10 21:52:46 UTC	16384	IN	Data Raw: e5 cf 4f 71 8e dd cd 64 e4 93 05 d1 31 6d 85 bb 46 81 e2 46 59 4c 84 b3 1f 52 47 03 9a 9a d4 ee b5 1b ab 72 96 77 51 e1 be 57 0c 38 fd 73 55 4b 5b 52 23 62 ae 64 65 1d 86 42 fd 69 e1 96 24 8d 59 26 79 24 ec 83 e5 e7 3d 49 f4 ac 27 91 f4 99 9b 82 6e d8 22 b9 ba 81 cc 17 12 31 23 24 aa ed da 33 d0 e0 54 b5 9c e2 ed 15 26 8a 41 8c 28 66 50 a4 9c fb 36 4e 7e 95 0e d7 f9 52 56 15 0f fa 0a 7b 6b 78 89 18 12 38 12 60 97 6c 60 e6 b0 9b 6d 74 2a 11 d5 21 92 d5 d9 66 cb 46 49 21 be f1 67 24 7a 70 00 02 a2 83 90 4e d0 3a e0 81 53 97 77 a9 3c 6a 83 05 70 79 3d b8 e4 fe 02 a1 2e c2 67 11 e7 68 1c 00 69 e3 7c 53 18 93 46 b2 0d b9 05 8e 3e 63 d0 57 16 3c 1e d8 cf fa e2 91 50 4e 42 b8 dc df 28 07 24 e7 d7 1e 95 d8 9a 55 0a ad 92 46 0e 71 fb d6 d4 2a 26 f4 4d 5a e7 48 97 Data Ascii: Oqd1mFFYLRGrwQW8sUK[R#bdeBi$Y&y$=I'n"1#$3T&A(fP6N~RV{kx8`l`mt!fFI!g$zpN:Sw<jpy=.ghi\|SF>cW<PNB($UFq&MZH
2024-01-10 21:52:46 UTC	4970	IN	Data Raw: 4a 3c a0 e7 6a 6d 04 82 42 b6 01 c1 cd 76 69 12 64 90 32 30 57 6d c7 04 71 ec 32 3d aa 92 62 23 b2 c4 01 81 c0 ce 47 07 ad 71 81 31 82 bc 90 79 1e a6 ac 3a 46 9f 73 ab 4e e9 a7 59 cb 34 ca 9b 98 ae 38 1d 39 24 d3 36 84 42 f2 db dd 09 63 68 dc ab 46 57 69 52 0f 20 d6 6a 49 b7 14 f9 45 bc 52 da a4 d7 0f c9 0f 6e d8 94 12 32 01 c9 e7 a0 a5 1d 76 95 24 8c 9c e7 8e 9c d4 a4 bf 66 ea 9b 15 f1 80 59 48 c8 a2 c9 1d bc 91 6d 8c 44 ac 06 ed dc fd ef 4f a6 2a a9 91 44 70 52 c3 24 81 90 54 8c 73 9a 72 4a aa b0 27 e6 21 71 4e da 3b 5c 7f 0c 21 1b ba 07 c6 01 14 83 5a a6 d6 d8 46 ee c4 b0 ce 3a 0c d2 0b a1 29 0e dd c0 8f 97 a7 1d b9 e2 8b 81 e5 83 dc 54 88 b2 56 b7 24 31 c0 c6 4f 19 27 e9 48 c1 a7 ef 2d 82 fc 0c f2 29 09 5d 8c d7 0c 18 33 80 d8 dc 33 ea 2b 90 16 89 b6 Data Ascii: J<jmBvid20Wmq2=b#Gq1y:FsNY489$6BchFWiR jIERn2v$fYHmDO*DpR$TsrJ'!qN;\!ZF:)TV$1O'H-)]33+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.16	50039	139.45.197.151	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:46 UTC	2132	OUT	GET /contents/s/aa/5b/71/730bd1c1e09e51bf17160def9a/01289039865190.jpeg HTTP/1.1 Host: interstitial-08.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interstitial-08.com/?l=9PjAqTQETOzNIxm&cd_meta_crid=21588&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D476053203%26z%3D5588623%26b%3D5362695%26c%3D2755022%26var%3D%26varid%3D0%26d%3Dhttps%253A%252F%252Foovaufty.com%252F%253Fb%253D%257Bbannerid%257D%2526ba%253D1%2526campid%253D%257Bcampaignid%257D%2526did%253D%257Bdeviceid%257D%2526dm%253D0%2526ep%253D1%2526fp%253D0%2526g%253D%257Bgeo%257D%2526i18db%253D1%2526l%253DEf3r9LOIFX3llkF%2526oaid%253D%257Boaid%257D%2526pshr%253D0%2526s%253D%2524%257BSUBID%257D%2526ssk%253D%257Btimestamp_key%257D%2526svar%253D%257Btimestamp%257D%2526vi%253D1%2526vo%253D1%2526z%253D%257Bzoneid%257D%2526tr%253Ddefault%26cln%3D1%26btp%3D7%26rb%3DkAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32%26bag%3DydU9kaAfa6I%3D%26ruid%3Dab37d699-010f-450d-8692-ddfdc6930388%26os%3Dwindows%26os_version%3D10.0.0%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fconvert%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D984%26cw%3D1263%26wiw%3D1280%26wih%3D907%26wfc%3D3%26sah%3D984%26drf%3Dhttps%253A%252F%252Fv9.www-ytmp4.com%252Fsearch%252F%26hil%3D1%26ist%3D0%26os%3Dwindows%26os_version%3D10.0.0%26tbc%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:47 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:46 GMT Content-Type: image/jpeg Content-Length: 50434 Last-Modified: Thu, 31 Jan 2019 11:14:34 GMT Connection: close Vary: Accept-Encoding ETag: "5c52d89a-c502" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Accept-Ranges: bytes
2024-01-10 21:52:47 UTC	15734	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 00 01 02 07 08 ff c4 00 45 10 00 02 01 03 03 02 04 04 04 04 05 02 05 03 03 05 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 22 71 81 91 07 14 32 a1 42 52 b1 c1 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("E!1AQa"q2BR
2024-01-10 21:52:47 UTC	16384	IN	Data Raw: 27 00 72 4d 0b 77 09 6b 88 4e 38 5e b4 b8 e5 4c 33 56 83 b4 69 3c a9 3c b6 03 0c 7a fa 1a 97 52 87 cb b8 62 bf a5 be 21 40 29 c7 39 c1 a6 32 cc 2e 6c 43 1c 6f 8c e0 d2 bb 4e ca c1 aa a0 25 a6 16 9b 1a ca 40 ca 80 89 31 e6 01 f1 0f 87 a6 7d 3d a9 70 6c 51 f6 18 7b 7b 85 53 c8 da d8 aa c1 26 e9 93 c8 da 56 89 fc 93 1c 6a d9 0c 8c 38 65 e8 4f a7 b1 a8 da 29 1b a0 e2 a7 b7 9b 6c 4c 18 12 b9 e4 51 0f 0b b4 4b 32 1c c6 4e de bc 83 8c f3 42 70 70 77 f0 1c 39 14 f4 fd 17 c5 0b ab 31 61 8a ec a9 f4 a3 42 fc 23 35 ca a8 66 c3 54 bb 9a 7a d2 16 4a a5 48 2b 9a d4 73 34 72 ab 0e 19 4e 73 4d 65 58 e1 19 62 01 34 29 58 65 27 a6 7e c6 99 4a d0 28 e7 51 85 11 a1 96 2c 79 73 a6 f0 3f 94 e4 82 3e e2 9b 78 4a e9 7f 36 f6 d2 1c 79 a3 0b 9e 99 14 aa e5 48 b1 80 1c e5 0b 2f ef Data Ascii: 'rMwkN8^L3Vi<<zRb!@)92.lCoN%@1}=plQ{{S&Vj8eO)lLQK2NBppw91aB#5fTzJH+s4rNsMeXb4)Xe'~J(Q,ys?>xJ6yH/
2024-01-10 21:52:47 UTC	16384	IN	Data Raw: 46 88 89 07 0c db 47 38 c0 a7 d6 bf 06 54 9c fa 1a 09 da 31 e5 8f 56 d0 d6 df 19 3b 40 2a 78 20 d5 67 c7 1a 65 84 5a 5a 5f 49 21 8a e4 b0 86 de 35 e9 27 39 39 1d 80 1d e9 f3 ba c3 6c d2 31 3b 42 92 48 eb 8a a6 f8 c5 6e ee ad ed af 6e 08 11 a9 f2 63 89 79 11 82 0b 72 7b 93 8e 6b b0 ee 6b 66 3e 44 5f 46 56 57 8a 36 13 8d 86 80 5a 61 69 1e e6 44 3d c8 cd 7a 32 7a 3c c8 a7 63 6d 39 b6 dc 20 3c 64 8a b1 5b da bc d0 cf 2a 95 0b 16 32 09 00 f2 7b 0e f4 91 52 28 e5 f3 1c e1 89 e1 7d 3d e8 d8 a6 de 08 0c 40 3f bd 79 99 6d ed 1b b1 d2 d3 27 50 49 eb c5 4c 8e e8 41 56 23 dc 1a 80 06 5e 98 35 2c 4c 39 dc 00 c5 4c 6a 19 5c 5c 9f f0 eb 62 c0 93 be 41 93 ff 00 a6 bb d1 ae 77 5d b0 3d e3 71 f7 53 44 6a 96 61 3c 3f 62 d8 01 98 99 0b 67 b3 0f fe 05 41 e1 9b 74 37 b2 bc f8 Data Ascii: FG8T1V;@x geZZ_I!5'99l1;BHnncyr{kkf>D_FVW6ZaiD=z2z<cm9 <d[2{R(}=@?ym'PILAV#^5,L9Lj\\bAw]=qSDja<?bgAt7
2024-01-10 21:52:47 UTC	1932	IN	Data Raw: a0 ad a2 b7 24 11 18 f6 e4 d4 e2 17 0b 9c a8 f6 cd 64 70 f3 93 4b d8 65 02 20 a4 63 6c b2 70 73 d6 a6 82 4f 26 40 64 2c cb 9e 79 e6 a6 8a 1c f1 81 f3 26 ac 17 be 1f b7 b1 8e 07 3a a5 8d d8 90 6e 3f 96 dc c1 47 6c 92 00 c9 a5 ed ba 1b a9 5d 9e 17 77 26 2e 10 72 18 8e 4d 06 c0 ab 30 6e a3 83 9a b3 3d ac 09 90 7c c7 c7 50 08 04 7d 05 0d 71 67 6a db 91 22 0a e4 64 31 26 a8 a2 c5 b4 8a f8 22 b3 83 52 cb 19 8e 56 46 1b 58 1c 1c d6 24 60 73 9a 03 24 70 14 d7 6a 8c dd 01 35 d3 cf 04 5f eb 6a 1e 4b f7 3c 2e 14 7b 50 49 b3 ad 20 93 0b 28 cb 10 2a 23 2a 21 3f c6 68 17 99 db ab 13 5c 66 8a 8b f9 03 9f e8 3a 59 de 51 82 70 be 82 ad 7e 1a 88 c5 62 b9 fd 4c 77 1f 61 da aa 9a 74 26 e2 74 43 d0 9c 9f 95 5e b4 f4 0b 08 3e bc fd 29 26 d2 54 74 77 b6 4f 2b 6d db 96 23 9a 11 Data Ascii: $dpKe clpsO&@d,y&:n?Gl]w&.rM0n=\|P}qgj"d1&"RVFX$`s$pj5_jK<.{PI (#!?h\f:YQp~bLwat&tC^>)&TtwO+m#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.16	50040	139.45.197.151	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:46 UTC	408	OUT	GET /contents/s/54/58/11/b0a815692a6ca16dd9a46924ab/0933414948049.jpeg HTTP/1.1 Host: interstitial-08.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:47 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:46 GMT Content-Type: image/jpeg Content-Length: 14651 Last-Modified: Wed, 15 Aug 2018 10:56:50 GMT Connection: close Vary: Accept-Encoding ETag: "5b7406f2-393b" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Accept-Ranges: bytes
2024-01-10 21:52:47 UTC	14651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 15 0e 0c 0b 0b 0c 19 12 13 0f 15 1e 1b 20 1f 1e 1b 1d 1d 21 25 30 29 21 23 2d 24 1d 1d 2a 39 2a 2d 31 33 36 36 36 20 28 3b 3f 3a 34 3e 30 35 36 33 ff db 00 43 01 09 09 09 0c 0b 0c 18 0e 0e 18 33 22 1d 22 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 ff c2 00 11 08 01 63 01 63 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 45 22 40 38 02 98 Data Ascii: JFIFC !%0)!#-$9-13666 (;?:4>0563C3""33333333333333333333333333333333333333333333333333ccE"@8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.16	50042	104.22.24.116	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:46 UTC	407	OUT	GET /interstital/templates/inapp/Players/_gen-carousel-3d/images/player.png HTTP/1.1 Host: littlecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:47 UTC	746	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:52:47 GMT Content-Type: image/png Content-Length: 28527 Connection: close Last-Modified: Tue, 05 Dec 2023 12:54:54 GMT Vary: Accept-Encoding ETag: "656f1d9e-6f6f" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Cache-Control: max-age=3600 CF-Cache-Status: HIT Age: 2135 Accept-Ranges: bytes Server: cloudflare CF-RAY: 84382625ddfa0947-IAD
2024-01-10 21:52:47 UTC	623	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b6 00 00 00 4c 08 06 00 00 01 76 70 a2 2d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 Data Ascii: PNGIHDRLvp-pHYsMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R
2024-01-10 21:52:47 UTC	1369	IN	Data Raw: 58 d2 76 00 40 7e f3 2d 8c 1a 0b 91 00 10 67 34 32 79 f7 00 00 93 bf f9 8f 40 2b 01 00 cd 97 a4 e3 00 00 bc e8 18 5c a8 94 17 4c c6 08 00 00 44 a0 81 2a b0 41 07 0c c1 14 ac c0 0e 9c c1 1d bc c0 17 02 61 06 44 40 0c 24 c0 3c 10 42 06 e4 80 1c 0a a1 18 96 41 19 54 c0 3a d8 04 b5 b0 03 1a a0 11 9a e1 10 b4 c1 31 38 0d e7 e0 12 5c 81 eb 70 17 06 60 18 9e c2 18 bc 86 09 04 41 c8 08 13 61 21 3a 88 11 62 8e d8 22 ce 08 17 99 8e 04 22 61 48 34 92 80 a4 20 e9 88 14 51 22 c5 c8 72 a4 02 a9 42 6a 91 5d 48 23 f2 2d 72 14 39 8d 5c 40 fa 90 db c8 20 32 8a fc 8a bc 47 31 94 81 b2 51 03 d4 02 75 40 b9 a8 1f 1a 8a c6 a0 73 d1 74 34 0f 5d 80 96 a2 6b d1 1a b4 1e 3d 80 b6 a2 a7 d1 4b e8 75 74 00 7d 8a 8e 63 80 d1 31 0e 66 8c d9 61 5c 8c 87 45 60 89 58 1a 26 c7 16 63 e5 58 Data Ascii: Xv@~-g42y@+\LD*AaD@$<BAT:18\p`Aa!:b""aH4 Q"rBj]H#-r9\@ 2G1Qu@st4]k=Kut}c1fa\E`X&cX
2024-01-10 21:52:47 UTC	1369	IN	Data Raw: 4f 52 2b 79 91 19 92 b9 23 f3 4d 56 44 d6 de ac cf d9 71 d9 2d 39 94 9c 94 9c a3 52 0d 69 96 b4 2b d7 30 b7 28 b7 4f 66 2b 2b 93 0d e4 79 e6 6d ca 1b 93 87 ca f7 e4 23 f9 73 f3 db 15 6c 85 4c d1 a3 b4 52 ae 50 0e 16 4c 2f a8 2b 78 5b 18 5b 78 b8 48 bd 48 5a d4 33 df 66 fe ea f9 23 0b 82 16 7c bd 90 b0 50 b8 b0 b3 d8 b8 78 59 f1 e0 22 bf 45 bb 16 23 8b 53 17 77 2e 31 5d 52 ba 64 78 69 f0 d2 7d cb 68 cb b2 96 fd 50 e2 58 52 55 f2 6a 79 dc f2 8e 52 83 d2 a5 a5 43 2b 82 57 34 95 a9 94 c9 cb 6e ae f4 5a b9 63 15 61 95 64 55 ef 6a 97 d5 5b 56 7f 2a 17 95 5f ac 70 ac a8 ae f8 b0 46 b8 e6 e2 57 4e 5f d5 7c f5 79 6d da da de 4a b7 ca ed eb 48 eb a4 eb 6e ac f7 59 bf af 4a bd 6a 41 d5 d0 86 f0 0d ad 1b f1 8d e5 1b 5f 6d 4a de 74 a1 7a 6a f5 8e cd b4 cd ca cd 03 35 Data Ascii: OR+y#MVDq-9Ri+0(Of++ym#slLRPL/+x[[xHHZ3f#\|PxY"E#Sw.1]Rdxi}hPXRUjyRC+W4nZcadUj[V*_pFWN_\|ymJHnYJjA_mJtzj5
2024-01-10 21:52:47 UTC	1369	IN	Data Raw: 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 31 38 2d 30 32 2d 30 38 54 32 30 3a 31 34 3a 33 39 2b 30 33 3a 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 32 30 31 38 2d 30 32 2d 30 38 54 32 30 3a 31 34 3a 33 39 2b 30 33 3a Data Ascii: /" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2017 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2018-02-08T20:14:39+03:00</xmp:CreateDate> <xmp:MetadataDate>2018-02-08T20:14:39+03:
2024-01-10 21:52:47 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 3c 2f 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 2f 3c 2f 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 53 65 71 3e 0a 20 20 20 20 20 20 20 20 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 20 20 20 20 20 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 0a 20 20 20 20 20 20 Data Ascii: <stEvt:softwareAgent>Adobe Photoshop CC 2017 (Windows)</stEvt:softwareAgent> <stEvt:changed>/</stEvt:changed> </rdf:li> </rdf:Seq> </xmpMM:History> <photoshop:DocumentAncestors>
2024-01-10 21:52:47 UTC	1369	IN	Data Raw: 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 39 37 46 42 35 38 39 41 42 36 44 46 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 41 36 35 39 39 30 38 46 34 32 36 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 32 44 35 33 32 39 41 46 45 43 37 45 31 31 31 38 36 33 30 38 36 41 46 34 34 42 35 30 36 30 31 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 41 46 46 42 37 45 39 30 45 46 44 45 31 31 31 41 41 39 45 39 41 35 42 43 31 42 36 44 Data Ascii: mp.did:018011740720681192B097FB589AB6DF</rdf:li> <rdf:li>xmp.did:05801174072068118DBBFA659908F426</rdf:li> <rdf:li>xmp.did:12D5329AFEC7E111863086AF44B50601</rdf:li> <rdf:li>xmp.did:1AFFB7E90EFDE111AA9E9A5BC1B6D
2024-01-10 21:52:47 UTC	1369	IN	Data Raw: 75 74 69 6f 6e 55 6e 69 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 31 3c 2f 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 50 69 78 65 6c 58 44 69 6d 65 6e 73 69 6f 6e 3e 34 33 38 3c 2f 65 78 69 66 3a 50 69 78 65 6c 58 44 69 6d 65 6e 73 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 50 69 78 65 6c 59 44 69 6d 65 6e 73 69 6f 6e 3e 37 36 3c 2f 65 78 69 66 3a 50 69 78 65 6c 59 44 69 6d 65 6e 73 69 6f 6e 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 3c 2f 72 64 66 3a 52 44 46 3e 0a 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: utionUnit> <exif:ColorSpace>1</exif:ColorSpace> <exif:PixelXDimension>438</exif:PixelXDimension> <exif:PixelYDimension>76</exif:PixelYDimension> </rdf:Description> </rdf:RDF></x:xmpmeta>
2024-01-10 21:52:47 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-01-10 21:52:47 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-01-10 21:52:47 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.16	50043	139.45.197.151	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:47 UTC	408	OUT	GET /contents/s/4e/61/84/4a7532ee6d30450abd6bb2a1da/0350025199145.jpeg HTTP/1.1 Host: interstitial-08.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:47 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:47 GMT Content-Type: image/jpeg Content-Length: 35607 Last-Modified: Tue, 17 Jul 2018 10:46:08 GMT Connection: close Vary: Accept-Encoding ETag: "5b4dc8f0-8b17" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Accept-Ranges: bytes
2024-01-10 21:52:47 UTC	15734	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 09 07 06 0a 09 08 09 0b 0b 0a 0c 0f 19 10 0f 0e 0e 0f 1e 16 17 12 19 24 20 26 25 23 20 23 22 28 2d 39 30 28 2a 36 2b 22 23 32 44 32 36 3b 3d 40 40 40 26 30 46 4b 45 3e 4a 39 3f 40 3d ff db 00 43 01 0b 0b 0b 0f 0d 0f 1d 10 10 1d 3d 29 23 29 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d ff c2 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 02 01 08 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 d9 80 00 00 00 00 Data Ascii: JFIFC$ &%# #"(-90(*6+"#2D26;=@@@&0FKE>J9?@=C=)#)=================================================="
2024-01-10 21:52:47 UTC	16384	IN	Data Raw: f2 27 5a 4a 4a 1a 4a d2 94 9d 28 69 28 7b 13 a5 27 62 52 50 d0 d2 7d cf ff c4 00 44 10 00 01 02 02 06 05 0a 02 08 05 04 03 01 00 00 00 01 00 02 03 11 10 12 21 31 41 51 04 13 22 61 71 20 32 40 42 81 91 a1 b1 c1 d1 52 f0 14 23 30 62 72 92 a2 e1 50 82 b2 c2 f1 05 33 d2 e2 43 53 63 f2 ff da 00 08 01 01 00 0d 3f 01 e8 3e 69 c6 ab 78 db 34 6d 00 1f 55 2b 4f 59 0b cd c8 5e e7 ae e5 2c 28 f8 19 87 6a 16 34 2f 14 45 d5 a7 24 0d 81 cd 9b 7b 32 4e bb f8 8b 36 df e8 9d 61 3f d4 53 1d 50 21 6b 09 c7 72 6f 54 db 34 04 ad d8 57 09 21 f1 63 c5 75 9d 8b 93 86 c8 47 7d aa fe 08 e2 8f c4 ab 1f e2 32 9d 63 9a 87 0e a3 0f 1a aa 2b e7 f3 d9 2e f5 77 6a 16 66 b2 9c bc d0 c2 91 72 de 87 8a 37 27 09 8a d6 2b cf 40 c9 05 9c d1 cc ac e7 62 39 95 b9 6f 28 e3 35 b8 cd 65 59 64 b2 e8 Data Ascii: 'ZJJJ(i({'bRP}D!1AQ"aq 2@BR#0brP3CSc?>ix4mU+OY^,(j4/E${2N6a?SP!kroT4W!cuG}2c+.wjfr7'+@b9o(5eYd
2024-01-10 21:52:47 UTC	3489	IN	Data Raw: 99 56 dc f2 c3 dd 11 aa 48 f6 08 41 7d 6f a9 ce 85 a7 31 eb 15 a9 76 fe 29 85 82 19 96 86 25 df a7 e1 87 e1 94 10 40 b8 7f e6 e1 67 81 5a 36 c7 79 37 f4 bb bd 82 83 c4 1a 97 7f 91 ee 18 1a bb c7 ca 74 c5 ba 9e 6c b5 0d b1 d9 36 67 8e 59 69 7a 3a d4 41 d7 5c 47 33 83 51 2d 18 8d f7 a9 4a a2 0c 2d 90 dc f3 e2 08 f2 c0 64 d4 7e 54 df bb 51 34 26 00 09 c9 04 66 db e6 d2 e2 b6 c1 d6 a2 f5 31 f5 ef 98 8f 53 17 5f 72 fd c5 92 dc ee 77 fc 71 0b d9 6a 57 43 92 27 3b 95 62 3b b8 82 32 dd 90 1b 86 f0 4a 3f 08 41 7e bf 88 c0 f7 82 06 08 20 82 08 10 ff 00 c9 b6 a5 8d 1e 61 76 b7 5f 24 62 5d ab 57 9c b6 cc 24 18 0f 15 2e 73 04 8e 75 0d 5c 43 f3 61 7e 08 e2 88 bf 8b 5e b0 42 b8 60 22 0c 1a 8e a3 29 29 1e a2 72 60 45 df 66 3e ee 08 f9 8d 61 bd 59 6b bb 48 96 16 f9 de 25 Data Ascii: VHA}o1v)%@gZ6y7tl6gYiz:A\G3Q-J-d~TQ4&f1S_rwqjWC';b;2J?A~ av_$b]W$.su\Ca~^B`"))r`Ef>aYkH%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.16	50045	139.45.197.151	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:47 UTC	409	OUT	GET /contents/s/aa/5b/71/730bd1c1e09e51bf17160def9a/01289039865190.jpeg HTTP/1.1 Host: interstitial-08.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:48 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:47 GMT Content-Type: image/jpeg Content-Length: 50434 Last-Modified: Thu, 31 Jan 2019 11:14:34 GMT Connection: close Vary: Accept-Encoding ETag: "5c52d89a-c502" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Accept-Ranges: bytes
2024-01-10 21:52:48 UTC	15734	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 00 01 02 07 08 ff c4 00 45 10 00 02 01 03 03 02 04 04 04 04 05 02 05 03 03 05 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 22 71 81 91 07 14 32 a1 42 52 b1 c1 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("E!1AQa"q2BR
2024-01-10 21:52:48 UTC	16384	IN	Data Raw: 27 00 72 4d 0b 77 09 6b 88 4e 38 5e b4 b8 e5 4c 33 56 83 b4 69 3c a9 3c b6 03 0c 7a fa 1a 97 52 87 cb b8 62 bf a5 be 21 40 29 c7 39 c1 a6 32 cc 2e 6c 43 1c 6f 8c e0 d2 bb 4e ca c1 aa a0 25 a6 16 9b 1a ca 40 ca 80 89 31 e6 01 f1 0f 87 a6 7d 3d a9 70 6c 51 f6 18 7b 7b 85 53 c8 da d8 aa c1 26 e9 93 c8 da 56 89 fc 93 1c 6a d9 0c 8c 38 65 e8 4f a7 b1 a8 da 29 1b a0 e2 a7 b7 9b 6c 4c 18 12 b9 e4 51 0f 0b b4 4b 32 1c c6 4e de bc 83 8c f3 42 70 70 77 f0 1c 39 14 f4 fd 17 c5 0b ab 31 61 8a ec a9 f4 a3 42 fc 23 35 ca a8 66 c3 54 bb 9a 7a d2 16 4a a5 48 2b 9a d4 73 34 72 ab 0e 19 4e 73 4d 65 58 e1 19 62 01 34 29 58 65 27 a6 7e c6 99 4a d0 28 e7 51 85 11 a1 96 2c 79 73 a6 f0 3f 94 e4 82 3e e2 9b 78 4a e9 7f 36 f6 d2 1c 79 a3 0b 9e 99 14 aa e5 48 b1 80 1c e5 0b 2f ef Data Ascii: 'rMwkN8^L3Vi<<zRb!@)92.lCoN%@1}=plQ{{S&Vj8eO)lLQK2NBppw91aB#5fTzJH+s4rNsMeXb4)Xe'~J(Q,ys?>xJ6yH/
2024-01-10 21:52:48 UTC	16384	IN	Data Raw: 46 88 89 07 0c db 47 38 c0 a7 d6 bf 06 54 9c fa 1a 09 da 31 e5 8f 56 d0 d6 df 19 3b 40 2a 78 20 d5 67 c7 1a 65 84 5a 5a 5f 49 21 8a e4 b0 86 de 35 e9 27 39 39 1d 80 1d e9 f3 ba c3 6c d2 31 3b 42 92 48 eb 8a a6 f8 c5 6e ee ad ed af 6e 08 11 a9 f2 63 89 79 11 82 0b 72 7b 93 8e 6b b0 ee 6b 66 3e 44 5f 46 56 57 8a 36 13 8d 86 80 5a 61 69 1e e6 44 3d c8 cd 7a 32 7a 3c c8 a7 63 6d 39 b6 dc 20 3c 64 8a b1 5b da bc d0 cf 2a 95 0b 16 32 09 00 f2 7b 0e f4 91 52 28 e5 f3 1c e1 89 e1 7d 3d e8 d8 a6 de 08 0c 40 3f bd 79 99 6d ed 1b b1 d2 d3 27 50 49 eb c5 4c 8e e8 41 56 23 dc 1a 80 06 5e 98 35 2c 4c 39 dc 00 c5 4c 6a 19 5c 5c 9f f0 eb 62 c0 93 be 41 93 ff 00 a6 bb d1 ae 77 5d b0 3d e3 71 f7 53 44 6a 96 61 3c 3f 62 d8 01 98 99 0b 67 b3 0f fe 05 41 e1 9b 74 37 b2 bc f8 Data Ascii: FG8T1V;@x geZZ_I!5'99l1;BHnncyr{kkf>D_FVW6ZaiD=z2z<cm9 <d[2{R(}=@?ym'PILAV#^5,L9Lj\\bAw]=qSDja<?bgAt7
2024-01-10 21:52:48 UTC	1932	IN	Data Raw: a0 ad a2 b7 24 11 18 f6 e4 d4 e2 17 0b 9c a8 f6 cd 64 70 f3 93 4b d8 65 02 20 a4 63 6c b2 70 73 d6 a6 82 4f 26 40 64 2c cb 9e 79 e6 a6 8a 1c f1 81 f3 26 ac 17 be 1f b7 b1 8e 07 3a a5 8d d8 90 6e 3f 96 dc c1 47 6c 92 00 c9 a5 ed ba 1b a9 5d 9e 17 77 26 2e 10 72 18 8e 4d 06 c0 ab 30 6e a3 83 9a b3 3d ac 09 90 7c c7 c7 50 08 04 7d 05 0d 71 67 6a db 91 22 0a e4 64 31 26 a8 a2 c5 b4 8a f8 22 b3 83 52 cb 19 8e 56 46 1b 58 1c 1c d6 24 60 73 9a 03 24 70 14 d7 6a 8c dd 01 35 d3 cf 04 5f eb 6a 1e 4b f7 3c 2e 14 7b 50 49 b3 ad 20 93 0b 28 cb 10 2a 23 2a 21 3f c6 68 17 99 db ab 13 5c 66 8a 8b f9 03 9f e8 3a 59 de 51 82 70 be 82 ad 7e 1a 88 c5 62 b9 fd 4c 77 1f 61 da aa 9a 74 26 e2 74 43 d0 9c 9f 95 5e b4 f4 0b 08 3e bc fd 29 26 d2 54 74 77 b6 4f 2b 6d db 96 23 9a 11 Data Ascii: $dpKe clpsO&@d,y&:n?Gl]w&.rM0n=\|P}qgj"d1&"RVFX$`s$pj5_jK<.{PI (#!?h\f:YQp~bLwat&tC^>)&TtwO+m#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.16	50044	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:47 UTC	1498	OUT	GET /15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A2%2C%22totalLength%22%3A69%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A5.403%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1 Host: cameesse.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:48 UTC	830	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 10 Jan 2024 21:52:47 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: df7088506daa191279555507be2e0d41 Access-Control-Expose-Headers: X-Sc Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:47 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:52:47 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.16	50046	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:52 UTC	1500	OUT	GET /15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A3%2C%22totalLength%22%3A244%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A1%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A10.379%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1 Host: cameesse.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:53 UTC	830	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 10 Jan 2024 21:52:52 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: 41c3e2016c8a9954488203d347bc0721 Access-Control-Expose-Headers: X-Sc Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:52 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:52:52 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.16	50047	35.190.80.1	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:53 UTC	555	OUT	OPTIONS /report/v3?s=TKMkcVjR9BrBkEG47TNUwPQDQbxhvXuIo%2BRVMWf9F75Y8ixbGNC5op1yV9myEfF035xh07TPR8BvBtHA4cNMoY9xB%2BWu6qNubsdcQDnfrByoNLroyRHWUxQbvAF6IAgC5RO0TZ89unn8XDs5 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://dl--master--cdn.ytapis.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:53 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 10 Jan 2024 21:52:53 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.16	50048	35.190.80.1	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:54 UTC	486	OUT	POST /report/v3?s=TKMkcVjR9BrBkEG47TNUwPQDQbxhvXuIo%2BRVMWf9F75Y8ixbGNC5op1yV9myEfF035xh07TPR8BvBtHA4cNMoY9xB%2BWu6qNubsdcQDnfrByoNLroyRHWUxQbvAF6IAgC5RO0TZ89unn8XDs5 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 425 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:54 UTC	425	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 39 36 39 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 33 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 36 2e 32 2e 31 32 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6c 2d 2d 6d 61 73 74 65 72 2d 2d 63 64 Data Ascii: [{"age":9690,"body":{"elapsed_time":835,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.26.2.120","status_code":405,"type":"http.error"},"type":"network-error","url":"https://dl--master--cd
2024-01-10 21:52:54 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 10 Jan 2024 21:52:54 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.16	50049	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:56 UTC	849	OUT	OPTIONS /500/5588622?excludes=&oaid=efe83b1130104efea0d475e2cb75464f&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=5&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=60&os=windows&os_version=10.0.0&js_build=8&sw_version=v1.313.0 HTTP/1.1 Host: gishejuy.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://v9.www-ytmp4.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:52:56 UTC	757	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:52:56 GMT Content-Length: 0 Connection: close Allow: GET, OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.16	50050	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:52:57 UTC	972	OUT	GET /500/5588622?excludes=&oaid=efe83b1130104efea0d475e2cb75464f&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=5&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=60&os=windows&os_version=10.0.0&js_build=8&sw_version=v1.313.0 HTTP/1.1 Host: gishejuy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:52:57 UTC	835	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 10 Jan 2024 21:52:57 GMT Connection: close X-Trace-Id: cc700a943c4a87626c46181033fdaaeb Expires: Tue, 11 Jan 1994 10:00:00 GMT Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Timing-Allow-Origin: * Vary: Origin Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:52:57 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.16	50051	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:01 UTC	1500	OUT	GET /15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A3%2C%22totalLength%22%3A244%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A1%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A19.385%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1 Host: cameesse.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:53:01 UTC	830	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 10 Jan 2024 21:53:01 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: 510177b54ffc72336a72bc5300361528 Access-Control-Expose-Headers: X-Sc Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:53:01 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:53:01 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.16	50052	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:04 UTC	1341	OUT	GET /11?rnd=3665909097&z=5588623&b=5362695&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&os=windows&os_version=10.0.0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1 Host: cameesse.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:53:04 UTC	1052	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:53:04 GMT Content-Type: image/jpeg Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: 691a5e43c09981b4c81795e2fb1f2401 Access-Control-Expose-Headers: X-Sc Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:53:04 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:53:04 GMT; secure; SameSite=None Set-Cookie: oaidvc=1; expires=Thu, 09 Jan 2025 21:53:04 GMT; secure; SameSite=None Set-Cookie: CNT=1_v1_B9RRAAEAAAAUTQAA; expires=Wed, 10 Jan 2024 22:53:04 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.16	50053	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:05 UTC	1172	OUT	GET /11?rnd=3665909097&z=5588623&b=5362695&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&wy=0&wx=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&sah=984&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&hil=1&ist=0&os=windows&os_version=10.0.0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1 Host: cameesse.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f; oaidvc=1; CNT=1_v1_B9RRAAEAAAAUTQAA
2024-01-10 21:53:05 UTC	1028	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:53:05 GMT Content-Type: image/jpeg Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: 25d9f75d3658e564142768f2da9b3a07 Access-Control-Expose-Headers: X-Sc Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:53:05 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:53:05 GMT; secure; SameSite=None Set-Cookie: oaidvc=2; expires=Thu, 09 Jan 2025 21:53:05 GMT; secure; SameSite=None Set-Cookie: CNT=1_v1_B9RRAAIAAAAUTQAA; expires=Wed, 10 Jan 2024 22:53:05 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.16	50054	142.251.111.113	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:05 UTC	449	OUT	GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000005E364CF593 HTTP/1.1 Host: clients1.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br
2024-01-10 21:53:06 UTC	817	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-lRTEATu37fp3YWq6yrbv0w' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Security-Policy: script-src 'report-sample' 'nonce-7WZTE87Q_zcFAtmWLSUAhQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Type: text/plain; charset=utf-8 Content-Length: 220 Date: Wed, 10 Jan 2024 21:53:06 GMT Expires: Wed, 10 Jan 2024 21:53:06 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:06 UTC	220	IN	Data Raw: 72 6c 7a 43 31 3a 20 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 32 0a 72 6c 7a 43 32 3a 20 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 32 0a 72 6c 7a 43 37 3a 20 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 32 0a 64 63 63 3a 20 0a 73 65 74 5f 64 63 63 3a 20 43 31 3a 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 32 2c 43 32 3a 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 32 2c 43 37 3a 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 32 0a 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 2c 43 31 53 2c 43 37 53 0a 73 74 61 74 65 66 75 6c 2d 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 0a 63 72 63 33 32 3a 20 36 38 31 65 63 37 30 36 0a Data Ascii: rlzC1: 1C1ONGR_enUS1092rlzC2: 1C2ONGR_enUS1092rlzC7: 1C7ONGR_enUS1092dcc: set_dcc: C1:1C1ONGR_enUS1092,C2:1C2ONGR_enUS1092,C7:1C7ONGR_enUS1092events: C1I,C2I,C7I,C1S,C7Sstateful-events: C1I,C2I,C7Icrc32: 681ec706

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.16	50055	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:11 UTC	849	OUT	OPTIONS /500/5588622?excludes=&oaid=efe83b1130104efea0d475e2cb75464f&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1280&wiw=1280&wih=907&wfc=5&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=60&os=windows&os_version=10.0.0&js_build=8&sw_version=v1.313.0 HTTP/1.1 Host: gishejuy.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://v9.www-ytmp4.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:11 UTC	757	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:53:11 GMT Content-Length: 0 Connection: close Allow: GET, OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.16	50056	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:12 UTC	972	OUT	GET /500/5588622?excludes=&oaid=efe83b1130104efea0d475e2cb75464f&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1280&wiw=1280&wih=907&wfc=5&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=60&os=windows&os_version=10.0.0&js_build=8&sw_version=v1.313.0 HTTP/1.1 Host: gishejuy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:53:12 UTC	835	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 10 Jan 2024 21:53:12 GMT Connection: close X-Trace-Id: 11a3d64d431dd99b82272d1e923d8a6b Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Timing-Allow-Origin: * Expires: Tue, 11 Jan 1994 10:00:00 GMT Vary: Origin Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:53:12 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.16	50057	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:18 UTC	1572	OUT	GET /15?rnd=751916534&z=5588623&var=&varid=0&rb=kAxNYixVkUxwwi3_3pfLAKgsMUD4nwe6WyQRaRZY13ZtP7Mwz1qpOPSqq7aIVSAKyU4ZwgggTI83cXzToKEOivEk2e1uByaGSocAMCg1oSnD1YDTALzm8BZHsej3OiQiZcot6Bhf1iz8Ybuh3pKB1WiDyfKvv1bUnS45FGE88jktj3EhletUMgwaus4aEaQXI-znCc19LVUH9Nx8L36TYxbKtmYi04qVY4A06HxUCd_gRSetkkgMnMG1ih9HroGW_waM4exkFBzaPULrXBH8z8huG-uaK3IcTVMT03FqX5VgRDqM3kLVpkWqE-sp0w32&ruid=ab37d699-010f-450d-8692-ddfdc6930388&uci=%7B%22path%22%3A%7B%22count%22%3A3%2C%22totalLength%22%3A244%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A1%2C%22256%22%3A1%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A36.389%2C%22location%22%3A%22https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D HTTP/1.1 Host: cameesse.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: scm=1; oaidts=1704923559; OAID=efe83b1130104efea0d475e2cb75464f; oaidvc=2; CNT=1_v1_B9RRAAIAAAAUTQAA
2024-01-10 21:53:19 UTC	830	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 10 Jan 2024 21:53:18 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace X-Trace-Id: ed3a98a28c74edf63e3fadc569aad0aa Access-Control-Expose-Headers: X-Sc Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:53:18 GMT; secure; SameSite=None Set-Cookie: oaidts=1704923559; expires=Thu, 09 Jan 2025 21:53:18 GMT; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.16	50059	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:27 UTC	662	OUT	GET /pfe/current/sw.perm.check.min.js?r=sw HTTP/1.1 Host: opmetapodor.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://opmetapodor.com/sw-check-permissions/4662709?var=5596087&ymid=769067736944087664&uhd=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oaidts=1704923556; prefetchAd_4662728=true; OAID=d36449c3fc5d2c86d4a195aa43f059a6; reverse=GmjEjTX2IJ3kqkkF8yYr35GL72Kg6Q6dCVhloRYlPnM
2024-01-10 21:53:27 UTC	761	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:53:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 23 Nov 2023 20:42:33 GMT Vary: Accept-Encoding ETag: W/"655fb939-16d1f" Access-Control-Allow-Credentials: true Cache-Control: max-age=86400 Pragma: no-cache CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E9tyNe5%2FY0uEFgyVJgbzTw6rbkp4ez4sNyz03Mn0Fp3igtznOPmaFpcb7izNT6e7Z%2Fb7XfyKzusUngKzWHbGIgiAt1HJRguJEnIx92xi9klCm1G7JW7PIE%2Fv%2F1S20ezxF7Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84382723ed885e73-EWR alt-svc: h3=":443"; ma=86400
2024-01-10 21:53:27 UTC	608	IN	Data Raw: 37 63 62 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 57 29 7b 28 28 29 3d 3e 7b 57 2e 57 3b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 57 2e 75 6b 28 57 2e 6b 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 48 78 5d 28 74 2c 57 2e 68 78 2c 57 2e 75 6b 28 57 2e 49 50 2c 21 57 2e 4c 6b 29 29 2c 74 5b 57 2e 4f 64 5d 3d 76 6f 69 64 20 57 2e 4c 6b 2c 74 5b 57 2e 4f 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 6c 65 74 20 6f 3d 72 2e 73 70 6c 69 74 28 27 2f 27 29 5b 32 5d 3b 63 6f 6e 73 74 20 61 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 61 74 61 73 65 74 2e 66 70 7c 7c 27 7a 66 67 66 6f 72 6d 61 74 73 27 3b 77 69 6e 64 6f 77 5b 61 5d 3f 77 69 6e 64 6f 77 Data Ascii: 7cb9(function(W){(()=>{W.W;var __webpack_modules__=W.uk(W.k,(e,t)=>{Object[W.Hx](t,W.hx,W.uk(W.IP,!W.Lk)),t[W.Od]=void W.Lk,t[W.Od]=function(e,t,n,r){let o=r.split('/')[2];const a=window.document.documentElement.dataset.fp\|\|'zfgformats';window[a]?window
2024-01-10 21:53:27 UTC	1369	IN	Data Raw: 72 79 7b 61 3d 65 5b 57 2e 62 4f 5d 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 6e 26 26 6e 5b 57 2e 66 43 5d 3d 3d 3d 28 57 2e 62 6b 3d 3d 3d 28 74 3d 57 2e 62 6b 3d 3d 61 3f 76 6f 69 64 20 57 2e 4c 6b 3a 61 5b 57 2e 74 6f 5d 29 7c 7c 76 6f 69 64 20 57 2e 4c 6b 3d 3d 3d 74 3f 76 6f 69 64 20 57 2e 4c 6b 3a 74 5b 57 2e 66 43 5d 29 29 72 65 74 75 72 6e 21 57 2e 4c 6b 3b 74 72 79 7b 63 6f 6e 73 74 20 74 3d 61 77 61 69 74 28 57 2e 4c 6b 2c 6f 5b 57 2e 6b 78 5d 29 28 29 5b 57 2e 6c 78 5d 28 65 29 3b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 5b 57 2e 68 5a 5d 28 57 2e 65 5a 2c 65 29 2c 21 57 2e 6c 6b 7d 7d 74 5b 57 2e 66 64 5d 3d 61 2c 74 5b 57 2e 46 64 5d 3d 61 73 79 6e 63 20 Data Ascii: ry{a=e[W.bO]()}catch(e){}if(n&&n[W.fC]===(W.bk===(t=W.bk==a?void W.Lk:a[W.to])\|\|void W.Lk===t?void W.Lk:t[W.fC]))return!W.Lk;try{const t=await(W.Lk,o[W.kx])()[W.lx](e);return Boolean(t)}catch(e){return console[W.hZ](W.eZ,e),!W.lk}}t[W.fd]=a,t[W.Fd]=async
2024-01-10 21:53:27 UTC	1369	IN	Data Raw: 2e 75 29 2c 6f 3d 6e 28 57 2e 54 6b 29 2c 61 3d 6e 28 57 2e 5a 29 2c 69 3d 6e 28 57 2e 65 29 2c 73 3d 6e 28 57 2e 49 29 2c 63 3d 6e 28 57 2e 4b 29 2c 6c 3d 6e 28 57 2e 58 29 2c 75 3d 6e 28 57 2e 42 29 2c 64 3d 6e 28 57 2e 56 29 3b 74 5b 57 2e 51 6b 5d 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 7b 70 61 79 6c 6f 61 64 3a 74 2c 73 77 43 6f 6e 74 65 78 74 3a 6e 2c 75 73 65 72 4b 65 79 3a 66 2c 61 66 74 65 72 49 77 61 6e 74 3a 5f 2c 66 61 6c 6c 62 61 63 6b 54 79 70 65 3a 70 2c 66 6c 61 67 73 3a 67 2c 70 75 73 68 5f 74 72 61 63 65 5f 69 64 3a 77 7d 3d 65 2c 62 3d 73 65 6c 66 5b 57 2e 57 72 5d 2c 79 3d 74 26 26 74 5b 57 2e 46 72 5d 7c 7c 77 7c 7c 57 2e 48 50 3b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 57 Data Ascii: .u),o=n(W.Tk),a=n(W.Z),i=n(W.e),s=n(W.I),c=n(W.K),l=n(W.X),u=n(W.B),d=n(W.V);t[W.Qk]=async function(e){const {payload:t,swContext:n,userKey:f,afterIwant:_,fallbackType:p,flags:g,push_trace_id:w}=e,b=self[W.Wr],y=t&&t[W.Fr]\|\|w\|\|W.HP;if(!t)throw new Error(W
2024-01-10 21:53:27 UTC	1369	IN	Data Raw: 67 5b 57 2e 53 4b 5d 2a 57 2e 4a 78 2c 57 2e 53 67 2c 67 5b 57 2e 42 4b 5d 29 29 3b 69 66 28 65 5b 57 2e 4b 72 5d 29 7b 63 6f 6e 73 74 20 74 3d 65 5b 57 2e 49 74 5d 28 65 3d 3e 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 7b 6d 65 74 72 69 63 3a 74 2c 73 77 43 6f 6e 74 65 78 74 3a 6e 2c 75 73 65 72 4b 65 79 3a 72 2c 74 72 61 63 65 5f 69 64 3a 61 2c 68 61 6e 64 6c 65 72 3a 63 2c 61 66 74 65 72 49 77 61 6e 74 3a 6c 7d 3d 65 3b 69 66 28 21 74 5b 57 2e 45 50 5d 7c 7c 21 74 5b 57 2e 45 50 5d 5b 57 2e 4a 4b 5d 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 7b 6f 72 69 67 69 6e 61 6c 50 61 79 6c 6f 61 64 3a 66 2c 74 69 74 6c 65 3a 5f 2c 6f 70 74 69 6f 6e 73 3a 70 7d 3d 74 5b 57 2e 45 50 5d 3b 69 66 28 66 5b 57 2e 46 72 5d 3d 3d 3d 61 29 72 Data Ascii: g[W.SK]*W.Jx,W.Sg,g[W.BK]));if(e[W.Kr]){const t=e[W.It](e=>async function(e){const {metric:t,swContext:n,userKey:r,trace_id:a,handler:c,afterIwant:l}=e;if(!t[W.EP]\|\|!t[W.EP][W.JK])return;const {originalPayload:f,title:_,options:p}=t[W.EP];if(f[W.Fr]===a)r
2024-01-10 21:53:27 UTC	1369	IN	Data Raw: 29 2c 57 2e 75 6b 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 63 6f 6e 73 74 20 5b 74 2c 6e 5d 3d 65 5b 57 2e 42 43 5d 28 57 2e 53 43 2c 57 2e 79 43 29 2c 5b 72 2c 6f 5d 3d 74 5b 57 2e 42 43 5d 28 57 2e 55 4f 29 5b 57 2e 56 43 5d 28 57 2e 4c 6b 2c 57 2e 79 43 29 3b 72 65 74 75 72 6e 20 57 2e 75 6b 28 57 2e 41 74 2c 72 2c 57 2e 54 74 2c 6f 2c 57 2e 75 74 2c 6e 29 7d 4f 62 6a 65 63 74 5b 57 2e 48 78 5d 28 74 2c 57 2e 68 78 2c 57 2e 75 6b 28 57 2e 49 50 2c 21 57 2e 4c 6b 29 29 2c 74 5b 57 2e 5a 64 5d 3d 74 5b 57 2e 67 64 5d 3d 74 5b 57 2e 79 64 5d 3d 76 6f 69 64 20 57 2e 4c 6b 2c 74 5b 57 2e 79 64 5d 3d 6e 2c 74 5b 57 2e 67 64 5d 3d 72 2c 74 5b 57 2e 5a 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 7b 75 72 69 3a 6f 2c 71 75 Data Ascii: ),W.uk())}function r(e){const [t,n]=e[W.BC](W.SC,W.yC),[r,o]=t[W.BC](W.UO)[W.VC](W.Lk,W.yC);return W.uk(W.At,r,W.Tt,o,W.ut,n)}Object[W.Hx](t,W.hx,W.uk(W.IP,!W.Lk)),t[W.Zd]=t[W.gd]=t[W.yd]=void W.Lk,t[W.yd]=n,t[W.gd]=r,t[W.Zd]=function(e,t){const {uri:o,qu
2024-01-10 21:53:27 UTC	1369	IN	Data Raw: 63 6f 6e 73 74 20 72 3d 69 5b 6e 5d 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 77 61 69 74 20 66 65 74 63 68 28 60 68 74 74 70 73 3a 2f 2f 24 7b 72 7d 2f 24 7b 6f 28 29 7d 60 2c 57 2e 75 6b 28 57 2e 55 5a 2c 74 5b 57 2e 55 5a 5d 7c 7c 57 2e 6c 78 2c 57 2e 51 5a 2c 57 2e 49 5a 2c 57 2e 75 50 2c 61 28 74 5b 57 2e 75 50 5d 2c 6e 29 2c 57 2e 4a 5a 2c 57 2e 75 6b 28 57 2e 49 52 2c 62 74 6f 61 28 65 29 29 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 57 2e 4a 4f 29 7d 2c 74 5b 57 2e 4b 64 5d 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 63 6f 6e 73 74 20 74 3d 61 77 61 69 74 20 66 65 74 63 68 28 65 5b 57 2e 6b 6f 5d 28 57 2e 6d 52 29 3e 2d 57 2e 6c 6b 3f 65 3a 60 68 74 74 70 73 3a 2f 2f 24 7b 65 7d Data Ascii: const r=i[n];try{return await fetch(`https://${r}/${o()}`,W.uk(W.UZ,t[W.UZ]\|\|W.lx,W.QZ,W.IZ,W.uP,a(t[W.uP],n),W.JZ,W.uk(W.IR,btoa(e))))}catch(e){}}throw new Error(W.JO)},t[W.Kd]=async function(e){try{const t=await fetch(e[W.ko](W.mR)>-W.lk?e:`https://${e}
2024-01-10 21:53:27 UTC	1369	IN	Data Raw: 6b 21 3d 3d 73 26 26 57 2e 62 6b 21 3d 3d 69 26 26 28 73 5b 57 2e 4c 43 5d 3d 3d 3d 69 5b 57 2e 4c 43 5d 26 26 28 57 2e 62 6b 3d 3d 3d 28 6e 3d 57 2e 62 6b 3d 3d 73 3f 76 6f 69 64 20 57 2e 4c 6b 3a 73 5b 57 2e 74 6f 5d 29 7c 7c 76 6f 69 64 20 57 2e 4c 6b 3d 3d 3d 6e 3f 76 6f 69 64 20 57 2e 4c 6b 3a 6e 5b 57 2e 66 43 5d 29 3d 3d 3d 28 57 2e 62 6b 3d 3d 3d 28 72 3d 57 2e 62 6b 3d 3d 69 3f 76 6f 69 64 20 57 2e 4c 6b 3a 69 5b 57 2e 74 6f 5d 29 7c 7c 76 6f 69 64 20 57 2e 4c 6b 3d 3d 3d 72 3f 76 6f 69 64 20 57 2e 4c 6b 3a 72 5b 57 2e 66 43 5d 29 26 26 28 57 2e 62 6b 3d 3d 3d 28 6f 3d 57 2e 62 6b 3d 3d 73 3f 76 6f 69 64 20 57 2e 4c 6b 3a 73 5b 57 2e 74 6f 5d 29 7c 7c 76 6f 69 64 20 57 2e 4c 6b 3d 3d 3d 6f 3f 76 6f 69 64 20 57 2e 4c 6b 3a 6f 5b 57 2e 52 66 5d 29 Data Ascii: k!==s&&W.bk!==i&&(s[W.LC]===i[W.LC]&&(W.bk===(n=W.bk==s?void W.Lk:s[W.to])\|\|void W.Lk===n?void W.Lk:n[W.fC])===(W.bk===(r=W.bk==i?void W.Lk:i[W.to])\|\|void W.Lk===r?void W.Lk:r[W.fC])&&(W.bk===(o=W.bk==s?void W.Lk:s[W.to])\|\|void W.Lk===o?void W.Lk:o[W.Rf])
2024-01-10 21:53:27 UTC	1369	IN	Data Raw: 54 69 6d 65 6f 75 74 28 74 2c 65 29 29 7d 7d 2c 57 2e 5a 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 48 78 5d 28 74 2c 57 2e 68 78 2c 57 2e 75 6b 28 57 2e 49 50 2c 21 57 2e 4c 6b 29 29 2c 74 5b 57 2e 42 6b 5d 3d 76 6f 69 64 20 57 2e 4c 6b 3b 74 5b 57 2e 42 6b 5d 3d 28 65 2c 74 3d 57 2e 75 6b 28 29 29 3d 3e 7b 69 66 28 57 2e 62 6b 3d 3d 65 29 72 65 74 75 72 6e 20 57 2e 75 6b 28 57 2e 56 50 2c 57 2e 74 4f 2c 57 2e 76 43 2c 57 2e 69 72 2c 57 2e 61 43 2c 57 2e 69 72 29 3b 63 6f 6e 73 74 20 6e 3d 57 2e 62 6b 21 3d 74 3f 4a 53 4f 4e 5b 57 2e 44 66 5d 28 74 29 3a 57 2e 72 4f 3b 72 65 74 75 72 6e 20 57 2e 75 6b 28 57 2e 56 50 2c 60 65 72 72 6f 72 2d 6f 62 6a 3a 20 24 7b 65 5b 57 2e 6a 74 5d 3f 65 5b 57 2e 6a 74 5d 28 29 3a 4a 53 4f 4e 5b 57 2e 44 66 5d Data Ascii: Timeout(t,e))}},W.Z,(e,t)=>{Object[W.Hx](t,W.hx,W.uk(W.IP,!W.Lk)),t[W.Bk]=void W.Lk;t[W.Bk]=(e,t=W.uk())=>{if(W.bk==e)return W.uk(W.VP,W.tO,W.vC,W.ir,W.aC,W.ir);const n=W.bk!=t?JSON[W.Df](t):W.rO;return W.uk(W.VP,`error-obj: ${e[W.jt]?e[W.jt]():JSON[W.Df]
2024-01-10 21:53:27 UTC	1369	IN	Data Raw: 57 2e 49 50 2c 21 57 2e 4c 6b 29 29 2c 74 5b 57 2e 41 64 5d 3d 76 6f 69 64 20 57 2e 4c 6b 2c 74 5b 57 2e 41 64 5d 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 70 65 72 66 6f 72 6d 61 6e 63 65 5b 57 2e 4b 43 5d 28 29 3b 72 65 74 75 72 6e 20 61 77 61 69 74 20 65 2c 70 65 72 66 6f 72 6d 61 6e 63 65 5b 57 2e 4b 43 5d 28 29 2d 74 7c 57 2e 4c 6b 7d 7d 2c 57 2e 47 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 57 2e 48 78 5d 28 74 2c 57 2e 68 78 2c 57 2e 75 6b 28 57 2e 49 50 2c 21 57 2e 4c 6b 29 29 2c 74 5b 57 2e 54 64 5d 3d 76 6f 69 64 20 57 2e 4c 6b 2c 74 5b 57 2e 54 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 44 61 74 65 28 29 5b 57 2e 6d 5a 5d 28 29 3b 6c 65 74 20 6e 3b 74 72 79 7b 6e Data Ascii: W.IP,!W.Lk)),t[W.Ad]=void W.Lk,t[W.Ad]=async function(e){const t=performance[W.KC]();return await e,performance[W.KC]()-t\|W.Lk}},W.G,(e,t)=>{Object[W.Hx](t,W.hx,W.uk(W.IP,!W.Lk)),t[W.Td]=void W.Lk,t[W.Td]=function(e){const t=new Date()[W.mZ]();let n;try{n
2024-01-10 21:53:27 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 73 65 6c 66 5b 57 2e 57 72 5d 3b 72 65 74 75 72 6e 20 65 3f 28 61 77 61 69 74 20 65 5b 57 2e 4a 67 5d 28 29 7c 7c 5b 5d 29 5b 57 2e 4a 74 5d 28 69 29 3a 5b 5d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 5b 57 2e 5a 43 5d 28 65 29 2c 5b 5d 7d 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 74 72 79 7b 69 66 28 21 73 65 6c 66 5b 57 2e 57 72 5d 29 72 65 74 75 72 6e 3b 28 61 77 61 69 74 20 63 28 29 29 5b 57 2e 43 4f 5d 28 28 65 2c 74 29 3d 3e 7b 76 61 72 20 6e 2c 72 3b 72 65 74 75 72 6e 28 57 2e 62 6b 21 3d 3d 28 6e 3d 74 5b 57 2e 78 48 5d 29 26 26 76 6f 69 64 20 57 2e 4c 6b 21 3d 3d 6e 3f 6e 3a 57 2e 4c 6b 29 2d 28 57 2e 62 6b 21 3d 3d 28 72 3d 65 Data Ascii: unction c(){try{const e=self[W.Wr];return e?(await e[W.Jg]()\|\|[])[W.Jt](i):[]}catch(e){return console[W.ZC](e),[]}}async function l(){try{if(!self[W.Wr])return;(await c())[W.CO]((e,t)=>{var n,r;return(W.bk!==(n=t[W.xH])&&void W.Lk!==n?n:W.Lk)-(W.bk!==(r=e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.16	50058	139.45.197.242	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:27 UTC	972	OUT	GET /500/5588622?excludes=&oaid=efe83b1130104efea0d475e2cb75464f&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1280&wiw=1280&wih=907&wfc=5&pl=https%3A%2F%2Fv9.www-ytmp4.com%2Fconvert%2F&drf=https%3A%2F%2Fv9.www-ytmp4.com%2Fsearch%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=60&os=windows&os_version=10.0.0&js_build=8&sw_version=v1.313.0 HTTP/1.1 Host: gishejuy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://v9.www-ytmp4.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://v9.www-ytmp4.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:53:28 UTC	835	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 10 Jan 2024 21:53:27 GMT Connection: close X-Trace-Id: 5425ccc9e95f591f16122168b32a4005 Expires: Tue, 11 Jan 1994 10:00:00 GMT Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Timing-Allow-Origin: * Vary: Origin Access-Control-Allow-Origin: https://v9.www-ytmp4.com Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Set-Cookie: OAID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:53:27 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.16	50060	139.45.195.8	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:28 UTC	547	OUT	GET /gid.js?pub=0&userId=&zoneId=4662709&checkDuplicate=true&ymid=769067736944087664&var=5596087 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Origin: https://opmetapodor.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=efe83b1130104efea0d475e2cb75464f
2024-01-10 21:53:28 UTC	703	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 10 Jan 2024 21:53:28 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: https://opmetapodor.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=efe83b1130104efea0d475e2cb75464f; expires=Thu, 09 Jan 2025 21:53:28 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-01-10 21:53:28 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 65 66 65 38 33 62 31 31 33 30 31 30 34 65 66 65 61 30 64 34 37 35 65 32 63 62 37 35 34 36 34 66 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"efe83b1130104efea0d475e2cb75464f","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.16	50062	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:28 UTC	1593	OUT	POST /cat.php?userId=d36449c3fc5d2c86d4a195aa43f059a6&zoneid=4662728&rb=Rdb6wZEO29zI5JtWbTgBMBMFK3Hq-MEScKP8etoUXWt3mdWS3wWsTsP3kSqAWpbNFN1dCn6CYruMdsHiPsHpNrvwnbvh96tHmYdBiU46RODeWhjXYxRc2nUDsCdCO1IYpgc-WdiFaZIQvADzoLdt660KFd3CQnSV0JefYCmIdQr3HkdyWUMcr7ixUZ0NA9T5k9PWd5QcPzHYyXX2KLUOww4E_aWbWCgrAxXAEpEN3forRgNuyof1bfhSMQleRGuBYG9QLY077R8fAu5eYgIHtOdcquR56sK3EVT5-79aIbw45uwbCLeC9OPBGoLFc7dcFsFGfPSX-l0xCXzweCDoLtxwODIyvjKVg6ztukTV4SYUIofL7Xx9BMyq2xl1YV7lnzjZrZ3jgq9uvQfg1ULmn2inVBeIy67aLeUagmvLmFdPH-JezSdIdJxPCMU_42FgBx9QhjpzIuYLBYhZ8Fn3f8HOl-Mmu5qPTg6zZrwo0y5baW7oPL4LK0aNsO2_TIRPp7Wn509MXkVkVw-zDyYc_TaJpReHMOigk7vDrg==&var=5596087&var3=769067736944087664&ymid=&rhd=1&os=windows&os_version=10.0.0 HTTP/1.1 Host: opmetapodor.com Connection: keep-alive Content-Length: 2073 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://opmetapodor.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oaidts=1704923556; prefetchAd_4662728=true; OAID=d36449c3fc5d2c86d4a195aa43f059a6; reverse=GmjEjTX2IJ3kqkkF8yYr35GL72Kg6Q6dCVhloRYlPnM
2024-01-10 21:53:28 UTC	2073	OUT	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 31 39 31 32 30 34 37 35 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 37 34 38 31 39 37 37 2c 22 72 65 71 75 65 73 74 49 6d 70 72 65 73 73 69 6f 6e 22 3a 22 6c 46 51 41 75 33 62 30 35 72 76 36 33 33 38 69 72 64 74 77 4f 59 6b 53 6a 43 64 59 51 5a 50 69 6d 6f 61 56 6a 46 41 4b 66 74 71 30 6a 4f 4a 34 66 59 54 6d 4c 6d 4f 49 74 49 74 58 53 62 38 37 44 66 6e 4a 33 4f 69 49 65 6e 4f 5a 6b 39 44 79 32 5a 2d 65 54 4f 35 39 79 54 68 55 43 5a 49 32 32 47 47 4b 68 70 67 58 6e 35 79 56 44 7a 64 5f 77 59 30 57 70 4b 67 56 4d 56 69 5f 59 78 69 5f 63 47 61 66 4c 33 55 30 6c 66 36 68 71 70 31 78 55 6f 79 4d 62 4b 64 63 50 32 66 59 54 4c 53 48 4b 4f 63 4f 47 31 37 31 78 48 66 42 48 73 47 35 70 63 33 42 37 57 58 57 63 72 53 70 53 50 52 33 Data Ascii: {"bannerId":19120475,"campaignId":7481977,"requestImpression":"lFQAu3b05rv6338irdtwOYkSjCdYQZPimoaVjFAKftq0jOJ4fYTmLmOItItXSb87DfnJ3OiIenOZk9Dy2Z-eTO59yThUCZI22GGKhpgXn5yVDzd_wY0WpKgVMVi_Yxi_cGafL3U0lf6hqp1xUoyMbKdcP2fYTLSHKOcOG171xHfBHsG5pc3B7WXWcrSpSPR3
2024-01-10 21:53:29 UTC	1249	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:53:29 GMT Content-Length: 0 Connection: close X-Trace-Id: 6dfe6b92dca3c68e89a6b42aff69cf22 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: https://opmetapodor.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AQDSNdrwb4Qf5qnSczuNZVIv3f%2FR5T38D9Bk%2F5CuE9y8tcTACIo6HamoAa4QVfM3Nt1pD1zHSobNb%2BcZmBF3P12BgpwuobJ4wNdjM%2FcrsLDvbbJJsdQl5s%2BuIykZ34xMmGA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438272b1ca44255-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.16	50061	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:28 UTC	1593	OUT	POST /cat.php?userId=d36449c3fc5d2c86d4a195aa43f059a6&zoneid=4662728&rb=Rdb6wZEO29zI5JtWbTgBMBMFK3Hq-MEScKP8etoUXWt3mdWS3wWsTsP3kSqAWpbNFN1dCn6CYruMdsHiPsHpNrvwnbvh96tHmYdBiU46RODeWhjXYxRc2nUDsCdCO1IYpgc-WdiFaZIQvADzoLdt660KFd3CQnSV0JefYCmIdQr3HkdyWUMcr7ixUZ0NA9T5k9PWd5QcPzHYyXX2KLUOww4E_aWbWCgrAxXAEpEN3forRgNuyof1bfhSMQleRGuBYG9QLY077R8fAu5eYgIHtOdcquR56sK3EVT5-79aIbw45uwbCLeC9OPBGoLFc7dcFsFGfPSX-l0xCXzweCDoLtxwODIyvjKVg6ztukTV4SYUIofL7Xx9BMyq2xl1YV7lnzjZrZ3jgq9uvQfg1ULmn2inVBeIy67aLeUagmvLmFdPH-JezSdIdJxPCMU_42FgBx9QhjpzIuYLBYhZ8Fn3f8HOl-Mmu5qPTg6zZrwo0y5baW7oPL4LK0aNsO2_TIRPp7Wn509MXkVkVw-zDyYc_TaJpReHMOigk7vDrg==&var=5596087&var3=769067736944087664&ymid=&rhd=1&os=windows&os_version=10.0.0 HTTP/1.1 Host: opmetapodor.com Connection: keep-alive Content-Length: 2073 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://opmetapodor.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/?s=769067736944087664&ssk=98629cd0d428ca851e6b1debdd905e13&svar=1704923555&z=5596087&pz=4662709&tb=4662728&l=WGYVPKNMPvY53zb&btz={btz}&bto={bto} Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oaidts=1704923556; prefetchAd_4662728=true; OAID=d36449c3fc5d2c86d4a195aa43f059a6; reverse=GmjEjTX2IJ3kqkkF8yYr35GL72Kg6Q6dCVhloRYlPnM
2024-01-10 21:53:28 UTC	2073	OUT	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 31 39 31 32 30 34 37 35 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 37 34 38 31 39 37 37 2c 22 72 65 71 75 65 73 74 49 6d 70 72 65 73 73 69 6f 6e 22 3a 22 6c 46 51 41 75 33 62 30 35 72 76 36 33 33 38 69 72 64 74 77 4f 59 6b 53 6a 43 64 59 51 5a 50 69 6d 6f 61 56 6a 46 41 4b 66 74 71 30 6a 4f 4a 34 66 59 54 6d 4c 6d 4f 49 74 49 74 58 53 62 38 37 44 66 6e 4a 33 4f 69 49 65 6e 4f 5a 6b 39 44 79 32 5a 2d 65 54 4f 35 39 79 54 68 55 43 5a 49 32 32 47 47 4b 68 70 67 58 6e 35 79 56 44 7a 64 5f 77 59 30 57 70 4b 67 56 4d 56 69 5f 59 78 69 5f 63 47 61 66 4c 33 55 30 6c 66 36 68 71 70 31 78 55 6f 79 4d 62 4b 64 63 50 32 66 59 54 4c 53 48 4b 4f 63 4f 47 31 37 31 78 48 66 42 48 73 47 35 70 63 33 42 37 57 58 57 63 72 53 70 53 50 52 33 Data Ascii: {"bannerId":19120475,"campaignId":7481977,"requestImpression":"lFQAu3b05rv6338irdtwOYkSjCdYQZPimoaVjFAKftq0jOJ4fYTmLmOItItXSb87DfnJ3OiIenOZk9Dy2Z-eTO59yThUCZI22GGKhpgXn5yVDzd_wY0WpKgVMVi_Yxi_cGafL3U0lf6hqp1xUoyMbKdcP2fYTLSHKOcOG171xHfBHsG5pc3B7WXWcrSpSPR3
2024-01-10 21:53:29 UTC	1247	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:53:28 GMT Content-Length: 0 Connection: close X-Trace-Id: a1a931a6fc0b5b05e88a9dbb188e464d Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64 Access-Control-Allow-Origin: https://opmetapodor.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mTJHy5JEnnRcN8oPJVw7fkdd%2F517TxFGJXb5eLAfbcSV1WmbemsL1gKXrlqDGtdBhZdiYgA92f03ANejD9kih%2FIv%2FwffvS7DKe%2BbLpIIpDkoOFldLGnlSVlShj9fbB8nHCQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438272b1dde4205-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.16	50065	172.64.166.17	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:28 UTC	665	OUT	GET /key?pub=0&id=opmetapodor.com HTTP/1.1 Host: opmetapodor.com Connection: keep-alive X-Oaid: efe83b1130104efea0d475e2cb75464f User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://opmetapodor.com/sw-check-permissions/4662709?var=5596087&ymid=769067736944087664&uhd=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oaidts=1704923556; prefetchAd_4662728=true; OAID=d36449c3fc5d2c86d4a195aa43f059a6; reverse=GmjEjTX2IJ3kqkkF8yYr35GL72Kg6Q6dCVhloRYlPnM
2024-01-10 21:53:29 UTC	868	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:53:29 GMT Content-Type: application/json; charset=utf-8 Content-Length: 203 Connection: close Vary: Accept-Encoding X-Trace-Id: 57c66afd232f24a7e7bcf70f1a0235ff Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=41TTRev6k3BWrHpdx2nGtFWXICrezWNMS5yt0H5Et9BCcxFYtN51EZUM%2BXCN6k3HcPskjAIy2GksrTkc8FA9EndLPKtMv0MuLA5oBJqBYBkelk8OW3y0ZH3ZQNI1RaYm10Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438272d6818439f-EWR alt-svc: h3=":443"; ma=86400
2024-01-10 21:53:29 UTC	203	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 6b 65 79 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 30 36 39 66 35 63 33 32 2d 64 63 36 33 2d 33 39 62 66 2d 38 36 34 30 2d 34 35 36 30 66 37 62 35 35 62 32 31 22 2c 22 69 64 22 3a 37 38 38 30 38 33 36 33 39 2c 22 6b 65 79 22 3a 22 42 4f 39 36 6f 49 54 32 56 32 32 57 33 52 39 62 57 45 45 44 62 2d 31 79 6f 6a 76 5f 33 30 36 5f 59 54 36 6c 54 5a 55 37 74 61 76 76 4e 36 6f 79 45 50 2d 34 68 51 73 4f 57 58 34 4f 51 4e 5f 49 4b 4e 37 38 74 6e 31 79 6e 55 71 46 68 4f 53 34 73 48 79 46 4e 6f 41 22 7d 0a Data Ascii: {"status":true,"code":"key","message":"","trace_id":"069f5c32-dc63-39bf-8640-4560f7b55b21","id":788083639,"key":"BO96oIT2V22W3R9bWEEDb-1yojv_306_YT6lTZU7tavvN6oyEP-4hQsOWX4OQN_IKN78tn1ynUqFhOS4sHyFNoA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.16	50063	108.62.123.181	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:28 UTC	897	OUT	GET /6517545af1a71e0001de416a?sub1=4662728&sub2=7481977&sub3=broadband&sub4=chrome&sub5=windows&sub6=US&sub7=19120475&sub8=det%20africa%20pty%20ltd&sub9=desktop&ref_id=769067744317682211&cost=0.000250&os_version=10.0.0&oaid=efe83b1130104efea0d475e2cb75464f HTTP/1.1 Host: track.routes.name Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:29 UTC	822	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Wed, 10 Jan 2024 21:53:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 949 Connection: close Set-Cookie: redcmps=W3siaWQiOiI2NTE3NTQ1YWYxYTcxZTAwMDFkZTQxNmEiLCJ0IjoiMjAyNC0wMS0xMFQyMTo1MzoyOS4wNDk1Nzc5ODVaIn1d; Path=/; Domain=track.routes.name; Expires=Thu, 11 Jan 2024 21:53:29 GMT; Secure; SameSite=None Set-Cookie: redhash=NjU5ZjExZDk5OWZjMGEwMDAxNTVhMjlkfDB8NjUxNzU0NWFmMWE3MWUwMDAxZGU0MTZhfHxjMDY4MjdjNC00MmUxLTQwNjktYjIzMi0zZjVkZjYyOWFiZmN8MTcwNDkyMzYwOQ==; Path=/; Domain=track.routes.name; Expires=Thu, 09 Jan 2025 21:53:29 GMT; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
2024-01-10 21:53:29 UTC	949	IN	Data Raw: 0a 09 09 3c 68 74 6d 6c 3e 0a 09 09 09 3c 68 65 61 64 3e 0a 09 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 65 76 65 72 27 3e 0a 09 09 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 72 65 66 72 65 73 68 27 20 63 6f 6e 74 65 6e 74 3d 27 30 3b 68 74 74 70 73 3a 2f 2f 75 6e 64 65 72 73 74 61 6e 64 69 6e 67 65 72 72 6f 72 73 2e 63 6f 6d 2f 6c 61 6e 64 69 6e 67 2f 3f 61 3d 64 6f 6d 61 69 6e 2d 61 62 26 75 74 6d 5f 73 6f 75 72 63 65 3d 33 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 36 35 39 66 31 31 64 39 39 39 66 63 30 61 30 30 30 31 35 35 61 32 39 64 26 74 69 74 6c 65 3d 55 70 67 72 61 64 65 2b 59 6f 75 72 2b 57 68 69 63 68 42 72 6f 77 73 65 72 2b 45 78 70 65 72 69 65 6e 63 65 2e 26 69 6e Data Ascii: <html><head><meta name='referrer' content='never'><meta http-equiv='refresh' content='0;https://understandingerrors.com/landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.16	50064	108.62.123.181	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:29 UTC	813	OUT	GET /favicon.ico HTTP/1.1 Host: track.routes.name Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: redcmps=W3siaWQiOiI2NTE3NTQ1YWYxYTcxZTAwMDFkZTQxNmEiLCJ0IjoiMjAyNC0wMS0xMFQyMTo1MzoyOS4wNDk1Nzc5ODVaIn1d; redhash=NjU5ZjExZDk5OWZjMGEwMDAxNTVhMjlkfDB8NjUxNzU0NWFmMWE3MWUwMDAxZGU0MTZhfHxjMDY4MjdjNC00MmUxLTQwNjktYjIzMi0zZjVkZjYyOWFiZmN8MTcwNDkyMzYwOQ==
2024-01-10 21:53:29 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx/1.20.2 Date: Wed, 10 Jan 2024 21:53:29 GMT Content-Type: text/html Content-Length: 555 Connection: close
2024-01-10 21:53:29 UTC	555	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.16	50067	172.67.152.171	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:29 UTC	1424	OUT	GET /landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&subid=master&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages. HTTP/1.1 Host: understandingerrors.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:29 UTC	1305	IN	HTTP/1.1 302 Found Date: Wed, 10 Jan 2024 21:53:29 GMT Content-Length: 0 Connection: close Location: https://understandingerrors.com/landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages. Set-Cookie: 2=b; max-age=2 Set-Cookie: vcid=659f11d999fc0a000155a29d; max-age=525600; path=/; domain=understandingerrors.com Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N2%2F12dbV3%2BaAq73IwuvbAaZyQ7uZ4S1hai%2BS%2B51u8KtKgRzvvL0R3V%2FL727ZWU9Ba7sYDVpge7Ugz6qGtADMVqhHNdX1XOBH9DuJIMFVOOaoAW2NVV9w5%2FjVnm65BXw%2Beyhaqj1JPIgFOw%3D%3D"}],"group":"cf-nel","max_age":604800}
2024-01-10 21:53:29 UTC	149	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 34 33 38 32 37 32 66 61 66 30 35 36 66 61 34 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8438272faf056fa4-IADalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.16	50068	142.250.31.100	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:29 UTC	406	OUT	POST /checkin HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 86 Content-Type: application/x-protobuf Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:29 UTC	86	OUT	Data Raw: 10 00 1a 2a 31 2d 64 61 33 39 61 33 65 65 35 65 36 62 34 62 30 64 33 32 35 35 62 66 65 66 39 35 36 30 31 38 39 30 61 66 64 38 30 37 30 39 22 18 60 03 6a 14 08 01 12 0e 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 18 01 69 00 00 00 00 00 00 00 00 70 03 b0 01 00 Data Ascii: *1-da39a3ee5e6b4b0d3255bfef95601890afd80709"`j117.0.5938.132ip
2024-01-10 21:53:29 UTC	1061	IN	HTTP/1.1 200 OK Content-Type: application/x-protobuffer Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 10 Jan 2024 21:53:29 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /checkin/_/AndroidCheckinHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:53:29 UTC	191	IN	Data Raw: 31 66 30 0d 0a 08 01 18 ac f6 f6 aa cf 31 2a 21 0a 0a 61 6e 64 72 6f 69 64 5f 69 64 12 13 35 36 34 30 36 30 33 37 34 30 30 39 34 35 32 35 35 34 30 2a 12 0a 0d 63 68 72 6f 6d 65 5f 64 65 76 69 63 65 12 01 31 2a 14 0a 0e 64 65 76 69 63 65 5f 63 6f 75 6e 74 72 79 12 02 75 73 2a 29 0a 18 64 65 76 69 63 65 5f 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 74 69 6d 65 12 0d 31 37 30 34 39 32 30 34 30 30 30 30 30 39 64 f0 12 67 37 73 47 4e 41 d6 25 84 89 3b 9a 74 6f 48 00 5a 1f 59 35 34 50 49 5f 4a 4a 57 4e 6f 59 6f 4c 50 67 4e 37 65 2d 75 44 42 54 73 74 74 56 7a 78 67 62 b7 02 41 Data Ascii: 1f01!android_id5640603740094525540chrome_device1device_countryus)device_registration_time17049204000009dg7sGNA%;toHZY54PI_JJWNoYoLPgN7e-uDBTsttVzxgbA
2024-01-10 21:53:29 UTC	312	IN	Data Raw: 42 46 45 74 31 58 71 61 64 58 6d 7a 4e 71 45 6c 57 43 69 77 33 59 58 41 30 5f 75 31 75 4d 50 31 35 59 61 2d 50 46 47 78 57 32 63 59 56 58 72 73 77 51 6e 32 31 47 73 2d 52 65 4f 54 51 50 7a 34 47 41 5f 47 33 4e 78 53 48 48 79 52 69 35 4c 78 6e 6f 48 75 66 51 33 74 6f 67 45 6f 5f 32 6e 4e 6e 45 52 46 79 6f 34 78 32 38 74 4a 52 4f 54 43 48 4c 6c 44 6f 72 4c 34 6f 55 76 71 65 47 5f 4e 4e 49 75 67 54 34 65 55 69 47 73 5a 63 6c 52 5a 7a 6e 53 59 6d 69 6b 37 51 55 6b 38 63 4a 46 4a 30 64 78 45 32 73 4d 50 65 65 52 54 49 6c 39 6d 2d 6b 71 79 77 51 58 35 58 44 57 4d 71 30 4f 33 34 6a 46 5f 35 56 4f 66 77 33 38 33 61 48 5f 36 69 48 6d 63 4d 77 45 47 62 57 51 56 67 31 42 59 4f 4f 34 4c 7a 73 43 77 54 65 6e 43 67 6e 57 77 58 4a 4d 4b 71 65 37 49 48 35 44 44 55 73 34 Data Ascii: BFEt1XqadXmzNqElWCiw3YXA0_u1uMP15Ya-PFGxW2cYVXrswQn21Gs-ReOTQPz4GA_G3NxSHHyRi5LxnoHufQ3togEo_2nNnERFyo4x28tJROTCHLlDorL4oUvqeG_NNIugT4eUiGsZclRZznSYmik7QUk8cJFJ0dxE2sMPeeRTIl9m-kqywQX5XDWMq0O34jF_5VOfw383aH_6iHmcMwEGbWQVg1BYOO4LzsCwTenCgnWwXJMKqe7IH5DDUs4
2024-01-10 21:53:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.16	50066	172.67.152.171	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:29 UTC	1455	OUT	GET /landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages. HTTP/1.1 Host: understandingerrors.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 2=b; vcid=659f11d999fc0a000155a29d
2024-01-10 21:53:29 UTC	558	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:53:29 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 16999 Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7n4zypjEtHW%2FZYjjPZshBuOdOpidbRfPV1UVWooRKXoVHOfHRMj8Dn4eqdU0UuP%2FjrzgTlUOquQ7Fd7N7emM2Nq4rrK4QF8vHEpUsWt4uyY%2BE7QxnDHH1QbRBzHhZYUrJDKTKa%2B6ezWPUw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 843827315cd68260-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:53:29 UTC	811	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 62 6f 6f 74 73 74 72 61 70 40 35 2e 30 2e 32 2f 64 69 73 74 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 6e 74 65 67 72 69 Data Ascii: <!doctype html><html lang="en" class="h-100"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link href="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css" rel="stylesheet" integri
2024-01-10 21:53:29 UTC	1369	IN	Data Raw: 67 53 4e 45 43 55 6f 41 47 69 42 41 30 51 4a 57 69 41 4b 45 45 44 52 41 6b 61 49 45 72 51 41 46 47 43 42 6f 67 53 4e 45 43 55 6f 41 47 69 42 41 30 51 4a 57 69 41 4b 45 45 44 52 41 6b 61 49 45 72 51 41 46 47 43 42 6f 67 53 4e 45 43 55 6f 41 47 69 42 41 30 51 4a 57 69 41 4b 45 45 44 52 41 6b 61 49 45 72 51 41 46 47 43 42 6f 67 53 4e 45 43 55 6f 41 47 69 42 41 30 51 4a 57 69 41 4b 45 45 44 52 41 6b 61 49 45 72 51 41 46 47 43 42 6f 67 53 4e 45 43 55 6f 42 6d 37 39 59 36 43 51 42 42 45 55 54 53 74 46 73 59 50 49 32 62 75 66 35 74 69 32 67 6f 56 44 62 79 68 7a 36 6e 34 70 5a 63 43 51 67 6b 30 51 43 69 42 42 67 67 6c 30 41 43 68 42 42 6f 67 6c 45 41 44 68 42 4a 6f 67 46 41 43 44 52 42 4b 6f 41 46 43 43 54 52 41 4b 49 45 47 43 43 58 51 41 4b 45 45 47 69 43 55 51 Data Ascii: gSNECUoAGiBA0QJWiAKEEDRAkaIErQAFGCBogSNECUoAGiBA0QJWiAKEEDRAkaIErQAFGCBogSNECUoAGiBA0QJWiAKEEDRAkaIErQAFGCBogSNECUoAGiBA0QJWiAKEEDRAkaIErQAFGCBogSNECUoBm79Y6CQBBEUTStFsYPI2buf5ti2goVDbyhz6n4pZcCQgk0QCiBBggl0AChBBoglEADhBJogFACDRBKoAFCCTRAKIEGCCXQAKEEGiCUQ
2024-01-10 21:53:29 UTC	1369	IN	Data Raw: 37 33 53 6c 66 48 66 73 34 35 58 4f 68 42 66 6f 72 4c 47 69 33 36 77 74 61 36 71 62 6a 2b 4a 7a 6c 55 78 38 52 55 78 59 4b 4c 64 43 72 31 41 68 30 42 31 73 52 74 4e 59 64 34 73 56 72 6f 51 58 36 38 33 79 77 48 36 68 67 62 61 45 46 75 6b 53 67 67 52 56 71 46 56 71 67 53 77 51 61 71 47 61 35 30 41 4a 64 49 74 42 41 4e 63 75 46 46 75 67 53 67 51 59 71 6d 72 4c 38 55 51 36 42 4c 68 46 6f 6f 4b 59 70 63 2b 7a 69 51 77 4a 64 49 74 42 41 56 56 4f 78 7a 77 4a 64 49 74 42 41 62 51 4c 39 53 51 49 4e 58 45 4f 67 47 78 4a 6f 34 42 6f 43 33 5a 42 41 41 39 63 51 36 49 59 45 47 72 69 47 51 44 63 6b 30 4d 41 31 42 4c 71 68 63 36 44 37 41 46 67 69 30 41 32 64 41 7a 30 63 41 46 71 37 48 77 53 36 59 4c 67 42 2b 48 59 43 50 53 66 51 77 43 59 49 39 4a 78 41 41 35 73 67 30 4f Data Ascii: 73SlfHfs45XOhBforLGi36wta6qbj+JzlUx8RUxYKLdCr1Ah0B1sRtNYd4sVroQX683ywH6hgbaEFukSggRVqFVqgSwQaqGa50AJdItBANcuFFugSgQYqmrL8UQ6BLhFooKYpc+ziQwJdItBAVVOxzwJdItBAbQL9SQINXEOgGxJo4BoC3ZBAA9cQ6IYEGriGQDck0MA1BLqhc6D7AFgi0A2dAz0cAFq7HwS6YLgB+HYCPSfQwCYI9JxAA5sg0O
2024-01-10 21:53:29 UTC	1369	IN	Data Raw: 38 4e 43 70 4a 74 42 56 75 44 32 6d 75 4c 55 49 4e 49 78 71 4d 74 43 6a 39 30 38 6e 6d 6b 42 58 51 70 38 65 6b 30 44 44 4c 47 75 42 39 6a 36 34 46 51 68 30 4e 64 54 37 35 78 4a 4e 6f 47 47 58 76 55 44 37 4d 62 6d 56 59 6b 77 66 59 69 54 51 75 39 48 76 78 78 77 65 48 35 4e 41 77 77 79 44 67 56 37 33 45 42 31 54 6c 69 39 79 6a 67 52 36 46 33 70 76 7a 4c 68 68 7a 42 51 4a 4e 43 77 77 47 57 68 2f 53 65 73 50 39 43 52 48 41 76 31 36 36 75 38 59 74 34 32 5a 43 44 54 61 5a 7a 50 51 66 73 7a 66 6e 6d 69 35 49 58 56 34 4e 66 56 33 79 61 59 78 63 77 65 30 7a 6d 69 67 76 52 2f 63 44 54 47 4c 45 4f 68 36 71 4c 38 76 66 4a 64 6e 41 67 32 37 7a 41 62 36 31 71 46 4f 49 67 53 36 4a 76 72 63 6d 41 51 61 6c 74 6b 4e 39 4f 4b 68 6a 69 49 45 75 69 37 71 31 39 43 34 2b 4c 38 Data Ascii: 8NCpJtBVuD2muLUINIxqMtCj908nmkBXQp8ek0DDLGuB9j64FQh0NdT75xJNoGGXvUD7MbmVYkwfYiTQu9HvxxweH5NAwwyDgV73EB1Tli9yjgR6F3pvzLhhzBQJNCwwGWh/SesP9CRHAv166u8Yt42ZCDTaZzPQfszfnmi5IXV4NfV3yaYxcwe0zmigvR/cDTGLEOh6qL8vfJdnAg27zAb61qFOIgS6JvrcmAQaltkN9OKhjiIEui7q19C4+L8
2024-01-10 21:53:29 UTC	1369	IN	Data Raw: 6b 6e 51 49 47 69 69 42 41 32 43 4a 6b 72 51 49 47 69 69 42 41 32 43 4a 6b 72 51 49 47 69 69 42 41 32 43 4a 6b 72 51 49 47 69 69 42 41 32 43 4a 6b 72 51 49 47 69 69 42 41 32 43 4a 6b 72 51 49 47 69 69 42 41 32 43 4a 6b 72 51 49 47 69 69 42 41 32 43 4a 6b 72 51 49 47 69 69 42 41 32 43 4a 6b 72 51 48 48 62 71 32 41 61 42 47 41 67 43 59 47 6f 6b 43 4a 45 67 6f 66 38 79 36 65 42 31 30 57 72 39 6e 69 6c 69 45 44 53 6c 42 41 32 43 70 70 53 67 51 64 43 55 45 6a 51 49 6d 6c 4b 43 42 6b 46 54 53 74 41 67 61 45 6f 4a 47 67 52 4e 4b 55 48 44 6e 6b 47 2f 4f 4d 43 43 34 32 30 5a 4e 4d 41 4a 42 41 31 51 53 74 41 41 70 51 51 4e 55 45 72 51 41 4b 55 45 44 56 42 4b 30 41 43 6c 42 41 31 51 53 74 41 41 70 51 51 4e 55 45 72 51 41 4b 55 45 44 56 42 4b 30 41 43 6c 42 41 31 51 Data Ascii: knQIGiiBA2CJkrQIGiiBA2CJkrQIGiiBA2CJkrQIGiiBA2CJkrQIGiiBA2CJkrQIGiiBA2CJkrQIGiiBA2CJkrQIGiiBA2CJkrQHHbq2AaBGAgCYGokCJEgof8y6eB10Wr9niliEDSlBA2CppSgQdCUEjQImlKCBkFTStAgaEoJGgRNKUHDnkG/OMCC420ZNMAJBA1QStAApQQNUErQAKUEDVBK0AClBA1QStAApQQNUErQAKUEDVBK0AClBA1Q
2024-01-10 21:53:29 UTC	1369	IN	Data Raw: 41 42 51 67 6b 61 49 4a 53 67 41 55 49 4a 47 69 43 55 6f 41 46 43 43 52 6f 67 6c 4b 41 42 51 67 6b 61 49 4a 53 67 41 55 49 4a 47 69 43 55 6f 41 46 43 43 52 6f 67 6c 4b 41 42 51 67 6b 61 49 4a 53 67 41 55 49 4a 47 69 43 55 6f 41 46 43 43 52 6f 67 6c 4b 44 68 73 58 50 48 4e 67 67 45 55 51 77 46 30 77 32 4d 51 41 4a 4f 34 67 4c 36 4c 35 4d 61 56 76 71 42 54 38 77 30 34 4f 79 46 68 6c 49 43 44 56 44 71 67 6f 47 2b 76 38 61 39 31 34 37 58 76 4c 58 6a 50 62 39 2f 57 30 43 66 43 77 62 36 6b 33 48 6e 32 70 46 35 61 38 65 5a 63 63 63 43 2b 67 68 30 49 74 41 43 44 5a 55 45 4f 68 46 6f 67 59 5a 4b 41 70 30 49 74 45 42 44 4a 59 46 4f 42 46 71 67 6f 5a 4a 41 4a 77 49 74 30 46 42 4a 6f 42 4f 42 46 6d 69 6f 4a 4e 43 4a 51 41 73 30 56 42 4c 6f 52 4b 41 46 47 69 6f 4a 64 Data Ascii: ABQgkaIJSgAUIJGiCUoAFCCRoglKABQgkaIJSgAUIJGiCUoAFCCRoglKABQgkaIJSgAUIJGiCUoAFCCRoglKDhsXPHNggEUQwF0w2MQAJO4gL6L5MaVvqBT8w04OyFhlICDVDqgoG+v8a9147XvLXjPb9/W0CfCwb6k3Hn2pF5a8eZcccC+gh0ItACDZUEOhFogYZKAp0ItEBDJYFOBFqgoZJAJwIt0FBJoBOBFmioJNCJQAs0VBLoRKAFGioJd
2024-01-10 21:53:29 UTC	1369	IN	Data Raw: 51 4d 4f 2b 49 45 6d 69 59 64 30 51 4a 4e 4d 77 37 6f 67 51 61 35 68 31 52 54 77 62 36 43 2f 7a 52 45 66 56 6b 6f 41 45 57 43 44 52 41 6c 45 41 44 52 41 6b 30 51 4a 52 41 41 30 51 4a 4e 45 43 55 51 41 4e 45 43 54 52 41 6c 45 41 44 52 41 6b 30 51 4a 52 41 41 30 51 4a 4e 45 43 55 51 41 4e 45 43 54 52 41 6c 45 41 44 52 41 6b 30 51 4a 52 41 41 30 51 4a 4e 45 43 55 51 41 4e 45 43 54 52 41 31 4a 4f 42 2f 67 43 75 33 67 4d 45 47 75 59 64 55 51 49 4e 38 34 34 6f 67 59 5a 35 52 35 52 41 77 37 77 6a 53 71 42 68 33 68 45 6c 30 44 44 76 69 42 4a 6f 6d 48 64 45 43 66 53 50 6e 54 6f 6d 41 68 41 41 59 67 43 32 6c 67 48 2f 64 6a 48 42 30 4c 38 6d 49 67 4c 7a 51 69 6c 42 77 37 78 51 53 74 41 77 4c 35 51 53 4e 4d 77 4c 70 51 51 4e 38 30 49 70 51 63 4f 38 55 45 72 51 4d 43 Data Ascii: QMO+IEmiYd0QJNMw7ogQa5h1RTwb6C/zREfVkoAEWCDRAlEADRAk0QJRAA0QJNECUQANECTRAlEADRAk0QJRAA0QJNECUQANECTRAlEADRAk0QJRAA0QJNECUQANECTRA1JOB/gCu3gMEGuYdUQIN844ogYZ5R5RAw7wjSqBh3hEl0DDviBJomHdECfSPnTomAhAAYgC2lgH/djHB0L8mIgLzQilBw7xQStAwL5QSNMwLpQQN80IpQcO8UErQMC
2024-01-10 21:53:29 UTC	1369	IN	Data Raw: 41 2b 73 43 36 2f 53 2b 64 36 61 49 67 62 73 45 66 55 7a 51 77 46 32 43 50 69 5a 6f 34 43 35 42 48 78 4d 30 63 4a 65 67 6a 77 6b 61 75 45 76 51 78 77 51 4e 33 50 58 49 6f 4c 2f 2f 50 73 4c 76 41 4c 7a 77 79 4b 41 42 64 68 41 30 51 4a 53 67 41 61 49 45 44 52 41 6c 61 49 41 6f 51 51 4e 45 43 52 6f 67 53 74 41 41 55 59 49 47 69 42 49 30 51 4a 53 67 41 61 49 45 44 52 41 6c 61 49 41 6f 51 51 4e 45 43 52 6f 67 53 74 41 41 55 59 49 47 69 42 49 30 51 4a 53 67 41 61 49 45 44 52 41 6c 61 49 41 6f 51 51 4e 45 43 52 6f 67 53 74 41 41 55 59 38 4d 2b 67 64 34 6f 79 48 71 6b 55 46 2f 41 57 38 30 52 41 6b 61 31 68 75 69 42 41 33 72 44 56 47 43 68 76 57 47 4b 45 48 44 65 6b 4f 55 6f 47 47 39 49 55 72 51 73 4e 34 51 4a 57 68 59 62 34 67 53 4e 4b 77 33 52 41 6b 61 31 68 75 Data Ascii: A+sC6/S+d6aIgbsEfUzQwF2CPiZo4C5BHxM0cJegjwkauEvQxwQN3PXIoL//PsLvALzwyKABdhA0QJSgAaIEDRAlaIAoQQNECRogStAAUYIGiBI0QJSgAaIEDRAlaIAoQQNECRogStAAUYIGiBI0QJSgAaIEDRAlaIAoQQNECRogStAAUY8M+gd4oyHqkUF/AW80RAka1huiBA3rDVGChvWGKEHDekOUoGG9IUrQsN4QJWhYb4gSNKw3RAka1hu
2024-01-10 21:53:29 UTC	1369	IN	Data Raw: 66 65 72 72 65 72 70 6f 6c 69 63 79 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 66 6f 6f 74 65 72 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 20 66 69 78 65 64 2d 62 6f 74 74 6f 6d 20 6d 74 2d 61 75 74 6f 20 70 79 2d 33 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 70 78 2d 32 22 20 68 72 65 66 3d 22 2f 3f 61 3d 70 72 69 76 61 63 79 22 3e 50 72 69 76 61 63 79 3c 2f 61 3e 20 7c 20 3c 61 20 63 6c 61 73 73 3d 22 70 78 2d 32 22 20 68 72 65 66 3d 22 2f 3f 61 3d 74 65 72 6d 73 22 3e 54 65 72 6d 73 3c 2f 61 3e 20 7c 20 3c 61 20 63 6c 61 73 73 3d Data Ascii: ferrerpolicy="no-referrer"></script></head><body class="h-100"><footer class="footer fixed-bottom mt-auto py-3"><div class="container text-center"><a class="px-2" href="/?a=privacy">Privacy</a> \| <a class="px-2" href="/?a=terms">Terms</a> \| <a class=
2024-01-10 21:53:29 UTC	1369	IN	Data Raw: 61 57 52 30 61 44 30 69 4d 7a 41 69 49 47 68 6c 61 57 64 6f 64 44 30 69 4d 7a 41 69 50 67 30 4b 49 43 41 38 63 47 46 30 61 43 42 6d 61 57 78 73 4c 58 4a 31 62 47 55 39 49 6d 56 32 5a 57 35 76 5a 47 51 69 49 47 51 39 49 6b 30 79 4d 69 34 31 4f 54 51 67 4d 79 34 31 54 44 67 75 4d 44 59 79 49 44 45 34 4c 6a 45 34 4f 47 77 74 4e 69 34 32 4e 54 59 74 4e 69 34 32 4d 6a 56 4d 4d 43 41 78 4d 32 77 34 4c 6a 41 32 4d 79 41 34 54 44 49 30 49 44 51 75 4f 54 4d 33 65 69 49 67 5a 6d 6c 73 62 44 30 69 49 7a 55 7a 59 54 59 31 4e 69 49 76 50 67 30 4b 50 43 39 7a 64 6d 63 2b 44 51 6f 3d 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 73 2d 34 20 70 78 2d 32 22 3e 43 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 79 6f 75 72 20 62 72 6f 77 73 65 72 3c 2f 73 70 61 6e 3e 20 Data Ascii: aWR0aD0iMzAiIGhlaWdodD0iMzAiPg0KICA8cGF0aCBmaWxsLXJ1bGU9ImV2ZW5vZGQiIGQ9Ik0yMi41OTQgMy41TDguMDYyIDE4LjE4OGwtNi42NTYtNi42MjVMMCAxM2w4LjA2MyA4TDI0IDQuOTM3eiIgZmlsbD0iIzUzYTY1NiIvPg0KPC9zdmc+DQo="> <span class="fs-4 px-2">Compatible with your browser</span>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.16	50069	142.250.31.100	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:30 UTC	489	OUT	POST /c2dm/register3 HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 73 Authorization: AidLogin 5640603740094525540:8031213616009323990 Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:30 UTC	73	OUT	Data Raw: 61 70 70 3d 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 67 6d 73 26 64 65 76 69 63 65 3d 35 36 34 30 36 30 33 37 34 30 30 39 34 35 32 35 35 34 30 26 73 65 6e 64 65 72 3d 37 34 35 34 37 36 31 37 37 36 32 39 Data Ascii: app=com.google.android.gms&device=5640603740094525540&sender=745476177629
2024-01-10 21:53:30 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=UTF-8 Date: Wed, 10 Jan 2024 21:53:30 GMT Expires: Wed, 10 Jan 2024 21:53:30 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:53:30 UTC	36	IN	Data Raw: 31 65 0d 0a 45 72 72 6f 72 3d 50 48 4f 4e 45 5f 52 45 47 49 53 54 52 41 54 49 4f 4e 5f 45 52 52 4f 52 0d 0a Data Ascii: 1eError=PHONE_REGISTRATION_ERROR
2024-01-10 21:53:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.16	50070	142.250.31.100	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:30 UTC	490	OUT	POST /c2dm/register3 HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 270 Authorization: AidLogin 5640603740094525540:8031213616009323990 Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:30 UTC	270	OUT	Data Raw: 61 70 70 3d 63 6f 6d 2e 63 68 72 6f 6d 65 2e 77 69 6e 64 6f 77 73 26 58 2d 73 75 62 74 79 70 65 3d 77 70 3a 68 74 74 70 73 3a 2f 2f 6f 70 6d 65 74 61 70 6f 64 6f 72 2e 63 6f 6d 2f 25 32 33 35 31 36 38 45 34 42 39 2d 46 32 33 34 2d 34 36 46 33 2d 38 33 38 34 2d 45 32 45 41 31 42 39 45 35 2d 56 32 26 64 65 76 69 63 65 3d 35 36 34 30 36 30 33 37 34 30 30 39 34 35 32 35 35 34 30 26 73 63 6f 70 65 3d 47 43 4d 26 58 2d 73 63 6f 70 65 3d 47 43 4d 26 67 6d 73 76 3d 31 31 37 26 61 70 70 69 64 3d 65 54 50 4d 6a 62 50 38 4e 31 51 26 73 65 6e 64 65 72 3d 42 4f 39 36 6f 49 54 32 56 32 32 57 33 52 39 62 57 45 45 44 62 2d 31 79 6f 6a 76 5f 33 30 36 5f 59 54 36 6c 54 5a 55 37 74 61 76 76 4e 36 6f 79 45 50 2d 34 68 51 73 4f 57 58 34 4f 51 4e 5f 49 4b 4e 37 38 74 6e 31 79 Data Ascii: app=com.chrome.windows&X-subtype=wp:https://opmetapodor.com/%235168E4B9-F234-46F3-8384-E2EA1B9E5-V2&device=5640603740094525540&scope=GCM&X-scope=GCM&gmsv=117&appid=eTPMjbP8N1Q&sender=BO96oIT2V22W3R9bWEEDb-1yojv_306_YT6lTZU7tavvN6oyEP-4hQsOWX4OQN_IKN78tn1y
2024-01-10 21:53:30 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=UTF-8 Date: Wed, 10 Jan 2024 21:53:30 GMT Expires: Wed, 10 Jan 2024 21:53:30 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:53:30 UTC	36	IN	Data Raw: 31 65 0d 0a 45 72 72 6f 72 3d 50 48 4f 4e 45 5f 52 45 47 49 53 54 52 41 54 49 4f 4e 5f 45 52 52 4f 52 0d 0a Data Ascii: 1eError=PHONE_REGISTRATION_ERROR
2024-01-10 21:53:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.16	50075	104.17.24.14	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:30 UTC	567	OUT	GET /ajax/libs/UAParser.js/0.7.20/ua-parser.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://understandingerrors.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:30 UTC	950	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:53:30 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03cf3-38ee" Last-Modified: Mon, 04 May 2020 16:04:03 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Mon, 30 Dec 2024 21:53:30 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eRSmf7QaJnEht7Yj6EOz%2FAJN4peB2YfnVyuhSyF3sOFo8bDNXJu30A3W9INtHvWPG9Uqt%2B6BispOXDLaId6ae903wh24B6bqh%2F0CJ94iI4pMZRgaN6t38pMB3uDOE%2FhYjKLir%2BqC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 84382736099968ea-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:53:30 UTC	419	IN	Data Raw: 33 38 65 65 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 72 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 6d 3d 22 6f 62 6a 65 63 74 22 2c 73 3d 22 6d 6f 64 65 6c 22 2c 65 3d 22 6e 61 6d 65 22 2c 6f 3d 22 74 79 70 65 22 2c 6e 3d 22 76 65 6e 64 6f 72 22 2c 61 3d 22 76 65 72 73 69 6f 6e 22 2c 64 3d 22 61 72 63 68 69 74 65 63 74 75 72 65 22 2c 74 3d 22 63 6f 6e 73 6f 6c 65 22 2c 6c 3d 22 6d 6f 62 69 6c 65 22 2c 77 3d 22 74 61 62 6c 65 74 22 2c 62 3d 22 73 6d 61 72 74 74 76 22 2c 70 3d 22 77 65 61 72 61 62 6c 65 22 2c 66 3d 7b 65 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 73 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 69 29 73 5b 6f 5d Data Ascii: 38ee!function(r,u){"use strict";var c="function",i="undefined",m="object",s="model",e="name",o="type",n="vendor",a="version",d="architecture",t="console",l="mobile",w="tablet",b="smarttv",p="wearable",f={extend:function(i,s){var e={};for(var o in i)s[o]
2024-01-10 21:53:30 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 6d 61 6a 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 3f 69 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 5c 64 5c 2e 5d 2f 67 2c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 3a 75 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 22 22 29 7d 7d 2c 67 3d 7b 72 67 78 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 73 29 7b 66 6f 72 28 76 61 72 20 65 2c 6f 2c 72 2c 6e 2c 61 2c 64 2c 74 3d 30 3b 74 3c 73 2e 6c 65 6e 67 74 68 26 26 21 61 Data Ascii: nction(i){return i.toLowerCase()},major:function(i){return"string"==typeof i?i.replace(/[^\d\.]/g,"").split(".")[0]:u},trim:function(i){return i.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}},g={rgx:function(i,s){for(var e,o,r,n,a,d,t=0;t<s.length&&!a
2024-01-10 21:53:30 UTC	1369	IN	Data Raw: 65 72 73 69 6f 6e 5c 2f 28 5b 5c 77 5c 2e 2d 5d 2b 29 2f 69 2c 2f 28 6f 70 65 72 61 29 2e 2b 76 65 72 73 69 6f 6e 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6f 70 65 72 61 29 5b 5c 2f 5c 73 5d 2b 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 65 2c 61 5d 2c 5b 2f 28 6f 70 69 6f 73 29 5b 5c 2f 5c 73 5d 2b 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 65 2c 22 4f 70 65 72 61 20 4d 69 6e 69 22 5d 2c 61 5d 2c 5b 2f 5c 73 28 6f 70 72 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 65 2c 22 4f 70 65 72 61 22 5d 2c 61 5d 2c 5b 2f 28 6b 69 6e 64 6c 65 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6c 75 6e 61 73 63 61 70 65 7c 6d 61 78 74 68 6f 6e 7c 6e 65 74 66 72 6f 6e 74 7c 6a 61 73 6d 69 6e 65 7c 62 6c 61 7a 65 72 29 5b 5c 2f 5c 73 5d 3f 28 5b 5c 77 Data Ascii: ersion\/([\w\.-]+)/i,/(opera).+version\/([\w\.]+)/i,/(opera)[\/\s]+([\w\.]+)/i],[e,a],[/(opios)[\/\s]+([\w\.]+)/i],[[e,"Opera Mini"],a],[/\s(opr)\/([\w\.]+)/i],[[e,"Opera"],a],[/(kindle)\/([\w\.]+)/i,/(lunascape\|maxthon\|netfront\|jasmine\|blazer)[\/\s]?([\w
2024-01-10 21:53:30 UTC	1369	IN	Data Raw: 3f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 65 5d 2c 5b 2f 28 4c 42 42 52 4f 57 53 45 52 29 2f 69 5d 2c 5b 65 5d 2c 5b 2f 78 69 61 6f 6d 69 5c 2f 6d 69 75 69 62 72 6f 77 73 65 72 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 61 2c 5b 65 2c 22 4d 49 55 49 20 42 72 6f 77 73 65 72 22 5d 5d 2c 5b 2f 3b 66 62 61 76 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 3b 2f 69 5d 2c 5b 61 2c 5b 65 2c 22 46 61 63 65 62 6f 6f 6b 22 5d 5d 2c 5b 2f 73 61 66 61 72 69 5c 73 28 6c 69 6e 65 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 61 6e 64 72 6f 69 64 2e 2b 28 6c 69 6e 65 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 5c 2f 69 61 62 2f 69 5d 2c 5b 65 2c 61 5d 2c 5b 2f 68 65 61 64 6c 65 73 73 63 68 72 6f 6d 65 28 3f 3a 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 7c 5c 73 29 2f 69 5d 2c 5b 61 2c 5b 65 Data Ascii: ?([\w\.]+)/i],[e],[/(LBBROWSER)/i],[e],[/xiaomi\/miuibrowser\/([\w\.]+)/i],[a,[e,"MIUI Browser"]],[/;fbav\/([\w\.]+);/i],[a,[e,"Facebook"]],[/safari\s(line)\/([\w\.]+)/i,/android.+(line)\/([\w\.]+)\/iab/i],[e,a],[/headlesschrome(?:\/([\w\.]+)\|\s)/i],[a,[e
2024-01-10 21:53:30 UTC	1369	IN	Data Raw: 74 7c 69 63 65 61 70 65 7c 66 69 72 65 62 69 72 64 7c 70 68 6f 65 6e 69 78 7c 70 61 6c 65 6d 6f 6f 6e 7c 62 61 73 69 6c 69 73 6b 7c 77 61 74 65 72 66 6f 78 29 5c 2f 28 5b 5c 77 5c 2e 2d 5d 2b 29 24 2f 69 2c 2f 28 6d 6f 7a 69 6c 6c 61 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2e 2b 72 76 5c 3a 2e 2b 67 65 63 6b 6f 5c 2f 5c 64 2b 2f 69 2c 2f 28 70 6f 6c 61 72 69 73 7c 6c 79 6e 78 7c 64 69 6c 6c 6f 7c 69 63 61 62 7c 64 6f 72 69 73 7c 61 6d 61 79 61 7c 77 33 6d 7c 6e 65 74 73 75 72 66 7c 73 6c 65 69 70 6e 69 72 29 5b 5c 2f 5c 73 5d 3f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6c 69 6e 6b 73 29 5c 73 5c 28 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 67 6f 62 72 6f 77 73 65 72 29 5c 2f 3f 28 5b 5c 77 5c 2e 5d 2a 29 2f 69 2c 2f 28 69 63 65 5c 73 3f 62 72 6f 77 73 65 72 Data Ascii: t\|iceape\|firebird\|phoenix\|palemoon\|basilisk\|waterfox)\/([\w\.-]+)$/i,/(mozilla)\/([\w\.]+).+rv\:.+gecko\/\d+/i,/(polaris\|lynx\|dillo\|icab\|doris\|amaya\|w3m\|netsurf\|sleipnir)[\/\s]?([\w\.]+)/i,/(links)\s\(([\w\.]+)/i,/(gobrowser)\/?([\w\.]*)/i,/(ice\s?browser
2024-01-10 21:53:30 UTC	1369	IN	Data Raw: 70 70 6c 65 22 5d 2c 5b 6f 2c 6c 5d 5d 2c 5b 2f 28 62 6c 61 63 6b 62 65 72 72 79 29 5b 5c 73 2d 5d 3f 28 5c 77 2b 29 2f 69 2c 2f 28 62 6c 61 63 6b 62 65 72 72 79 7c 62 65 6e 71 7c 70 61 6c 6d 28 3f 3d 5c 2d 29 7c 73 6f 6e 79 65 72 69 63 73 73 6f 6e 7c 61 63 65 72 7c 61 73 75 73 7c 64 65 6c 6c 7c 6d 65 69 7a 75 7c 6d 6f 74 6f 72 6f 6c 61 7c 70 6f 6c 79 74 72 6f 6e 29 5b 5c 73 5f 2d 5d 3f 28 5b 5c 77 2d 5d 2a 29 2f 69 2c 2f 28 68 70 29 5c 73 28 5b 5c 77 5c 73 5d 2b 5c 77 29 2f 69 2c 2f 28 61 73 75 73 29 2d 3f 28 5c 77 2b 29 2f 69 5d 2c 5b 6e 2c 73 2c 5b 6f 2c 6c 5d 5d 2c 5b 2f 5c 28 62 62 31 30 3b 5c 73 28 5c 77 2b 29 2f 69 5d 2c 5b 73 2c 5b 6e 2c 22 42 6c 61 63 6b 42 65 72 72 79 22 5d 2c 5b 6f 2c 6c 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 28 74 72 61 6e Data Ascii: pple"],[o,l]],[/(blackberry)[\s-]?(\w+)/i,/(blackberry\|benq\|palm(?=\-)\|sonyericsson\|acer\|asus\|dell\|meizu\|motorola\|polytron)[\s_-]?([\w-]*)/i,/(hp)\s([\w\s]+\w)/i,/(asus)-?(\w+)/i],[n,s,[o,l]],[/\(bb10;\s(\w+)/i],[s,[n,"BlackBerry"],[o,l]],[/android.+(tran
2024-01-10 21:53:30 UTC	1369	IN	Data Raw: 73 5c 73 36 29 2f 69 5d 2c 5b 73 2c 5b 6e 2c 22 4d 6f 74 6f 72 6f 6c 61 22 5d 2c 5b 6f 2c 6c 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 5c 73 28 6d 7a 36 30 5c 64 7c 78 6f 6f 6d 5b 5c 73 32 5d 7b 30 2c 32 7d 29 5c 73 62 75 69 6c 64 5c 2f 2f 69 5d 2c 5b 73 2c 5b 6e 2c 22 4d 6f 74 6f 72 6f 6c 61 22 5d 2c 5b 6f 2c 77 5d 5d 2c 5b 2f 68 62 62 74 76 5c 2f 5c 64 2b 5c 2e 5c 64 2b 5c 2e 5c 64 2b 5c 73 2b 5c 28 5b 5c 77 5c 73 5d 2a 3b 5c 73 2a 28 5c 77 5b 5e 3b 5d 2a 29 3b 28 5b 5e 3b 5d 2a 29 2f 69 5d 2c 5b 5b 6e 2c 66 2e 74 72 69 6d 5d 2c 5b 73 2c 66 2e 74 72 69 6d 5d 2c 5b 6f 2c 62 5d 5d 2c 5b 2f 68 62 62 74 76 2e 2b 6d 61 70 6c 65 3b 28 5c 64 2b 29 2f 69 5d 2c 5b 5b 73 2c 2f 5e 2f 2c 22 53 6d 61 72 74 54 56 22 5d 2c 5b 6e 2c 22 53 61 6d 73 75 6e 67 22 5d 2c 5b Data Ascii: s\s6)/i],[s,[n,"Motorola"],[o,l]],[/android.+\s(mz60\d\|xoom[\s2]{0,2})\sbuild\//i],[s,[n,"Motorola"],[o,w]],[/hbbtv\/\d+\.\d+\.\d+\s+\([\w\s];\s(\w[^;]);([^;])/i],[[n,f.trim],[s,f.trim],[o,b]],[/hbbtv.+maple;(\d+)/i],[[s,/^/,"SmartTV"],[n,"Samsung"],[
2024-01-10 21:53:30 UTC	1369	IN	Data Raw: 68 72 6f 6d 65 63 61 73 74 22 5d 2c 5b 6e 2c 22 47 6f 6f 67 6c 65 22 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 3b 5c 73 28 67 6c 61 73 73 29 5c 73 5c 64 2f 69 5d 2c 5b 73 2c 5b 6e 2c 22 47 6f 6f 67 6c 65 22 5d 2c 5b 6f 2c 70 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 3b 5c 73 28 70 69 78 65 6c 20 63 29 5b 5c 73 29 5d 2f 69 5d 2c 5b 73 2c 5b 6e 2c 22 47 6f 6f 67 6c 65 22 5d 2c 5b 6f 2c 77 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 3b 5c 73 28 70 69 78 65 6c 28 20 5b 32 33 5d 29 3f 28 20 78 6c 29 3f 29 5b 5c 73 29 5d 2f 69 5d 2c 5b 73 2c 5b 6e 2c 22 47 6f 6f 67 6c 65 22 5d 2c 5b 6f 2c 6c 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 3b 5c 73 28 5c 77 2b 29 5c 73 2b 62 75 69 6c 64 5c 2f 68 6d 5c 31 2f 69 2c 2f 61 6e 64 72 6f 69 64 2e 2b 28 68 6d 5b 5c 73 5c 2d 5f Data Ascii: hromecast"],[n,"Google"]],[/android.+;\s(glass)\s\d/i],[s,[n,"Google"],[o,p]],[/android.+;\s(pixel c)[\s)]/i],[s,[n,"Google"],[o,w]],[/android.+;\s(pixel( [23])?( xl)?)[\s)]/i],[s,[n,"Google"],[o,l]],[/android.+;\s(\w+)\s+build\/hm\1/i,/android.+(hm[\s\-_
2024-01-10 21:53:30 UTC	1369	IN	Data Raw: 2c 5b 73 2c 5b 6e 2c 22 5a 65 6b 69 22 5d 2c 5b 6f 2c 77 5d 5d 2c 5b 2f 28 61 6e 64 72 6f 69 64 29 2e 2b 5b 3b 5c 2f 5d 5c 73 2b 28 5b 59 52 5d 5c 64 7b 32 7d 29 5c 73 2b 62 75 69 6c 64 2f 69 2c 2f 61 6e 64 72 6f 69 64 2e 2b 5b 3b 5c 2f 5d 5c 73 2b 28 44 72 61 67 6f 6e 5b 5c 2d 5c 73 5d 2b 54 6f 75 63 68 5c 73 2b 7c 44 54 29 28 5c 77 7b 35 7d 29 5c 73 62 75 69 6c 64 2f 69 5d 2c 5b 5b 6e 2c 22 44 72 61 67 6f 6e 20 54 6f 75 63 68 22 5d 2c 73 2c 5b 6f 2c 77 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 5b 3b 5c 2f 5d 5c 73 2a 28 4e 53 2d 3f 5c 77 7b 30 2c 39 7d 29 5c 73 62 75 69 6c 64 2f 69 5d 2c 5b 73 2c 5b 6e 2c 22 49 6e 73 69 67 6e 69 61 22 5d 2c 5b 6f 2c 77 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 5b 3b 5c 2f 5d 5c 73 2a 28 28 4e 58 7c 4e 65 78 74 29 2d 3f Data Ascii: ,[s,[n,"Zeki"],[o,w]],[/(android).+[;\/]\s+([YR]\d{2})\s+build/i,/android.+[;\/]\s+(Dragon[\-\s]+Touch\s+\|DT)(\w{5})\sbuild/i],[[n,"Dragon Touch"],s,[o,w]],[/android.+[;\/]\s(NS-?\w{0,9})\sbuild/i],[s,[n,"Insignia"],[o,w]],[/android.+[;\/]\s((NX\|Next)-?
2024-01-10 21:53:30 UTC	1369	IN	Data Raw: 2b 29 2f 69 2c 2f 28 6b 68 74 6d 6c 7c 74 61 73 6d 61 6e 7c 6c 69 6e 6b 73 29 5b 5c 2f 5c 73 5d 5c 28 3f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 69 63 61 62 29 5b 5c 2f 5c 73 5d 28 5b 32 33 5d 5c 2e 5b 5c 64 5c 2e 5d 2b 29 2f 69 5d 2c 5b 65 2c 61 5d 2c 5b 2f 72 76 5c 3a 28 5b 5c 77 5c 2e 5d 7b 31 2c 39 7d 29 2e 2b 28 67 65 63 6b 6f 29 2f 69 5d 2c 5b 61 2c 65 5d 5d 2c 6f 73 3a 5b 5b 2f 6d 69 63 72 6f 73 6f 66 74 5c 73 28 77 69 6e 64 6f 77 73 29 5c 73 28 76 69 73 74 61 7c 78 70 29 2f 69 5d 2c 5b 65 2c 61 5d 2c 5b 2f 28 77 69 6e 64 6f 77 73 29 5c 73 6e 74 5c 73 36 5c 2e 32 3b 5c 73 28 61 72 6d 29 2f 69 2c 2f 28 77 69 6e 64 6f 77 73 5c 73 70 68 6f 6e 65 28 3f 3a 5c 73 6f 73 29 2a 29 5b 5c 73 5c 2f 5d 3f 28 5b 5c 64 5c 2e 5c 73 5c 77 5d 2a 29 2f 69 2c 2f 28 Data Ascii: +)/i,/(khtml\|tasman\|links)[\/\s]\(?([\w\.]+)/i,/(icab)[\/\s]([23]\.[\d\.]+)/i],[e,a],[/rv\:([\w\.]{1,9}).+(gecko)/i],[a,e]],os:[[/microsoft\s(windows)\s(vista\|xp)/i],[e,a],[/(windows)\snt\s6\.2;\s(arm)/i,/(windows\sphone(?:\sos))[\s\/]?([\d\.\s\w])/i,/(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.16	50072	151.101.1.229	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:30 UTC	621	OUT	GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://understandingerrors.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://understandingerrors.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:30 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 155845 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 5.0.2 X-JSD-Version-Type: version ETag: W/"260c5-fByeBXPlzqi603M74vxjqoxo6o0" Accept-Ranges: bytes Date: Wed, 10 Jan 2024 21:53:30 GMT Age: 3183619 X-Served-By: cache-fra-eddf8230097-FRA, cache-iad-kcgs7200107-IAD X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d Data Ascii: @charset "UTF-8";/! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6efd;-
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 74 74 65 72 2d 79 3a 30 7d 2e 67 2d 78 6c 2d 31 2c 2e 67 78 2d 78 6c 2d 31 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 78 6c 2d 31 2c 2e 67 79 2d 78 6c 2d 31 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 78 6c 2d 32 2c 2e 67 78 2d 78 6c 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 30 2e 35 72 65 6d 7d 2e 67 2d 78 6c 2d 32 2c 2e 67 79 2d 78 6c 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 35 72 65 6d 7d 2e 67 2d 78 6c 2d 33 2c 2e 67 78 2d 78 6c 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 72 65 6d 7d 2e 67 2d 78 6c 2d 33 2c 2e 67 79 2d 78 6c 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 72 65 6d 7d 2e 67 2d 78 6c 2d 34 2c 2e 67 78 2d 78 6c 2d 34 7b 2d 2d 62 Data Ascii: tter-y:0}.g-xl-1,.gx-xl-1{--bs-gutter-x:0.25rem}.g-xl-1,.gy-xl-1{--bs-gutter-y:0.25rem}.g-xl-2,.gx-xl-2{--bs-gutter-x:0.5rem}.g-xl-2,.gy-xl-2{--bs-gutter-y:0.5rem}.g-xl-3,.gx-xl-3{--bs-gutter-x:1rem}.g-xl-3,.gy-xl-3{--bs-gutter-y:1rem}.g-xl-4,.gx-xl-4{--b
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 69 6e 67 3a 31 72 65 6d 20 2e 37 35 72 65 6d 7d 2e 66 6f 72 6d 2d 66 6c 6f 61 74 69 6e 67 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 66 6f 72 6d 2d 66 6c 6f 61 74 69 6e 67 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 66 6f 72 6d 2d 66 6c 6f 61 74 69 6e 67 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 6e 6f 74 28 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 73 68 6f 77 6e 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 2e 36 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 36 32 35 72 65 6d 7d 2e 66 6f 72 6d 2d 66 6c 6f 61 74 69 Data Ascii: ing:1rem .75rem}.form-floating>.form-control::-moz-placeholder{color:transparent}.form-floating>.form-control::placeholder{color:transparent}.form-floating>.form-control:not(:-moz-placeholder-shown){padding-top:1.625rem;padding-bottom:.625rem}.form-floati
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 66 64 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 64 36 65 66 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 64 36 65 66 64 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 66 6f 63 75 73 2b 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 35 72 65 6d 20 72 67 62 61 28 31 33 2c 31 31 30 2c 32 35 33 2c 2e 35 29 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 61 63 74 69 76 65 2b 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 2c 2e 62 74 6e 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2b 2e Data Ascii: fd}.btn-outline-primary:hover{color:#fff;background-color:#0d6efd;border-color:#0d6efd}.btn-check:focus+.btn-outline-primary,.btn-outline-primary:focus{box-shadow:0 0 0 .25rem rgba(13,110,253,.5)}.btn-check:active+.btn-outline-primary,.btn-check:checked+.
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 76 62 61 72 2d 74 6f 67 67 6c 65 72 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 2e 37 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 72 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 Data Ascii: vbar-toggler{padding:.25rem .75rem;font-size:1.25rem;line-height:1;background-color:transparent;border:1px solid transparent;border-radius:.25rem;transition:box-shadow .15s ease-in-out}@media (prefers-reduced-motion:reduce){.navbar-toggler{transition:none
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 Data Ascii: rst-child{border-bottom-left-radius:.25rem;border-top-right-radius:0}.list-group-horizontal>.list-group-item:last-child{border-top-right-radius:.25rem;border-bottom-left-radius:0}.list-group-horizontal>.list-group-item.active{margin-top:0}.list-group-hori
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 30 66 30 66 30 7d 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 6c 65 66 74 5d 3e 2e 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 2c 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 73 74 61 72 74 3e 2e 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 7b 72 69 67 68 74 3a 63 61 6c 63 28 2d 2e 35 72 65 6d 20 2d 20 31 70 78 29 3b 77 69 64 74 68 3a 2e 35 72 65 6d 3b 68 65 69 67 68 74 3a 31 72 65 6d 7d 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 6c 65 66 74 5d 3e 2e 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 2c 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 73 74 61 Data Ascii: er-bottom:1px solid #f0f0f0}.bs-popover-auto[data-popper-placement^=left]>.popover-arrow,.bs-popover-start>.popover-arrow{right:calc(-.5rem - 1px);width:.5rem;height:1rem}.bs-popover-auto[data-popper-placement^=left]>.popover-arrow::before,.bs-popover-sta
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 32 7b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 33 7b 70 61 64 64 69 6e 67 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 34 7b 70 61 64 64 69 6e 67 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 35 7b 70 61 64 64 69 6e 67 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 78 2d 30 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 78 2d 31 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 21 69 6d Data Ascii: adding:.25rem!important}.p-2{padding:.5rem!important}.p-3{padding:1rem!important}.p-4{padding:1.5rem!important}.p-5{padding:3rem!important}.px-0{padding-right:0!important;padding-left:0!important}.px-1{padding-right:.25rem!important;padding-left:.25rem!im
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 74 7d 2e 6d 74 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 6d 64 2d 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 6d 64 2d 35 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 6d 64 2d 61 75 74 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 65 2d 6d 64 2d 30 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 65 2d 6d 64 2d 31 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 65 2d 6d 64 2d 32 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 Data Ascii: t}.mt-md-3{margin-top:1rem!important}.mt-md-4{margin-top:1.5rem!important}.mt-md-5{margin-top:3rem!important}.mt-md-auto{margin-top:auto!important}.me-md-0{margin-right:0!important}.me-md-1{margin-right:.25rem!important}.me-md-2{margin-right:.5rem!importa
2024-01-10 21:53:30 UTC	8389	IN	Data Raw: 78 6c 2d 30 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 78 6c 2d 31 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 78 6c 2d 32 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 78 6c 2d 33 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 78 6c 2d 34 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 78 6c 2d 35 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 73 2d 78 6c 2d 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 Data Ascii: xl-0{padding-bottom:0!important}.pb-xl-1{padding-bottom:.25rem!important}.pb-xl-2{padding-bottom:.5rem!important}.pb-xl-3{padding-bottom:1rem!important}.pb-xl-4{padding-bottom:1.5rem!important}.pb-xl-5{padding-bottom:3rem!important}.ps-xl-0{padding-left:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.16	50073	151.101.1.229	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:30 UTC	587	OUT	GET /npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://understandingerrors.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:30 UTC	761	IN	HTTP/1.1 200 OK Connection: close Content-Length: 80510 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 1.8.1 X-JSD-Version-Type: version ETag: W/"13a7e-T26mnA4DQx/6Ggl6RUU7WzskbYs" Accept-Ranges: bytes Date: Wed, 10 Jan 2024 21:53:30 GMT Age: 803215 X-Served-By: cache-fra-etou8220090-FRA, cache-iad-kiad7000148-IAD X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 62 6f 6f 74 73 74 72 61 70 2d 69 63 6f 6e 73 22 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 62 6f 6f 74 73 74 72 61 70 2d 69 63 6f 6e 73 2e 77 6f 66 66 32 3f 35 32 34 38 34 36 30 31 37 62 39 38 33 66 63 38 64 65 64 39 33 32 35 64 39 34 65 64 34 30 66 33 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 0a 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 62 6f 6f 74 73 74 72 61 70 2d 69 63 6f 6e 73 2e 77 6f 66 66 3f 35 32 34 38 34 36 30 31 37 62 39 38 33 66 63 38 64 65 64 39 33 32 35 64 39 34 65 64 34 30 66 33 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 0a 7d 0a 0a 2e 62 69 3a 3a 62 65 66 6f 72 65 2c 0a 5b 63 6c 61 73 73 5e 3d 22 62 69 2d 22 Data Ascii: @font-face { font-family: "bootstrap-icons"; src: url("./fonts/bootstrap-icons.woff2?524846017b983fc8ded9325d94ed40f3") format("woff2"),url("./fonts/bootstrap-icons.woff?524846017b983fc8ded9325d94ed40f3") format("woff");}.bi::before,[class^="bi-"
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 34 33 22 3b 20 7d 0a 2e 62 69 2d 63 61 72 74 33 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 34 34 22 3b 20 7d 0a 2e 62 69 2d 63 61 72 74 34 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 34 35 22 3b 20 7d 0a 2e 62 69 2d 63 61 73 68 2d 73 74 61 63 6b 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 34 36 22 3b 20 7d 0a 2e 62 69 2d 63 61 73 68 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 34 37 22 3b 20 7d 0a 2e 62 69 2d 63 61 73 74 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 34 38 22 3b 20 7d 0a 2e 62 69 2d 63 68 61 74 2d 64 6f 74 73 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e Data Ascii: content: "\f243"; }.bi-cart3::before { content: "\f244"; }.bi-cart4::before { content: "\f245"; }.bi-cash-stack::before { content: "\f246"; }.bi-cash::before { content: "\f247"; }.bi-cast::before { content: "\f248"; }.bi-chat-dots-fill::before { con
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 20 7d 0a 2e 62 69 2d 66 69 6c 65 2d 65 61 72 6d 61 72 6b 2d 78 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 38 66 22 3b 20 7d 0a 2e 62 69 2d 66 69 6c 65 2d 65 61 72 6d 61 72 6b 2d 7a 69 70 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 39 30 22 3b 20 7d 0a 2e 62 69 2d 66 69 6c 65 2d 65 61 72 6d 61 72 6b 2d 7a 69 70 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 39 31 22 3b 20 7d 0a 2e 62 69 2d 66 69 6c 65 2d 65 61 72 6d 61 72 6b 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 39 32 22 3b 20 7d 0a 2e 62 69 2d 66 69 6c 65 2d 65 61 73 65 6c 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 39 33 22 3b 20 7d Data Ascii: }.bi-file-earmark-x::before { content: "\f38f"; }.bi-file-earmark-zip-fill::before { content: "\f390"; }.bi-file-earmark-zip::before { content: "\f391"; }.bi-file-earmark::before { content: "\f392"; }.bi-file-easel-fill::before { content: "\f393"; }
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 66 32 22 3b 20 7d 0a 2e 62 69 2d 70 6c 61 79 2d 63 69 72 63 6c 65 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 66 33 22 3b 20 7d 0a 2e 62 69 2d 70 6c 61 79 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 66 34 22 3b 20 7d 0a 2e 62 69 2d 70 6c 61 79 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 66 35 22 3b 20 7d 0a 2e 62 69 2d 70 6c 75 67 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 66 36 22 3b 20 7d 0a 2e 62 69 2d 70 6c 75 67 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 66 37 22 3b 20 7d 0a 2e 62 69 2d 70 6c 75 73 2d 63 69 72 63 6c 65 2d 64 Data Ascii: ore { content: "\f4f2"; }.bi-play-circle::before { content: "\f4f3"; }.bi-play-fill::before { content: "\f4f4"; }.bi-play::before { content: "\f4f5"; }.bi-plug-fill::before { content: "\f4f6"; }.bi-plug::before { content: "\f4f7"; }.bi-plus-circle-d
2024-01-10 21:53:30 UTC	14974	IN	Data Raw: 35 22 3b 20 7d 0a 2e 62 69 2d 73 6b 79 70 65 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 35 36 22 3b 20 7d 0a 2e 62 69 2d 73 6c 61 73 68 2d 6c 67 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 35 37 22 3b 20 7d 0a 2e 62 69 2d 74 72 61 6e 73 6c 61 74 65 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 35 38 22 3b 20 7d 0a 2e 62 69 2d 78 2d 6c 67 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 35 39 22 3b 20 7d 0a 2e 62 69 2d 73 61 66 65 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 35 61 22 3b 20 7d 0a 2e 62 69 2d 61 70 70 6c 65 3a 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 35 62 22 3b 20 7d 0a 2e 62 69 2d Data Ascii: 5"; }.bi-skype::before { content: "\f656"; }.bi-slash-lg::before { content: "\f657"; }.bi-translate::before { content: "\f658"; }.bi-x-lg::before { content: "\f659"; }.bi-safe::before { content: "\f65a"; }.bi-apple::before { content: "\f65b"; }.bi-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.16	50074	151.101.1.229	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:30 UTC	612	OUT	GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://understandingerrors.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://understandingerrors.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:30 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 78743 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.0.2 X-JSD-Version-Type: version ETag: W/"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0" Accept-Ranges: bytes Date: Wed, 10 Jan 2024 21:53:30 GMT Age: 6700523 X-Served-By: cache-fra-eddf8230080-FRA, cache-iad-kjyo7100132-IAD X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 28 22 64 61 74 61 2d 62 73 2d 73 6c 69 64 65 2d 74 6f 22 29 3b 6e 26 26 28 69 2e 69 6e 74 65 72 76 61 6c 3d 21 31 29 2c 5a 2e 63 61 72 6f 75 73 65 6c 49 6e 74 65 72 66 61 63 65 28 65 2c 69 29 2c 6e 26 26 5a 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 65 29 2e 74 6f 28 6e 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 50 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 22 63 6c 69 63 6b 2e 62 73 2e 63 61 72 6f 75 73 65 6c 2e 64 61 74 61 2d 61 70 69 22 2c 22 5b 64 61 74 61 2d 62 73 2d 73 6c 69 64 65 5d 2c 20 5b 64 61 74 61 2d 62 73 2d 73 6c 69 64 65 2d 74 6f 5d 22 2c 5a 2e 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 29 2c 50 2e 6f 6e 28 77 69 6e 64 6f 77 2c 22 6c 6f 61 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 2e 64 61 74 61 2d 61 70 69 22 2c Data Ascii: ("data-bs-slide-to");n&&(i.interval=!1),Z.carouselInterface(e,i),n&&Z.getInstance(e).to(n),t.preventDefault()}}P.on(document,"click.bs.carousel.data-api","[data-bs-slide], [data-bs-slide-to]",Z.dataApiClickHandler),P.on(window,"load.bs.carousel.data-api",
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 45 3d 6e 65 77 20 4d 61 70 2c 41 3d 21 30 2c 54 3d 76 5b 30 5d 2c 4f 3d 30 3b 4f 3c 76 2e 6c 65 6e 67 74 68 3b 4f 2b 2b 29 7b 76 61 72 20 43 3d 76 5b 4f 5d 2c 6b 3d 67 74 28 43 29 2c 4c 3d 22 73 74 61 72 74 22 3d 3d 3d 59 74 28 43 29 2c 78 3d 5b 69 74 2c 6e 74 5d 2e 69 6e 64 65 78 4f 66 28 6b 29 3e 3d 30 2c 44 3d 78 3f 22 77 69 64 74 68 22 3a 22 68 65 69 67 68 74 22 2c 53 3d 47 74 28 65 2c 7b 70 6c 61 63 65 6d 65 6e 74 3a 43 2c 62 6f 75 6e 64 61 72 79 3a 68 2c 72 6f 6f 74 42 6f 75 6e 64 61 72 79 3a 64 2c 61 6c 74 42 6f 75 6e 64 61 72 79 3a 75 2c 70 61 64 64 69 6e 67 3a 63 7d 29 2c 49 3d 78 3f 4c 3f 73 74 3a 6f 74 3a 4c 3f 6e 74 3a 69 74 3b 79 5b 44 5d 3e 77 5b 44 5d 26 26 28 49 3d 57 74 28 49 29 29 3b 76 61 72 20 4e 3d 57 74 28 49 29 2c 6a 3d 5b 5d 3b 69 Data Ascii: E=new Map,A=!0,T=v[0],O=0;O<v.length;O++){var C=v[O],k=gt(C),L="start"===Yt(C),x=[it,nt].indexOf(k)>=0,D=x?"width":"height",S=Gt(e,{placement:C,boundary:h,rootBoundary:d,altBoundary:u,padding:c}),I=x?L?st:ot:L?nt:it;y[D]>w[D]&&(I=Wt(I));var N=Wt(I),j=[];i
2024-01-10 21:53:30 UTC	16384	IN	Data Raw: 22 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 28 29 2c 74 68 69 73 2e 5f 69 73 41 70 70 65 6e 64 65 64 3d 21 31 29 7d 5f 65 6d 75 6c 61 74 65 41 6e 69 6d 61 74 69 6f 6e 28 74 29 7b 76 28 74 2c 74 68 69 73 2e 5f 67 65 74 45 6c 65 6d 65 6e 74 28 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 73 41 6e 69 6d 61 74 65 64 29 7d 7d 63 6f 6e 73 74 20 4c 65 3d 7b 62 61 63 6b 64 72 6f 70 3a 21 30 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 66 6f 63 75 73 3a 21 30 7d 2c 78 65 3d 7b 62 61 63 6b 64 72 6f 70 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 66 6f 63 75 73 3a 22 62 6f 6f 6c 65 61 6e 22 7d 3b 63 6c 61 73 73 20 44 65 20 65 78 74 65 6e 64 73 20 42 7b 63 6f 6e 73 74 72 75 Data Ascii: "),this._element.remove(),this._isAppended=!1)}_emulateAnimation(t){v(t,this._getElement(),this._config.isAnimated)}}const Le={backdrop:!0,keyboard:!0,focus:!0},xe={backdrop:"(boolean\|string)",keyboard:"boolean",focus:"boolean"};class De extends B{constru
2024-01-10 21:53:30 UTC	13207	IN	Data Raw: 65 5b 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 7d 5f 73 65 74 4c 69 73 74 65 6e 65 72 73 28 29 7b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 74 72 69 67 67 65 72 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 69 66 28 22 63 6c 69 63 6b 22 3d 3d 3d 74 29 50 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 45 76 65 6e 74 2e 43 4c 49 43 4b 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 73 65 6c 65 63 74 6f 72 2c 74 3d 3e 74 68 69 73 2e 74 6f 67 67 6c 65 28 74 29 29 3b 65 6c 73 65 20 69 66 28 22 6d 61 6e 75 61 6c 22 21 3d 3d 74 29 7b 63 6f 6e 73 74 20 65 3d 22 68 6f 76 65 72 22 3d 3d 3d 74 3f 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 45 76 65 6e 74 2e 4d 4f 55 53 45 45 4e Data Ascii: e[t.toUpperCase()]}_setListeners(){this._config.trigger.split(" ").forEach(t=>{if("click"===t)P.on(this._element,this.constructor.Event.CLICK,this._config.selector,t=>this.toggle(t));else if("manual"!==t){const e="hover"===t?this.constructor.Event.MOUSEEN

Session ID	Source IP	Source Port	Destination IP	Destination Port
251	192.168.2.16	50076	104.17.24.14	443

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:31 UTC	641	OUT	GET /ajax/libs/browser-logos/72.0.0/chrome/chrome_48x48.png HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://understandingerrors.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:31 UTC	934	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:53:31 GMT Content-Type: image/png; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"624e8672-c7a" Last-Modified: Thu, 07 Apr 2022 06:36:34 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Mon, 30 Dec 2024 21:53:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M96dcIrJE%2FuRdUGb9DT0s7sXSJhuZZsDdVz%2FmEJcRuO%2BfDlbrtpz6PCM33HOqO%2BzJXxLLv5o7CYdZnhqWgTwogB3s1VoaEUDHJRIw6dXUm2quwFyubRPqZMGE1DJp59WHXwb4KTs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8438273a9cb29c82-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:53:31 UTC	435	IN	Data Raw: 63 35 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 0c 25 49 44 41 54 78 01 bd da 05 90 1c d7 b6 a5 e1 6f 67 66 b3 c8 32 08 cd 6c cb 1e cb 1e 99 ed 78 ef 32 33 33 33 33 33 33 33 33 83 f1 32 33 99 99 d9 62 6e aa cc dc a3 e8 98 8a 71 85 5a 7d 2d fb ce fb 23 4e 31 ac 75 f6 da a7 2a 21 dc 49 ae 3e f6 b0 08 0a 11 81 06 69 06 fa fa aa 40 29 22 83 16 e9 4e 10 37 9d 72 94 3b c2 f8 f8 44 11 14 a8 a1 4b 51 96 73 b1 20 c2 7c 62 38 02 62 34 c2 3a ac c4 c6 de d7 17 55 88 16 ad 3b 40 15 11 76 86 b1 d1 b1 82 08 34 49 1b 45 cc 0a fe 4b c4 3d 83 e3 b0 1f 76 b5 3d 89 75 22 ae 0a fe 2a e2 a7 c1 6f a4 ad 29 45 11 25 91 3b 6b a4 b2 13 06 46 b7 8c 56 a8 49 51 c4 a1 21 9e 83 87 63 c1 0e 04 27 20 10 d8 75 6a 70 Data Ascii: c5ePNGIHDR00W%IDATxogf2lx23333333323bnqZ}-#N1u!I>i@)"N7r;DKQs \|b8b4:U;@v4IEK=v=u"o)E%;kFVIQ!c' ujp
2024-01-10 21:53:31 UTC	1369	IN	Data Raw: 95 a8 88 ed c5 6f d8 54 a2 16 b9 87 88 bf 63 2f 74 d0 e7 ff 2f 81 0a 1d 61 99 f4 f7 10 2b b0 46 98 d6 44 15 a1 87 8d eb 37 15 68 b4 06 14 f1 1b d1 23 fe 7f 8a 3e 74 b0 0f 7e 5d f4 39 1a 9d b6 16 c8 19 23 74 dd 1e 83 60 ef 55 e3 df c6 a1 77 58 7c 04 82 80 20 12 08 3b bc 0e 08 48 44 9f d0 c1 b2 b6 f1 4d 3c ac 7f d9 fa ed 0c c4 fa 17 ec af cb b5 7f eb ab 50 0f 4d b4 cf 2b f8 28 ea 88 a8 20 02 82 20 74 af 11 a1 7b 1d 45 41 51 d0 34 34 35 4d 2b 02 51 89 a2 cf d4 75 24 d9 f6 be 2f 80 f8 7f 37 84 20 08 51 0b 95 89 f2 d9 f8 54 df 81 1b 7b 7e 27 aa 76 dd 00 b8 f6 aa b6 10 ea 7d 6f 19 5b ba 76 6e ff 7b db 22 04 e5 ed 9e ed a2 d0 8e 6e a5 d3 51 cc 9a ad dc 6d 8f 8c d9 73 44 41 d4 1b e9 ac 14 f5 a6 50 0e 88 72 36 91 64 6e 3f 21 d0 7d 0c 11 0a 42 94 f9 fe 6a 8f f1 d3 Data Ascii: oTc/t/a+FD7h#>t~]9#t`UwX\| ;HDM<PM+( t{EAQ445M+Qu$/7 QT{~'v}o[vn{"nQmsDAPr6dn?!}Bj
2024-01-10 21:53:31 UTC	1369	IN	Data Raw: 9b 3c 68 f9 00 68 d7 ff a1 a7 02 d3 f7 41 a4 08 22 d6 11 2b 09 e5 0f ff eb 1e 91 69 02 0f c1 52 32 a5 48 90 24 90 28 92 b1 32 ad cc 51 0f 5a 76 9f 38 64 51 bf 5f 5d 3a e1 9a 35 8d a1 fe 90 e9 76 51 16 6c 1a 4b c7 ed db e7 ed 0f 99 83 90 57 bd 3a 4c ae a4 e8 47 4e b7 99 06 49 04 2e 12 f1 51 ca 28 22 b2 8c 48 e4 5f 65 ca d4 26 64 92 24 32 93 4c 4d b6 66 97 43 7e b5 fe c2 38 fb aa df 27 bc f7 11 23 86 fa c2 44 4d 59 dc 3e f1 13 35 83 7d e1 fd 8f 18 46 a8 57 9d 9e 36 fd 85 6a 36 72 86 f8 44 4b 20 fe 4a 10 59 56 99 12 f0 33 bc 50 66 31 d3 aa d4 6a 0d 14 7d de f1 97 4f c6 89 4b 8e b6 7c cf 11 5f 7c 4a 7a f2 17 36 d9 34 76 bb fe cc 4d 19 fe d2 53 67 3b 72 cf 21 5b 26 b6 a4 ab de 64 a8 18 94 a9 77 d6 33 f5 10 02 a4 9f 01 91 95 cc 16 84 df 48 b7 24 8b 90 32 83 5e Data Ascii: <hhA"+iR2H$(2QZv8dQ_]:5vQlKW:LGNI.Q("H_e&d$2LMfC~8'#DMY>5}FW6j6rDK JYV3Pf1j}OK\|_\|Jz64vMSg;r![&dw3H$2^
2024-01-10 21:53:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.16	50077	172.67.152.171	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:31 UTC	1400	OUT	GET /favicon.ico HTTP/1.1 Host: understandingerrors.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://understandingerrors.com/landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vcid=659f11d999fc0a000155a29d
2024-01-10 21:53:31 UTC	672	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:53:31 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close Last-Modified: Fri, 20 Dec 2019 21:51:40 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1698 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FuQsgDhuz2UriZgSzOEGT%2BD5QMxrkooHKAOZ4XGssCXbIlGtpPmYw2SUNrjTHCRk2KLb6HZLTTRBVWc%2BIQc1078KTsABTh8k6Hv2q4voMjiI0o5ZcfK1EOk1cZgFNbb%2FAkEKwJIVUUsAsw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438273a6a583b8c-IAD alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.16	50078	104.21.82.40	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:31 UTC	397	OUT	GET /favicon.ico HTTP/1.1 Host: understandingerrors.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vcid=659f11d999fc0a000155a29d
2024-01-10 21:53:31 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:53:31 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close Last-Modified: Fri, 20 Dec 2019 21:51:40 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1698 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dLpOzKAJOMPcwijodn77T%2Bt2Vdx9JE%2F9wD9bh86EnZvoau135uax5Gma4PmKTZI9GxF3uCNMR%2FUKAwWVFv2oECn%2Bj4wcng7xa4%2Bi%2FVWe3JgR50PRQC2LvfBOvqOl2RRI3OVCsw%2F%2BUehiIw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438273e4edf3b62-IAD alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.16	50079	104.17.24.14	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:31 UTC	398	OUT	GET /ajax/libs/browser-logos/72.0.0/chrome/chrome_48x48.png HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:32 UTC	932	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:53:32 GMT Content-Type: image/png; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"624e8672-c7a" Last-Modified: Thu, 07 Apr 2022 06:36:34 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Mon, 30 Dec 2024 21:53:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OQ0z9%2B2h4bZyLEsfA6%2FseG52ZcMDTRBusw2nANasgJ81CcCqaUe7WeNzwyAHUpyImaC%2BHte5IgdztIxsQW6yT9LkZZcKmwEjw4x1eczEXYJIIQYOXnHEOsY3SoJVYeXhYwagetZS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8438273edd3907f0-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:53:32 UTC	437	IN	Data Raw: 63 35 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 0c 25 49 44 41 54 78 01 bd da 05 90 1c d7 b6 a5 e1 6f 67 66 b3 c8 32 08 cd 6c cb 1e cb 1e 99 ed 78 ef 32 33 33 33 33 33 33 33 33 83 f1 32 33 99 99 d9 62 6e aa cc dc a3 e8 98 8a 71 85 5a 7d 2d fb ce fb 23 4e 31 ac 75 f6 da a7 2a 21 dc 49 ae 3e f6 b0 08 0a 11 81 06 69 06 fa fa aa 40 29 22 83 16 e9 4e 10 37 9d 72 94 3b c2 f8 f8 44 11 14 a8 a1 4b 51 96 73 b1 20 c2 7c 62 38 02 62 34 c2 3a ac c4 c6 de d7 17 55 88 16 ad 3b 40 15 11 76 86 b1 d1 b1 82 08 34 49 1b 45 cc 0a fe 4b c4 3d 83 e3 b0 1f 76 b5 3d 89 75 22 ae 0a fe 2a e2 a7 c1 6f a4 ad 29 45 11 25 91 3b 6b a4 b2 13 06 46 b7 8c 56 a8 49 51 c4 a1 21 9e 83 87 63 c1 0e 04 27 20 10 d8 75 6a 70 Data Ascii: c5ePNGIHDR00W%IDATxogf2lx23333333323bnqZ}-#N1u!I>i@)"N7r;DKQs \|b8b4:U;@v4IEK=v=u"o)E%;kFVIQ!c' ujp
2024-01-10 21:53:32 UTC	1369	IN	Data Raw: 88 ed c5 6f d8 54 a2 16 b9 87 88 bf 63 2f 74 d0 e7 ff 2f 81 0a 1d 61 99 f4 f7 10 2b b0 46 98 d6 44 15 a1 87 8d eb 37 15 68 b4 06 14 f1 1b d1 23 fe 7f 8a 3e 74 b0 0f 7e 5d f4 39 1a 9d b6 16 c8 19 23 74 dd 1e 83 60 ef 55 e3 df c6 a1 77 58 7c 04 82 80 20 12 08 3b bc 0e 08 48 44 9f d0 c1 b2 b6 f1 4d 3c ac 7f d9 fa ed 0c c4 fa 17 ec af cb b5 7f eb ab 50 0f 4d b4 cf 2b f8 28 ea 88 a8 20 02 82 20 74 af 11 a1 7b 1d 45 41 51 d0 34 34 35 4d 2b 02 51 89 a2 cf d4 75 24 d9 f6 be 2f 80 f8 7f 37 84 20 08 51 0b 95 89 f2 d9 f8 54 df 81 1b 7b 7e 27 aa 76 dd 00 b8 f6 aa b6 10 ea 7d 6f 19 5b ba 76 6e ff 7b db 22 04 e5 ed 9e ed a2 d0 8e 6e a5 d3 51 cc 9a ad dc 6d 8f 8c d9 73 44 41 d4 1b e9 ac 14 f5 a6 50 0e 88 72 36 91 64 6e 3f 21 d0 7d 0c 11 0a 42 94 f9 fe 6a 8f f1 d3 70 b3 Data Ascii: oTc/t/a+FD7h#>t~]9#t`UwX\| ;HDM<PM+( t{EAQ445M+Qu$/7 QT{~'v}o[vn{"nQmsDAPr6dn?!}Bjp
2024-01-10 21:53:32 UTC	1367	IN	Data Raw: 68 f9 00 68 d7 ff a1 a7 02 d3 f7 41 a4 08 22 d6 11 2b 09 e5 0f ff eb 1e 91 69 02 0f c1 52 32 a5 48 90 24 90 28 92 b1 32 ad cc 51 0f 5a 76 9f 38 64 51 bf 5f 5d 3a e1 9a 35 8d a1 fe 90 e9 76 51 16 6c 1a 4b c7 ed db e7 ed 0f 99 83 90 57 bd 3a 4c ae a4 e8 47 4e b7 99 06 49 04 2e 12 f1 51 ca 28 22 b2 8c 48 e4 5f 65 ca d4 26 64 92 24 32 93 4c 4d b6 66 97 43 7e b5 fe c2 38 fb aa df 27 bc f7 11 23 86 fa c2 44 4d 59 dc 3e f1 13 35 83 7d e1 fd 8f 18 46 a8 57 9d 9e 36 fd 85 6a 36 72 86 f8 44 4b 20 fe 4a 10 59 56 99 12 f0 33 bc 50 66 31 d3 aa d4 6a 0d 14 7d de f1 97 4f c6 89 4b 8e b6 7c cf 11 5f 7c 4a 7a f2 17 36 d9 34 76 bb fe cc 4d 19 fe d2 53 67 3b 72 cf 21 5b 26 b6 a4 ab de 64 a8 18 94 a9 77 d6 33 f5 10 02 a4 9f 01 91 95 cc 16 84 df 48 b7 24 8b 90 32 83 5e 23 dd Data Ascii: hhA"+iR2H$(2QZv8dQ_]:5vQlKW:LGNI.Q("H_e&d$2LMfC~8'#DMY>5}FW6j6rDK JYV3Pf1j}OK\|_\|Jz64vMSg;r![&dw3H$2^#
2024-01-10 21:53:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.16	50080	172.67.152.171	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:34 UTC	1577	OUT	GET /?a=godynamic&utm_source=3&utm_campaign=659f11d999fc0a000155a29d HTTP/1.1 Host: understandingerrors.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://understandingerrors.com/landing/?a=domain-ab&utm_source=3&utm_campaign=659f11d999fc0a000155a29d&title=Upgrade+Your+WhichBrowser+Experience.&incogdomain=suggestive.com&text1=Understanding+Errors+For+WhichBrowser&text2=Click+continue+to+open+the+WhichBrowser+Web+Store+in+a+new+tab+and+install+our+WhichBrowser+Extension.+This+Extension+modifies+your+browser+to+improve+annoying+internet+error+pages%2C+provide+useful+information%2C+and+give+you+a+much+more+enjoyable+internet+experience.+This+extension+is+monetized+by+providing+multiple+search+options+from+Google%2C+Bing%2C+and+Yahoo+in+multiple+tabs+along+with+other+affiliate+offers.+Using+the+extension+allows+you+to+contribute+to+our+project+that+is+working+to+minimize+internet+errors+and+improve+awareness+of+internet+outages. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vcid=659f11d999fc0a000155a29d
2024-01-10 21:53:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 10 Jan 2024 21:53:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ik9ksYsdLgEcFmnc3jakg643tEXGyUnpIyRWXK9DrnLsDQXJkoRghQNJdt4GFWaqhHRZWVB03iCeZOEMdJXLRdgJUiZZzcOCZUJI2BDYvuBkxFCYaJ6StIsyrev6ADxzlTqPOnk40e4%2FGA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8438274df9d7241f-IAD alt-svc: h3=":443"; ma=86400
2024-01-10 21:53:34 UTC	504	IN	Data Raw: 31 66 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 6f 20 54 68 65 20 53 74 6f 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 2f 45 64 67 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 73 3a 2f Data Ascii: 1f1<!doctype html><html lang="en"><head> <meta charset="utf-8"> <title>To The Store</title></head><body> <script type="text/javascript"> if (/Edg/.test(navigator.userAgent)) { window.location.replace("https:/
2024-01-10 21:53:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.16	50084	172.253.62.113	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:34 UTC	1032	OUT	GET /webstore/detail/dgcoeljmbmjppdaiiimcepjijfeleain HTTP/1.1 Host: chrome.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://understandingerrors.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT
2024-01-10 21:53:35 UTC	1111	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 10 Jan 2024 21:53:35 GMT Location: https://chrome.google.com/webstore/detail/understanding-errors/dgcoeljmbmjppdaiiimcepjijfeleain Cross-Origin-Opener-Policy: unsafe-none; report-to="coop_chromewebstore" Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/chromewebstore/2 Content-Security-Policy: script-src 'report-sample' 'nonce-Asw-IiIqrfXwCZRuc0Gwbg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri /webstore/cspreport Report-To: {"group":"coop_chromewebstore","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/chromewebstore"}]} Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.16	50085	172.253.62.113	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:35 UTC	1053	OUT	GET /webstore/detail/understanding-errors/dgcoeljmbmjppdaiiimcepjijfeleain HTTP/1.1 Host: chrome.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://understandingerrors.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT
2024-01-10 21:53:35 UTC	1077	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 10 Jan 2024 21:53:35 GMT Location: https://chromewebstore.google.com/detail/dgcoeljmbmjppdaiiimcepjijfeleain Cross-Origin-Opener-Policy: unsafe-none; report-to="coop_chromewebstore" Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/chromewebstore/2 Content-Security-Policy: script-src 'report-sample' 'nonce-OBrw9y5AuZ3iAUyTrFzBjg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri /webstore/cspreport Report-To: {"group":"coop_chromewebstore","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/chromewebstore"}]} Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.16	50086	142.251.16.139	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:35 UTC	1500	OUT	GET /detail/dgcoeljmbmjppdaiiimcepjijfeleain HTTP/1.1 Host: chromewebstore.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Referer: https://understandingerrors.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.147237783.1704923525; NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT; OTZ=7376992_52_52_123900_48_436380; _ga_KHZNC1Q6K0=GS1.1.1704923525.1.0.1704923534.0.0.0; _ga_C16XQ1V2Q6=GS1.1.1704923526.1.0.1704923534.0.0.0
2024-01-10 21:53:36 UTC	1699	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 10 Jan 2024 21:53:36 GMT Location: https://chromewebstore.google.com/detail/understanding-errors/dgcoeljmbmjppdaiiimcepjijfeleain Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ChromeWebStoreConsumerFeUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Kbzfpm2yPAYJOebxUxaG6w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ChromeWebStoreConsumerFeUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/ChromeWebStoreConsumerFeUi/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.16	50087	142.251.16.139	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:36 UTC	1521	OUT	GET /detail/understanding-errors/dgcoeljmbmjppdaiiimcepjijfeleain HTTP/1.1 Host: chromewebstore.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Referer: https://understandingerrors.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.147237783.1704923525; NID=511=mJ-zAj3Hxx0jJLWRTE7NLDM77htXIOwgOsm-zbkf22Gi7RVkkW_SNrAQw9ok-E-7n7XSU-UU7cv-Jz0dvMzZ7eEz7FS8M_hyGXbfkqE5jU5-olPvyXbyMpZz45vn2VnvU51hzL-doAdMbiKZth1YgPhLO50goYnsoqrabe6OnTu_K329Ra00goqT; OTZ=7376992_52_52_123900_48_436380; _ga_KHZNC1Q6K0=GS1.1.1704923525.1.0.1704923534.0.0.0; _ga_C16XQ1V2Q6=GS1.1.1704923526.1.0.1704923534.0.0.0
2024-01-10 21:53:37 UTC	1668	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 10 Jan 2024 21:53:36 GMT Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-cwPncDyyStE23JmqfgrzMg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ChromeWebStoreConsumerFeUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/ChromeWebStoreConsumerFeUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ChromeWebStoreConsumerFeUi/cspreport Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-10 21:53:37 UTC	1668	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 68 72 6f 6d 65 77 65 62 73 74 6f 72 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 63 77 50 6e 63 44 79 79 53 74 45 32 33 4a 6d 71 66 67 72 7a 4d 67 22 3e 77 69 6e 64 6f 77 5b 27 70 70 43 6f 6e 66 69 67 27 5d 20 3d 20 7b 70 72 6f 64 75 63 74 4e 61 6d 65 3a 20 27 43 68 72 6f 6d 65 57 65 62 53 74 6f 72 65 43 6f 6e 73 75 6d 65 72 46 65 55 69 27 2c 20 64 65 6c 65 74 65 49 73 Data Ascii: 8000<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://chromewebstore.google.com/"><meta name="referrer" content="origin"><script nonce="cwPncDyyStE23JmqfgrzMg">window['ppConfig'] = {productName: 'ChromeWebStoreConsumerFeUi', deleteIs
2024-01-10 21:53:37 UTC	1668	IN	Data Raw: 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 29 3b 0a 70 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 Data Ascii: ))return!0}return!1}});p("String.prototype.includes",function(a){return a?a:function(b,c){if(null==this)throw new TypeError("The 'this' value for String.prototype.includes must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First
2024-01-10 21:53:37 UTC	1668	IN	Data Raw: 50 72 6f 70 65 72 74 79 20 5f 5f 6c 6f 6f 6b 75 70 47 65 74 74 65 72 5f 5f 20 5f 5f 6c 6f 6f 6b 75 70 53 65 74 74 65 72 5f 5f 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 20 5f 5f 70 72 6f 74 6f 5f 5f 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 78 5f 6e 67 66 6e 5f 78 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 45 3d 44 2e 63 6f 6e 63 61 74 2c 46 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 46 69 72 65 66 6f 78 5c 2f 28 5b 30 2d 39 5d 2b 29 5c 2e 2f 29 2c 47 3d 28 21 46 7c 7c 32 3e 46 2e 6c 65 6e 67 74 68 3f 30 3a 37 35 3e 4e 75 6d 62 65 72 28 46 5b 31 5d 29 29 3f 5b 22 74 6f 53 6f 75 72 63 65 22 5d 3a 5b 5d Data Ascii: Property __lookupGetter__ __lookupSetter__ isPrototypeOf propertyIsEnumerable toString valueOf __proto__ toLocaleString x_ngfn_x".split(" "),E=D.concat,F=navigator.userAgent.match(/Firefox\/([0-9]+)\./),G=(!F\|\|2>F.length?0:75>Number(F[1]))?["toSource"]:[]
2024-01-10 21:53:37 UTC	1668	IN	Data Raw: 70 64 61 69 69 69 6d 63 65 70 6a 69 6a 66 65 6c 65 61 69 6e 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 77 65 62 73 74 6f 72 65 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 5f 34 38 70 78 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 34 38 78 34 38 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 77 65 62 73 74 6f 72 65 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 5f 39 Data Ascii: pdaiiimcepjijfeleain"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="icon" href="//ssl.gstatic.com/chrome/webstore/images/icon_48px.png" sizes="48x48"><link rel="icon" href="//ssl.gstatic.com/chrome/webstore/images/icon_9
2024-01-10 21:53:37 UTC	1668	IN	Data Raw: 22 63 54 47 49 63 5c 22 5d 2c 5b 34 35 34 34 39 33 32 35 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 70 6a 72 37 32 63 5c 22 5d 2c 5b 34 35 34 35 39 35 35 35 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 49 6d 65 6f 71 62 5c 22 5d 2c 5b 34 35 34 37 37 36 32 39 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 66 57 55 48 41 5c 22 5d 2c 5b 34 35 34 34 39 33 33 37 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 52 4b 56 30 6c 65 5c 22 5d 2c 5b 34 35 34 34 39 33 33 32 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 4f 73 30 72 43 5c 22 5d 2c 5b 34 35 34 36 30 36 31 Data Ascii: "cTGIc\"],[45449325,null,true,null,null,null,\"pjr72c\"],[45459555,null,false,null,null,null,\"Imeoqb\"],[45477629,null,false,null,null,null,\"fWUHA\"],[45449337,null,false,null,null,null,\"RKV0le\"],[45449332,null,false,null,null,null,\"Os0rC\"],[4546061
2024-01-10 21:53:37 UTC	1668	IN	Data Raw: 31 2c 32 5d 2c 6e 75 6c 6c 2c 5c 22 6c 69 66 65 73 74 79 6c 65 2f 73 68 6f 70 70 69 6e 67 5c 22 5d 22 2c 22 25 2e 40 2e 31 30 2c 6e 75 6c 6c 2c 38 2c 5b 31 2c 32 5d 2c 6e 75 6c 6c 2c 5c 22 6c 69 66 65 73 74 79 6c 65 2f 6e 65 77 73 5c 22 5d 22 2c 22 25 2e 40 2e 31 31 2c 6e 75 6c 6c 2c 38 2c 5b 31 2c 32 5d 2c 6e 75 6c 6c 2c 5c 22 6c 69 66 65 73 74 79 6c 65 2f 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 22 5d 22 2c 22 25 2e 40 2e 31 32 2c 6e 75 6c 6c 2c 38 2c 5b 31 2c 32 5d 2c 6e 75 6c 6c 2c 5c 22 6c 69 66 65 73 74 79 6c 65 2f 67 61 6d 65 73 5c 22 5d 22 2c 22 25 2e 40 2e 31 33 2c 6e 75 6c 6c 2c 38 2c 5b 31 2c 32 5d 2c 6e 75 6c 6c 2c 5c 22 6c 69 66 65 73 74 79 6c 65 2f 73 6f 63 69 61 6c 5c 22 5d 22 2c 22 25 2e 40 2e 31 34 2c 6e 75 6c 6c 2c 38 2c 5b 31 2c 32 5d Data Ascii: 1,2],null,\"lifestyle/shopping\"]","%.@.10,null,8,[1,2],null,\"lifestyle/news\"]","%.@.11,null,8,[1,2],null,\"lifestyle/entertainment\"]","%.@.12,null,8,[1,2],null,\"lifestyle/games\"]","%.@.13,null,8,[1,2],null,\"lifestyle/social\"]","%.@.14,null,8,[1,2]
2024-01-10 21:53:37 UTC	1668	IN	Data Raw: 66 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 26 26 28 66 3d 66 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 63 29 2c 22 30 70 78 22 3d 3d 66 2e 68 65 69 67 68 74 7c 7c 22 30 70 78 22 3d 3d 66 2e 77 69 64 74 68 7c 7c 22 68 69 64 64 65 6e 22 3d 3d 66 2e 76 69 73 69 62 69 6c 69 74 79 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 63 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 21 30 3b 0a 76 61 72 20 68 3d 63 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 63 3d 68 2e 6c 65 66 74 2b 61 2e 70 61 67 65 58 4f 66 66 73 65 74 3b 66 3d 68 2e 74 6f 70 2b 61 2e 70 61 67 65 59 4f 66 66 73 65 74 3b 69 66 28 30 3e 66 2b 68 2e 68 65 69 67 68 74 7c 7c 30 3e 63 2b 68 2e 77 69 64 74 68 7c Data Ascii: f.getComputedStyle&&(f=f.getComputedStyle(c),"0px"==f.height\|\|"0px"==f.width\|\|"hidden"==f.visibility))return!1;if(!c.getBoundingClientRect)return!0;var h=c.getBoundingClientRect();c=h.left+a.pageXOffset;f=h.top+a.pageYOffset;if(0>f+h.height\|\|0>c+h.width\|
2024-01-10 21:53:37 UTC	1668	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 23 61 70 70 73 2d 64 65 62 75 67 2d 74 72 61 63 65 72 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 68 74 6d 6c 2c 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 63 68 72 6f 6d 65 2e 63 73 73 2e 6d 61 70 20 2a 2f 2e 6b 46 77 50 65 65 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 79 64 4d 4d 45 62 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 53 53 50 47 4b 66 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 65 65 6a 73 44 63 7b 6f 76 65 72 66 6c 6f 77 2d Data Ascii: highlight-color:transparent}#apps-debug-tracers{display:none}html,body{overflow:visible}body{overflow-y:scroll}/# sourceMappingURL=chrome.css.map /.kFwPee{height:100%}.ydMMEb{width:100%}.SSPGKf{display:block;overflow-y:hidden;z-index:1}.eejsDc{overflow-
2024-01-10 21:53:37 UTC	1668	IN	Data Raw: 3a 61 75 74 6f 7d 2e 54 34 4c 67 4e 62 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 54 34 4c 67 4e 62 2e 65 65 6a 73 44 63 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 61 75 74 6f 7d 2e 51 4d 45 68 35 62 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 2e 49 71 42 66 4d 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 32 34 39 70 78 7d 2e 49 71 42 66 4d 3a 68 61 73 28 2e 6b 34 6c 53 46 29 2c 2e 49 71 42 66 4d 3a 68 61 73 28 2e 41 44 4c 6c 39 65 29 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 32 38 30 70 78 7d 2e 49 71 42 66 4d 3a 68 61 73 28 2e 75 30 6b 48 35 65 29 7b 6d 69 6e Data Ascii: :auto}.T4LgNb{min-height:100%;position:relative}.T4LgNb.eejsDc{min-height:100%;overflow-y:hidden;-webkit-overflow-scrolling:auto}.QMEh5b{position:fixed}.IqBfM{min-width:1249px}.IqBfM:has(.k4lSF),.IqBfM:has(.ADLl9e){min-width:1280px}.IqBfM:has(.u0kH5e){min
2024-01-10 21:53:37 UTC	1668	IN	Data Raw: 63 69 74 79 20 37 35 6d 73 20 6c 69 6e 65 61 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 67 6d 33 2d 72 69 70 70 6c 65 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 7d 2e 52 42 48 51 46 2d 6b 73 4b 73 5a 64 2d 4f 57 58 45 58 65 2d 5a 6d 64 6b 45 3a 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 67 6d 33 2d 72 69 70 70 6c 65 2d 68 6f 76 65 72 2d 6f 70 61 63 69 74 79 2c 30 29 7d 2e 52 42 48 51 46 2d 6b 73 4b 73 5a 64 3a 3a 61 66 74 65 72 7b 6f 70 61 63 69 74 79 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 63 6c 6f 73 65 73 74 2d 73 69 64 65 2c 76 61 72 28 2d 2d 67 6d 33 2d 72 69 70 70 6c 65 2d 70 72 65 73 73 65 64 2d 63 6f 6c 6f 72 2c Data Ascii: city 75ms linear;background-color:var(--gm3-ripple-hover-color,transparent)}.RBHQF-ksKsZd-OWXEXe-ZmdkE::before{opacity:var(--gm3-ripple-hover-opacity,0)}.RBHQF-ksKsZd::after{opacity:0;background:radial-gradient(closest-side,var(--gm3-ripple-pressed-color,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.16	50092	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:37 UTC	1139	OUT	GET /RO8kwprBOCyMFHLH9_Homa6MCSiATjhOtTsrAW7Xk3fLJyByz1VCgMRGeGdp6gZ226c-Sde_UUqd7NzLFR-B8NXb1PE=s60 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:38 UTC	520	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Thu, 11 Jan 2024 21:53:38 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 21:53:38 GMT Server: fife Content-Length: 3087 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:38 UTC	732	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 78 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 55 8c 4b 0a 80 30 10 43 f7 3d 45 8f 90 7e 66 a6 3d 8e f6 23 05 51 f1 fe 0b ab ed c6 07 21 f0 08 51 5b 39 ca dd 92 be ee b3 b6 bd 28 fd 41 41 f9 e8 a3 5d 00 04 0c 2c e0 0c cc db 90 a9 78 b4 5b a7 4f d3 67 fc 20 70 64 c7 46 7a 80 fe 9c c9 5b 90 13 92 7e c5 55 ac f8 77 a7 1e 38 5a 1f 09 17 f8 47 3c 00 00 01 a4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 Data Ascii: PNGIHDR<<:rsBIT\|dxzTXtRaw profile type APP1UK0C=E~f=#Q!Q[9(AA],x[Og pdFz[~Uw8ZG<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNT
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: cf f9 7d f7 dc 7b ce 3d f7 2e f0 35 03 4d 72 ff b6 7f 73 79 82 80 9e 06 70 3c 41 d8 09 3c c8 e0 36 2b b2 3c 4b e9 09 2f 00 9e 64 1b ae 40 c4 09 57 b3 f3 7a 09 dc 21 40 77 35 9f ef fc 66 bb 7b 20 db 6a 21 90 18 fa 40 32 74 c9 60 c9 da 8c 82 a4 d3 f1 49 d1 87 01 fe 67 e9 c7 ab f7 d1 2d b7 78 22 6d cf 58 44 8a b0 70 f1 c6 d5 92 e1 ac 3f e2 71 d8 a2 05 58 32 58 86 d0 c0 00 59 08 04 40 58 a8 6f e6 dc b4 bd 1a f4 ca 6f d1 96 83 11 b2 6b 1c c2 26 ec e2 f2 55 ed 2d bd cf b4 36 7b f3 41 08 cb 41 49 10 a4 2e 51 b0 30 63 3f 09 f9 90 83 b6 d4 85 6b df 38 1d 61 c8 5a 5c ec dc dd 50 e3 29 e3 08 cf 42 02 20 19 28 5c 94 fe b4 83 2a 7f 1e e9 be 95 e1 e2 0d 45 5f d6 f7 ba fa fb b4 34 b3 32 16 2b 81 19 90 ba f9 b7 43 04 e4 16 a7 1e ba d5 be e5 76 00 7d 13 b1 75 5c 9f aa 02 Data Ascii: }{=.5Mrsyp<A<6+<K/d@Wz!@w5f{ j!@2t`Ig-x"mXDp?qX2XY@Xook&U-6{AAI.Q0c?k8aZ\P)B (\*E_42+Cv}u\
2024-01-10 21:53:38 UTC	1103	IN	Data Raw: ed 9b 56 cd ce 9f 99 69 6b 44 58 b3 d9 ad 4a e5 14 66 e0 e2 e9 8e 1b 5c 5c fe b4 8a 1c 00 b8 b8 fc 8d 9e b6 81 1c 55 b9 11 48 09 d4 1d 75 ff 6a eb 86 67 b2 42 b5 35 0c 4b 39 f9 c9 9f 06 5d 2d 46 81 08 48 ce 88 39 0f 41 b2 e1 b8 fb b1 6a 2e 37 3b d2 d1 2e 76 be d7 50 e3 5e 63 8f b3 b5 db 63 ad 6d 26 e5 c6 c1 62 21 cc df da bc 2d 54 3b 43 c2 0c fe 88 44 e8 e4 96 08 98 96 37 e5 d4 9a 19 db 8b 0a 16 a4 2f 67 41 b2 be c6 bd e9 ed a6 07 1a 01 18 d6 ae 0e f1 4f f3 aa 4e af bb 7c e6 b8 67 79 74 9c ad 7d 7a 41 d2 92 fb 66 ef 9d 17 13 67 ed 0c a9 34 90 bd 0c 34 d4 7a 56 1c e2 f2 25 c1 da 19 12 76 50 e5 1e 8b 35 74 2e 6d b5 89 ee bb 92 5e 9e 07 c0 c7 e0 6c 96 2c c0 40 97 a7 7f 26 82 ec 7f fc 5d 48 d6 fd 9c 08 00 be 7e 2d 9e 40 99 40 5b f3 f7 8b 76 15 9b 79 d1 81 a0 Data Ascii: VikDXJf\\UHujgB5K9]-FH9Aj.7;.vP^ccm&b!-T;CD7/gAON\|gyt}zAfg44zV%vP5t.m^l,@&]H~-@@[vy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.16	50091	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1136	OUT	GET /9l-v5C9T1MXzSVCMjgDN7WLsq6NMpOJ3HfroWTF16sePly4Ny8U1W1xu_1khwxf85UA1sARCJRHgr-82jwBbF_A7=s60 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:38 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3333 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 20:17:54 GMT Expires: Thu, 11 Jan 2024 20:17:54 GMT Cache-Control: public, max-age=86400, no-transform Age: 5744 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:38 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 02 00 00 00 b5 9e 4e 25 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 0c bd 49 44 41 54 68 81 b5 5a 6b 70 5b c7 75 fe 76 ef c5 93 04 48 f0 21 10 04 29 10 a6 28 91 d4 8b 62 35 7a d3 b1 24 cb 96 64 3d ec a9 1e 75 9d 19 75 1a db a3 7a dc 38 89 ec 76 6c b7 99 49 ad a6 49 e4 76 9a c8 9d da ae ed bc 5c 65 e2 c4 13 47 92 2d 39 36 f5 b0 29 d7 b2 5e 94 44 0a a4 2d 11 24 41 52 e0 13 24 40 bc ef dd ed 0f 3c 48 82 20 88 4b 4f be c1 1f ec 9e b3 e7 bb 7b cf 9e 3d 7b f6 12 fb 6f 9a f1 35 e0 e3 18 62 02 38 03 00 10 10 94 08 5c 07 9e 22 26 01 2e 59 00 8f fc b0 c0 fd fc ba 51 e4 ef 0b 9f fc e8 b1 3e 43 63 9e d1 c4 53 85 67 85 38 67 ba 11 a0 37 4a 1b d4 c1 a3 8b 2e b3 9c 4a ce 09 95 bd 03 1e ff Data Ascii: PNGIHDR<<N%sBITOIDAThZkp[uvH!)(b5z$d=uuz8vlIIv\eG-96)^D-$AR$@<H KO{={o5b8\"&.YQ>CcSg8g7J.J
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 33 d3 11 c0 c9 a8 33 28 1c c9 ef f0 3c e0 e6 0f b7 bd 53 72 d3 c9 52 25 19 80 b0 b0 a7 b2 2f a5 dd 33 d4 ff 9d f7 ae 96 7f e2 29 3f ef 79 fe f8 d5 68 28 90 89 f3 99 e6 5d f5 eb 6d 84 65 cf 18 29 33 9d 4c 20 5f 2e 74 1d 6a f0 20 f7 d1 98 c0 8a ca 4f e1 02 d3 4c 3c a2 93 13 84 89 63 ed 55 55 de 81 94 11 7f f7 7f ed 6f 08 05 36 ca 01 bc 1c 12 1b 9a 9d bb d6 2c 9e c9 3c 0f 84 50 c0 95 fa 68 9c f4 4c 09 64 0c 0b ac d6 e3 b6 8f 77 75 af 07 e5 00 07 c3 33 86 fe e7 56 f5 5a 2b f7 a5 0c 17 0d 07 3f 08 e7 99 48 82 07 25 83 43 43 19 cc 13 70 a4 4b 4d 07 09 19 8f 75 02 20 dc ca b9 7a 32 69 0f 27 99 12 c8 b8 d4 3d 3b d7 37 b4 99 9b 79 34 44 c0 65 6d 49 55 59 b5 4a 7f 7f 3a 12 44 43 f8 e4 d4 8f 66 8c be 72 61 c1 f4 3c d1 49 e9 37 47 47 9f 0f 75 09 05 46 21 1c b9 10 d2 Data Ascii: 33(<SrR%/3)?yh(]me)3L _.tj OL<cUUo6,<PhLdwu3VZ+?H%CCpKMu z2i'=;7y4DemIUYJ:DCfra<I7GGuF!
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: a0 21 46 96 95 b4 3c 65 fb 56 36 56 01 40 10 1f b2 ea 22 89 b8 55 4e f8 cf 58 7e 4b 4b 6b 36 aa 27 2e de 82 38 29 a5 92 f9 46 eb 2c 2f 36 09 b2 65 f3 0b ae 96 11 42 01 d0 7e 86 2d 85 39 5a e4 64 4b 1a 58 5a 51 02 29 12 0b 54 04 98 27 92 c7 9a 83 ee fe 59 6a 20 8e f6 2f ff a5 8f 5a 12 94 c7 81 4d 24 b4 a0 dc 9c ad d5 58 89 35 22 49 00 65 e0 c5 2a 63 f6 8c 01 d8 4a 8b 7f 5c 08 57 62 b2 73 80 56 41 bd ff 6c cf ed 3b 1d e9 15 98 f4 49 73 fb 81 4b 63 5d 2a 9d 36 d1 36 28 e3 bb f7 68 f5 39 0a 92 f8 64 89 95 62 ea a6 95 15 88 b0 bf ae 0c 92 14 4c 34 cc 27 f8 82 0b 7b 3f 1b 7c ed f4 c5 ce ce ce 48 20 be b9 06 bc a3 8e 5b b7 5e 7c f7 f3 6f b4 04 bb 45 75 51 c2 d0 20 c7 bd 24 b2 69 e9 3d ca ec c6 4a ac e1 88 58 48 68 93 f7 8e 32 65 c0 56 66 69 aa ee db d0 2e 95 ab Data Ascii: !F<eV6V@"UNX~KKk6'.8)F,/6eB~-9ZdKXZQ)T'Yj /ZM$X5"IecJ\WbsVAl;IsKc]66(h9dbL4'{?\|H [^\|oEuQ $i=JXHh2eVfi.
2024-01-10 21:53:38 UTC	108	IN	Data Raw: 3e 71 0b 30 5a 56 d0 ff e9 d6 d5 3a 18 30 2d 81 d4 4f b9 87 e1 9d 12 59 46 4b b6 58 d4 c5 3a 70 a0 a9 87 bc 1f 71 01 51 bb c2 8f ad be 2e 69 80 38 b9 f7 bd 8d de 1d e6 ed 7f b8 89 bd 37 ef 80 f9 2c 22 d7 ce b0 a4 42 60 fd 2c 5e e0 2d a4 c8 21 5f 83 2f 00 e0 ff 01 09 73 31 74 a0 bf ef 43 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: >q0ZV:0-OYFKX:pqQ.i87,"B`,^-!_/s1tCIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.16	50089	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1138	OUT	GET /gksbC7LokfjgIneFOwrRYDLHJxl0mxEZnKB2vdMOv7wAVD3wk2Ptz-6CWEglD2sQq28E7JsJL1JeQqydEVuSjlgEjQ=s60 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:38 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2673 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 20:14:47 GMT Expires: Thu, 11 Jan 2024 20:14:47 GMT Cache-Control: public, max-age=86400, no-transform Age: 5931 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:38 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0a 28 49 44 41 54 68 81 ed 5a 6b 6c 5c c5 15 fe 66 ee 6b 1f 86 3c 6c 27 8e 09 48 7d 40 22 1a 69 cb 3f 5a 92 1f ad 08 10 62 b5 bf 90 8a 44 84 28 10 12 9c c4 02 81 40 a1 90 40 43 5b a9 42 34 81 28 40 0b 08 21 15 55 4d 08 20 c7 46 48 28 10 1c ea 96 4a d5 b6 4e 08 38 04 4a 82 1f f1 73 9f f7 35 33 a7 3f ee ae ed c4 bb eb bb eb 38 a1 92 3f 79 fc 67 e7 cc 9c ef ce 99 33 e7 9c 19 60 1e f3 98 c7 3c e6 f1 ed 05 9b eb 09 84 a2 3b 18 50 af 00 a5 95 e9 23 01 70 80 03 18 d2 38 fb f3 5c ea a3 cf e5 e0 00 f4 77 3b 3b 5f bf ee ba 1f 42 d3 34 30 c6 a6 7d 61 02 40 44 90 52 e2 f4 e9 d3 67 00 fc 5f 13 a6 78 3c 96 1f 1a 1a 8e Data Ascii: PNGIHDR<<:rsBIT\|d(IDAThZkl\fk<l'H}@"i?ZbD(@@C[B4(@!UM FH(JN8Js53?8?yg3`<;P#p8\w;;_B40}a@DRg_x<
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 58 b9 a2 fd ca e5 cb 7f 0e 40 cd 24 17 ca de 84 a2 ed 47 bb ba 5a ea eb 17 63 6c 6c 1c 96 65 41 16 3d eb a5 00 63 40 31 68 21 c2 27 9f fc b3 45 28 da ae 73 b6 6b 26 d1 50 cb a4 73 b6 97 73 2d f9 e5 97 5f 41 08 11 1c 25 85 e3 e4 92 34 29 21 84 80 e7 79 f0 5c 17 8d 8d 0d 49 9d b3 bd a1 be 55 98 4e 05 d4 7d fc 71 77 d7 78 2a 95 88 c7 62 d0 cb 47 45 17 05 9e e7 21 9f cf e1 f2 cb 17 26 d7 ac fe d1 6a 00 d9 30 72 d5 7a e9 f8 47 5d 47 bb 73 b9 dc aa 68 34 7a c9 f6 b1 52 0a f9 5c 1e 75 97 c5 7b d6 ac 5e 7d 3d 80 5c 58 d9 5a 62 53 b3 eb 68 77 d2 71 ec 95 ba a1 07 e9 ce c5 04 03 84 ef c3 8a 44 4e ac b9 e1 c7 09 00 5e 95 e2 35 c1 ea 7c f7 3d c7 b2 cc f0 84 03 3f 03 22 05 2a 38 bb 20 73 e2 c1 51 54 c5 38 9e eb e1 96 5b 6e 8a 00 70 ab 55 bc 26 9b 14 44 1b 18 03 a4 52 Data Ascii: X@$GZclleA=c@1h!'E(sk&Pss-_A%4)!y\IUN}qwxbGE!&j0rzG]Gsh4zR\u{^}=\XZbShwqDN^5\|=?"8 sQT8[npU&DR
2024-01-10 21:53:38 UTC	700	IN	Data Raw: 7d 85 72 61 c1 40 a4 26 6e 1f 62 f1 78 f2 d1 87 1f fa 09 80 b1 99 24 43 25 9e 07 0e be dd 96 4d 67 12 27 4e 7c 86 af fe fb 35 38 e3 93 81 c8 25 69 12 a4 08 20 0a 82 9b 91 d1 c4 fb ef 1f 69 0d f7 a9 c2 81 3d f3 ec ee 77 86 87 86 5a a2 b1 18 0c 43 af 42 74 ae 40 f0 3c 1f be e7 a1 b9 f9 8a f6 fb 37 6f 0c 75 d5 52 95 d6 7b f7 bd d8 31 d0 df b7 ce b4 ac 4b 7e b7 54 8c ac 96 36 35 75 6e bd 7f f3 05 bf 4c 9b c0 9e bd 2f b4 f7 f7 7d b3 de 34 4d 68 9a 36 25 ab 09 f2 39 2a 14 0d 94 52 13 ef 38 c2 e5 7a 41 9f e2 8b 80 89 a7 12 8c 9f 23 cb 18 0b aa 29 9e 8f 65 cd cd 87 b6 b5 6e aa ea ba b4 ea 65 da d6 ba a9 a5 a9 a9 a9 c3 75 1c f8 be 3f 25 88 17 f0 3d 0f 76 3e 0f 8d 6b 27 76 3d b5 33 b2 fd b1 c7 ef 73 1c 5b 15 ab 8a 95 9b 80 e7 ba b9 ed 8f 3f 7e ef ae a7 76 46 74 5d Data Ascii: }ra@&nbx$C%Mg'N\|58%i i=wZCBt@<7ouR{1K~T65unL/}4Mh6%9*R8zA#)eneu?%=v>k'v=3s[?~vFt]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.16	50090	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1147	OUT	GET /z2onVi12x9yGQDR6s9E9hvrnKTmC1pE2g0WhujiRmGNc_nzkCgZqg8WrkLD7mzBNq-Ui8OO37ynwyXzTUjQ1Nbk1=s275-w275-h175 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:38 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 11875 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 18:29:45 GMT Expires: Thu, 11 Jan 2024 18:29:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 12233 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:38 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 13 00 00 00 af 08 02 00 00 00 51 b4 ad 55 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 20 00 49 44 41 54 78 9c ed bd 77 90 65 c7 7d df fb fd 75 f7 89 37 ce cc 9d b0 33 3b 9b 03 d2 2e 02 01 26 00 34 45 12 a4 45 93 b4 28 b9 68 51 74 c9 12 2d 99 92 4b e5 2a bb 6c 57 39 54 b9 ea 95 4b a5 3f 9e 5f f9 51 e5 f7 1e 9f 69 05 48 96 49 97 4c 49 16 29 31 81 41 8b 24 10 14 81 45 da c5 62 b1 71 72 bc 73 e3 09 dd 3f ff 71 6e 98 d9 00 ec 0e 76 36 00 fd a9 ad d9 7b ce 3d f7 74 9f 3e bf 6f f7 af 33 bd 72 ec c4 e2 e2 62 23 8a 25 43 29 09 96 7e e8 81 54 a3 56 53 06 61 31 88 4d 1a 35 53 66 0c 8f 0d 15 8b 45 66 c6 e5 21 a2 f9 f9 f9 a9 a9 a9 43 87 0e b5 db ed 42 a1 18 9b 85 57 4f 3e ff ee 7b 3e 3a 37 bd bc b4 70 7e Data Ascii: PNGIHDRQUsBITO IDATxwe}u73;.&4EE(hQt-K*lW9TK?_QiHILI)1A$Ebqrs?qnv6{=t>o3rb#%C)~TVSa1M5SfEf!CBWO>{>:7p~
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: b8 ae 7b 25 8f 91 cb e5 26 27 27 89 08 00 33 bb 6e 30 ba bd 92 c4 da f3 fd 52 79 c8 cd 21 0c c3 42 21 57 ab 35 c8 f5 a4 eb 5d b5 68 80 ec ce 03 e5 81 62 a1 08 10 00 a3 f5 c9 a9 56 63 a9 b2 7d 88 58 a5 71 ca 82 e3 94 50 28 96 1d 41 8e 12 69 9a 1a 00 06 20 ad 64 a1 56 6b b6 da 71 71 68 20 8a 53 e5 84 12 1c 92 4b 02 60 21 a4 c8 17 cb 52 36 94 e3 0a 21 41 34 32 32 22 84 00 40 84 24 4e cf 9c 6f a7 cd b1 89 31 cd c6 94 06 06 53 c3 95 91 d1 01 63 da 8d 66 65 74 24 6e b7 c3 c0 63 21 99 ae 2e 43 20 a2 ed 13 db c3 30 64 66 30 2b e5 28 25 6f 3f 78 20 08 7c 29 44 2e 57 18 d3 26 31 7a d8 51 46 eb c0 77 94 90 63 93 a3 89 31 12 44 02 4d a9 3c 37 ef 79 52 4a 9d a4 92 c9 14 73 81 50 0a 42 f9 39 ff 82 80 6e 3b 78 20 17 86 9d 94 34 34 32 3a aa 94 cb 06 c5 d2 80 af b5 4e 4c Data Ascii: {%&''3n0Ry!B!W5]hbVc}XqP(Ai dVkqqh SK`!R6!A422"@$No1Scfet$nc!.C 0df0+(%o?x \|)D.W&1zQFwc1DM<7yRJsPB9n;x 442:NL
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: b2 b1 f4 a8 54 2a be ef 0b 21 32 47 66 db d8 d0 af 7e fe 67 dd 3d 05 84 83 00 ca c2 fc 46 f3 fc 44 38 94 b5 c4 90 e1 c1 44 53 3e 00 90 c4 7a ef bb b6 0d 6d cf 67 f7 29 97 cb 51 14 05 41 00 80 99 a5 4e fd a8 05 63 92 46 fd f1 af fc 11 35 9b 2b f3 73 e2 cf 3e fb 6b df 3d 5b 19 16 87 ee 96 99 6c 00 38 85 e1 d1 cf fd bf ee c8 30 00 02 de f3 ee fb 7f 2a 08 95 52 00 3c cf 8b a2 48 08 91 1d 4a 21 c2 6e 83 24 ae a4 9e 93 6a ad b5 e9 36 bf 5d de e8 b9 53 b1 a1 37 be ec 3a 3a f1 96 9b 9f ac 06 2e a5 54 f2 5a b6 25 66 f5 08 21 84 49 92 17 bf f3 cd a4 ba 14 27 89 72 e5 03 3f ff f9 ab ba 8f 31 e6 72 4d db f4 f4 d3 4f 5f 7c 32 0b 7d e3 61 f7 dc 9b 16 18 6f 7a 8d 15 8e a5 47 df 54 36 f4 07 5c f4 35 af 3b bc 9c 01 f5 bf ed 76 24 00 40 1a 45 3a 4d 08 90 8e 2b 3d f7 a2 a6 Data Ascii: T!2Gf~g=FD8DS>zmg)QANcF5+s>k=[l80R<HJ!n$j6]S7::.TZ%f!I'r?1rMO_\|2}aozGT6\5;v$@E:M+=
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 84 03 03 65 9d a4 b5 46 bb 65 a2 20 08 a2 38 89 e3 24 8e 22 e5 fb be c2 c2 d4 59 96 ae 5f 1c 4a 92 d8 71 55 6d 6d d5 73 7d 22 31 bf b4 ea 2a 4a a2 b6 97 2b 8e 55 06 e2 54 a7 ed a6 d6 69 ab 9d 94 8a 85 30 08 1a b5 95 e5 5a 5b 09 e9 bb 7e ab d9 6a 34 9b ad 76 5b 90 20 21 1a ad b6 10 d2 75 9d 6a ac 9b 51 4b b2 ae 37 9a e5 c1 41 cf 73 d3 38 69 c5 89 e3 3a 81 ab e2 38 32 40 3b 62 4f a6 51 14 b7 a3 b8 58 2a c6 49 44 82 7c df 5b 5e 98 6f b4 5a be 17 14 0b 45 63 68 66 66 26 08 83 28 4a 1d 47 a6 46 bb 8a e6 17 96 b4 31 02 0c e5 d6 ab cb b5 7a 6d b0 3c 98 34 eb a4 5c 57 ca 34 49 ac 6c ae 16 fa d2 97 be 74 a3 e3 70 b3 c0 99 6f c6 30 c6 30 1b c7 71 d2 34 61 06 40 52 4a 22 e8 34 01 09 21 24 11 88 28 4d 12 a9 1c 80 bb 0e 0f 31 48 09 61 b8 73 06 00 11 09 21 c0 d0 26 25 Data Ascii: eFe 8$"Y_JqUmms}"1J+UTi0Z[~j4v[ !ujQK7As8i:82@;bOQXID\|[^oZEchff&(JGF1zm<4\W4Iltpo00q4a@RJ"4!$(M1Has!&%
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: b2 dc 4a aa 95 f2 1e 0d 66 92 1c 7a b9 42 d9 75 64 b9 54 64 1d 07 61 6e 65 69 d9 0f fd 62 2e c8 97 4a 43 e5 a2 9d ef 70 85 d8 71 6b 7d 7a e3 ed 99 99 99 85 90 cc 1a 44 cc 90 42 68 ad 89 a8 53 9d 60 86 10 04 64 2e 53 f6 57 08 91 7d c6 ba 91 2f 44 64 0c 67 75 8f ec b0 f7 95 61 4e 93 38 8a 92 5c 2e ec 55 91 88 04 00 63 58 50 df 84 85 a0 6c 52 00 88 64 37 94 2c 44 ee 8e 5f 10 eb ea 2a 9d aa 0b 81 40 04 ca 06 e2 65 41 67 55 19 21 84 61 26 f0 fa 41 43 cc 2c 84 b0 de da 15 62 cb 9c 0e 44 b4 b8 b4 14 b5 23 12 c4 8c 34 8a 82 7c c8 8c 34 d6 ca 95 82 d0 6c b6 86 06 2b e5 81 d2 05 ce 4c 36 b3 25 1b 42 d6 1d 48 d6 b9 61 f6 41 ca 0b 6d 31 fb 4a 12 29 3f f0 fd e0 62 ef 28 fb 09 6d 38 d3 7f 53 eb 43 bc d8 d0 2f 71 06 a2 1f af ee d7 82 b2 3d b2 6d 87 d5 26 b1 ca e9 a3 94 Data Ascii: JfzBudTdaneib.JCpqk}zDBhS`d.SW}/DdguaN8\.UcXPlRd7,D_*@eAgU!a&AC,bD#4\|4l+L6%BHaAm1J)?b(m8SC/q=m&
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 6b c6 a0 58 b0 43 7b 36 81 55 4e 07 21 c4 d4 d4 54 b5 56 db 3e b1 dd 51 d2 18 0d c0 71 5d e9 f9 74 d7 5d 78 e9 a5 ad ca 9b 89 a0 14 7e e7 77 70 e7 9d f8 ec 67 11 04 1d e5 54 ab f8 da d7 70 ec 18 82 60 0b cb 84 24 e1 bb 0e b1 e3 58 9f ed 6a b1 ca e9 c2 6c 48 14 73 fe 6b c7 5f 0e 0b 25 29 44 b3 51 df be 73 0f b3 89 ee be 07 df fb 1e 16 17 b7 aa b2 41 84 7c 1e a7 4e e1 8b 5f c4 f8 38 7c 1f cd 26 66 67 d1 6c 6e a1 93 06 20 4d b1 6b 17 ee 3a 84 93 af 6d 61 28 6f 53 6c 31 dd 81 81 42 18 28 c7 df b9 6b cf 40 b9 9c cf e7 c7 b6 8d 17 f2 b9 30 08 68 ff 01 7c fa d3 68 b5 b6 b6 17 5f 08 b4 5a 38 71 02 47 8f e2 e4 49 b4 5a 5b 3b b9 c0 18 4c 4f e3 1f fc 03 9e 98 e0 74 eb 27 20 bd ed b0 65 4e 07 66 0e c3 30 9f cf 93 10 d4 9d 53 2d a5 f4 5c cf 55 12 1f ff 38 d6 d6 f0 e8 Data Ascii: kXC{6UN!TV>Qq]t]x~wpgTp`$XjlHsk_%)DQsA\|N_8\|&fgln Mk:ma(oSl1B(k@0h\|h_Z8qGIZ[;LOt' eNf0S-\U8
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 30 3d 8d 73 e7 30 3d 8d b5 35 d4 eb 68 b5 90 24 88 22 68 dd 69 65 ce 86 81 66 bd a2 52 82 24 5c 07 41 80 42 01 03 03 a8 54 b0 77 2f 46 47 91 cb a1 58 44 b1 88 52 09 be bf 35 a9 62 b9 2c 56 39 7d a2 38 89 da ad ea ca 6a b3 51 f7 c3 d0 18 56 8e 1a 1b 4b df ea 0e 19 41 80 20 c0 c8 48 ff 4c a6 10 63 10 c7 68 36 11 c7 9d 15 a5 d7 f7 f6 f4 96 96 96 12 ae 8b 20 80 ef 83 e8 fa 8d 33 b0 bc 21 56 39 1d 98 79 70 68 88 80 24 49 8c 31 42 50 bd de 2c 14 0b e5 72 f9 12 0d d3 6f 91 9e f5 bb ae 5d 82 f0 16 c5 e6 5e 1d 88 28 8d a3 a5 a5 a5 6c 66 4e b3 d9 ce e5 42 cf f3 5c c7 66 2e 96 4b 60 cd a2 4f b5 56 f7 1c e7 ec a9 93 51 aa 85 10 69 1c 0d 4f ec 74 08 49 72 2d 87 12 67 b5 26 63 4c b6 95 af 94 82 99 2f d8 48 91 8d 01 89 75 8b 11 a4 52 a9 ec c8 18 d3 5f 23 c1 72 e3 b0 ca Data Ascii: 0=s0=5h$"hiefR$\ABTw/FGXDR5b,V9}8jQVKA HLch6 3!V9yph$I1BP,ro]^(lfNB\f.K`OVQiOtIr-g&cL/HuR_#r
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 39 16 cb 66 50 20 2b 1e 8b e5 0a e1 de d6 60 0a cd 4c 3c 20 cc 00 00 0e 0f 49 44 41 54 f9 1b 1b 17 8b e5 d6 81 e0 0f 64 85 8d c2 13 ff c7 8d 8e 8d c5 72 2b c0 09 dc 11 bc f7 9f c3 2f 83 59 21 8d 6e 74 8c 2c 96 5b 84 b4 05 f4 bc 35 bb 74 a4 c5 72 25 30 40 fd 45 be 6d f3 80 c5 b2 19 ac 72 2c 96 cd 60 e7 84 5e 5f 18 57 ea 1e af 9f 84 4a eb 0e ad 77 7d 73 60 95 73 7d 09 c7 90 ac 20 be a8 55 46 74 25 a1 01 02 dc 02 94 07 19 82 19 c9 2a d2 1a 82 09 a4 6b 10 79 b4 66 ae 7b a4 2d 97 c0 2a e7 3a 42 02 61 0e de 04 8c 06 15 a0 1c e8 36 60 40 0e b8 8d 68 15 4e 05 82 b0 7c 02 85 71 98 04 46 c1 0d 80 0a 82 11 ac 9e 46 69 18 cb b3 28 4c 62 ed 9c 2d 79 6e 38 b6 9e 73 7d d1 31 ea cb 70 72 08 47 21 73 50 01 48 c0 09 e1 96 c1 0a d2 83 52 20 05 f2 40 2e 38 45 da 82 33 84 c6 Data Ascii: 9fP +`L< IDATdr+/Y!nt,[5tr%0@Emr,`^_WJw}s`s} UFt%kyf{-:Ba6`@hN\|qFFi(Lb-yn8s}1prG!sPHR @.8E3
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 1c b2 3b e4 7b de fe e2 1e 29 54 ca 0c 66 43 c2 13 14 a5 d1 a9 45 d9 6a b7 ea cc 6d 70 53 8b ed 4a 08 80 01 c3 dc 32 bc 68 d2 94 d5 a4 24 25 28 b3 47 cf 65 e2 d3 53 e7 50 ae 4c 38 ca cb de 2c 75 b2 2e 43 94 89 bc 6b 66 c4 d9 fb eb 19 ce 3a fb ed 98 38 77 8d dd 80 a9 7b a6 2b 1a ca 06 6a 09 12 44 d9 87 0e 82 00 22 81 6e ae 42 c4 86 01 62 66 c3 60 36 cc c4 6c 0c 03 cc 9a 41 cc 06 44 1b 06 81 75 02 27 a6 75 66 09 66 26 74 72 9f 2c d0 4e 90 e8 44 a8 97 23 d0 3a 09 82 b2 fb 98 4e 8f 27 fa b7 60 66 ca 12 22 bb 90 08 40 96 db 52 37 1f 20 ea e7 86 59 2c b4 d6 24 04 11 31 88 8d 21 21 00 c1 30 c6 f4 c6 b0 89 2c 3d 73 61 6e 64 64 b4 d9 6c 16 0a 85 46 a3 71 6e ea 9c 90 92 0d 33 50 6f d6 97 aa 2b b9 40 55 ca 45 3a fd ed 30 08 a4 94 aa 00 48 a9 8c c1 9f ff f9 d7 ab 6b Data Ascii: ;{)TfCEjmpSJ2h$%(GeSPL8,u.Ckf:8w{+jD"nBbf`6lADu'uff&tr,ND#:N'`f"@R7 Y,$1!!0,=sanddlFqn3Po+@UE:0Hk
2024-01-10 21:53:38 UTC	1140	IN	Data Raw: 87 e7 4f 9f 12 7e 8e e3 b5 7c 69 34 f4 5d c5 8e 61 96 6f a1 b2 1c 45 d1 63 8f 3d f6 c0 03 0f 8c 8f 8f 77 52 9a 31 3c 3a b6 56 5d 5d 59 5e 14 24 88 88 64 60 6a cb cd e9 f9 d2 a9 13 f3 d5 d7 d4 df ac 89 40 40 a0 66 c4 c2 f7 77 cb fc 89 78 e1 e4 f2 82 94 6e 42 44 9e 11 5f 0d cd bb 77 bc f6 50 f9 f5 b5 b6 93 f9 26 03 6e f4 d8 fc d8 ef 3e f7 a0 11 72 4f fd 3b 81 ec 78 d7 82 cd f1 c5 70 c9 73 5b 31 67 a6 4c 2a 70 17 4f 1d 7d fe b5 dd 07 47 3f 58 3f b1 eb 67 fe e9 b3 7f fd 24 01 11 f0 6f 26 a3 af dc 85 ba fa e4 43 0f e5 bf fb ed bf 64 a0 54 33 5f aa d4 e6 a6 4e 63 fe bd 45 e9 4c e2 bf 18 0c e6 22 fa 4b bf fd 5f 06 9f 70 e4 61 bd 5f ee 7f e1 eb 0c 2f 8e 8b b7 8d 1d fd f8 3d 23 87 0e a7 6b f3 77 3e ff d7 df 73 bc 5c 66 61 74 c1 f8 f8 4c 3d eb ad 0a e8 57 d8 3a 72 Data Ascii: O~\|i4]aoEc=wR1<:V]]Y^$d`j@@fwxnBD_wP&n>rO;xps[1gL*pO}G?X?g$o&CdT3_NcEL"K_pa_/=#kw>s\fatL=W:r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.16	50088	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1149	OUT	GET /mRHctZMLZqLPl11SMBN0Y3cGFGM4ds67Tm4kzPiBVO6Yvb49Y60hO1JofKy763ldPfBIvkyPljIbfMQLVXo4dzB9UA=s275-w275-h175 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:38 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 17281 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 20:55:19 GMT Expires: Thu, 11 Jan 2024 20:55:19 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/png Vary: Origin Age: 3499 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:38 UTC	720	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 13 00 00 00 af 08 02 00 00 00 51 b4 ad 55 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 20 00 49 44 41 54 78 9c ec 9d 77 9c 16 c5 fd f8 3f 33 b3 bb 4f 2f f7 5c ef 85 bb a3 83 74 0b 2a d8 15 b1 44 4d cc 37 b1 47 8d 3f 7b 8c 51 d3 8c 1a 8d 1a 35 41 b1 17 54 50 23 18 2b 16 e0 e8 5d a4 c3 c1 71 dc c1 f5 5e 9f be bb 33 f3 fb 63 ee 96 e3 38 8a a7 f0 40 dc f7 eb 5e f7 7a 66 77 76 f6 33 b3 f3 99 cf cc 67 66 77 50 e1 e8 93 c1 c4 c4 e4 7b 82 63 2d 80 89 c9 09 89 a9 39 26 26 fd c1 d4 1c 13 93 fe 60 6a 8e 89 49 7f 30 35 c7 c4 a4 3f 98 9a 63 62 d2 1f 4c cd 31 31 e9 0f a6 e6 98 98 f4 07 53 73 4c 4c fa 83 a9 39 26 26 fd c1 d4 1c 13 93 fe 60 6a 8e 89 49 7f Data Ascii: PNGIHDRQUsBITObKGD IDATxw?3O/\t*DM7G?{Q5ATP#+]q^3c8@^zfwv3gfwP{c-9&&`jI05?cbL11SsLL9&&`jI
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 7e ed ed 99 9b 76 94 f4 52 1e ce 79 69 79 fd e6 15 5f 8e 18 36 b4 b9 b5 f5 6f 8f 3d 31 fb ab 05 71 ce 23 7a 4e 00 10 d5 b4 3a 7f c8 46 48 b2 c7 79 84 39 dd dd d2 0e 55 bb ae bc e6 86 73 ce 98 98 92 9c 2c 11 52 5b 5f bf e6 bb 0d 6f bd fc 02 24 e5 0e 48 4b 3c 36 6d f3 d1 46 a7 b4 9d a2 96 ad 6b 45 f0 b9 e7 a7 df f7 cc 0b 85 89 3e 23 02 e7 3c a0 6a 4f 3e f8 bb ac cc 4c c6 d8 c1 d2 91 24 e9 93 cf e7 be ff c5 d7 47 a2 3c ed c1 f0 25 67 9f f1 fa 8b cf 8b 20 ca 1e 36 20 ce 4e 08 f9 61 59 f9 a1 1c 45 dd ad dd bb 5b 8b 84 66 bc fd ce 81 6a 03 00 e3 c7 8f ff f7 f3 2f dc 73 d7 9d 87 55 1b 00 68 ae ae b0 da 1c 0e b7 87 73 de 10 0c 0f 18 90 77 ce 39 67 23 80 48 34 3a 77 7e d1 aa 4d db 7a 69 8e a6 d3 09 e3 87 0d 1b 3a 04 00 12 7c be 31 63 46 bf 38 eb bf 47 a8 39 11 4d Data Ascii: ~vRyiy_6o=1q#zN:FHy9Us,R[_o$HK<6mFkE>#<jO>L$G<%g 6 NaYE[fj/sUhsw9g#H4:w~Mzi:\|1cF8G9M
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 4b 97 87 35 0d 00 da 77 97 0e cc cf eb ba 29 63 ff 7e f2 5f f6 9c 2c 45 c2 00 e0 b5 db 24 42 08 21 a3 87 14 fe e1 ac b3 4e 1a 3e 2c 23 23 0d 01 34 34 36 2d 5c b2 6c ee 37 0b b6 55 54 a7 79 fb ea 29 34 ec ba fc b2 ff f7 ab d7 af 1c 90 9b db d6 d1 31 fb a3 4f 66 7c f4 99 d3 22 8b e6 26 aa 69 61 9d 5e 77 f9 c5 e7 9f 73 f6 80 dc 6c 9b d5 da d4 dc b2 69 eb b6 65 2b 56 6d da 5e 1c 08 85 7f 2c e5 39 8a e3 1c 59 96 8f c4 22 5f 70 c1 f9 87 8d e3 f7 fb 67 cd 9a f5 3d ee cd 39 74 46 d2 d3 d2 64 59 06 00 b7 db ed 8f aa 3e 4d 93 ad f6 6f 3e fe 30 25 29 c9 88 98 9d 9d 7d c6 69 a7 de 73 fb 6d 57 5d 73 fd 47 b3 de d9 b9 36 e8 e8 ee 79 13 42 d2 d3 d3 c4 6f 9f cf 07 81 30 24 ed 77 93 ce 70 e4 82 c9 a7 67 74 c7 f9 e4 b3 2f 9e 7e fc b1 82 51 27 8b 4c f3 f8 93 67 be 39 67 c2 Data Ascii: K5w)c~_,E$B!N>,##446-\l7UTy)41Of\|"&ia^wslie+Vm^,9Y"_pg=9tFdY>Mo>0%)}ismW]sG6yBo0$wpgt/~Q'Lg9g
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: e8 e1 47 5a db da c4 c1 d3 27 9e 36 20 2d 11 5a ea 52 53 bb ba 00 f5 75 f5 a9 a9 a9 19 19 19 c9 e3 26 3d f1 d4 3f ff 33 fb a3 39 f3 97 fd 88 b3 a8 3f 19 cd c1 b8 ae a6 59 d7 bb 1e c3 99 a7 9f fe c1 ec 39 e7 5d 76 e5 c6 a5 0b ee bc fd af 4f be fe 6e 66 9c 1b 21 04 49 b9 d6 ee c2 15 f5 a3 70 f4 c9 85 a3 4f ce 4f 88 eb 2b d1 70 9c d7 23 7e f9 03 81 83 dd 39 18 0a 89 1f 6e 57 1f 0d de 27 5f 7c f9 d8 5f ff 94 ac e0 cf 16 ae fc c7 b3 d3 84 01 49 4e 4a 9c 38 7e 6c d3 ae bd 17 9f 33 39 2d 35 05 00 a2 d1 e8 59 93 ce 14 97 14 7d f6 df 4f e6 7e 05 00 08 60 f0 a0 41 50 b3 df 9c 63 24 1a 7d fa b9 69 1f 7c b9 d0 ca f5 37 5f 7a 61 c1 a2 c5 e2 b8 cb e5 02 f0 06 a3 d1 49 a3 47 0c 1e 58 28 0e 8e 19 3d 55 0c a3 4b d6 2e 7b e5 ad ae 2a 3b b0 a0 00 9c 56 00 18 3a a8 6b 98 fa Data Ascii: GZ'6 -ZRSu&=?39?Y9]vOnf!IpOO+p#~9nW'_\|_INJ8~l39-5Y}O~`APc$}i\|7_zaIGX(=UK.{*;V:k
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: d6 df 75 f3 af 8d 39 d0 8e f6 76 00 6f 6b 4b 4b 97 f0 8c df 75 d7 63 a0 d5 80 2f 13 10 80 46 a1 b3 15 20 64 c9 1e 94 1d ef ed 80 e6 9e 69 a2 83 4f 7c 39 64 b9 ae ae d6 08 de fd f4 74 d8 b3 15 7c d9 80 00 28 83 f6 76 00 3f a4 e5 0f 48 f2 95 ac 5a 64 44 1b 39 62 c4 3b af bf e2 1c 39 ce 1f 8e 80 94 75 a0 a1 fb be 30 ce c1 65 2f 2c 28 10 c1 dd 65 e5 e3 c7 8e 81 f4 02 60 1c ea 76 c3 21 35 e7 c2 b3 cf fc e4 bd 19 96 e1 63 2b b6 ae 7f e6 df 2f 18 c7 5b 5a 5a 14 89 d4 b6 77 06 22 aa 43 96 9e 79 e7 83 27 1f 7b f8 4f 7f 7b ec be bb ef 88 f3 7a 01 60 e0 c0 42 68 ab 84 1f 49 73 4e ec 71 0e c6 38 25 39 f9 fc 71 27 8d 1a 3a 58 fc 8d 19 3e 34 35 29 61 bf 65 4e 02 ca 64 59 7e e3 89 bf dc 7b dd 2f 1d 2e 17 b4 55 c2 9e ed bf bf fb 4e c3 39 43 29 05 84 b0 45 16 6e 2b 00 88 Data Ascii: u9vokKKuc/F diO\|9dt\|(v?HZdD9b;9u0e/,(e`v!5c+/[ZZw"Cy'{O{z`BhIsNq8%9q':X>45)aeNdY~{/.UN9C)En+
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: f2 15 77 3d fa cf 01 99 fb 46 a1 3f 90 a3 68 73 a2 d1 68 6d 6d ad d5 7a 44 6b 34 0f 81 24 49 fb 5c ab 00 6e 45 ee f4 07 6a 6a 6b 65 49 3a 70 95 82 24 49 2d 2d ad 90 e4 04 8b b5 a6 b6 56 ac 5b eb ec ec 74 3a ac 16 c4 ef bc ef 81 4b a7 5c 38 6c c8 e0 e4 a4 44 8c 71 47 47 e7 ba 0d 1b 8b 16 2f f9 a0 68 79 7e 42 1c 42 08 21 14 67 b3 5c 77 fb bd 77 dc 78 cd d9 67 9e 91 90 90 d0 d6 d6 b6 63 57 e9 c7 9f cd 4d 1f 32 aa 4f f1 6c 16 45 d5 f5 cb af bd e3 f2 f3 27 4e 3c ed 94 f1 63 c7 a4 24 25 62 8c 6b eb 1b 36 6d d9 b6 68 c9 d2 4f 96 ad cd f6 b9 6d 96 be 7b 38 33 3f f8 cf 7b b3 3f ba e5 86 eb 72 b3 33 3b 3a fd 73 bf 9e f7 f2 bb 1f e4 8e 18 6b d4 95 82 51 13 7e f3 c7 47 67 7f fc e9 94 0b ce 3f 65 fc d8 a4 c4 04 4a 69 7d 43 e3 ba 8d 9b 16 2e 5a d2 dc da aa 10 02 49 ce Data Ascii: w=F?hshmmzDk4$I\nEjjkeI:p$I--V[t:K\8lDqGG/hy~BB!g\wwxgcWM2OlE'N<c$%bk6mhOm{83?{?r3;:skQ~Gg?eJi}C.ZI
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 07 c6 39 c1 98 31 26 49 52 38 1c b6 5a ad 3a d5 11 c2 8c d2 ee 4b b8 a2 c8 6a 54 95 64 19 38 e7 c0 39 63 1c 40 92 64 5d d3 00 01 02 84 09 66 94 75 17 28 62 8c 2a 8a d2 6b 3f 34 4d d3 c4 9e 53 00 c0 18 97 08 61 8c 01 02 8c b1 b1 1f 13 65 94 51 26 cb 32 63 8c 32 46 30 a6 94 4a b2 a4 69 3a 21 18 21 24 04 63 8c 21 8c 24 49 8a 46 55 42 08 02 60 9c 63 8c 29 d5 25 49 02 0e 94 52 59 91 35 4d 43 08 23 00 c6 19 c6 58 64 16 38 27 84 e8 ba 2e 72 87 10 42 18 51 9d 32 ce 08 26 8c 73 04 40 24 c2 19 13 69 02 07 c6 19 21 12 63 14 00 30 c2 62 ef 41 42 08 a5 94 32 2a cb 32 67 5c 1c c4 84 e8 ba 26 49 32 46 a0 eb 94 10 82 30 a6 ba ce 81 63 84 11 42 94 51 e0 40 08 61 7c df d6 6e 8c 31 89 48 07 ee 0b 16 8d 46 89 d4 f5 b5 5e ce f7 a5 20 4b 5d 9b e4 70 e0 8c 52 c6 81 10 8c 11 d6 Data Ascii: 91&IR8Z:KjTd89c@d]fu(bk?4MSaeQ&2c2F0Ji:!!$c!$IFUB`c)%IRY5MC#Xd8'.rBQ2&s@$i!c0bAB22g\&I2F0cBQ@a\|n1HF^ K]pR
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 3b 04 dd f5 c3 50 27 71 4a 34 b1 92 24 89 4a 60 74 0c 44 7d 35 ec be 51 17 a1 5b 21 c5 6f a3 72 0b 8d ca 27 6e 1a 00 00 20 00 49 44 41 54 15 0f 5b 51 14 21 49 24 12 11 d7 8a 5c 88 5a 62 74 4e 44 0b 8d 10 12 3d 1c 23 a6 c8 94 d1 0b 12 41 e8 6e d8 44 5b 2d ce 8a bb 60 8c 45 cf 44 b4 20 a2 de 88 fa 24 2e 31 aa af 10 d2 62 b1 18 7a 2b 24 37 fa a8 56 ab 55 14 8e d1 19 13 ca 6c 44 ee 29 89 f1 20 0c c3 6b b5 5a 31 c6 aa aa f6 d4 13 a3 f7 68 74 a1 45 49 0a 8b 63 34 8e a2 09 30 72 2d 9e 85 c8 85 51 31 44 4d 10 e6 c8 e8 70 8a c7 2a 1e b1 50 27 51 92 aa aa 5a ad 56 d1 35 05 40 1a dd 8e e5 ec 2a ff eb d5 65 04 00 ec 71 7e ca ea 30 a8 94 ef f4 a6 b7 57 84 da b3 47 c8 c5 8d 2f 67 e7 bb 75 56 43 41 e2 d0 ce 20 04 80 38 a3 71 09 c9 eb 2b 7f 63 b3 0c 73 28 9c f1 7a 91 37 Data Ascii: ;P'qJ4$J`tD}5Q[!or'n IDAT[Q!I$\ZbtND=#AnD[-`ED $.1bz+$7VUlD) kZ1htEIc40r-Q1DMpP'QZV5@eq~0WG/guVCA 8q+cs(z7
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 67 d1 a2 45 8c b1 fc fc fc f3 cf 3f 7f dd ba 75 b3 66 cd 12 b5 f9 dc 73 cf 5d bd 7a f5 ac 59 b3 00 20 3b 3b 7b ca 94 29 ab 57 af fe f0 c3 0f 01 20 23 23 e3 c2 0b 2f 5c b1 62 c5 8c 19 33 30 c6 36 9b ed a1 87 1e aa ab ab 7b ed b5 d7 ea ea ea ec 76 fb fd f7 df df d8 d8 f8 ea ab af 36 35 35 59 ad d6 07 1e 78 a0 be be fe d5 57 5f 6d 6f 6f af ab ab 1b 36 6c 98 db ed 9e 3d 7b f6 aa 55 ab aa ab ab 87 0f 1f ee f5 7a e7 cc 99 b3 6c d9 b2 f2 f2 f2 21 43 86 24 26 26 7e f6 d9 67 1b 36 6c d8 b4 69 d3 98 31 63 26 4c 98 b0 76 ed da 59 b3 66 79 bd de c2 c2 c2 89 13 27 2e 5b b6 6c f6 ec d9 1e 8f 67 f0 e0 c1 a7 9f 7e fa 9a 35 6b 66 cd 9a e5 f1 78 46 8e 1c 39 6e dc b8 95 2b 57 be ff fe fb 2e 97 2b 3e 3e fe e6 9b 6f de b3 67 cf bf ff fd 6f 8b c5 e2 f1 78 6e bc f1 46 8b c5 d2 Data Ascii: gE?ufs]zY ;;{)W ##/\b306{v655YxW_moo6l={Uzl!C$&&~g6li1c&LvYfy'.[lg~5kfxF9n+W.+>>ogoxnF
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: c3 a4 9a 9a 9a 9d 3b 77 8a 01 9b aa aa b5 b5 b5 22 28 52 13 0d 84 2c cb 84 90 86 86 06 a1 12 e2 59 d4 d6 d6 8a 12 13 23 b4 86 86 06 a7 d3 59 54 54 24 ce d6 d5 d5 79 bd 5e 71 16 63 1c 0a 85 44 5b d6 d9 d9 49 08 e9 e8 e8 c8 cb cb 1b 38 70 60 4a 4a ca e6 cd 9b 7d 3e 9f d3 e9 74 38 1c 0e 87 c3 e5 72 95 97 97 e7 e7 e7 0f 1a 34 c8 18 1f 0a 8b 24 86 70 c6 b0 4a 64 01 00 c4 c4 9a e1 bf 01 00 e3 94 c0 f0 d7 43 b7 3f 06 00 80 f3 c7 1f 7f 3c b6 bd 35 74 dd 75 d7 35 36 36 8a c1 2e a5 34 25 25 a5 ae ae ce f0 ca c7 c5 c5 89 da 60 04 3b 3a 3a c4 95 8c 31 af d7 db d9 d9 69 04 7b 46 e6 9c 8b 31 92 f0 1c 70 ce dd 6e b7 f0 57 f6 19 14 7e b0 70 38 6c 04 09 21 a1 50 48 04 c5 20 58 04 85 9c a9 a9 a9 d5 d5 d5 86 1b e7 c8 83 8c 31 b7 db 1d 0a 85 0c 0f 87 c7 e3 31 9a c6 5e 41 00 Data Ascii: ;w"(R,Y#YTT$y^qcD[I8p`JJ}>t8r4$pJdC?<5tu566.4%%`;::1i{F1pnW~p8l!PH X11^A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.16	50093	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1138	OUT	GET /C0BtY0x_z7Eep4f3UCL5LhEuyJWJUzeCAUWmoQDEepusEw7sIpkJquQSaMaz2Ph15q3eBMf1HZcGhwc-6-Y-tSEEjA=s60 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:38 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2017 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 21:06:25 GMT Expires: Thu, 11 Jan 2024 21:06:25 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/png Vary: Origin Age: 2833 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:38 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 02 00 00 00 b5 9e 4e 25 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 07 99 49 44 41 54 68 81 ed 9a 69 6c 54 d7 15 c7 ff e7 6d 33 63 7b 3c 9e f1 d8 0e 4b 62 42 89 63 0a 81 b6 29 b4 50 d1 56 aa 13 55 4a db 34 4a 28 4b 28 12 4d 9b ae 48 28 48 8d 54 05 77 01 a9 55 fb a1 e9 87 2e 52 f8 d0 25 01 b5 69 93 34 69 48 45 02 4d 54 12 22 96 94 60 a3 e0 80 6b c0 2c b6 f1 f6 66 7d 6f de 7d f7 f4 c3 60 7b 66 3c cf 5b c6 03 48 fd 4b a3 d1 bb ef dc 73 7f f7 cc 79 f7 9e b9 33 c4 cc b8 d9 a4 5c 6f 80 99 e8 ff d0 53 96 b4 87 3f 48 f7 eb 00 9d 6c 7b b1 77 77 d8 3a 77 78 c6 1e ca 0f ed c6 0e de cf 02 b1 43 bb c0 ce cc 5c 94 1b 3a d9 fe 0f 76 41 5a b5 e8 dd 97 fe ef 5b 33 73 52 66 68 37 f6 fa 97 c9 Data Ascii: PNGIHDR<<N%sBITOIDAThilTm3c{<KbBc)PVUJ4J(K(MH(HTwU.R%i4iHEMT"`k,f}o}`{f<[HKsy3\oS?Hl{ww:wxC\:vAZ[3sRfh7
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 29 7c 8d 3f 19 25 4e b6 fd 35 dd f9 4f 52 7c 00 eb f5 cb 82 77 6f 56 ab ea c3 2d ad 20 4a b7 b7 8e 8b 77 81 04 04 6a 37 bd 97 07 9d 6a 7f 5e f1 67 53 30 c5 72 5c b1 ab c2 3e fb 07 31 bc 53 ab b9 15 40 e0 8e cf e1 8b af 0e be 70 8f 12 00 c8 9b 9b a1 04 fc a3 57 c3 af ac a5 91 2b ab 03 2c b5 d0 ea af 03 08 ad fe 6e ea 78 ab d7 5a 0e 00 d2 64 07 d1 0d 6d 46 7d 73 8e 95 b4 d8 e9 03 01 9c 52 2a 17 6b 91 a5 60 31 ae a7 88 bf f9 83 9a cf ef 26 d5 07 20 70 47 4b 74 e3 d1 81 bd 2b c8 ef 82 aa bc b9 c7 32 90 34 90 ea 07 7c 00 e0 33 45 df 71 e0 11 80 94 40 44 ad 06 8b 0c 8a ae 8e d2 04 21 fa f0 29 a3 e1 c3 40 5e 7a 50 76 d9 66 d7 f1 2f da 12 5a b3 cd 7b d6 63 f2 cd fb 78 f4 ab 6d fd cf dc 45 86 99 57 0c 79 a9 20 f3 26 7e 1e 46 88 49 47 74 7d 97 56 b3 20 db e0 b1 b9 Data Ascii: )\|?%N5OR\|woV- Jwj7j^gS0r\>1S@pW+,nxZdmF}sR*k`1& pGKt+24\|3Eq@D!)@^zPvf/Z{cxmEWy &~FIGt}V
2024-01-10 21:53:38 UTC	44	IN	Data Raw: f9 b3 48 19 44 80 1a 6c 28 6c bc 19 1f c4 1b ae f6 98 8a 6e 4a e8 ff 01 0e df 00 ed e5 73 95 7e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: HDl(lnJs~IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.16	50098	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1149	OUT	GET /gz_4B15N8aCWMFgpJ-2kogJNQcHl4wbQXaPqF_8GLbfWMsXB33VM9gqdP-UDspgJ9qBGC4YYM3X-KBjeXyu60oaESQ=s275-w275-h175 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:38 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 55975 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 19:50:14 GMT Expires: Thu, 11 Jan 2024 19:50:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 7404 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:38 UTC	720	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 13 00 00 00 af 08 02 00 00 00 51 b4 ad 55 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 20 00 49 44 41 54 78 9c 7c bb 4b af 36 ed 76 9d 35 c6 9c f3 ae 7a d6 7a df 6f ef 4d 8c 88 1d e2 13 e6 d4 88 65 c7 4d f2 17 c2 ff 40 a2 41 27 42 1c 8c 84 68 20 21 24 fa 74 1c 2b e2 4f 20 b0 84 14 11 a0 13 81 bc 9d 58 0e c6 a7 38 0e 60 3b fb fb de 77 ad e7 79 ea 9e 73 0c 1a 6b a7 11 04 b9 db 25 Data Ascii: PNGIHDRQUsBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2 IDATx\|K6v5zzoMeM@A'Bh !$t+O X8`;wysk%
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 11 42 72 c5 ad 32 e6 ca 40 c4 c1 28 1d f9 40 74 c7 65 7a 41 3d 0a cf 26 39 d5 2e 38 f3 70 49 ee ce 82 3b ed 20 92 43 85 bd 64 b4 b1 23 1d 19 81 89 f2 41 79 5c a3 75 ad 76 b9 8a 1a a3 1b 20 e0 a3 13 96 31 4c c3 07 2b a6 db 8a 44 64 8c 01 02 39 01 c1 66 c4 45 cc 20 37 87 88 3a e0 48 3b 50 4a 22 90 d0 45 40 10 46 8b 21 8f 9b 49 e5 2a 98 d4 46 61 c4 19 26 31 0c 3a 23 98 c9 49 69 08 b2 38 9a 05 3b 70 35 9e 0f 31 bd 74 c6 11 dc 4b e5 04 b3 2f 64 c6 f1 4d da b9 b4 66 79 9d f5 a9 8c 30 c9 86 e1 ab a2 ac 35 9d 2c 95 55 82 25 18 c8 8a a6 38 45 a4 b6 87 04 1e 2c 4a cc 82 9d 2e 62 06 b1 7b 92 e8 62 98 c6 a0 40 a8 e5 86 87 db 39 82 58 4b 95 bb 84 9a 1d 83 56 06 9c 1a 8f c9 58 3a 62 b2 33 9f f3 f4 a6 9c 89 85 3d cd a5 11 9c 1b 50 ac 31 9a e9 11 20 92 1c ae 9e e6 ce 48 Data Ascii: Br2@(@tezA=&9.8pI; Cd#Ay\uv 1L+Dd9fE 7:H;PJ"E@F!I*Fa&1:#Ii8;p51tK/dMfy05,U%8E,J.b{b@9XKVX:b3=P1 H
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: c0 40 c4 06 30 4d c7 b5 bf b4 b0 cc 33 c2 55 d7 65 e8 f9 e5 6d 7f 5a af 51 e2 70 f2 f0 ee 05 ec d3 35 97 5c 81 28 f6 db ee d7 6f 6e f7 e9 6e 55 0d 98 b9 7b 8a ab 83 a9 13 18 44 1d c5 2a 43 50 ae dc e3 4a f4 0c 2a 09 12 7d f1 7c ad dd 23 ac d0 96 a0 15 76 fb 72 86 34 50 b0 34 54 c5 31 50 ca 8c ca de 13 c4 6e 2c 4a bc ee 77 e9 3a 5e 5f 4e e6 20 7a cc 12 36 45 19 14 22 da 53 82 73 f9 1a 46 44 a1 da f7 d8 95 19 8e 81 1c 07 30 ea ac 34 61 61 a3 8e b0 48 2a 3a 8c 32 e5 a2 66 ac 95 b9 e1 44 46 f8 b1 bc c6 08 08 5c fa f2 f5 4d e3 c1 ac db 8b a2 b4 f7 08 f7 c7 d7 e3 d3 e7 09 60 3a c0 0e bb 18 03 63 af c1 ac 40 c6 48 8f b7 0d 65 56 8f 38 89 e3 e9 b8 70 2d 42 b1 f3 2b 9f 37 2c 5d e6 8d 18 f6 b1 56 1c d8 e3 8c 50 26 e6 29 d4 e2 6c 39 f2 42 d6 c7 58 da 56 60 05 a3 26 Data Ascii: @0M3UemZQp5\(onnU{DCPJ}\|#vr4P4T1Pn,Jw:^_N z6E"SsFD04aaH*:2fDF\M`:c@HeV8p-B+7,]VP&)l9BXV`&
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: cf f9 72 7f 80 b3 c2 2f 9f 3e b9 8b 70 04 ae 40 7d d4 40 30 06 b3 26 06 59 7c 8e ce 08 07 27 98 9b 12 fa b8 8e 1d 64 5d d3 19 f9 f1 13 9a 8e 63 fa a9 c8 62 0e 26 e9 e9 03 b9 d3 08 b0 13 31 82 00 2e dd ef 3b 9e ad 80 65 14 3f 7f 3a 1d 85 e1 d0 47 e7 55 73 ff fa 23 e3 78 5d af 59 e5 9c fa f8 7c 33 3b 32 07 19 01 f8 47 df bd c1 e3 8c d2 1c b7 b5 d6 7a 7f 7b 0c b9 8a 6b bd 3e f7 db c8 84 b9 f3 f6 fd 63 ed f2 41 cd 2e 1d fb 68 2a 29 0e 26 c9 b6 4f 62 c2 06 3d 88 24 1a cf fd ae ab fb a8 d7 4f 37 ec 4c a7 f9 48 87 8a 1e 92 c6 29 dd e3 f1 7e 9f 70 70 d6 37 9f 5e 2f 76 85 87 a4 c4 6d 2f 06 ca b1 85 08 d9 24 22 62 03 d1 8a 20 c1 21 52 30 a9 10 65 2b 19 1d 3c 26 cc be b0 18 db 0a 82 39 36 35 a1 63 f2 52 f2 b8 d2 41 7a 7b f6 3c f6 7b 12 06 c5 fc fe 37 2f bd 81 20 d8 Data Ascii: r/>p@}@0&Y\|'d]cb&1.;e?:GUs#x]Y\|3;2Gz{k>cA.h*)&Ob=$O7LH)~pp7^/vm/$"b !R0e+<&965cRAz{<{7/
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 01 39 88 b0 50 b4 82 bf f4 8b bf f8 97 7e e6 a7 61 2c 60 c4 14 f9 bf ff 1f 7f 70 dd bf 26 f3 f8 f4 aa e9 eb eb 7d 96 89 70 3b 4b 2f e7 5f 88 e3 b9 af 0f 86 69 d9 47 a4 b6 74 42 ae c0 d3 ed ac 57 eb b9 18 5f f6 43 ef 7b a0 72 4e 78 45 21 e7 12 2c 84 c3 31 2f b1 ea 76 58 b1 90 d7 31 6c 15 e9 88 f2 bc 6b 15 ae 8c 92 0d 59 3d 8f fd 90 c9 0c c9 11 db 13 ac c0 05 9e f9 ba 6e 81 11 33 28 8a 9b 61 ef e4 a9 d9 19 91 11 4f 40 d8 c7 1c 62 33 0d 0c ea 78 fc e8 7e e1 f1 f2 fd 6f 4e e5 ce c6 23 c2 b1 69 ed 7d bb ad 44 32 d8 33 93 f9 f6 67 ff 64 9d c7 37 9f ab 1d de c1 55 b3 fb 5c 1e 60 c3 8f 6f df 8f 3a e3 e4 e3 6a cc 16 83 44 35 c4 1f 8b 1a 2f df bc 06 f2 cb f3 ed f5 f5 f5 65 52 c1 47 e1 36 98 81 dd 79 06 a5 a7 e3 0c 3d 51 4b ec 42 ec 89 c4 ee 58 45 46 7c 7d bf eb f1 Data Ascii: 9P~a,`p&}p;K/_iGtBW_C{rNxE!,1/vX1lkY=n3(aO@b3x~oN#i}D23gd7U\`o:jD5/eRG6y=QKBXEF\|}
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: e7 fe 7c 66 30 d6 79 60 de b6 6c 33 c6 eb 96 73 ef 0e 00 99 eb f5 58 6f 7b cf de eb a8 f3 f6 12 13 55 1e 87 76 3b c0 64 40 25 5c 15 32 56 2f e4 7e 6a 9f cc 71 95 ec d4 73 c6 03 67 94 1e f6 7a 7f 7f ff d3 3f fd bf 7f fe 17 7e 2e 8e d5 cf eb f7 7f f7 f7 19 41 52 42 04 60 03 f0 8f cb 8f 09 c8 fa e9 bf fc d3 af eb 93 d0 bb e6 c7 7a ed 6f fd f6 0f a1 45 37 ac 4e 97 0e d1 df 7f 39 ef 4f f5 be be f9 c1 8b 9d 04 a6 db c5 f0 f2 98 a1 c8 e0 4c 23 2b a4 cd 0e 2d 87 cb be 8c 43 8a 95 a2 b6 18 88 45 ec dd 5e 0a 2d b4 56 c5 05 38 54 c3 98 e9 04 68 4e 92 1f c4 95 51 bc d0 be ae fb c5 80 00 40 88 98 c8 e8 8f 47 d1 e7 7f e1 9b bd c5 28 49 c1 50 ed 35 94 c1 48 51 79 69 2a 12 0d 96 95 8a 76 33 02 06 77 ab fb 3b 23 3e 7f 7a b9 bf ed 99 96 96 b3 63 98 8b b7 75 be 3d ef ae ba Data Ascii: \|f0y`l3sXo{Uv;d@%\2V/~jqsgz?~.ARB`zoE7N9OL#+-CE^-V8ThNQ@G(IP5HQyi*v3w;#>zcu=
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 07 89 c2 48 50 10 04 9e 66 d1 48 a9 bd 2f 39 95 12 44 09 88 aa e4 53 02 b5 10 50 82 ee a4 b5 3f e5 67 2c f9 c2 ba f9 d2 64 40 a2 6d f0 80 ae 00 67 6a c1 8c 16 4b ca c8 bd b3 97 96 2f eb 54 29 5b e8 7d fd 8d 7f ff 6f bc be 7c fa f9 9f fb b9 7f e7 df fb 77 ff 9b 5f fb 5b bf f9 9b ff db 5a c7 3f c7 40 20 e9 5c eb 57 7f f5 57 7b ef 09 47 64 cc d4 71 94 55 19 1d 3e 2a cc 6c 60 5d 9a f4 2a 79 5b 70 65 92 46 d6 d5 9d 94 2a 36 22 76 4f 80 59 80 b2 3e bc 29 44 c3 45 29 41 ad 19 28 b4 bc 02 73 25 30 5b 8e a8 e0 e6 14 b0 2b 16 02 6a 44 04 82 e6 4e 14 b2 c7 38 35 0f e2 ea 9d aa 30 14 d7 d5 80 83 24 c3 c3 64 20 ae 8d 2c 08 31 de 43 17 49 2c 98 9d 93 03 a5 41 27 2a 6c ef 22 82 0b a9 89 0c 19 14 69 6e 33 f4 54 a6 13 18 a5 eb 09 25 e0 1e a1 1d 91 b1 35 c8 20 66 4f 47 16 Data Ascii: HPfH/9DSP?g,d@mgjK/T)[}o\|w_[Z?@ \WW{GdqU>l`]y[peF6"vOY>)DE)A(s%0[+jDN850$d ,1CI,A'l"in3T%5 fOG
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 6b 4a 35 a3 5c 16 92 12 1b 88 b1 6f c7 b2 b7 74 18 8a ac 0f 8f 5e 42 1e 00 1c 0e 8c 30 b0 0a a1 d9 93 58 73 28 df c7 c0 54 91 8e 51 70 e7 64 7a b0 11 dd a4 05 b9 e0 65 b7 5a 28 a8 97 1c fb 6c 65 cc 58 59 01 24 f3 14 a6 82 49 d0 11 ed eb da f7 a8 2d 78 30 55 db a6 83 d9 93 f1 61 d3 95 66 28 07 17 c6 1a 28 25 80 01 75 44 7e 74 30 e0 d4 25 2a 23 81 ee 9c 58 a6 af 3d 4d 4d f6 ab 1e 00 00 20 00 49 44 41 54 32 91 3d b9 80 e4 de b5 52 b6 72 12 07 03 45 4e 8d d6 ac 7e 5e 23 1f 9c 81 2d 7a b9 00 06 d8 07 c6 8c 34 00 46 d0 33 16 09 1e 31 76 68 d9 04 90 25 7a 25 09 84 12 d4 9e 19 c7 de 44 b5 42 58 08 db 40 3a 8b c3 c2 84 48 35 22 26 c0 cb 02 18 b4 b4 86 73 29 d3 13 6e e2 0c 0f 24 0e fb 39 4b 50 50 b1 50 9a 52 18 25 aa 22 af 6b cf 6e e1 a2 c3 63 f4 d4 5a 4d 86 22 26 Data Ascii: kJ5\ot^B0Xs(TQpdzeZ(leXY$I-x0Uaf((%uD~t0%*#X=MM IDAT2=RrEN~^#-z4F31vh%z%DBX@:H5"&s)n$9KPPPR%"kncZM"&
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 69 ca 68 09 06 e0 87 c5 29 5a b8 e5 e9 fa b6 51 e7 e7 8b 73 48 c9 ae 89 83 b9 0e 1d 99 26 87 59 93 a8 0c 29 83 95 06 78 14 36 4d 04 e9 5b c1 0b 0c ba 0d 64 63 10 0d 4f 4c 5a 88 ea 11 39 6d 44 59 a3 3a 61 9c 2c 2f c9 6d 11 1a 8b 95 9a d4 41 68 c5 f4 5e 5c 2a 6b 2f e3 48 f4 68 1c 97 f3 1a ca 75 56 8e 9b 75 73 98 f3 b8 cc 9c cb 31 9c 4b ab 25 9a 35 cd 01 c5 b4 46 27 cd d4 16 d6 d5 46 bf 79 71 23 33 9f f6 d4 a7 fd e6 5b 7e f3 e6 cd 9b d7 ae 5d 2b d2 c3 91 39 49 10 87 c9 e9 2a c6 ac 1e 31 34 8d af 7f fd 9b d1 aa 51 83 e6 ad 24 ad 29 cb a2 8f a9 0c 58 0e 79 89 73 28 64 d2 54 70 34 37 49 97 13 97 73 bd 7d 39 c7 b1 3b 61 61 bd c1 16 37 d3 69 55 0c 0b e6 ec c1 de 5c 96 56 81 51 5d ee 36 a5 51 55 36 c8 42 0b 34 7a 40 d9 20 95 dd 06 77 14 e4 b4 59 65 30 86 59 77 b1 Data Ascii: ih)ZQsH&Y)x6M[dcOLZ9mDY:a,/mAh^\k/HhuVus1K%5F'Fyq#3[~]+9I14Q$)Xys(dTp47Is}9;aa7iU\VQ]6QU6B4z@ wYe0Yw
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 1b bb 8b c6 06 02 0e d6 6e 2a 25 42 82 a1 93 84 48 03 c0 58 c2 1a 10 da 18 6c 09 6a d0 cc ba 0a 84 d3 93 69 4d 92 90 40 c2 a0 32 22 41 36 b0 ef 39 09 36 60 c0 6e 41 a7 a6 bb 9a 20 c0 46 ed 44 95 32 19 40 17 8b 10 14 28 c1 1a 10 9b 65 e4 de d6 95 68 56 55 74 aa b0 e5 e6 ee 88 60 97 81 b3 6a 98 23 48 ed fd 00 40 82 ac 51 10 8d 28 73 e6 3c bb 7a f5 a9 f7 dc b3 4f 9b bd 18 4d b2 bb df f8 c6 37 dc 77 ff 6f 0d 06 80 36 09 76 b6 f8 f9 f9 b9 c9 49 93 35 df f8 86 37 96 71 29 6d 96 73 ad 2b cb b2 89 00 6c 90 dd a9 08 4e d7 41 b8 2c 10 46 9c ec 81 d3 fd ec 83 47 5d bd f5 1a 72 bb 71 3a e5 86 25 46 a2 0f ee cb f9 51 13 a6 e8 f3 f6 d9 c4 78 b0 b2 c2 e1 5c d5 90 42 ea 43 e7 14 31 c2 28 b5 11 5b 11 b2 61 32 e4 85 d9 21 ab fc e0 da a0 b0 f5 c6 a5 74 2a 90 6d 41 69 39 3f Data Ascii: n%BHXljiM@2"A696`nA FD2@(ehVUt`j#H@Q(s<zOM7wo6vI57q)ms+lNA,FG]rq:%FQx\BC1([a2!tmAi9?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.16	50099	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1139	OUT	GET /JgDWUoaBVZQLAAOFzr-8oFR1NLzk_v0xNiU4j5PV1SR6wX9oRbbwwLakLq36_OIar4q2w-URdQmBpiZ9NzzxDblAcBo=s60 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:38 UTC	520	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Thu, 11 Jan 2024 21:53:38 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 21:53:38 GMT Server: fife Content-Length: 3404 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:38 UTC	732	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0d 03 49 44 41 54 68 81 ed 9a 79 94 55 d5 95 c6 7f fb dc fb a6 9a e7 81 42 b0 a1 c3 a4 b0 0a 11 aa a0 c4 56 5b 5a 5d 0a 68 24 dd 0a a2 31 a6 3b b1 bb d3 80 80 68 da e0 98 b6 35 ca 18 5b b3 5a 8d 23 31 28 bd 1c d1 ce 32 c6 88 08 6a 83 04 94 80 a2 20 73 55 51 03 54 d5 9b df d9 fd c7 2b 10 e1 15 d4 c0 ab f8 87 df 5a 7b 55 dd 7b f6 39 fb fb de 99 cf b9 f0 2d be 45 6f 22 a0 af e7 5d d3 79 f7 49 d9 fa 42 e9 05 e9 a3 93 66 e8 ca c2 aa 96 15 05 3b 3a e5 fb 76 e1 70 7d b1 70 a1 be 50 f2 81 3e 5d 76 0d 10 e8 4c 3e d3 13 82 a7 1c 56 27 19 91 fe 50 7a c6 c9 5c e5 bc 86 dd 40 75 43 0b a3 31 e2 00 a1 ce 84 f8 26 09 f6 Data Ascii: PNGIHDR<<:rsBIT\|dIDAThyUBV[Z]h$1;h5[Z#1(2j sUQT+Z{U{9-Eo"]yIBf;:vp}pP>]vL>V'Pz\@uC1&
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: ed 2b 0b b5 e0 cd 2c dd 94 f4 d0 43 65 33 f6 56 c8 f5 0d 7f a8 5e a8 37 44 6b 37 bd e4 38 5e 37 a3 74 d8 f2 55 33 64 53 4f 78 a5 b3 49 37 45 db ea fb 54 2f d6 67 00 cf d1 09 85 25 ee f4 44 a8 e5 50 b2 96 43 68 b8 0d c7 f1 af 5e 3d 47 96 02 c8 0f f6 3c 0b ec 1f bb 58 17 84 f7 6f 7c d4 78 fc c4 c3 ad 11 23 dc dd 53 52 69 1d a5 c7 2e d2 85 e1 da cd 33 3d 85 03 5e fe 60 4e 60 06 b0 e3 a8 e4 7e e7 dc af 57 8b 92 6b 95 cf 57 df 22 bf 05 5a 01 6a 16 6b 55 a8 79 ef 12 1b 6e 1a 23 c6 01 55 7c a5 43 1f 5b 3b 43 7e d8 53 4e 69 15 5c bd 48 bf 1b de bb 71 85 38 1e 30 9e 1d fe e2 bf 5e b4 66 a6 fc 06 a8 4b e1 ee ab 59 a8 a3 ad e1 86 e0 ee 0d d3 8c c7 ef 41 15 44 d0 44 bc 31 27 f2 c9 39 ef 2c ba ea cf 3d e5 d4 1d c1 5e 7d 3d 77 14 e0 7d 79 87 89 b7 c4 bf 9e e8 01 fa e6 Data Ascii: +,Ce3V^7Dk78^7tU3dSOxI7ET/g%DPCh^=G<Xo\|x#SRi.3=^`N`~WkW"ZjkUyn#U\|C[;C~SNi\Hq80^fKYADD1'9,=^}=w}y
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: a4 5d 70 09 e4 db 48 cb 80 af af 97 95 78 b4 2d f1 a7 a5 e3 fe 1e 38 a4 cf 95 dd 19 8d c9 f8 60 08 44 d9 4a fb 0a ea 44 cd da 15 23 d7 0d 32 97 76 95 4f da 05 0f 7a 40 2b d5 c6 b3 b0 f6 a8 1d 51 82 82 21 93 a7 00 5b f4 b9 92 29 6d 61 e6 a9 da 03 39 7e ce 73 a7 ed 1f e2 35 fc 7b 24 aa 24 67 a0 8e b7 7f a8 74 b9 59 f7 46 93 1e 67 8c 6b 92 7b 5c 0b 36 4e 4e bf 9a 05 ab e7 c9 8b ba ac 6c 58 5d 93 3c 95 e9 e5 15 ff f4 da c1 32 75 ff 1f 01 64 ea be ff c8 12 ad f6 18 76 88 82 e8 f1 fd 5a ad 10 8a 32 ec 96 d9 7d 47 74 85 4c da 05 1f fc fc 8f c9 8f 4e da ab c6 cd 2e ff df f7 e6 e7 ce d6 95 e4 44 a2 f2 58 49 b6 99 2f 53 f7 4f 02 1a 8f ce 27 df af 7d 5f a6 ee 1b ed 75 64 59 34 a6 1c 75 ab 98 bc 4e b5 20 6a bc f7 9e 95 b8 b8 2b 7c d2 2a b8 08 ca e3 2d b5 63 8e 1c e9 Data Ascii: ]pHx-8`DJD#2vOz@+Q![)ma9~s5{$$gtYFgk{\6NNlX]<2udvZ2}GtLN.DXI/SO'}_udY4uN j+\|*-c
2024-01-10 21:53:38 UTC	168	IN	Data Raw: 83 5a d5 b6 67 e3 05 99 e5 23 5e 5b 3d 57 b6 d0 85 5b 86 54 48 b7 e0 8c ea 5f e8 40 d7 a5 b2 75 cf 86 be 36 12 ca c2 e3 6b 4d 04 9b 12 8e 2f 3b 1b c7 0d 66 f7 3d 6b b7 51 36 ac 9a 2d db 69 ff 8a e7 18 b8 40 3c c5 fb 6e 21 5d 82 b3 ab 17 e8 6d c1 5d eb 2a e2 a1 c6 90 38 9e 83 28 51 4f 46 41 63 56 f9 88 86 84 f2 a9 28 9f be 37 57 1a 48 3d 33 a4 0d e9 ba 6a f1 09 84 b2 fa 8d fa d8 c0 76 6b d9 a5 86 cf d7 cc 92 46 20 96 a6 98 df e2 5b 00 ff 0f 84 b7 d9 17 e7 a2 d9 2a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: Zg#^[=W[TH_@u6kM/;f=kQ6-i@<n!]m]8(QOFAcV(7WH=3jvkF [IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.16	50100	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1139	OUT	GET /W85xdZQw4VH3z-PZlGmkTNuV6i-SyGTNXbW5vGoVCNRN-NfKxcYECo6l2xokV3x61BioYk6MUvdl7eddgZP4nHtG640=s60 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:38 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1371 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 21:13:47 GMT Expires: Thu, 11 Jan 2024 21:13:47 GMT Cache-Control: public, max-age=86400, no-transform Age: 2391 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:38 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 01 44 50 4c 54 45 47 70 4c 00 51 67 05 0b 0c 00 36 42 00 10 13 04 0f 13 00 15 17 00 09 0c 00 03 02 00 0e 0f 00 00 00 22 d8 ff 00 6d 86 00 48 58 00 09 0c 00 3c 4a 00 43 52 00 8e b2 22 d9 ff 22 d8 ff 00 33 3e 00 5a 6d 00 b3 de 00 4f 61 00 01 01 00 00 00 00 34 3f 09 7e 92 00 44 53 00 51 64 00 5f 77 1e b0 d0 1e b4 d5 24 d7 ff 00 00 00 00 2d 37 1d ac cb 00 00 00 00 40 4e 00 40 51 23 d4 fa 1f bb de 00 52 65 00 01 02 00 00 02 0b 48 5f 00 5f 75 00 7b 96 00 2c 36 00 31 3d 07 c4 f2 00 97 b7 00 35 41 21 c7 eb 22 ce f3 23 d8 ff 23 d8 ff 00 8f af 00 2f 3a 00 00 00 00 3b 47 00 2e 38 00 00 00 00 30 3b 00 00 00 00 73 8d 00 Data Ascii: PNGIHDR<<")@sBITODPLTEGpLQg6B"mHX<JCR""3>ZmOa4?~DSQd_w$-7@N@Q#ReH__u{,61=5A!"##/:;G.80;s
2024-01-10 21:53:38 UTC	650	IN	Data Raw: 88 2b e7 84 10 77 71 10 c5 1c a3 db 3d 37 d5 ec 79 16 60 de 4d 2c bb 40 79 8c be a6 e7 2f d6 5b 13 48 15 e7 2f c7 2f be 12 b2 04 70 c2 62 ea ae 97 59 81 0d 07 eb f3 13 72 7e 69 28 52 91 90 09 ab 9b dd 17 c8 cf 3b b9 61 e3 2e a8 30 44 dc 83 b6 3c 44 8e 64 d8 37 ba be 3d f4 3c 77 bf c3 db c6 3e d3 63 10 09 59 71 64 ac e2 01 0e 0a c6 da 64 77 9f bf 64 e2 1e e2 f4 0b 3c 10 e2 ef a8 79 8c a4 66 71 d7 b2 fb f2 8b 4d 8b 39 9d 1e c2 3d 71 ab 1d 6d 89 0c 81 92 a5 c3 3b 7f 25 84 f8 55 c7 99 9c d9 c3 59 bb a5 df e1 cf 3f 77 3b 59 85 6a a6 8b 7e 9a 9e 7e 0a 39 de 01 5c 12 32 d8 f9 37 8f 47 dd 10 1d f7 ca c7 07 63 8e d7 48 af 83 12 dd da ec 28 aa 9b 1d ae 65 83 dd 91 64 6f 30 d8 04 a8 55 6d 21 16 a8 f3 51 01 62 37 37 ab b6 b4 42 c8 b8 f5 18 ca 93 3b 5b 0e 95 37 33 02 Data Ascii: +wq=7y`M,@y/[H//pbYr~i(R;a.0D<Dd7=<w>cYqddwd<yfqM9=qm;%UY?w;Yj~~9\27GcH(edo0Um!Qb77B;[73

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.16	50101	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1139	OUT	GET /ACY89rl_lE-nZHWSoD9Xtn61ko4l9tjsTYay5fWpB0xoGP1WgX3N2UxlTNTHV7M16MuG5DNM8OS1mNusb6n1VK7RugI=s60 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:38 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2007 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 21:42:32 GMT Expires: Thu, 11 Jan 2024 21:42:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 666 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:38 UTC	722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 02 00 00 00 b5 9e 4e 25 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 07 8f 49 44 41 54 68 81 ed 99 5b 6c 5c 47 19 c7 ff 33 e7 9c bd f9 ec d9 e3 5d df d6 d0 d4 8e 71 2e 36 a6 01 54 2b 84 9b 54 78 31 cd 43 2b 52 24 50 9f aa 88 8b 10 2f 54 d0 4a bc 56 88 a8 3c 59 41 42 3c e4 31 2f 20 91 48 d0 02 49 d4 87 a0 50 05 72 31 6a 9d 5a 06 c7 76 8d b7 eb db d9 8b ed 78 cf 9e 99 8f 87 b1 97 e3 dd 8d bb c7 59 db 8a c8 5f 2b 6b 76 ce cc 37 bf f3 f9 9b 6f 66 76 58 ae 50 c4 e3 20 22 b2 cc 16 ce 39 00 dd f3 c4 41 f3 34 24 22 a2 ad b2 9e cf ad 1c 24 4b c3 12 42 da 96 09 e5 e9 f3 a3 a3 07 cd d3 90 56 1c 67 74 74 d4 b2 2c 00 ac b5 b5 f5 a0 79 1a 92 e3 38 8e e3 d8 b6 0d 40 4f 26 93 07 cd d3 90 1c Data Ascii: PNGIHDR<<N%sBITOIDATh[l\G3]q.6T+Tx1C+R$P/TJV<YAB<1/ HIPr1jZvxY_+kv7ofvXP "9A4$"$KBVgtt,y8@O&
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 57 54 eb 8c f2 85 0d f9 d1 ba b8 38 b5 f6 d6 42 d9 60 68 dc e3 c1 62 9a 31 b6 b6 b6 36 31 31 01 c0 71 1c ce b9 bf 7b a1 50 60 8c 11 11 e7 dc b6 ed ea 54 4d 84 32 f5 5a 91 17 0e 45 4b 82 08 e8 8e 6a ac d5 f8 a0 e8 bd f5 9f 92 30 58 e3 fb a9 6a 68 22 f2 af c6 b5 f5 0f d6 57 6f df bc 09 00 1c 8c 6f eb ee ba ae 2a 68 9a 66 9a 66 95 05 af 2c cf 0f 27 5e ec 69 79 e0 11 63 e0 8c 11 91 20 fc f8 78 3c c1 e9 27 b7 f3 5c e7 3b 00 6c 83 ae 0d 8f 87 f9 9e 88 40 12 9a 26 8e 7d 0d 20 3e 73 17 6b 8b f0 e5 90 4a 47 5d d7 2d cb f2 e7 69 00 80 f8 6a 3a 1a e6 8c 80 fb 45 ef 8e e3 7e 32 a6 7f a6 d5 d0 18 4e 76 46 46 ba 1f bc 3d 5f e2 bc ce 16 a0 56 bc 2a 9f d7 cd a6 be ef 90 47 9f c7 eb 7f c6 6b 7f a1 2f 9e 95 be 04 ac 58 95 51 d7 75 b3 d9 6c 95 c3 be 7d 38 de 1e d1 38 63 17 Data Ascii: WT8B`hb1611q{P`TM2ZEKj0Xjh"Woohff,'^iyc x<'\;l@&} >skJG]-ij:E~2NvFF=_VGk/XQul}88c
2024-01-10 21:53:38 UTC	33	IN	Data Raw: d0 fb a5 27 d0 fb a5 27 d0 fb a5 ff 02 39 ef 2a a8 7c a2 84 2c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ''9*\|,IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.16	50102	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1149	OUT	GET /Ph7wxKH-KKNpd8fXIyNKLCw95lVGo8aWr44cFp4iMIN4RIscymkvpEpOMhS31qA2c1Wol-Udx-mx6lTY_BOXLPb8Ag=s275-w275-h175 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:39 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 14942 X-XSS-Protection: 0 Date: Wed, 10 Jan 2024 21:10:09 GMT Expires: Thu, 11 Jan 2024 21:10:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 2609 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:39 UTC	720	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 13 00 00 00 af 08 02 00 00 00 51 b4 ad 55 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 20 00 49 44 41 54 78 9c ed 9d 77 78 15 55 fa c7 df 73 a6 dd b9 bd a5 dd f4 42 42 09 35 74 44 44 2c a8 58 51 57 11 fd e9 aa eb aa ab ae bd ac 05 3b ba f6 b2 f6 5e 56 70 55 6c a0 22 d8 91 16 90 5e 02 49 48 ef c9 ed 77 da 39 bf 3f 6e 42 02 24 84 5c 02 24 38 9f 27 3c 0f 77 ee cc 99 b9 33 e7 3b e7 9c f7 bc e7 7d 51 c1 e9 b3 41 47 47 a7 87 e0 23 7d 01 3a 3a fd 12 5d 39 3a 3a b1 a0 2b 47 47 27 16 74 e5 e8 e8 c4 82 ae 1c 1d 9d 58 d0 95 a3 a3 13 0b ba 72 74 74 62 41 57 8e 8e 4e 2c e8 ca d1 d1 89 05 5d 39 3a 3a b1 a0 2b 47 47 27 16 74 e5 e8 e8 c4 82 ae 1c 1d 9d 58 d0 95 a3 a3 13 0b ba 72 74 74 62 41 57 8e 8e 4e 2c e8 Data Ascii: PNGIHDRQUsBITO IDATxwxUsBB5tDD,XQW;^VpUl"^IHw9?nB$\$8'<w3;}QAGG#}::]9::+GG'tXrttbAWN,]9::+GG'tXrttbAWN,
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: 85 80 10 a2 12 0a 08 71 18 1f 80 15 8e 12 42 35 42 34 8a 38 16 33 3d 33 db 51 42 28 60 dc d5 7c 1f 25 54 a3 44 23 94 c1 98 c1 08 75 5f 38 d5 08 55 35 ca 30 98 39 90 6b ef f3 e8 33 a1 87 1e a2 41 41 5e 4a db 27 c9 bb e3 1b d5 63 e7 f7 68 59 10 46 06 41 48 73 3a ba 90 0d 8d 84 43 85 f5 5e cd 60 18 98 93 36 d0 61 2d 0b fb 0a eb c2 4a 17 e3 6f 4a 48 6d 53 4b 61 b5 22 51 d6 93 9e 33 3a 2f 1e 2b a4 b0 ba b9 31 a2 ee bb b3 aa ca 85 15 0d d1 3f 9f 06 00 10 0c 06 0a 1b 15 d5 60 50 7d 52 44 a5 7b ed 2f 45 c2 85 b5 cd 6b 00 6c 6e cf 88 81 99 4e 1b b7 d9 17 2e 6c 0c 28 7b ef d8 8e 12 09 15 d6 04 81 77 0e 1b 92 62 e6 d1 f6 9a a6 66 99 74 bd 7b ff 40 6f 73 0e 3d 08 41 b5 2f 08 60 06 00 00 d6 9e 3a 4e f6 05 a9 49 38 b0 17 2f 25 ea 9a ed cd e7 5d 32 eb cd 0b 26 b9 05 c1 Data Ascii: qB5B483=3QB(`\|%TD#u_8U509k3AA^J'chYFAHs:C^`6a-JoJHmSKa"Q3:/+1?`P}RD{/EklnN.l({wbft{@os=A/`:NI8/%]2&
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: ef dc 7e db b4 51 89 5c 87 ed 44 0a 6c 59 fd cb 83 2f bc ff 6b 83 9a 20 f2 bb c5 43 e4 f0 b6 fc b3 ea e7 ce 36 b2 00 40 7f 9b ff e2 31 8f 7d 37 c2 63 8b 76 ef c2 81 96 c0 d8 4b b7 3c 3c d3 c8 00 68 4d af 3c fa e0 03 3f d7 26 19 18 59 55 46 e7 8d a9 28 5e b1 24 00 c3 4c ed d6 86 ba ba aa cb 6f 7e ea be f3 86 03 80 a6 d4 dd 7a e6 85 0b b1 c7 8c 41 96 82 19 63 66 cd 7b e8 5c b1 6d cf 65 1f bf 30 e9 81 af 93 e2 4c 02 42 5e 4d 4b b1 18 fd de fa bf df fc fc ed 67 e6 46 77 58 ff e3 47 17 df f3 be 57 b4 b8 0d d1 d7 2e 95 25 a9 5a e3 06 da 70 50 46 c1 a0 f7 8c 59 b7 3c 72 c5 b1 d1 df 48 bc 3b 6e bd e1 9e 97 cb c9 20 13 0f 00 52 d0 ab 0c 3c e9 db 87 ff 91 6e 07 00 a8 df fc fb 05 37 cd 6d e4 ac fd b1 d5 39 b4 6a 27 00 f5 2a 14 fa e0 ae 41 e8 bb 29 e8 ce 49 78 54 32 Data Ascii: ~Q\DlY/k C6@1}7cvK<<hM<?&YUF(^$Lo~zAcf{\me0LB^MKgFwXGW.%ZpPFY<rH;n R<n7m9j'*A)IxT2
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: e1 c8 0e fb a2 27 f7 58 e1 85 e3 f0 f2 72 7a ed 06 5a 20 76 73 c8 a1 be 22 da 45 2d 62 78 31 d1 58 b5 62 d5 b6 d1 d3 f3 00 00 78 c6 e4 74 84 48 bd 5f 96 e5 48 eb 00 a0 a5 62 f9 59 d3 e7 c1 44 4b 57 3d 04 8b 20 66 19 a0 3e 79 f8 19 f9 d1 a1 3c 59 f7 c5 6b e3 ef fe 32 23 cd 6e 66 10 42 88 a8 d8 12 d3 a3 e6 79 b2 bc b8 89 12 00 0c 80 cd 09 76 7b 95 56 93 04 7d b0 1f 7c b8 e9 1d e5 94 2a 70 41 02 fc 76 1e 0e 2b 20 77 ed 0a 70 98 51 09 c4 99 61 66 3e b2 1b e0 a2 55 74 94 78 a4 c6 a1 94 12 a1 a5 b6 01 bb 4d dd 3a 0d 00 a1 9a 24 1b 18 ec 6d f6 56 d5 57 42 4a 0a 00 24 25 8d bd ec cc 6f 96 2b 26 e3 3e 47 53 4a 35 8a 58 0c 91 50 e0 e4 a1 03 dd d1 29 53 55 59 f1 d3 e7 71 e9 71 ae 36 2b b7 5f 0d 67 27 a6 ba 7b de f6 b2 bc 50 b8 7c 63 0b 39 21 0e 63 00 c3 71 27 8c 81 Data Ascii: 'XrzZ vs"E-bx1XbxtH_HbYDKW= f>y<Yk2#nfByv{V}\|*pAv+ wpQaf>UtxM:$mVWBJ$%o+&>GSJ5XP)SUYqq6+_g'{P\|c9!cq'
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: e6 bf fc c2 55 cb 49 9e 91 a1 94 ba e2 92 33 12 0d 4d 75 0d 35 b5 b5 cb 7e fa a5 58 ea e0 8d 07 88 52 1a 97 99 99 2b aa 35 f5 4d 2d e5 c5 5f 2f db e0 53 71 7f 5c 3f 1e 8b c7 67 98 c0 44 07 dc 3d 19 23 e8 4f b2 d9 0d 8b e1 9b ed 74 ee 26 6a 65 0e 9f b5 8d 52 ea 0f 06 8a 9a 48 a2 d3 31 24 d7 95 6e 34 52 20 8d be c6 ed db 1b b6 46 a4 6c 97 cd c6 75 69 9a a2 44 ab 6b f1 57 f0 96 e3 b2 32 b2 ac 08 40 2d ad 6e d8 52 52 5f cd 31 83 6c 26 e3 9e c7 69 9a 52 dc 10 70 27 e7 1c 93 6e e6 70 e4 db f5 db 2b 24 61 94 dd 40 54 f9 8f 7a 1f 68 00 0c 93 15 67 df ed db af aa f2 ba 1a 5f f4 ff 03 92 dc d6 fd 1a 9c a9 a6 d5 36 b6 54 1a 6d d3 72 d3 d2 8d ac a6 d1 b2 6d a5 3f 34 fa 3c 0e 73 52 9b 43 43 44 0a 6f aa 0f 02 00 b0 cc c0 78 87 69 1f 1d 46 82 81 4d cd 11 00 00 83 38 cc Data Ascii: UI3Mu5~XR+5M-_/Sq\?gD=#Ot&jeRH1$n4R FluiDkW2@-nRR_1l&iRp'np+$a@Tzhg_6Tmrm?4<sRCCDoxiFM8
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: a8 3f 10 de dc e0 af f2 06 ab 15 cd c0 72 62 7f f4 a6 ec 0f 74 53 ed 14 0a 39 22 0c f7 74 1e f1 b9 2b a8 26 19 33 a6 70 8e 3d 92 f6 ad 5c b3 76 c1 a6 1a 9b d9 6c 89 4f 36 58 ec 00 1d dd d5 f6 2d 82 02 00 27 1a 2d f1 29 4e 9b 6d 69 99 ff ab 5f d7 ec 71 dd bc d1 32 62 26 55 7b c7 28 46 29 c4 9b e1 cc 74 d4 7c 24 a2 8e f4 16 01 bf af f0 cb 96 d3 2f 99 f9 d5 5b 8f 6f fe ef b3 7f 3c 70 dd 35 e3 e2 9a e4 3e b6 4c f7 68 a1 9b de 89 8f c0 71 49 a8 ab 3c 2d 9d 43 29 62 b0 6d dc 05 1d b7 79 1b eb ee 5e b2 23 2f de 6d 8e f3 00 ea 32 de d7 3e 25 51 84 b1 39 3e 19 31 cc 82 2d f5 b9 29 9b 87 0e 6e 8f d2 6f 1d 38 de b7 f6 13 2a 07 7b a5 d9 d1 28 e4 38 a1 82 40 dc c1 97 75 04 a0 35 d5 de 99 d7 5e b3 e8 9b 93 33 77 2f 12 c8 cb 05 b5 e2 d6 25 5f 39 9d 3d 5f ce a6 d3 1d dd Data Ascii: ?rbtS9"t+&3p=\vlO6X-'-)Nmi_q2b&U{(F)t\|$/[o<p5>LhqI<-C)bmy^#/m2>%Q9>1-)no8*{(8@u5^3w/%_9=_
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: 2b 58 dd 6d 5b b8 c1 16 f9 d7 46 b6 db 61 6b b7 10 0a 2e 93 e0 30 b7 3f 3c 4d 8e c8 2d 65 2c fa 33 2e ac c1 1c 0f 45 ab 6e b8 7e 17 41 c1 d4 31 97 3d 7b c5 48 00 00 08 3c 7d eb 2d 3f 04 6d 06 8c 88 4c 2a 58 3b 4f b5 3f 50 d2 aa 47 af cd f3 f0 00 00 54 d9 f5 fb f2 c7 ee bc f3 a5 55 04 04 02 39 d9 4f cf b9 e3 6f a7 0c 35 62 00 6c ba fe 96 c7 1b 6b 6f 9d 57 4a ed fb 38 8d 5b 72 27 9d 9a 29 06 eb ca 7f d9 b8 ae 64 97 3f 31 7f a0 a1 59 32 b3 7f d2 77 16 1c 8a 6c 87 88 35 7a 2b b6 c7 0f 76 ef de 32 34 c9 b2 a4 3e c4 1f b4 2b a5 4a 20 d3 86 81 6b 7f 71 2a 92 24 b5 94 73 26 c7 9f f0 ed 87 00 a9 20 6d af 28 0d 06 bc dc a0 96 b6 cd b8 a6 70 fd 6a 2e dd 89 01 23 c4 71 4c d8 df 72 c5 c5 ff 2c 48 6e 1d 7c 96 2c fb ef ac db e7 55 5b 33 0a 4e 40 00 40 89 7a cf 43 77 97 Data Ascii: +Xm[Fak.0?<M-e,3.En~A1={H<}-?mLX;O?PGTU9Oo5blkoWJ8[r')d?1Y2wl5z+v24>+J kq$s& m(pj.#qLr,Hn\|,U[3N@@zCw
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: 8e bf 3b 8b 05 00 e6 cc fb df f8 3e ff 9d bf 3f a3 d9 89 b0 00 00 1a 0a 49 44 41 54 ff f9 8e 20 03 8c 0a 11 c3 39 e7 9c f5 dd f5 97 c4 31 08 00 88 bf f8 e5 4f 97 e6 d8 fe 3c 79 72 63 67 7f ca 31 63 78 bc 14 66 0e 82 24 6b 2c 55 93 50 70 59 f8 b0 9c b5 63 f1 6b 61 6f fd 90 19 57 76 b2 13 16 5c 89 69 ae 4e be d8 b7 34 fa c3 4f cb 1e 7a f2 b5 b4 38 9b 60 34 23 00 07 4b 7f a9 15 00 ac 17 0f f4 02 a0 83 d7 0e 83 e1 ea d5 b4 c0 d6 fd 9e fd 08 86 e1 69 f3 da e7 3f 2c 9c 7b 71 81 80 00 18 f3 b4 f3 ff f6 fb 09 e7 87 6a ea eb 34 73 4a 92 28 5a 1c 36 b1 b5 1a cc 7f e9 89 79 db 65 87 49 37 f4 77 4f 77 e3 18 06 f8 83 30 45 32 08 25 3b 8d e5 0d 50 f6 eb fb c1 fa 8a 81 d3 2f b5 26 65 c6 50 4e d0 db f8 c3 82 79 d7 bd b8 28 cb 13 2f 9a ad bb 5d 3c 05 0c df 56 1b 0c 0c 3d Data Ascii: ;>?IDAT 91O<yrcg1cxf$k,UPpYckaoWv\iN4Oz8`4#Ki?,{qj4sJ(Z6yeI7wOw0E2%;P/&ePNy(/]<V=
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: 19 49 b5 18 93 8e e2 a1 80 ba 6d 70 58 0c db eb e9 0b 55 47 cf b2 02 9d c3 46 0f aa 8c 8b 85 d7 76 d2 8d 35 7d a8 cf 06 00 09 36 c1 2c f2 89 62 f8 7c 4f 8d c8 68 0a 45 10 0d 38 08 74 90 dd bb 9f 36 12 21 08 48 70 d3 ef 74 b8 ee df a8 d3 73 7a 20 02 0c 80 00 fe 5d 48 fb 94 07 06 a5 90 68 33 98 45 2e 51 0c 9d e5 a9 4d 16 a5 06 15 0b ac 76 6e 52 7d 1c 1f a2 b4 4b e5 08 0c 7c 5b 44 eb 34 60 fb 48 07 54 a7 5f 71 40 b6 b5 dd b0 08 76 ca 40 03 30 32 a9 6f 55 37 8b c8 aa 04 58 2a 0d b7 7b a7 c5 35 8e 75 b6 d8 38 d9 6a e2 c5 2e fc 55 59 0c bf 94 d0 cb d7 d2 3c bd c1 d1 89 89 1e 77 bc 3c 2c dc b7 9d fa 25 e8 53 7d b6 a8 c1 c0 22 f2 0a c1 92 86 65 8d 11 78 d6 2e 72 9d ba e1 44 45 ff ea 66 3a ac 7f f8 61 51 59 d5 a2 7f 7f 8a f4 85 b4 c3 ef 3d d2 d7 b2 1f 7a d6 e6 44 Data Ascii: ImpXUGFv5}6,b\|OhE8t6!Hptsz ]Hh3E.QMvnR}K\|[D4`HT_q@v@02oU7X*{5u8j.UY<w<,%S}"ex.rDEf:aQY=zD
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: 66 70 4a 9c c3 14 9f 9a ee 0a 34 94 d5 d4 85 eb 2b 8a 7f fc f1 c7 6f 8b d9 eb ae 3e 3b 8b 45 8a 29 59 6c 0d a2 83 53 f3 26 bc 73 6f 2e cb 60 96 55 7f f8 62 e1 2f f5 b2 a1 3d 86 bb ba b6 22 78 e5 45 67 1c 37 24 2d 21 3e 2e cb ed 6a ac 6b 28 ad 2d aa d8 b2 fa c6 77 b7 0e c9 b0 ed 23 33 90 23 81 0d 38 61 ee 05 a7 0f 4e 4d 8d cb 4a 74 43 a0 bc b8 b1 b8 7c e3 b3 6f 2c 80 be d4 67 d9 0f bd e9 82 26 20 28 30 c0 ab a5 f4 9d 5d f4 d5 c9 28 c3 81 38 06 0e 32 ee 47 4f 61 10 10 0a de 30 dc fa 13 59 12 84 02 53 f7 87 c4 02 62 a1 6c d3 ae 08 38 0d 00 00 71 29 05 77 9d 9b 76 d1 17 b5 c3 13 4d dd 7b c1 11 ad b0 59 9a f3 b7 bb ae 3c 73 84 c7 de e6 fc 93 91 36 18 86 03 9c 78 e2 71 eb 5e 79 ec 3f 2f 96 2b d9 dd af 90 88 a5 28 4a b5 5a 1f 3a f9 82 2b ef 3f 6f 6a bc db d2 be Data Ascii: fpJ4+o>;E)YlS&so.`Ub/="xEg7$-!>.jk(-w#3#8aNMJtC\|o,g& (0](82GOa0YSbl8q)wvM{Y<s6xq^y?/+(JZ:+?oj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.16	50103	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1147	OUT	GET /N-ARCU2I6pBUERWEIen0-o1K2SH5MqzsjhGlGDv0O0cFFqOiha-aZ5h5mh3RyX9Xka8U97H2tdaEfgXZ1IEejc5f=s275-w275-h175 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:38 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Thu, 11 Jan 2024 21:53:38 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 21:53:38 GMT Server: fife Content-Length: 43155 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:38 UTC	731	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 13 00 00 00 af 08 02 00 00 00 51 b4 ad 55 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 20 00 49 44 41 54 78 9c b4 bd 77 bc 9d 45 9d 3f fe fe cc d3 ce 2d 49 6e 3a 29 24 21 21 85 40 08 09 52 05 13 9a 48 0d 88 88 04 e9 59 41 5d 45 5d 61 5f 16 be ae 22 8b 82 fa 63 77 5f 16 6c 28 18 11 5c c0 8a c6 a5 28 5d 69 86 d0 42 48 42 02 84 f4 7b 73 db 39 4f 99 f9 fc fe 98 a7 cc 53 ce b9 37 b8 3b c9 bd f7 9c 67 e6 99 f9 cc cc a7 cf 67 66 e8 b2 0f 3f 63 d9 54 ab 59 00 00 30 c3 f7 95 94 0c 80 40 c8 a5 c2 03 a2 42 6e f2 6b a8 5c 32 0b 7a 9e 65 db 64 94 aa 78 b1 5e 57 8a d9 75 85 6d 0b 41 b9 2c 00 be af a2 88 41 e6 8b 54 a8 c1 80 bd d4 a9 ac c9 8a 2c 21 50 6b 13 44 15 59 d5 f0 a2 50 97 39 68 24 23 f6 7d 86 39 1c Data Ascii: PNGIHDRQUsBITO IDATxwE?-In:)$!!@RHYA]E]a_"cw_l(\(]iBHB{s9OS7;ggf?cTY0@Bnk\2zedx^WumA,AT,!PkDYP9h$#}9
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 10 41 31 64 c4 4a 95 df e7 4c f6 0f 21 21 0a 63 57 49 3c 94 74 24 ee af ed 80 04 f9 7e 91 7b 13 c1 f3 12 35 93 19 44 7a 54 d1 0c 2b 2a 87 aa 04 58 fa a4 84 c8 43 97 b1 2c 4e f5 5e cb 42 18 56 bc 68 59 00 90 97 8a ad 9b 69 46 09 c3 a3 90 16 a9 65 29 51 f5 42 41 27 6b a5 b3 55 e4 26 bf aa 72 e3 a7 5a 49 d3 ec 38 0c 39 0c 98 88 f3 12 8a a5 e2 48 66 af 13 c1 71 85 09 9e d2 ca 5d 09 b6 1c 74 4d 00 2b 24 02 2c 01 12 20 02 11 57 b2 9a f4 a7 aa 43 00 d8 75 a9 56 4b a5 68 8b 54 d0 ca 5a 2b 93 c5 16 a5 64 8d 70 66 86 65 c1 75 01 63 ea 18 2c 44 8c 85 69 0a 02 e6 a6 53 53 7c 50 ad 44 0d a7 4c 3e a3 34 07 ad de 10 16 5c 17 9e 07 d7 dd 2b 9d ad b9 52 b6 d7 3a 1b 37 fd 92 7f 26 d0 0c bf 73 65 5b 4d 67 eb 97 cb 43 ed 38 19 7a 85 21 a7 ea 96 10 46 29 05 00 be af cc b1 72 Data Ascii: A1dJL!!cWI<t$~{5DzT+*XC,N^BVhYiFe)QBA'kU&rZI89Hfq]tM+$, WCuVKhTZ+dpfeuc,DiSS\|PDL>4\+R:7&se[MgC8z!F)r
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 88 0b a5 d5 e8 c2 05 27 7e 14 71 14 15 dd 18 cd 81 da ab b5 d1 a1 11 c0 b2 e1 d8 48 27 4c 46 c8 2d 18 26 f3 a6 ed e1 26 be b5 e6 f0 ed a5 d8 19 06 8b 05 00 28 c9 83 91 12 a6 db 32 5f 4a 4a ae ee 77 d1 cf 96 7f 73 6f 5d 05 00 00 22 d4 6a 22 71 55 b1 96 1b 44 19 82 32 43 29 4d 3c 99 ba eb ba 94 44 91 81 99 03 bf c2 2f 56 10 b5 55 1d ad 66 8c 8e 9b 53 69 5a 11 59 f5 03 76 1d 92 02 61 c8 8a 2b 4b b7 9a d6 61 d4 0f 3d 13 4a 21 0c 91 28 69 71 19 c7 26 66 0e 43 24 7e ca 38 b9 2e 99 53 17 9b 37 d5 03 34 04 5f 18 5e e1 a1 fc 6c c6 00 37 6b cd 71 60 3b 08 03 88 84 0b e5 aa 6f 06 62 93 02 4d 57 1f cb 8f aa ab 66 00 7a 8d bb 59 db 05 28 f3 a5 9a 98 11 25 d8 4a 59 a8 50 98 89 50 ab 91 48 3c e1 81 cf 71 fc ab c8 18 bc e6 44 61 90 8a 41 00 b0 ec 58 4b 31 34 f6 26 3d 29 Data Ascii: '~qH'LF-&&(2_JJwso]"j"qUD2C)M<D/VUfSiZYva+Ka=J!(iq&fC$~8.S74_^l7kq`;obMWfzY(%JYPPH<qDaAXK14&=)
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 12 a2 a0 98 55 7e c5 f5 40 c6 c2 a7 52 08 02 d0 a5 17 3c 95 3d 4b 89 3d 7b 50 6a 98 5a 17 c8 3d c8 ed 87 24 d1 68 f4 dc 7e e7 b1 00 96 2f 3f 7f e1 c2 43 da da da a6 4d 9b 66 59 96 52 ea a5 97 5e da b1 63 c7 8f 7e f4 a3 3d 7b f6 00 18 d1 b9 df b1 47 7f 71 ea e4 23 12 45 ca ac b4 00 65 0e 00 61 d9 5b b7 3e 73 ef ef ce 03 30 67 ce 9c 85 0b 17 4e 9f 3e dd f3 3c db b6 01 10 51 5f 5f 9f fe d0 dd dd fd f6 db 6f 5b 96 45 44 8d 46 e3 4f 7f fa 13 80 77 2d fa cc bb 16 5d 21 84 6b 4c 49 ac de b4 b5 69 27 35 81 51 af 2b 66 52 2a 7a 6e f5 0f 9f 7c fa 86 e2 10 ed 4d 7a cf d1 5f 5d b8 e0 12 22 2b 69 31 c7 f3 08 42 72 f8 c8 e3 5f fd fb 9a ef fd 23 ad bc ef a4 ef cd 9f fb 41 66 d6 5e e3 74 7f 87 56 4d 55 b2 16 ca ac fe f6 cc 7f 3c f6 e4 97 01 2c 59 b2 64 ce 9c 39 5d 5d 5d Data Ascii: U~@R<=K={PjZ=$h~/?CMfYR^c~={Gq#Eea[>s0gN><Q__o[EDFOw-]!kLIi'5Q+fR*zn\|Mz_]"+i1Br_#Af^tVMU<,Yd9]]]
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 0a 2b 20 cd 43 42 a0 3d 7d 6f 00 98 38 71 62 7b 7b fb f6 ed db df fd ee 77 77 74 74 f4 f7 f7 f7 f7 f7 6b 35 63 ca 94 29 00 98 79 ec d8 b1 44 d4 d6 d6 d6 d3 d3 f3 85 2f 7c e1 d4 53 4f d5 44 15 46 f5 26 dd 44 24 99 14 00 10 89 de be 37 01 9c 70 c2 09 47 1d 75 54 bd 5e 7f e4 91 47 06 06 06 c2 30 6c 34 1a be ef 47 51 14 45 91 46 3b 4d b7 da f9 a7 d5 1b 29 e5 ec d9 b3 cf 39 e7 9c b9 73 e7 36 69 2a ee 99 8e 78 3b f7 dc 73 0f 3a e8 a0 c1 c1 c1 87 1f 7e 58 d7 af 53 18 86 69 13 e5 56 94 52 e3 c6 8d 5b b1 62 c5 92 25 4b 00 84 61 8f 52 03 40 5b e6 04 33 d7 96 99 89 e8 f5 4d f7 03 d8 7f ff fd 01 ac 5a b5 ea 8a 2b ae 18 3f 7e fc ce 9d 3b 35 df 69 6f 6f 1f 35 6a 14 00 c7 71 46 8d 1a 45 44 ed ed ed cf 3f ff fc 73 cf 3d 37 7a f4 68 5d 8d 94 11 f2 ee c7 ea c4 00 21 0a eb Data Ascii: + CB=}o8qb{{wwttk5c)yD/\|SODF&D$7pGuT^G0l4GQEF;M)9s6i*x;s:~XSiVR[b%KaR@[3MZ+?~;5ioo5jqFED?s=7zh]!
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 43 79 9d 2d f7 46 99 6b 16 bf ea 55 3f 5d 89 59 d5 f7 bf ff fd 46 a3 f1 ec b3 cf 1e 71 c4 11 4a 29 cd e7 ae bb ee 3a 00 73 e6 cc 01 b0 7e e3 6f c2 60 a0 18 24 90 ae 06 b6 80 bb 65 9a 38 71 e2 65 97 5d 76 dd 75 d7 1d 79 e4 91 00 34 93 ce 6f ed aa a8 9f 8d cf 2d 10 57 0b 9c 66 4d 77 76 76 3a 8e 23 a5 f4 7d 73 0f 57 f5 71 05 a5 73 12 73 ad b4 26 1b 00 5a c5 72 ec 76 21 6c 80 f7 42 d1 6e 99 96 2e 5d 7a d5 55 57 7d eb 5b df d2 46 8e 56 1f 94 62 a5 92 58 07 80 08 8e 5b 0c 88 8e 87 91 b9 bd 6d 6c 67 c7 78 00 bd bd bd 42 08 3d d7 69 9a 31 63 c6 41 07 1d b4 74 e9 d2 cf 7e f6 b3 cc fc cc 33 cf 00 90 52 ee de bd 5b 4a 39 72 e4 c8 13 4e 38 61 cd 9a 35 63 c7 8e 3d ff fc f3 01 bc b6 fe 0f c5 26 8a 20 e7 1e 10 21 0a e1 fb 55 05 87 91 32 99 53 54 7f 0c 86 ee 79 96 f6 73 Data Ascii: Cy-FkU?]YFqJ):s~o`$e8qe]vuy4o-WfMwvv:#}sWqss&Zrv!lBn.]zUW}[FVbX[mlgxB=i1cAt~3R[J9rN8a5c=& !U2STys
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: a8 5c 17 24 32 ca 49 85 bf 46 a0 2d 5b b6 48 29 0f 3e f8 e0 7a bd ae 7d 98 5a 3e eb 21 35 a7 38 46 38 12 b9 69 32 5c 05 82 b4 27 4d fb 5f 19 48 0e 72 6d bd 05 29 9f c2 20 e7 7c 2b ef 09 2d ea 6c 24 f2 aa 77 69 9b 84 25 90 06 ea da 36 09 22 f3 74 8e 61 80 84 74 fd cb 74 b5 9d 70 c2 09 33 66 cc d8 bd 7b f7 8f 7f fc e3 a4 96 56 95 ea ef 9c 48 7f 33 4b 4f bf 46 08 cd e6 0f 3b ec b0 a3 8e 3a 6a c2 84 09 1f fe f0 87 f5 ba c7 ac 59 b3 56 ad 5a 75 c3 0d 37 3c fc d8 e7 27 8c 3b 68 e2 84 05 4a 29 a3 91 62 73 4a 85 8b 17 5e d1 b3 e7 f5 75 1b 7e f5 f9 cf 7f 3e 7d be 6e dd ba 69 d3 a6 15 0c 6b dd af 2d 5b b6 fc f2 97 bf 34 9f d7 6a f6 e9 ef fb e1 c8 91 fb a6 0b 94 85 66 04 59 07 cd 3f ef a5 57 56 6e de fc 92 d9 ca db 6f bf bd cf 3e fb 14 2c 1c dd 4a 6f 6f ef 9d 77 de Data Ascii: \$2IF-[H)>z}Z>!58F8i2\'M_Hrm) \|+-l$wi%6"tattp3f{VH3KOF;:jYVZu7<';hJ)bsJ^u~>}nik-[4jfY?WVno>,Joow
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 5f aa b3 b5 b5 89 19 59 56 00 00 20 00 49 44 41 54 b5 dd 7a eb ad b7 de 7a 6b d5 b0 c5 e9 de 7b ef 9d 3f 7f be ee 60 bd 51 0f 43 10 25 bb a3 91 ec 1d 34 9a 4d 67 d1 b1 e3 68 8f 42 85 9a 78 0a a2 7b e4 c8 91 e7 9c 73 ce 99 67 9e b9 60 c1 82 59 b3 66 01 78 e1 85 17 16 2c 58 00 e0 d0 85 57 ed 3b e5 18 23 6a d6 ec 13 33 28 8a 40 3a ec 9e a1 18 e6 72 2d 00 af 56 39 b7 fa 6d b0 d2 01 6c a6 c9 6e 68 6b 04 b8 9e d0 47 52 78 9e 08 7c d5 84 f8 e2 9d 5a 8e 4b b6 79 68 20 73 a3 a1 9a 0b 73 80 21 a3 00 29 02 29 a5 7f f7 f7 f7 bb ae ab 97 8d ff fd df ff fd 8a 2b ae d0 bc 79 db b6 6d f7 df 7f 3f 00 25 07 62 19 dd d4 d5 68 f6 b8 7a e8 c2 30 9c 30 61 42 1a ee 69 06 14 2b a5 76 ec d8 d1 2c 28 38 ad b7 99 9f ad dc b4 96 a2 e6 eb af be fa 2a 80 a9 53 a7 02 18 ac ef 0c c3 01 Data Ascii: _YV IDATzzk{?`QC%4MghBx{sg`Yfx,XW;#j3(@:r-V9mlnhkGRx\|ZKyh ss!))+ym?%bhz00aBi+v,(8*S
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 4c 1d 4c a9 a2 79 43 c8 9c e8 39 60 93 8a b4 0b 25 c5 ad 05 0b 16 8c 1a 35 4a 4a 59 ab d5 16 2c 58 70 f3 cd 37 9f 70 c2 09 00 56 ae 5c f9 b9 cf 7d 6e ca 94 29 9f fd ec 67 bf f1 8d 6f d4 eb 3b 3b 3b 26 a5 30 98 f6 41 2a 87 99 b9 e6 75 01 d8 ba 75 eb ae 5d bb 2c cb 3a e8 a0 83 9e 7b ee 39 dd d0 f1 c7 1f 7f da 69 a7 8d 18 31 a2 b3 b3 53 47 dd 22 71 e9 6a 47 85 e3 38 22 c7 1b 39 ff b9 d5 e1 4c da 7f 65 db b6 de 5b f2 d6 5b 6f 01 48 77 cb 68 e4 d6 95 f7 ec 79 29 8a 1a 59 9d a9 c2 97 5f 60 2e f9 08 b2 34 6a d4 28 cb b2 f4 5e 20 f3 f9 9e 3d 7b 82 20 e8 e8 e8 d8 6f bf fd 36 6e dc c8 89 45 5a 99 8a 5a 20 01 e0 8e f6 89 c8 4b c8 34 5d 75 d5 55 b3 66 cd ea e8 e8 18 31 62 c4 c8 91 23 d3 dd e9 42 08 66 d6 0e bd 24 94 26 3e cd cd 84 5c 4a ae d7 e3 bb bd 52 15 0f 80 30 Data Ascii: LLyC9`%5JJY,Xp7pV\}n)go;;;&0A*uu],:{9i1SG"qjG8"9Le[[oHwhy)Y_`.4j(^ ={ o6nEZZ K4]uUf1b#Bf$&>\JR0
2024-01-10 21:53:38 UTC	1252	IN	Data Raw: 49 d3 63 8f 3d 76 cb 2d b7 ec de bd fb d1 47 1f bd ef be fb 46 8d 1a d5 db db 0b 60 d9 b2 65 b3 67 cf de bd 7b f7 77 bf fb 1d 00 23 3a 26 13 b1 eb 5a 5a c1 0e 02 65 10 4f 31 6d dd ba 55 fb a0 35 f7 d5 5b ff 37 6f de bc 7a f5 6a 6d 50 69 0d 2a dd 65 dd d6 d6 66 db 76 57 57 d7 a7 3f fd e9 5b 6f bd f5 b1 bf fe db fc 79 e7 da b6 07 ed 28 2a 8f 7e 49 67 d3 c4 20 9a ef 2a dc b6 6d db b4 69 d3 b4 5c 1d 1c dc 41 99 8d 9c c7 e8 21 b6 37 e8 f1 d4 05 b9 bc 71 52 db 00 9a 47 0c 0c 6c 1f 3f ee 20 e6 32 bc ad 75 36 ec dc b9 93 99 53 7d 89 99 1d c7 59 b3 66 cd ce 9d 3b f5 e6 02 5d b6 a3 a3 43 67 39 8e d3 d1 d1 71 e0 81 07 9e 77 de 79 6b d6 ac 59 b7 fe f7 47 1e f6 a9 44 93 6c a5 83 02 71 9c a1 d6 0c 75 0c 4e 6a 16 9a c9 dc 05 88 84 72 b4 5d a4 d5 8a 20 e8 63 d6 2b c5 43 Data Ascii: Ic=v-GF`eg{w#:&ZZeO1mU5[7ozjmPiefvWW?[oy(~Ig *mi\A!7qRGl? 2u6S}Yf;]Cg9qwykYGDlquNjr] c+C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.16	50104	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1139	OUT	GET /-C7flJ57r0PMepz2AcyBtpYnlUWtd8i7kkZBK91-Fq5t4dOrZ89spfb0OzbYQdJ4TPrOlXmNlRsLLhOydz1S6dOSD8E=s60 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:39 UTC	520	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Thu, 11 Jan 2024 21:53:39 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 21:53:39 GMT Server: fife Content-Length: 1999 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:39 UTC	732	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 07 86 49 44 41 54 68 81 ed 98 7b 50 54 d7 1d c7 bf e7 dc dd 65 d9 65 59 60 79 0a 05 45 10 13 08 10 24 54 d0 90 31 99 06 a3 33 3e 12 35 4d e3 2b be 86 06 b5 26 b5 49 23 d3 c1 d4 8e 79 4d 3b e9 68 92 49 d2 66 da 38 b5 76 aa 55 d3 a2 c4 28 32 46 31 55 6b ea 82 80 18 17 31 2c 0b 0c 50 d8 5d e4 b1 7b ef af 7f c0 c2 ee ba c8 8a d8 87 73 3f 33 b0 7b ee 39 df 73 bf df 3d 67 cf 9e 73 01 19 19 19 19 19 19 19 19 19 19 19 19 3f 60 77 23 6e b3 51 46 f9 d1 cf 5e f8 c7 85 bf 67 d9 6d d6 20 89 24 68 34 41 8e 29 89 49 35 2b 57 ae df 1b 12 cc be 18 4d db 62 a5 e9 5f 55 7c b1 f6 6c e5 a9 1c ab b5 5b 27 89 22 69 b5 5a 31 2e Data Ascii: PNGIHDR<<:rsBIT\|dIDATh{PTeeY`yE$T13>5M+&I#yM;hIf8vU(2F1Uk1,P]{s?3{9s=gs?`w#nQF^gm $h4A)I5+WMb_U\|l['"iZ1.
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: f1 26 41 50 0c eb 24 49 42 e9 e1 43 2b bd bd 3d 6f a1 85 f9 cd b4 91 e6 23 76 c2 02 5f bc 78 ee 09 49 a2 e1 b2 42 a9 44 c9 ce 77 5e 75 95 33 ae dd ac 38 62 34 ee 3d 61 bc f4 61 c2 c9 9a 06 02 42 01 60 e6 9c f9 ef b8 9b 06 00 41 10 50 5c f2 e6 6b ae f2 0c 33 95 95 1a 8d fb 4e 19 2f 7d 10 f7 f9 3f cd 04 44 00 c0 40 64 f2 c7 4a 95 aa d7 d5 8e 31 06 7b 8f 2d f1 72 33 05 ba ae 7d b7 99 f6 1c a8 32 1e aa ac ba b4 2b b6 e8 c2 b7 9f 74 50 da 84 04 ee ee fa 57 88 fb 48 09 5c c0 69 23 4e 02 c0 9c 66 ca af bb 76 35 7f 40 92 e0 20 c2 0d a7 68 78 ba 85 b6 00 40 bc 81 75 ea f5 21 46 8f 1b 72 01 86 60 76 02 00 96 9a 69 56 fd 65 63 c1 80 24 c1 49 04 33 e3 9a c7 9a 69 3b 00 cc 9a c4 fa e3 62 27 9d 71 d7 3a 9d 0e f4 e8 a1 02 80 15 ad 34 bd d1 f8 f5 f2 be 21 6d b3 a0 60 3b Data Ascii: &AP$IBC+=o#v_xIBDw^u38b4=aaB`AP\k3N/}?D@dJ1{-r3}2+tPWH\i#Nfv5@ hx@u!Fr`viVec$I3i;b'q:4!m`;
2024-01-10 21:53:39 UTC	15	IN	Data Raw: 2f bb b0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: /IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.16	50105	142.250.31.132	443	5448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-10 21:53:38 UTC	1151	OUT	GET /k9bpnYj8SdiJQJQBe4UjjCLnPAKDhUek4Sh2OVUDTJnS3Iq75oVQPeRjtl5XmuUmQcPZu8stcv8HLVn-0IOKMDHiag=s1280-w1280-h800 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chromewebstore.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-10 21:53:39 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Thu, 11 Jan 2024 21:53:39 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Date: Wed, 10 Jan 2024 21:53:39 GMT Server: fife Content-Length: 342768 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-10 21:53:39 UTC	730	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 03 20 08 06 00 00 00 7c 98 cf fb 00 00 0a d9 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 97 07 54 93 d9 12 80 ef ff a7 37 5a 00 01 29 a1 77 a4 13 40 4a e8 a1 08 d2 41 54 42 12 48 28 21 24 04 14 51 11 11 57 70 2d a8 88 80 ba a2 ab 20 0a ae ae 80 ac 15 0b b6 45 c1 5e 37 c8 22 a0 3c 17 0b 36 d4 bc 3f f0 08 bb fb ce 7b ef bc 39 67 32 5f 26 73 e7 ce dc ff fe e7 4c 00 a0 84 b0 84 c2 6c 58 05 80 1c 41 be 28 3a d8 8f 96 98 94 4c c3 0d 01 18 a8 02 0a 40 03 3b 16 5b 2c 64 44 45 85 03 44 a6 ed 5f e5 fd 5d 00 c9 ed 2d 5b 79 ae 7f ff fd bf 8a 1a 87 2b 66 03 00 a5 20 9c c6 11 b3 73 10 3e 8b e8 0b b6 50 94 0f 00 ea 10 e2 37 2e cc 17 ca f9 26 c2 ea 22 a4 40 84 7f 97 73 c6 14 7f 94 73 da 24 Data Ascii: PNGIHDR \|iCCPICC ProfileHT7Z)w@JATBH(!$QWp- E^7"<6?{9g2_&sLlXA(:L@;[,dDED_]-[y+f s>P7.&"@ss$
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: b4 21 03 c8 14 b2 86 1c 21 3a e4 0d 05 42 e1 50 34 94 04 a5 42 19 90 00 92 40 c5 d0 6a a8 12 aa 82 6a a1 3d 50 13 f4 13 74 02 3a 07 5d 81 7a a1 07 50 3f 34 02 bd 81 3e c3 28 98 0c ab c3 7a b0 19 3c 07 a6 c3 0c 38 0c 8e 85 17 c2 19 70 1e 5c 04 97 c1 1b e0 1a b8 01 3e 04 b7 c1 e7 e0 6b f0 1d 58 0a bf 84 c7 51 00 45 42 69 a2 0c 51 b6 28 3a ca 1f 15 89 4a 46 a5 a3 44 a8 15 a8 0a 54 35 aa 01 d5 82 ea 44 75 a3 6e a1 a4 a8 51 d4 27 34 16 4d 45 d3 d0 b6 68 4f 74 08 3a 0e cd 46 e7 a1 57 a0 d7 a3 6b d1 8d e8 36 f4 05 f4 2d 74 3f 7a 0c fd 0d 43 c1 e8 62 ac 31 1e 18 26 26 11 93 81 29 c4 94 63 aa 31 fb 31 c7 31 17 31 77 30 83 98 f7 58 2c 56 13 6b 8e 75 c3 86 60 93 b0 99 d8 65 d8 f5 d8 9d d8 56 ec 59 6c 2f 76 00 3b 8e c3 e1 b4 71 d6 38 2f 5c 24 8e 85 cb c7 95 e3 76 e0 Data Ascii: !!:BP4B@jj=Pt:]zP?4>(z<8p\>kXQEBiQ(:JFDT5DunQ'4MEhOt:FWk6-t?zCb1&&)c1111w0X,Vku`eVYl/v;q8/\$v
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: dc 9d f9 21 2b 32 eb 40 96 2c 3b 21 bb 35 07 9f 93 9a 73 42 a0 26 c8 12 5c c8 d5 cf 5d 92 db 2b b4 16 96 0b a5 79 1e 79 db f2 c6 44 61 a2 fd 62 48 bc 50 dc 91 af 8e 0c 49 d7 25 16 92 35 92 fe 02 ef 82 ba 82 8f 85 f1 85 c7 96 a8 2e 11 2c b9 be d4 6a e9 ba a5 43 45 41 45 3f 2e 43 2f 63 2f eb 2a 36 2c 5e 55 dc bf 9c b1 7c cf 0a 68 45 da 8a ae 95 c6 2b cb 56 0e 96 04 97 34 ae 22 ae ca 5a f5 6b a9 7d 69 55 e9 bb d5 09 ab 3b cb f4 ca 4a ca 06 d6 04 af 69 2e 57 2a 17 95 df 5b eb b9 76 f7 77 e8 ef f8 df f5 ac 73 5a b7 63 dd b7 0a 4e c5 d5 4a fb ca ea ca 2f eb d9 eb af 7e ef f0 7d cd f7 b2 0d e9 1b 7a 36 ba 6e dc b5 09 bb 49 b0 e9 ee 66 9f cd 8d 55 aa 55 45 55 03 5b 22 b6 b4 6d a5 6d ad d8 fa 6e db e2 6d 57 aa 9d ab 77 6f 27 6e 97 6c 97 d6 84 d7 74 ec 30 d9 b1 69 Data Ascii: !+2@,;!5sB&\]+yyDabHPI%5.,jCEAE?.C/c/6,^U\|hE+V4"Zk}iU;Ji.W[vwsZcNJ/~}z6nIfUUEU["mmnmWwo'nlt0i
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 74 69 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 55 73 65 72 43 6f 6d 6d 65 6e 74 3e 53 63 72 65 65 6e 73 68 6f 74 3c 2f 65 78 69 66 3a 55 73 65 72 43 6f 6d 6d 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 50 69 78 65 6c 58 44 69 6d 65 6e 73 69 6f 6e 3e 32 35 35 30 3c 2f 65 78 69 66 3a 50 69 78 65 6c 58 44 69 6d 65 6e 73 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 50 69 78 65 6c 59 44 69 6d 65 6e 73 69 6f 6e 3e 32 32 35 32 3c 2f 65 78 69 66 3a 50 69 78 65 6c 59 44 69 6d 65 6e 73 69 6f 6e 3e 0a 20 Data Ascii: s.adobe.com/exif/1.0/" xmlns:tiff="http://ns.adobe.com/tiff/1.0/"> <exif:UserComment>Screenshot</exif:UserComment> <exif:PixelXDimension>2550</exif:PixelXDimension> <exif:PixelYDimension>2252</exif:PixelYDimension>
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: 77 1b dd d7 6d dc 5d 9f 8d db a3 f2 f8 d3 f1 3f 0f 44 c7 5d 4e 71 db 06 4b d7 d2 b0 65 dd 79 14 b7 f9 6c 5c 47 1b dc 7d 56 9a 9b 76 a0 3c fe d7 ed b9 cd 6b db e2 4e f7 af df 7d cd 5d ce 9d ee 2e a3 3c 6e ba fe d7 dc 34 14 17 1d 9b c7 1e 6d 1e 1d 2d 2d 77 9a e2 b6 9c 8d bb af db 32 ee 36 ba af db b8 bb 3e 1b b7 47 e5 f1 a7 e3 7f 1e 88 8e bb 9c e2 b6 0d 96 ae a5 61 cb ba f3 28 6e f3 d9 b8 8e 36 b8 fb ac 34 37 ed 40 79 3a 5f 0f 97 d4 9b 17 dc 1c 20 04 60 80 3f 37 d3 dd d7 bd b8 c7 01 8f 03 ff 77 38 b0 0f 6d e6 7e 27 fc 1f 12 ca e5 d3 2e 90 dd f5 d0 7f 6d f0 3f 57 d9 40 69 dd a5 77 57 9f ff 35 4b db 1e fd af 07 73 ae b2 0a fe fd 3d 14 9a 0e c5 ae 7f 0f 44 3b 50 9b 0e 54 c6 d6 16 6c 3e 9b bf ab 63 30 74 fc f3 f8 9f 8b 76 a0 b4 ee d2 bb 6a 4f a0 74 4b db 1e 03 Data Ascii: wm]?D]NqKeyl\G}Vv<kN}].<n4m--w26>Ga(n647@y:_ `?7w8m~'.m?W@iwW5Ks=D;PTl>c0tvjOtK
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: 8f 7f 5e ff 73 77 7b bb bb a6 7c be eb a1 74 db 11 16 11 62 fe 28 ef 85 56 f2 e2 60 83 07 00 1e 2c e7 be 12 e5 9c 19 5f df 54 8e ba a6 32 02 7f 4d ed 8e 0c 42 f8 c5 c6 13 d3 fe 4a 0c 92 d7 08 8f 03 1e 07 3c 0e 78 1c f0 38 e0 71 c0 e3 80 c7 01 8f 03 1e 07 3c 0e 7c 6d 38 60 76 99 46 90 44 31 02 2f fc d7 20 61 93 96 2a 44 85 27 20 2e 32 9d 92 81 51 9f 8f 34 a0 53 25 da 88 42 ee e3 5f 68 28 21 c8 30 82 90 3c b6 07 a2 6e 16 78 13 50 74 68 48 50 57 28 8c 53 87 a1 af 1f e7 bf a9 57 2a d1 6d 02 a4 f8 2f 2c 94 e6 b7 64 81 eb e0 31 99 f6 6e 79 11 b2 99 bc 14 f0 d7 50 db 86 dd 4b 1a 80 86 10 64 4e 8c 44 5c 6a 38 c2 23 39 17 5c d3 c0 19 77 cb f8 4e 17 5c 03 e2 9f ee cf 65 f7 f8 db b8 3d 2a af 3f 7d ff 73 4b cf 5d c6 5d 4e 71 db 06 9b c7 d2 b0 65 dd 79 14 b7 f9 60 ee Data Ascii: ^sw{\|tb(V`,_T2MBJ<x8q<\|m8`vFD1/ aD' .2Q4S%B_h(!0<nxPthHPW(SWm/,d1nyPKdND\j8#9\wN\e=*?}sK]]Nqey`
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: 50 df 24 b5 ef 06 4a 69 b6 f1 5a a8 b1 ff 18 13 19 8f d8 a8 64 44 47 26 98 b4 1e 8f 3d 3b ac 31 12 b7 2b 77 b4 e0 07 bf 9b 80 81 83 33 f0 fc d3 ab f1 ea 5f 77 22 75 00 55 c0 93 c2 39 0f 38 47 7c d2 a1 5f 1d 1e 7d f1 2d 09 25 b3 84 b9 ca ee 5f f9 ee 26 02 e5 61 b8 f8 ba 91 18 32 2c 0b 4f 3f be 02 af 3c b0 03 d9 a3 a2 d0 7c 00 10 d0 b3 01 f8 c5 8f dd 41 d7 28 30 b7 a6 a9 d4 dc 7c 9d ed fd 1d 34 49 af a0 c7 01 8f 03 1e 07 3c 0e 78 1c f0 38 e0 71 c0 e3 80 c7 01 8f 03 1e 07 3c 0e fc 7f e7 80 95 1c ea 19 fe 65 3c 04 d7 36 16 d3 3b 70 0c 22 42 e9 18 a4 1b b9 b9 4e 2c 76 81 7f 99 bd 13 8d d4 5f 5d 4d 93 91 a4 73 83 7f 46 d0 2c a4 a3 51 fb da 7c a8 51 27 62 3c f1 65 89 8a 71 20 0e 49 10 3a 2a bc fe 19 3b 9f 2b 8f 24 f8 a4 d6 db 15 f8 27 c9 33 03 44 11 ac f4 c7 07 Data Ascii: P$JiZdDG&=;1+w3_w"uU98G\|_}-%_&a2,O?<\|A(0\|4I<x8q<e<6;p"BN,v_]MsF,Q\|Q'b<eq I:*;+$'3D
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: 6b c9 db d2 9d 4d 68 25 3f a2 62 9d 7d ad 3f 5f 34 06 a9 7d 22 f1 e1 53 c5 18 38 29 11 d3 8f c9 c7 2b 8f 6e 43 4c 72 17 80 36 09 1c b2 0d 40 49 bd 15 7e 50 8f 33 7e 3b 12 e5 25 b5 f8 e8 d9 02 c4 67 45 72 f2 7d 71 03 27 f0 2f 26 3e 02 99 bd 13 50 b0 b1 9c dd 72 6c 06 74 75 23 fb 33 ae c7 e7 ec 5a 38 6f bc da b2 66 54 af 68 c6 e4 2b 73 30 64 6c 16 12 53 63 b0 63 53 39 56 2f de 83 ad 34 c4 98 3c 2c 52 a0 38 c2 79 f3 a4 64 47 a3 70 5b 8d b9 61 7a da 2e 23 fd d7 52 83 4a 3a fe 10 da de d3 60 24 23 39 81 da b8 10 09 4c 50 fd 5a 70 bf 2a 41 ed 5b f5 7e 09 d2 10 85 9c e9 09 e6 a6 d7 84 3f 6c 81 5d d5 97 17 21 e1 cd 0d ad ed 8b d5 61 a3 4f 42 e2 a9 f1 5c b4 a8 1a a5 68 e4 03 22 03 b5 e5 4d 58 be aa 1c c3 fb 27 22 a9 77 f4 d7 1a dc 3c 9c bc fa bc 69 69 3e d5 57 36 Data Ascii: kMh%?b}?_4}"S8)+nCLr6@I~P3~;%gEr}q'/&>Prltu#3Z8ofTh+s0dlSccS9V/4<,R8ydGp[az.#RJ:`$#9LPZp*A[~?l]!aOB\h"MX'"w<ii>W6
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: c3 81 f0 02 ed b9 0b d7 d6 19 89 b7 3d 1f d5 61 f2 bd f9 06 fc 53 d9 dc 7e e9 68 a9 02 76 17 d6 b0 de 10 44 67 84 22 21 93 76 0f 0d 72 64 a9 b3 39 12 22 a8 6d 42 72 6a ac c1 29 8c 7a 33 d3 ba 0b 7a ef 6f 66 bb a2 63 e8 51 98 68 54 4c 2c d5 88 bb 2f d2 89 9c 24 38 5b 58 de c1 0b 3a 5d ea f6 44 02 46 2d ad 4d 28 ae da 46 20 50 8c 54 a5 ce 9e 27 22 2a 1c bb 97 56 61 da f9 83 70 df f7 cf 46 9f fc 6c 14 ed 29 c5 5f ff f8 24 de fc fb 4a f4 1e 4f 6c 83 9a 6f 0a e2 69 78 68 04 4a aa b6 1b e7 20 91 e1 31 c4 2f f6 df d3 0b a8 2b d9 da 88 e3 2f ee 43 e0 32 12 2f 3d be 19 bd 86 13 ac f2 d1 31 c4 02 fc 88 17 02 08 ab 4b 5b 8c 9a b0 40 44 d3 4c 1e 74 9f c8 31 46 02 85 3f 22 28 a0 a6 b1 ef 49 d0 1c ac af 6c a3 e4 25 55 9d a5 b5 79 80 f2 81 e6 4d 4f ea eb 2e 6f 38 eb 2f Data Ascii: =aS~hvDg"!vrd9"mBrj)z3zofcQhTL,/$8[X:]DF-M(F PT'"*VapFl)_$JOloixhJ 1/+/C2/=1K[@DLt1F?"(Il%UyMO.o8/
2024-01-10 21:53:39 UTC	1252	IN	Data Raw: 71 a2 19 4a d3 47 66 0f ac 4c dd 56 62 32 b8 7e 9c fd 64 15 d5 77 e5 f8 23 3c 8c c2 06 be 81 16 8f 9a 1a 9b d1 67 7c 1a e6 ff f6 4a f4 25 f8 a7 90 91 99 8a 9b fe 70 2d aa ab 6e c5 9a 0f 76 10 00 95 90 8b b3 17 d2 de b4 a5 b5 91 76 04 f7 22 23 a9 1f 73 8b 27 7e e3 c2 d3 c6 92 7d 98 38 25 17 1b d7 17 a3 70 53 03 7a 0b 00 d4 7e ae 8b a0 39 db 44 21 aa ec fc 58 62 2d e9 58 f6 c1 5e 54 53 35 5b 76 04 55 2e 21 29 02 33 e7 f4 c1 ea cf 48 af a0 9e 7b 62 6a 7e 39 4d ea d8 f3 05 20 af 7d 94 f6 e7 e9 d9 31 38 9b 1e 75 df 79 73 0b 96 bd 53 8c 84 34 0a 0c 71 3f d6 be 5f b4 65 d9 0e d1 6d aa 6f 33 18 94 f6 f4 ee fb 62 bf fc 5d f4 e7 40 c9 ba ef 62 78 8f 70 b3 eb cc 53 f5 c5 8f 8d 6e 1a 92 88 4c e9 1d 89 f7 5f dd 85 a9 47 e5 61 fa bc 6c bc fe d8 4e a4 f5 dd 1f 30 3c 28 Data Ascii: qJGfLVb2~dw#<g\|J%p-nvv"#s'~}8%pSz~9D!Xb-X^TS5[vU.!)3H{bj~9M }18uysS4q?_emo3b]@bxpSnL_GalN0<(

Target ID:	0
Start time:	22:51:34
Start date:	10/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://v9.www-ytmp4.com/
Imagebase:	0x7ff71e7f0000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	22:51:34
Start date:	10/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2000,i,3970602246001736003,3530793097058034200,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff71e7f0000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://v9.www-ytmp4.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Windows Analysis Report
http://v9.www-ytmp4.com