Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 23 21:51:23 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 23 21:51:22 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 23 21:51:22 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 23 21:51:22 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 23 21:51:22 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
Chrome Cache Entry: 105
|
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
|
downloaded
|
||
Chrome Cache Entry: 106
|
ASCII text, with very long lines (2247)
|
downloaded
|
||
Chrome Cache Entry: 107
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
Chrome Cache Entry: 108
|
JSON data
|
downloaded
|
||
Chrome Cache Entry: 109
|
ASCII text
|
dropped
|
||
Chrome Cache Entry: 110
|
HTML document, ASCII text, with very long lines (2422), with CRLF line terminators
|
downloaded
|
||
Chrome Cache Entry: 111
|
ASCII text, with very long lines (1267)
|
downloaded
|
||
Chrome Cache Entry: 112
|
ASCII text, with very long lines (2343)
|
downloaded
|
||
Chrome Cache Entry: 113
|
ASCII text, with very long lines (25088)
|
downloaded
|
||
Chrome Cache Entry: 114
|
ASCII text, with very long lines (2285)
|
downloaded
|
||
Chrome Cache Entry: 115
|
ASCII text, with very long lines (10683), with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 116
|
ASCII text
|
downloaded
|
||
Chrome Cache Entry: 117
|
ASCII text, with very long lines (3034)
|
downloaded
|
||
Chrome Cache Entry: 118
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
Chrome Cache Entry: 119
|
ASCII text, with very long lines (4046)
|
downloaded
|
||
Chrome Cache Entry: 120
|
ASCII text, with very long lines (32065)
|
downloaded
|
||
Chrome Cache Entry: 121
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x1071,
components 3
|
downloaded
|
||
Chrome Cache Entry: 122
|
PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
Chrome Cache Entry: 123
|
HTML document, ASCII text, with very long lines (2422), with CRLF line terminators
|
downloaded
|
||
Chrome Cache Entry: 124
|
ASCII text
|
downloaded
|
||
Chrome Cache Entry: 125
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x1000, components
3
|
downloaded
|
||
Chrome Cache Entry: 126
|
HTML document, ASCII text, with very long lines (13937)
|
downloaded
|
||
Chrome Cache Entry: 127
|
gzip compressed data, max speed, from Unix, truncated
|
downloaded
|
||
Chrome Cache Entry: 128
|
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
|
downloaded
|
||
Chrome Cache Entry: 129
|
ASCII text, with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 130
|
Web Open Font Format (Version 2), TrueType, length 102536, version 1.0
|
downloaded
|
||
Chrome Cache Entry: 131
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 132
|
ASCII text, with very long lines (35547)
|
downloaded
|
||
Chrome Cache Entry: 133
|
ASCII text
|
downloaded
|
||
Chrome Cache Entry: 134
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x1000, components
3
|
dropped
|
||
Chrome Cache Entry: 135
|
Unicode text, UTF-8 text, with CRLF line terminators
|
downloaded
|
||
Chrome Cache Entry: 136
|
gzip compressed data, max speed, from Unix, truncated
|
downloaded
|
||
Chrome Cache Entry: 137
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 138
|
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
|
dropped
|
||
Chrome Cache Entry: 139
|
gzip compressed data, max speed, from Unix, truncated
|
dropped
|
||
Chrome Cache Entry: 140
|
gzip compressed data, max speed, from Unix, truncated
|
dropped
|
||
Chrome Cache Entry: 141
|
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
|
downloaded
|
||
Chrome Cache Entry: 142
|
ASCII text, with very long lines (42164)
|
downloaded
|
||
Chrome Cache Entry: 143
|
ASCII text, with very long lines (374), with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 144
|
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
|
dropped
|
||
Chrome Cache Entry: 145
|
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
|
downloaded
|
||
Chrome Cache Entry: 146
|
ASCII text
|
downloaded
|
||
Chrome Cache Entry: 147
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
Chrome Cache Entry: 148
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
Chrome Cache Entry: 149
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 150
|
ASCII text
|
downloaded
|
||
Chrome Cache Entry: 151
|
HTML document, ASCII text, with very long lines (524), with CRLF line terminators
|
downloaded
|
||
Chrome Cache Entry: 152
|
PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
|
downloaded
|
||
Chrome Cache Entry: 153
|
Unicode text, UTF-8 text, with very long lines (7658), with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 154
|
ASCII text, with very long lines (2247)
|
downloaded
|
||
Chrome Cache Entry: 155
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x1071,
components 3
|
dropped
|
||
Chrome Cache Entry: 156
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
Chrome Cache Entry: 157
|
ASCII text
|
downloaded
|
||
Chrome Cache Entry: 158
|
ASCII text
|
downloaded
|
||
Chrome Cache Entry: 159
|
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
|
downloaded
|
||
Chrome Cache Entry: 160
|
Java source, ASCII text
|
downloaded
|
||
Chrome Cache Entry: 161
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
Chrome Cache Entry: 162
|
C source, ASCII text, with very long lines (1971)
|
downloaded
|
||
Chrome Cache Entry: 163
|
gzip compressed data, max speed, from Unix, original size modulo 2^32 15557
|
downloaded
|
||
Chrome Cache Entry: 164
|
ASCII text, with very long lines (2979), with no line terminators
|
downloaded
|
There are 57 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2028,i,8292762305425428644,7564485751747783064,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://simxtrackredirecttszz.pages.dev/"
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://simxtrackredirecttszz.pages.dev/
|
|||
https://secretsafedomain.com/s?a=81528&sm=235&co=112356&mt=16&s1=EVOS_TAZZ&s2=576747
|
|||
http://ww12.ngelit.com/?usid=18&utid=25970526717
|
|||
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
|
216.58.206.36
|
||
https://telegram.org/img/favicon.ico
|
149.154.167.99
|
||
https://stats.g.doubleclick.net/g/collect
|
unknown
|
||
https://osx.telegram.org/updates/site/artboard_2x.png);
|
unknown
|
||
https://syndicatedsearch.goog
|
unknown
|
||
https://telegram.org/css/bootstrap.min.css?3
|
149.154.167.99
|
||
https://osx.telegram.org/updates/site/artboard.png)
|
unknown
|
||
https://gist.github.com/92d2ac1b31978642b6b6
|
unknown
|
||
http://ww12.ngelit.com/favicon.ico
|
13.248.148.254
|
||
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=vhf3wk3421c2&aqid=oMhPZvCxD6uijuwPiPui6Qk&psid=7840396037&pbt=bv&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=7%7C0%7C1139%7C1372%7C276&lle=0&ifv=1&hpt=1&wbd=false
|
142.250.185.78
|
||
https://cdn.jmp-assets.com/devassets/3198/js/multilang_main_gender.js
|
unknown
|
||
https://simxtrackredirecttszz.pages.dev/link-1
|
|||
https://telegram.org/css/telegram.css?227
|
149.154.167.99
|
||
https://ampcid.google.com/v1/publisher:getClientId
|
unknown
|
||
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
|
172.217.18.1
|
||
http://ww12.ngelit.com/ls.php?t=664fc89c&token=dda1e75f0c57350d2d7f28c09d9ec469c70db1b0
|
13.248.148.254
|
||
https://cdn.jmpcdn.com/assets/3420/images/6.ico
|
unknown
|
||
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
|
18.239.102.57
|
||
https://telegram.org/img/tgme/pattern.svg?1
|
149.154.167.99
|
||
https://www.google.com
|
unknown
|
||
https://www.youtube.com/iframe_api
|
unknown
|
||
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-179148962-2&cid=343168255.1716504726&jid=1258097187&gjid=971496842&_gid=1698602312.1716504726&_u=YEBAAEAAAAAAACAAI~&z=1890898182
|
74.125.206.154
|
||
https://theseoffersforyou.com
|
unknown
|
||
https://cdn.jmpcdn.com/assets/3420/images/5.ico
|
unknown
|
||
https://cdn.jmp-assets.com/assets/1714/js/jquery.min.js
|
unknown
|
||
https://cloudflrcdn.com/color?x=1&forScheme=aHR0cHM6Ly9zZWNyZXRzYWZlZG9tYWluLmNvbS9zP2E9ODE1Mjgmc209MjM1JmNvPTExMjM1NiZtdD0xNiZzMT1FVk9TX1RBWlomczI9NTc2NzQ3
|
34.207.50.203
|
||
http://fauzi3.ngelit.com/
|
69.16.230.42
|
||
http://getbootstrap.com)
|
unknown
|
||
https://telegram.org/js/tgwallpaper.min.js?3
|
149.154.167.99
|
||
https://cdn.jmpcdn.com/assets/3420/images/4.ico
|
unknown
|
||
https://telegram.org/img/website_icon.svg?4
|
unknown
|
||
https://stats.g.doubleclick.net/j/collect
|
unknown
|
||
https://statisticresearch.com/user-segments/?pid=TH
|
35.153.14.190
|
||
https://telegram.org/img/favicon-32x32.png
|
unknown
|
||
http://ww12.ngelit.com/track.php?domain=ngelit.com&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjUwNDczMi40MDEzOmJhMzRiY2Q0YTY5Y2I1ODg1Yzg4ZTJiZDg0NmRlYTc5YTUzZWMxMGEwMmY0MmU2ZjEzNGJiMTgyZTgzYzY5Zjk6NjY0ZmM4OWM2MWY5Mw%3D%3D
|
13.248.148.254
|
||
https://cdn.jmp-assets.com/assets/2246/css/age-styles-new.css
|
unknown
|
||
https://telegram.org/img/favicon-16x16.png
|
unknown
|
||
https://static.trafficjunky.com/js/mp.min.js
|
66.254.122.19
|
||
http://ww12.ngelit.com/track.php?domain=ngelit.com&toggle=browserjs&uid=MTcxNjUwNDczMi40MDEzOmJhMzRiY2Q0YTY5Y2I1ODg1Yzg4ZTJiZDg0NmRlYTc5YTUzZWMxMGEwMmY0MmU2ZjEzNGJiMTgyZTgzYzY5Zjk6NjY0ZmM4OWM2MWY5Mw%3D%3D
|
13.248.148.254
|
||
http://parking.parklogic.com/page/enhance.js?pcId=12&domain=ngelit.com
|
67.225.218.50
|
||
https://cdn.jmpcdn.com/assets/3420/images/3.ico
|
unknown
|
||
http://fauzi3.ngelit.com
|
unknown
|
||
https://secretsafedomain.com/smclick?a=81528&c=342883&o=135901&oc=216576&co=112356&mt=16&svi=EwBjNDF
|
unknown
|
||
https://cdn.jmp-assets.com/prod/push-subscriber.js
|
unknown
|
||
http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6)
|
unknown
|
||
https://cdn.jmp-assets.com/assets/2843/css/main.css
|
unknown
|
||
https://tagassistant.google.com/
|
unknown
|
||
https://www.adsensecustomsearchads.com/adsense/domains/caf.js?pac=0
|
142.250.186.110
|
||
https://simxtrackredirecttszz.pages.dev/img/profile-1.jpg
|
172.66.45.18
|
||
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=35mgsdqnx1tq&aqid=oMhPZvCxD6uijuwPiPui6Qk&psid=7840396037&pbt=bs&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=7%7C0%7C1139%7C1372%7C276&lle=0&ifv=1&hpt=1&wbd=false
|
142.250.185.78
|
||
https://adservice.google.com/pagead/regclk
|
unknown
|
||
https://secretsafedomain.com/s?a=81528&sm=235&s=8&sso=1&spt=1716504721184&co=112356&mt=16&rc=71_1969
|
unknown
|
||
https://simxtrackredirecttszz.pages.dev/
|
|||
https://cct.google/taggy/agent.js
|
unknown
|
||
https://cdn.jmpcdn.com/assets/3420/images/2.ico
|
unknown
|
||
https://cdn.jsdelivr.net/npm/bootstrap-icons
|
unknown
|
||
https://secretsafedomain.com/service-worker.js
|
45.141.157.146
|
||
https://simxtrack.com/tracking202/redirect/rtr.php?t202id=5236&c1=EVOS_TAZZ&t202kw=EVOS_TAZZ
|
103.247.11.107
|
||
https://cdn.jmp-assets.com/assets/1373/other/favicon.ico
|
unknown
|
||
https://cdn.smrt-content.com/prod
|
unknown
|
||
https://telegram.org/img/apple-touch-icon.png
|
unknown
|
||
https://www.google.com/ads/ga-audiences
|
unknown
|
||
https://www.google.%/ads/ga-audiences
|
unknown
|
||
https://td.doubleclick.net
|
unknown
|
||
http://parking.parklogic.com/page/scribe.php?pcId=12&domain=ngelit.com&pId=449&usid=$
|
unknown
|
||
https://cdn.jmpcdn.com/assets/3420/images/1.ico
|
unknown
|
||
https://cloudflrcdn.com/color?x=1&forScheme=
|
unknown
|
||
https://www.merchant-center-analytics.goog
|
unknown
|
||
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
|
172.217.18.1
|
||
https://github.com/twbs/bootstrap/blob/master/LICENSE)
|
unknown
|
||
https://secretsafedomain.com/s?a=81528&sm=235&s=8&sbp=1&spt=1716504721184&co=112356&mt=16&rc=71_1969
|
unknown
|
||
https://tsyndicate.com/api/v1/retargeting/set/3f949dfe-3372-4caa-baf0-047f88323cfa?pageviewe={pageviewe}&lead={lead}
|
168.119.1.208
|
||
https://cdn.jmp-assets.com/assets/1387/js/backoffer.js
|
unknown
|
||
https://statisticresearch.com/match?p=PS&adxguid=
|
unknown
|
||
http://parking.parklogic.com/page/scribe.php?pcId=12&domain=ngelit.com&pId=449&usid=18&utid=25970526717&query=null&domainJs=ww12.ngelit.com&path=/&ss=true&lp=1
|
67.225.218.50
|
||
https://cdn.jmp-assets.com/prod/push-lang-config.js
|
unknown
|
||
https://simxtrackredirecttszz.pages.dev/style.css
|
172.66.45.18
|
There are 69 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
726512.parkingcrew.net
|
13.248.148.254
|
||
telegram.org
|
149.154.167.99
|
||
parking.parklogic.com
|
67.225.218.50
|
||
simxtrack.com
|
103.247.11.107
|
||
cdpxy.cdtechbox.link
|
45.141.157.146
|
||
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
stats.g.doubleclick.net
|
74.125.206.154
|
||
cloudflrcdn.com
|
34.207.50.203
|
||
www3.l.google.com
|
142.250.185.78
|
||
simxtrackredirecttszz.pages.dev
|
172.66.45.18
|
||
www.google.com
|
172.217.18.4
|
||
fauzi3.ngelit.com
|
69.16.230.42
|
||
tsyndicate.com
|
168.119.1.208
|
||
statisticresearch.com
|
35.153.14.190
|
||
googlehosted.l.googleusercontent.com
|
172.217.18.1
|
||
static.trafficjunky.com.sds.rncdn7.com
|
66.254.122.19
|
||
d38psrni17bvxu.cloudfront.net
|
18.239.102.57
|
||
static.trafficjunky.com
|
unknown
|
||
cdn.jmp-assets.com
|
unknown
|
||
ww12.ngelit.com
|
unknown
|
||
cdn.jsdelivr.net
|
unknown
|
||
afs.googleusercontent.com
|
unknown
|
||
www.adsensecustomsearchads.com
|
unknown
|
||
secretsafedomain.com
|
unknown
|
||
cdn.jmpcdn.com
|
unknown
|
||
cdn.smrt-content.com
|
unknown
|
There are 16 hidden domains, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
67.225.218.50
|
parking.parklogic.com
|
United States
|
||
142.250.185.78
|
www3.l.google.com
|
United States
|
||
172.66.46.238
|
unknown
|
United States
|
||
149.154.167.99
|
telegram.org
|
United Kingdom
|
||
216.58.206.36
|
unknown
|
United States
|
||
192.168.2.6
|
unknown
|
unknown
|
||
192.168.2.5
|
unknown
|
unknown
|
||
74.125.206.154
|
stats.g.doubleclick.net
|
United States
|
||
45.141.157.146
|
cdpxy.cdtechbox.link
|
Germany
|
||
103.247.11.107
|
simxtrack.com
|
Indonesia
|
||
142.250.186.110
|
unknown
|
United States
|
||
13.248.148.254
|
726512.parkingcrew.net
|
United States
|
||
172.66.45.18
|
simxtrackredirecttszz.pages.dev
|
United States
|
||
18.245.173.78
|
unknown
|
United States
|
||
18.239.102.57
|
d38psrni17bvxu.cloudfront.net
|
United States
|
||
172.217.18.4
|
www.google.com
|
United States
|
||
168.119.1.208
|
tsyndicate.com
|
Germany
|
||
136.243.43.25
|
unknown
|
Germany
|
||
172.217.18.1
|
googlehosted.l.googleusercontent.com
|
United States
|
||
142.250.185.193
|
unknown
|
United States
|
||
64.233.166.156
|
unknown
|
United States
|
||
239.255.255.250
|
unknown
|
Reserved
|
||
35.153.14.190
|
statisticresearch.com
|
United States
|
||
66.254.122.19
|
static.trafficjunky.com.sds.rncdn7.com
|
United States
|
||
34.207.50.203
|
cloudflrcdn.com
|
United States
|
||
69.16.230.42
|
fauzi3.ngelit.com
|
United States
|
There are 16 hidden IPs, click here to show them.
DOM / HTML
URL
|
Malicious
|
|
---|---|---|
https://secretsafedomain.com/s?a=81528&sm=235&co=112356&mt=16&s1=EVOS_TAZZ&s2=576747
|
||
http://ww12.ngelit.com/?usid=18&utid=25970526717
|
||
https://simxtrackredirecttszz.pages.dev/
|
||
https://simxtrackredirecttszz.pages.dev/
|
||
https://simxtrackredirecttszz.pages.dev/link-1
|
||
https://simxtrackredirecttszz.pages.dev/link-1
|
||
https://secretsafedomain.com/s?a=81528&sm=235&co=112356&mt=16&s1=EVOS_TAZZ&s2=576747
|
||
http://ww12.ngelit.com/?usid=18&utid=25970526717
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000002%2Cbucket011&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww12.ngelit.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2NjRmYzg5YzYxZWZhfHx8MTcxNjUwNDczMi40NDMzfGY1MjczYTQ0ZmJkZTRlZDViZTNjMmNiMzczZGVjN2E2NmEwODRlYWZ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxkZGExZTc1ZjBjNTczNTBkMmQ3ZjI4YzA5ZDllYzQ2OWM3MGRiMWIwfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHx8&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2733393318609526&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies=0&format=r3%7Cs&nocache=8561716504734778&num=0&output=afd_ads&domain_name=ww12.ngelit.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716504734780&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fww12.ngelit.com%2F%3Fusid%3D18%26utid%3D25970526717
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000002%2Cbucket011&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww12.ngelit.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2NjRmYzg5YzYxZWZhfHx8MTcxNjUwNDczMi40NDMzfGY1MjczYTQ0ZmJkZTRlZDViZTNjMmNiMzczZGVjN2E2NmEwODRlYWZ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxkZGExZTc1ZjBjNTczNTBkMmQ3ZjI4YzA5ZDllYzQ2OWM3MGRiMWIwfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHx8&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2733393318609526&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies=0&format=r3%7Cs&nocache=8561716504734778&num=0&output=afd_ads&domain_name=ww12.ngelit.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716504734780&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fww12.ngelit.com%2F%3Fusid%3D18%26utid%3D25970526717
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000002%2Cbucket011&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww12.ngelit.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2NjRmYzg5YzYxZWZhfHx8MTcxNjUwNDczMi40NDMzfGY1MjczYTQ0ZmJkZTRlZDViZTNjMmNiMzczZGVjN2E2NmEwODRlYWZ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxkZGExZTc1ZjBjNTczNTBkMmQ3ZjI4YzA5ZDllYzQ2OWM3MGRiMWIwfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHx8&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2733393318609526&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436&client_gdprApplies=0&format=r3%7Cs&nocache=8561716504734778&num=0&output=afd_ads&domain_name=ww12.ngelit.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716504734780&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fww12.ngelit.com%2F%3Fusid%3D18%26utid%3D25970526717
|
There are 1 hidden doms, click here to show them.