Edit tour

Windows Analysis Report
http://mega.ng

Overview

General Information

Sample URL:	http://mega.ng
Analysis ID:	1448033
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1572,i,5734391981659422172,3887567143893048300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mega.ng" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: http://mega.ng/	HTTP Parser: No favicon
Source: http://mega.ng/	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3%7Cs&nocache=4531716815039657&num=0&output=afd_ads&domain_name=mega.ng&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716815039659&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fmega.ng%2F	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3%7Cs&nocache=4531716815039657&num=0&output=afd_ads&domain_name=mega.ng&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716815039659&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fmega.ng%2F	HTTP Parser: No favicon
Source: https://www.mydomaincontact.com/index.php?domain_name=mega.ng	HTTP Parser: No favicon
Source: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads/i/iframe.html	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2MS40Mzk5fDI5MmE5ZGYyYTZiNDQyY2UxMmE4YTEzMWQ2MjQxOWRkZDU5NGY4MWV8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Setting%20Up%20Llc%20Online&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprAppl...	HTTP Parser: No favicon
Source: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Payroll&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&pcsa=false&nb=0	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2Ni4zMTIxfDhhODI3YmRmMzhhZjA4NjhjZmM5MWEyMzA3NWE3OGFhMzg1MjZmYTh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Setting%20Up%20Payroll&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2Ni4zMTIxfDhhODI3YmRmMzhhZjA4NjhjZmM5MWEyMzA3NWE3OGFhMzg1MjZmYTh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Setting%20Up%20Payroll&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2Ni4zMTIxfDhhODI3YmRmMzhhZjA4NjhjZmM5MWEyMzA3NWE3OGFhMzg1MjZmYTh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Setting%20Up%20Payroll&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=...	HTTP Parser: No favicon
Source: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&pcsa=false&nb=0	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA3MC40NzMyfDA3MjEyOGIzNjQ1MTk3YTRhMTdmMDI0ZWI4MDlhNmI5NTdlN2Q3NDN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Stream%20Paramount%20Plus&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplie...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA3MC40NzMyfDA3MjEyOGIzNjQ1MTk3YTRhMTdmMDI0ZWI4MDlhNmI5NTdlN2Q3NDN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Stream%20Paramount%20Plus&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplie...	HTTP Parser: No favicon
Source: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA3MC40NzMyfDA3MjEyOGIzNjQ1MTk3YTRhMTdmMDI0ZWI4MDlhNmI5NTdlN2Q3NDN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Stream%20Paramount%20Plus&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplie...	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49779 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WGDM49GBshaLudy&MD=yYT8EUnK HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3%7Cs&nocache=4531716815039657&num=0&output=afd_ads&domain_name=mega.ng&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716815039659&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fmega.ng%2F HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adsensecustomsearchads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adsensecustomsearchads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adsensecustomsearchads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=5qri4xfhz9pa&aqid=wYRUZvG4G4PWjuwP6Y6EqAc&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=12%7C0%7C1153%7C1467%7C214&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=l5qxxx2w1rps&aqid=wYRUZvG4G4PWjuwP6Y6EqAc&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=12%7C0%7C1153%7C1467%7C214&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php?domain_name=mega.ng HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.css HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mydomaincontact.com/index.php?domain_name=mega.ngAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-35d245f72f47807786fdc78ab047108d=1
Source: global traffic	HTTP traffic detected: GET /forms/style.css HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mydomaincontact.com/index.php?domain_name=mega.ngAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-35d245f72f47807786fdc78ab047108d=1
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=mega.ngAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-35d245f72f47807786fdc78ab047108d=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.min.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=mega.ngAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-35d245f72f47807786fdc78ab047108d=1
Source: global traffic	HTTP traffic detected: GET /forms/script.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=mega.ngAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-35d245f72f47807786fdc78ab047108d=1
Source: global traffic	HTTP traffic detected: GET /forms/script-addon.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=mega.ngAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-35d245f72f47807786fdc78ab047108d=1
Source: global traffic	HTTP traffic detected: GET /images/trust.svg HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/index.php?domain_name=mega.ngAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-35d245f72f47807786fdc78ab047108d=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.png HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/scripts/select2/select2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-35d245f72f47807786fdc78ab047108d=1
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WGDM49GBshaLudy&MD=yYT8EUnK HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /images/trust.svg HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-35d245f72f47807786fdc78ab047108d=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/index.php?domain_name=mega.ngAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-35d245f72f47807786fdc78ab047108d=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.png HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-35d245f72f47807786fdc78ab047108d=1
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2MS40Mzk5fDI5MmE5ZGYyYTZiNDQyY2UxMmE4YTEzMWQ2MjQxOWRkZDU5NGY4MWV8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Setting%20Up%20Llc%20Online&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=n3&ad=n3&nocache=7621716815061021&num=0&output=afd_ads&domain_name=mega.ng&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716815061023&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D%26query%3DSetting%2BUp%2BLlc%2BOnline%26afdToken%3DChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 12 Mar 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adsensecustomsearchads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=2cerzp402018&aqid=1oRUZpbYOdmwjuwPmbS4yAw&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1432&adbw=530&adbah=530%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=65%7C0%7C1374%7C13%7C607&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=x934h4x269kd&aqid=1oRUZpbYOdmwjuwPmbS4yAw&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1432&adbw=530&adbah=530%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=65%7C0%7C1374%7C13%7C607&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 12 Mar 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2Ni4zMTIxfDhhODI3YmRmMzhhZjA4NjhjZmM5MWEyMzA3NWE3OGFhMzg1MjZmYTh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Setting%20Up%20Payroll&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=n3&ad=n3&nocache=4961716815065783&num=0&output=afd_ads&domain_name=mega.ng&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716815065784&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D%26query%3DSetting%2BUp%2BPayroll%26afdToken%3DChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 12 Mar 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=2n7rdei8p4j9&aqid=24RUZuPLJYnIjuwPst33kAg&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1416&adbw=530&adbah=530%2C434%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=16%7C0%7C1334%7C2%7C382&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA3MC40NzMyfDA3MjEyOGIzNjQ1MTk3YTRhMTdmMDI0ZWI4MDlhNmI5NTdlN2Q3NDN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Stream%20Paramount%20Plus&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=n3&ad=n3&nocache=631716815070079&num=0&output=afd_ads&domain_name=mega.ng&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716815070080&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D%26query%3DStream%2BParamount%2BPlus%26afdToken%3DChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 12 Mar 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=j74h3lcfom76&aqid=24RUZuPLJYnIjuwPst33kAg&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1416&adbw=530&adbah=530%2C434%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=16%7C0%7C1334%7C2%7C382&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 12 Mar 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=5oyjbyxkxmfn&aqid=34RUZuj-OOygiM0P6tGHwAg&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1384&adbw=530&adbah=482%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=24%7C0%7C1355%7C3%7C421&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ylkjvt9dnoqt&aqid=34RUZuj-OOygiM0P6tGHwAg&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1384&adbw=530&adbah=482%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=24%7C0%7C1355%7C3%7C421&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mega.ng/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mega.ngConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mega.ngConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=665484be&token=216dacf94bda9f36ed89b6298c730e7fd653d93c HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mega.ng/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mega.ng/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0 HTTP/1.1Host: mega.ngConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /ls.php?t=665484d5&token=ed099a39dbc815b7899d90f9bc760f14662da555 HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Payroll&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&pcsa=false&nb=0 HTTP/1.1Host: mega.ngConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Payroll&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /ls.php?t=665484da&token=91ff62818ca72b04617b2cf85cb642a9b5afb0c3 HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Payroll&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Payroll&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&pcsa=false&nb=0 HTTP/1.1Host: mega.ngConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /ls.php?t=665484de&token=56ccf0f7c641883fea08f010718c772a3b9ed95f HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
Source: global traffic	HTTP traffic detected: GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D HTTP/1.1Host: mega.ngConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA

Source: global traffic	DNS traffic detected: DNS query: mega.ng
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.adsensecustomsearchads.com
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: www.mydomaincontact.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 27 May 2024 13:04:13 GMTContent-Type: text/htmlContent-Length: 555Connection: closeServer: nginx/1.20.1

Source: chromecache_67.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_67.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_67.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_105.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_105.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_76.2.dr	String found in binary or memory: http://www.quirksmode.org/css/box.html
Source: chromecache_64.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV54O5ZEQjRXZO4RZC9y2eD30Qq0ew
Source: chromecache_64.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV54r6R4h7HoGLe0m9suhc6h6pqlsp
Source: chromecache_119.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56Gm70hvnqZISwH53hG43POP4KJ2
Source: chromecache_83.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56OL5XqHUrfxNNxPaveHIGItI7uj
Source: chromecache_64.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56g93mbPtqnMlI_VBLHdcwqFdcnS
Source: chromecache_83.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56qPngNrcuZNO_1_-QO7bF8HFdMm
Source: chromecache_119.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56v7Kwtt3GvM52zUvjdAMwq21lLH
Source: chromecache_119.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV573PiZmlIneop31QfjnUic5XOvfl
Source: chromecache_83.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV57yxIIhPgV0RbGNhthbZ4Asxjeit
Source: chromecache_75.2.dr, chromecache_113.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_81.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Source
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zS2W7XS.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-iLT9g.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-izT9qOk.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7ksDJT9g.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7osDJT9g.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7psDJT9g.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatS-qxLUv.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSGqxLUv.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSKqxLUv.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSOqxLUv.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSiqxLUv.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://get.greenshades.com/dynamics-365/
Source: chromecache_64.2.dr	String found in binary or memory: https://go.paycor.com/
Source: chromecache_75.2.dr, chromecache_113.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_75.2.dr, chromecache_113.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_75.2.dr, chromecache_113.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_119.2.dr	String found in binary or memory: https://www.appcracy.com/app/
Source: chromecache_64.2.dr	String found in binary or memory: https://www.google.com/images/afs/snowman.png
Source: chromecache_83.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiWm-O_8q2GAxVZmIMHHRkaDskYABAAGgJlZg
Source: chromecache_83.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiWm-O_8q2GAxVZmIMHHRkaDskYABABGgJlZg
Source: chromecache_83.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiWm-O_8q2GAxVZmIMHHRkaDskYABACGgJlZg
Source: chromecache_64.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwijpYDC8q2GAxUJpIMHHbLuHYIYABAAGgJlZg
Source: chromecache_64.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwijpYDC8q2GAxUJpIMHHbLuHYIYABABGgJlZg
Source: chromecache_64.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwijpYDC8q2GAxUJpIMHHbLuHYIYABACGgJlZg
Source: chromecache_119.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwio6ofE8q2GAxVsEKIDHeroAYgYABAAGgJsZQ
Source: chromecache_119.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwio6ofE8q2GAxVsEKIDHeroAYgYABABGgJsZQ
Source: chromecache_119.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwio6ofE8q2GAxVsEKIDHeroAYgYABACGgJsZQ
Source: chromecache_75.2.dr, chromecache_113.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_64.2.dr	String found in binary or memory: https://www.interimhrconsulting.com/
Source: chromecache_83.2.dr	String found in binary or memory: https://www.myusacorporation.com/
Source: chromecache_83.2.dr	String found in binary or memory: https://www.nfib.com/
Source: chromecache_119.2.dr	String found in binary or memory: https://www.philo.com/
Source: chromecache_83.2.dr	String found in binary or memory: https://www.swyftfilings.com/
Source: chromecache_119.2.dr	String found in binary or memory: https://www.tubitv.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49779 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@21/106@28/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1572,i,5734391981659422172,3887567143893048300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mega.ng"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1572,i,5734391981659422172,3887567143893048300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://mega.ng	0%	Avira URL Cloud	safe
http://mega.ng	0%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://jquery.org/license	0%	URL Reputation	safe
https://syndicatedsearch.goog	0%	URL Reputation	safe
http://sizzlejs.com/	0%	URL Reputation	safe
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	0%	URL Reputation	safe
http://www.gnu.org/licenses/gpl-2.0.html	0%	URL Reputation	safe
http://www.apache.org/licenses/LICENSE-2.0	0%	URL Reputation	safe
http://jquery.com/	0%	URL Reputation	safe
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	0%	Avira URL Cloud	safe
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV54r6R4h7HoGLe0m9suhc6h6pqlsp	0%	Avira URL Cloud	safe
https://www.swyftfilings.com/	0%	Avira URL Cloud	safe
https://go.paycor.com/	0%	Avira URL Cloud	safe
https://www.interimhrconsulting.com/	0%	Avira URL Cloud	safe
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	0%	Avira URL Cloud	safe
https://www.appcracy.com/app/	0%	Avira URL Cloud	safe
https://www.swyftfilings.com/	0%	Virustotal		Browse
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	0%	Virustotal		Browse
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=2cerzp402018&aqid=1oRUZpbYOdmwjuwPmbS4yAw&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1432&adbw=530&adbah=530%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=65%7C0%7C1374%7C13%7C607&lle=0&ifv=1&hpt=1&wbd=false	0%	Avira URL Cloud	safe
https://www.interimhrconsulting.com/	0%	Virustotal		Browse
https://www.mydomaincontact.com/forms/script.js	0%	Avira URL Cloud	safe
https://www.nfib.com/	0%	Avira URL Cloud	safe
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	0%	Virustotal		Browse
https://www.mydomaincontact.com/scripts/jquery.js	0%	Avira URL Cloud	safe
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=x934h4x269kd&aqid=1oRUZpbYOdmwjuwPmbS4yAw&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1432&adbw=530&adbah=530%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=65%7C0%7C1374%7C13%7C607&lle=0&ifv=1&hpt=1&wbd=false	0%	Avira URL Cloud	safe
https://get.greenshades.com/dynamics-365/	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/favicon.ico	0%	Avira URL Cloud	safe
https://www.nfib.com/	0%	Virustotal		Browse
https://www.mydomaincontact.com/forms/script.js	0%	Virustotal		Browse
http://mega.ng/ls.php?t=665484de&token=56ccf0f7c641883fea08f010718c772a3b9ed95f	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/forms/script-addon.js	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/favicon.ico	0%	Virustotal		Browse
https://www.google.com/images/afs/snowman.png	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/scripts/select2/select2.min.js	0%	Avira URL Cloud	safe
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=2n7rdei8p4j9&aqid=24RUZuPLJYnIjuwPst33kAg&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1416&adbw=530&adbah=530%2C434%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=16%7C0%7C1334%7C2%7C382&lle=0&ifv=1&hpt=1&wbd=false	0%	Avira URL Cloud	safe
https://go.paycor.com/	1%	Virustotal		Browse
https://www.mydomaincontact.com/images/trust.svg	0%	Avira URL Cloud	safe
https://www.google.com/images/afs/snowman.png	0%	Virustotal		Browse
https://www.mydomaincontact.com/forms/script-addon.js	0%	Virustotal		Browse
http://mega.ng/track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D	0%	Avira URL Cloud	safe
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=5qri4xfhz9pa&aqid=wYRUZvG4G4PWjuwP6Y6EqAc&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=12%7C0%7C1153%7C1467%7C214&lle=0&ifv=1&hpt=1&wbd=false	0%	Avira URL Cloud	safe
http://mega.ng/track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D	0%	Avira URL Cloud	safe
http://www.quirksmode.org/css/box.html	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/forms/style.css	0%	Avira URL Cloud	safe
http://mega.ng/track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D	0%	Avira URL Cloud	safe
http://mega.ng/track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D	0%	Avira URL Cloud	safe
https://www.adsensecustomsearchads.com/adsense/domains/caf.js?pac=0	0%	Avira URL Cloud	safe
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56v7Kwtt3GvM52zUvjdAMwq21lLH	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/images/trust.svg	0%	Virustotal		Browse
https://www.tubitv.com/	0%	Avira URL Cloud	safe
http://mega.ng/track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D	0%	Avira URL Cloud	safe
http://www.quirksmode.org/css/box.html	0%	Virustotal		Browse
https://www.adsensecustomsearchads.com/adsense/domains/caf.js?pac=0	0%	Virustotal		Browse
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=l5qxxx2w1rps&aqid=wYRUZvG4G4PWjuwP6Y6EqAc&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=12%7C0%7C1153%7C1467%7C214&lle=0&ifv=1&hpt=1&wbd=false	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/forms/style.css	0%	Virustotal		Browse
http://mega.ng/ls.php?t=665484d5&token=ed099a39dbc815b7899d90f9bc760f14662da555	0%	Avira URL Cloud	safe
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=j74h3lcfom76&aqid=24RUZuPLJYnIjuwPst33kAg&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1416&adbw=530&adbah=530%2C434%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=16%7C0%7C1334%7C2%7C382&lle=0&ifv=1&hpt=1&wbd=false	0%	Avira URL Cloud	safe
https://www.tubitv.com/	0%	Virustotal		Browse
https://www.mydomaincontact.com/scripts/select2/select2.css	0%	Avira URL Cloud	safe
https://www.philo.com/	0%	Avira URL Cloud	safe
https://www.myusacorporation.com/	0%	Avira URL Cloud	safe
https://www.myusacorporation.com/	0%	Virustotal		Browse
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56qPngNrcuZNO_1_-QO7bF8HFdMm	0%	Avira URL Cloud	safe
http://mega.ng/ls.php?t=665484da&token=91ff62818ca72b04617b2cf85cb642a9b5afb0c3	0%	Avira URL Cloud	safe
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56g93mbPtqnMlI_VBLHdcwqFdcnS	0%	Avira URL Cloud	safe
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56Gm70hvnqZISwH53hG43POP4KJ2	0%	Avira URL Cloud	safe
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV573PiZmlIneop31QfjnUic5XOvfl	0%	Avira URL Cloud	safe
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ylkjvt9dnoqt&aqid=34RUZuj-OOygiM0P6tGHwAg&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1384&adbw=530&adbah=482%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=24%7C0%7C1355%7C3%7C421&lle=0&ifv=1&hpt=1&wbd=false	0%	Avira URL Cloud	safe
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff	0%	Avira URL Cloud	safe
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=5oyjbyxkxmfn&aqid=34RUZuj-OOygiM0P6tGHwAg&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1384&adbw=530&adbah=482%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=24%7C0%7C1355%7C3%7C421&lle=0&ifv=1&hpt=1&wbd=false	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/scripts/select2/select2.png	0%	Avira URL Cloud	safe
http://mega.ng/ls.php?t=665484be&token=216dacf94bda9f36ed89b6298c730e7fd653d93c	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www3.l.google.com	142.250.185.110	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
www.mydomaincontact.com	34.255.128.23	true	false	unknown
mega.ng	185.53.177.53	true	false	unknown
googlehosted.l.googleusercontent.com	172.217.16.193	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
d38psrni17bvxu.cloudfront.net	18.66.121.135	true	false	unknown
windowsupdatebg.s.llnwi.net	41.63.96.128	true	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown
www.adsensecustomsearchads.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://mega.ng/track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D	false		unknown
https://www.mydomaincontact.com/index.php?domain_name=mega.ng	false		unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=2cerzp402018&aqid=1oRUZpbYOdmwjuwPmbS4yAw&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1432&adbw=530&adbah=530%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=65%7C0%7C1374%7C13%7C607&lle=0&ifv=1&hpt=1&wbd=false	false	Avira URL Cloud: safe	unknown
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	false	URL Reputation: safe	unknown
https://www.mydomaincontact.com/forms/script.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/scripts/jquery.js	false	Avira URL Cloud: safe	unknown
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=x934h4x269kd&aqid=1oRUZpbYOdmwjuwPmbS4yAw&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1432&adbw=530&adbah=530%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=65%7C0%7C1374%7C13%7C607&lle=0&ifv=1&hpt=1&wbd=false	false	Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/favicon.ico	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://mega.ng/ls.php?t=665484de&token=56ccf0f7c641883fea08f010718c772a3b9ed95f	false	Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/forms/script-addon.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/images/afs/snowman.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/scripts/select2/select2.min.js	false	Avira URL Cloud: safe	unknown
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=2n7rdei8p4j9&aqid=24RUZuPLJYnIjuwPst33kAg&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1416&adbw=530&adbah=530%2C434%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=16%7C0%7C1334%7C2%7C382&lle=0&ifv=1&hpt=1&wbd=false	false	Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/images/trust.svg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://mega.ng/track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D	false	Avira URL Cloud: safe	unknown
http://mega.ng/track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D	false	Avira URL Cloud: safe	unknown
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=5qri4xfhz9pa&aqid=wYRUZvG4G4PWjuwP6Y6EqAc&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=12%7C0%7C1153%7C1467%7C214&lle=0&ifv=1&hpt=1&wbd=false	false	Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/forms/style.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.adsensecustomsearchads.com/afs/ads/i/iframe.html	false		unknown
http://mega.ng/track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D	false	Avira URL Cloud: safe	unknown
http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0	false		unknown
http://mega.ng/track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D	false	Avira URL Cloud: safe	unknown
http://mega.ng/	false		unknown
https://www.adsensecustomsearchads.com/adsense/domains/caf.js?pac=0	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://mega.ng/track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D	false	Avira URL Cloud: safe	unknown
http://mega.ng/track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D	false		unknown
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=l5qxxx2w1rps&aqid=wYRUZvG4G4PWjuwP6Y6EqAc&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=12%7C0%7C1153%7C1467%7C214&lle=0&ifv=1&hpt=1&wbd=false	false	Avira URL Cloud: safe	unknown
http://mega.ng/ls.php?t=665484d5&token=ed099a39dbc815b7899d90f9bc760f14662da555	false	Avira URL Cloud: safe	unknown
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=j74h3lcfom76&aqid=24RUZuPLJYnIjuwPst33kAg&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1416&adbw=530&adbah=530%2C434%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=16%7C0%7C1334%7C2%7C382&lle=0&ifv=1&hpt=1&wbd=false	false	Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/scripts/select2/select2.css	false	Avira URL Cloud: safe	unknown
http://mega.ng/ls.php?t=665484da&token=91ff62818ca72b04617b2cf85cb642a9b5afb0c3	false	Avira URL Cloud: safe	unknown
http://mega.ng/favicon.ico	false		unknown
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ylkjvt9dnoqt&aqid=34RUZuj-OOygiM0P6tGHwAg&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1384&adbw=530&adbah=482%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=24%7C0%7C1355%7C3%7C421&lle=0&ifv=1&hpt=1&wbd=false	false	Avira URL Cloud: safe	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff	false	Avira URL Cloud: safe	unknown
http://mega.ng/track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D	false		unknown
https://www.mydomaincontact.com/scripts/select2/select2.png	false	Avira URL Cloud: safe	unknown
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=5oyjbyxkxmfn&aqid=34RUZuj-OOygiM0P6tGHwAg&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1384&adbw=530&adbah=482%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=24%7C0%7C1355%7C3%7C421&lle=0&ifv=1&hpt=1&wbd=false	false	Avira URL Cloud: safe	unknown
http://mega.ng/ls.php?t=665484be&token=216dacf94bda9f36ed89b6298c730e7fd653d93c	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jquery.org/license	chromecache_67.2.dr	false	URL Reputation: safe	unknown
https://syndicatedsearch.goog	chromecache_75.2.dr, chromecache_113.2.dr	false	URL Reputation: safe	unknown
https://www.swyftfilings.com/	chromecache_83.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV54r6R4h7HoGLe0m9suhc6h6pqlsp	chromecache_64.2.dr	false	Avira URL Cloud: safe	unknown
http://sizzlejs.com/	chromecache_67.2.dr	false	URL Reputation: safe	unknown
https://go.paycor.com/	chromecache_64.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.interimhrconsulting.com/	chromecache_64.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.appcracy.com/app/	chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
https://www.nfib.com/	chromecache_83.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://get.greenshades.com/dynamics-365/	chromecache_64.2.dr	false	Avira URL Cloud: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV54O5ZEQjRXZO4RZC9y2eD30Qq0ew	chromecache_64.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV57yxIIhPgV0RbGNhthbZ4Asxjeit	chromecache_83.2.dr	false		unknown
http://www.gnu.org/licenses/gpl-2.0.html	chromecache_105.2.dr	false	URL Reputation: safe	unknown
http://www.quirksmode.org/css/box.html	chromecache_76.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_105.2.dr	false	URL Reputation: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56v7Kwtt3GvM52zUvjdAMwq21lLH	chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tubitv.com/	chromecache_119.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.philo.com/	chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
https://www.myusacorporation.com/	chromecache_83.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56qPngNrcuZNO_1_-QO7bF8HFdMm	chromecache_83.2.dr	false	Avira URL Cloud: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56g93mbPtqnMlI_VBLHdcwqFdcnS	chromecache_64.2.dr	false	Avira URL Cloud: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV56Gm70hvnqZISwH53hG43POP4KJ2	chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=ARquV573PiZmlIneop31QfjnUic5XOvfl	chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://jquery.com/	chromecache_67.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.23.97	unknown	United States	15169	GOOGLEUS	false
18.66.121.135	d38psrni17bvxu.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
34.255.128.23	www.mydomaincontact.com	United States	16509	AMAZON-02US	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
142.250.185.110	www3.l.google.com	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.53.177.53	mega.ng	Germany	61969	TEAMINTERNET-ASDE	false
18.239.102.108	unknown	United States	16509	AMAZON-02US	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
172.217.16.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1448033
Start date and time:	2024-05-27 15:02:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://mega.ng
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@21/106@28/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.mydomaincontact.com/index.php?domain_name=mega.ng Browse: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0 Browse: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Payroll&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&pcsa=false&nb=0 Browse: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&pcsa=false&nb=0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 172.217.16.142, 142.250.110.84, 34.104.35.123, 41.63.96.128, 192.229.221.95, 13.85.23.206, 52.165.164.15, 216.58.212.162, 142.250.186.138, 142.250.185.195, 172.217.18.10, 216.58.212.170, 142.250.184.234, 142.250.185.234, 142.250.186.74, 142.250.74.202, 216.58.206.42, 172.217.16.202, 142.250.186.42, 142.250.181.234, 142.250.185.170, 142.250.185.106, 142.250.185.202, 142.250.184.202, 142.250.185.138, 216.58.206.74, 142.250.186.106, 142.250.185.131, 172.217.18.99
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, partner.googleadservices.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: http://mega.ng/ Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not contain any form elements such as input fields or buttons which are typically found in a login form.", "The text does not contain any labels or instructions that would suggest it is a login form.", "The text appears to be a copyright notice, not a login form." ] }
uy s oman. mega.ng 2024 Copyright. All Rights Reserved.
URL: http://mega.ng/ Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not contain any input fields for a login form such as 'username', 'password', or 'login' button.", "The text only contains information about setting up LIC Online, Payroll Stream, and Paramount Plus, with a copyright notice at the end." ] }
uy s oman. mega.ng Setting up LIC Online Setting up Payroll Stream Paramount Plus 2024 Copyright. All Rights Reserved.
URL: http://mega.ng/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code does not exhibit any malicious behavior. It simply checks for the presence of certain properties related to ad blocking and adds them to an arguments array. This functionality is benign and does not pose any security risks." }
function getLoadFeedArguments() { let arguments = [ pageOptions ]; let possibleArguments = ['adblock', 'adblock1', 'adblock2', 'tcblock', 'searchboxBlock', 'rtblock', 'rsblock', 'searchblock']; for (let i = 0; i < possibleArguments.length; i++) { if (typeof this[possibleArguments[i]] !== 'undefined') { arguments.push(this[possibleArguments[i]]); } } return arguments; }
URL: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRi Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button or link is present in the text." ] }
uy s oman. mega.ng Setting up LIC Online Setting up Payroll Stream Paramount Plus 2024 Copyright. All Rights Reserved.
URL: http://mega.ng/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to configuring UI elements such as a related search block and a search box. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code primarily deals with styling and layout configurations." }
var tcblock = { // Required and steady 'container': 'tc', 'type': 'relatedsearch', 'colorBackground': 'transparent', 'number': 3, // Font-Sizes and Line-Heights 'fontSizeAttribution': 14, 'fontSizeTitle': 24, 'lineHeightTitle': 34, // Colors 'colorAttribution': '#aaa', 'colorTitleLink': '#0277bd', // Alphabetically 'horizontalAlignment': 'center', 'noTitleUnderline': false, 'rolloverLinkColor': '#01579b', 'verticalSpacing': 10 }; var searchboxBlock = { 'container': 'search', 'type': 'searchbox', 'fontSizeSearchInput': 12, 'hideSearchInputBorder': false, 'hideSearchButtonBorder': true, 'fontSizeSearchButton': 13, 'colorBackground': 'transparent', 'colorSearchButton': '#0b3279', 'colorSearchButtonText': '#fff' };
URL: http://mega.ng/ Model: gpt-4o	```json { "riskscore": 3, "reasons": "The code makes an HTTP GET request to a potentially suspicious endpoint ('/ls.php') with a token parameter. While this behavior is not inherently malicious, it could be used to exfiltrate data or perform unauthorized actions if the endpoint is controlled by an attacker. The use of a token suggests some form of authentication or session management, which could be exploited if not properly secured." }
var ls = function(xhr, path, token) { xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE) { if (xhr.status >= 200 && xhr.status <= 400) { if (xhr.responseText.trim() === '') { return; } console.log(JSON.parse(xhr.responseText)) } else { console.log('There was a problem with the request.'); } } } xhr.open('GET', path + '/ls.p' + 'hp?t=665484be&token=' + encodeURI(token), true); xhr.send(); }; ls(new XMLHttpRequest(), scriptPath, '216dacf94bda9f36ed89b6298c730e7fd653d93c');
URL: https://www.mydomaincontact.com/index.php?domain_name=mega.ng Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No prompt for current password or username", "No 'Login' button or link present", "'Name' field is not indicative of a login form", "'Price Offer' and 'Comment' fields are not typical for login forms", "No error messages or failed login indication present" ] }
MEGA.NG If you want to buy this domain, please fill out this form. Name EMail Address Repeat E-Mail Address Phone (optional) Company (optional) Website (optional) Price Offer USD Comment C) I consent having this website store and process my submitted information in order to deliver my inquiry. Submit malware SSL Certified
URL: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwy Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for login is present in the text." ] }
uy s oman. mega.ng $0 - Create Your LLC Online - Get Started in Just 10 Minutes File LLC in Just 2 Easy steps for Little SO + state F Swyn Flings' to Ttir LLC. Satisfaction G'rante Fully Tns*rent Fs. Added Limit Liability Awate. SuppUt. Mor. Filim Visit Website Join us and Take action For Ei NFIB wk to
URL: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code primarily deals with advertisement functionality and contains no elements that indicate malicious behavior. It includes setting up ad-related variables and populating ad content, which are typical for legitimate ad-serving scripts. No suspicious or harmful operations are detected." }
window.AFS_AD_REQUEST_RETURN_TIME_ = Date.now();window.IS_GOOGLE_AFS_IFRAME_ = true;function populate(el) { var adBlock = document.getElementById("adBlock"); adBlock.innerHTML += el;} var IS_GOOGLE_AFS_IFRAME_ = true; var ad_json = {"caps":[{"n":"queryId","v":"wYRUZvG4G4PWjuwP6Y6EqAc"},{"n":"popstripeRs","v":"#1F8A70,#BEDB39,#FFE11A,#FD7400,#004358"}],"sbs":[{"fn":"slave-1","afdt":"ChMIp-TAtfKthgMVxoH9Bx27owlBEnABlLqpj9edX0JHmdXBh80zFP8idyVKXRABxb1CRgC-gRiwM4o6Wc3bC8yYdcVGp1sQuOuom6TdZVuJSdXwphnNE7ymwe112rQMHjUL3xMqxE-Rmd4jvaCTL7QdJKsddCR5F-C7pW4EU-0Uj4I4eFD1","label":"Search Ads"}],"rs_attr":{"t":"Related Links","u":""},"gd":{"ff":{"fd":"swap","icelae":true,"ctclt":"","eiell":true,"epcui":true,"pcsbs":"44","pcsbp":"8","pcsd":"1"},"cd":{"pid":"dp-teaminternet09_3ph","eawp":"partner-dp-teaminternet09_3ph","qi":"wYRUZvG4G4PWjuwP6Y6EqAc"},"pc":{"cucai":true,"cgab":true,"ct":true},"dc":{"d":true}}};
URL: https://www.adsensecustomsearchads.com/afs/ads/i/iframe.html Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the login form is present in the text." ] }
uy s oman. mega.ng $0 - Create Your LLC Online - Get Started in Just 10 Minutes File LLC in Just 2 Easy steps for Little SO + state F Swyn Flings' to Ttir LLC. Satisfaction G'rante Fully Tns*rent Fs. Added Limit Liability Awate. SuppUt. Mor. Filim Visit Website Join us and Take action For Ei NFIB wk to
URL: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzE Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to advertisement functionality and does not exhibit any malicious behavior. It defines styling and configuration for text ads, which is considered low risk." }
var adblock1 = { // Required and steady 'container': 'ads', 'type': 'textads', 'adLoadedCallback': function (shown, param2) { }, 'colorBackground': 'transparent', 'linkTarget': '_blank', 'lines': 3, 'number': 3, // Colors 'colorTitleLink': '#0277bd', 'colorText': '#333', 'colorDomainLink': '#009688', 'colorAttribution': '#aaa', // Font-Sizes and Line-Heights 'fontFamily': 'Arial', 'fontSizeTitle': 22, 'fontSizeDescription': 14, 'fontSizeDomainLink': 16, 'lineHeightTitle': 30, 'lineHeightDescription': 30, 'lineHeightDomainLink': 30, // Alphabetically 'adjustableLineHeight': 14, 'noTitleUnderline': false, 'rolloverLinkColor': '#01579b', 'rolloverLinkUnderline': true, 'titleBold': false, 'titleUppercase': false, 'verticalSpacing': 24, 'webFontFamily': 'Poppins' };
URL: http://mega.ng/ Model: gpt-4o	```json { "riskscore": 7, "reasons": "The script contains code that forces the top-level window to navigate to the current location, which is a common technique used in phishing attacks to prevent users from leaving the malicious page. Additionally, the script includes functionality to track user interactions and send data to a server, which could be used for malicious purposes beyond simple tracking or advertisement." }
var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA=='; var search=''; var themedata='fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYxfDAwOTBiM2Q3ZmIwODU4NzcyNmJiZTMxNDI0MzAyMmVlOTExMDJlOWF8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA=='; var domain='mega.ng'; var scriptPath=''; var adtest='off';if(top.location!==location) { top.location.href=location.protocol + '//' + location.host + location.pathname + (location.search ? location.search + '&' : '?') + '_xafvr=Yzc1NTM1ZDZjOGJlMDUyZDJlZWFjMzU1NWY1N2Q5MGEyNzA0ZDQ4NSw2NjU0ODRiZTEwMWY1'; }var pageLoadedCallbackTriggered = false;var fallbackTriggered = false;var formerCalledArguments = false;var pageOptions = {'pubId': 'dp-teaminternet01','resultsPageBaseUrl': '//' + location.host + '/?ts=','fontFamily': 'arial','optimizeTerms': true,'maxTermLength': 40,'adtest': true,'clicktrackUrl': '//' + location.host + '/track.php?','attributionText': 'Ads','colorAttribution': '#b7b7b7','fontSizeAttribution': 16,'attributionBold': false,'rolloverLinkBold': false,'fontFamilyAttribution': 'arial','adLoadedCallback': function(containerName, adsLoaded, isExperimentVariant, callbackOptions) {if (!adsLoaded) {try {var ele = document.getElementById(container).getElementsByTagName('iframe')[0];var vars = JSON.parse(ele.name.substr(ele.id.length + 1));if (typeof vars[ele.id].type == "string" && vars[ele.id].type == "relatedsearch") {relatedFallback((function () {relatedCallback(vars[ele.id]);}));}} catch (err) {if (!(err instanceof SyntaxError)) {throw err;}}} else if (containerName in containerNames) {var data = {containerName: containerName,adsLoaded: adsLoaded,isExperimentVariant: isExperimentVariant,callbackOptions: callbackOptions,terms: pageOptions.terms};ajaxQuery(scriptPath + "/track.php"+ "?toggle=adloaded"+ "&uid=" + encodeURIComponent(uniqueTrackingID)+ "&domain=" + encodeURIComponent(domain)+ "&data=" + encodeURIComponent(JSON.stringify(data)));}},'pageLoadedCallback': function (requestAccepted, status) {document.body.style.visibility = 'visible';pageLoadedCallbackTriggered = true;if ((status.faillisted === true \|\| status.faillisted == "true" \|\| status.blocked === true \|\| status.blocked == "true" ) && status.error_code != 25) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=block&reason=other&uid=" + encodeURIComponent(uniqueTrackingID));}if (status.errorcode && !status.error_code) {status.error_code = status.errorcode;}if (status.error_code) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code
URL: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzE Model: gpt-4o	```json { "riskscore": 3, "reasons": "The code makes an HTTP GET request to a dynamically constructed URL with a token parameter. While this behavior is not inherently malicious, it could potentially be used to exfiltrate data or interact with a malicious server. The use of a token suggests some form of authentication or session management, which could be a vector for abuse if not properly secured. However, without more context or evidence of malicious intent, the risk is moderate." }
var ls = function(xhr, path, token) { xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE) { if (xhr.status >= 200 && xhr.status <= 400) { if (xhr.responseText.trim() === '') { return; } console.log(JSON.parse(xhr.responseText)) } else { console.log('There was a problem with the request.'); } } } xhr.open('GET', path + '/ls.p' + 'hp?t=665484d5&token=' + encodeURI(token), true); xhr.send(); }; ls(new XMLHttpRequest(), scriptPath, 'ed099a39dbc815b7899d90f9bc760f14662da555');
URL: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwy Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the login form is present in the text.", "The text is about a company and its HR & payroll services, not a login form." ] }
uy s oman. mega.ng Top HR & PAYROLL COMPANY - KEEP YOUR BUSINESS COMPLIANT Quickly & Euily P" Whe Tax Cmplian Again. Cloud-Based Solution. All-[n-One Mobile App_ Euy-tcRLm Software Tu 8 R Supwt_ Visit Website SIMPLIFY YOUR HR & PAYROLL - HR MANAGEMENT & PAYROLL Ghades and HR are to inteyate with MS
URL: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to advertisement functionality and does not exhibit any malicious behavior. It includes setting up ad-related configurations and populating ad content. There are no signs of phishing, data exfiltration, or other malicious activities." }
window.AFS_AD_REQUEST_RETURN_TIME_ = Date.now();window.IS_GOOGLE_AFS_IFRAME_ = true;function populate(el) { var adBlock = document.getElementById("adBlock"); adBlock.innerHTML += el;} var IS_GOOGLE_AFS_IFRAME_ = true; var ad_json = {"caps":[{"n":"queryId","v":"1oRUZpbYOdmwjuwPmbS4yAw"},{"n":"popstripeRs","v":"#1F8A70,#BEDB39,#FFE11A,#FD7400,#004358"}],"rs_attr":{"t":"Related Links","u":""},"gd":{"ff":{"fd":"swap","icelae":true,"ctclt":"","eiell":true,"epcui":true,"pcsbs":"44","pcsbp":"8","pcsd":"1"},"cd":{"wftl":["Mate SC","Mate","Roboto","Roboto Light"],"pid":"dp-teaminternet09_3ph","eawp":"partner-dp-teaminternet09_3ph","qi":"1oRUZpbYOdmwjuwPmbS4yAw"},"pc":{"cucai":true,"cgab":true,"ct":true},"dc":{"d":true}}};
URL: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_statu Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for login is present in the text." ] }
uy s oman. mega.ng Top HR & PAYROLL COMPANY - KEEP YOUR BUSINESS COMPLIANT Quickly & Euily P" Whe Tax Cmplian Again. Cloud-Based Solution. All-[n-One Mobile App_ Euy-tcRLm Software Tu 8 R Supwt_ Visit Website SIMPLIFY YOUR HR & PAYROLL - HR MANAGEMENT & PAYROLL Ghades and HR are to inteyate with MS
URL: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzE Model: gpt-4o	```json { "riskscore": 6, "reasons": "The code attempts to redirect the top-level window to the current location, which can be a sign of a phishing attempt. Additionally, it includes mechanisms to track user interactions and send data to a server, which could be used maliciously if the server is not trustworthy. However, there is no direct evidence of harmful actions such as stealing credentials or injecting malicious content." }
var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA=='; var search='Setting Up Llc Online'; var themedata='fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2MS40Mzk4fGE3MmJhOWIzMWZlN2EzMjI0YjdkNDg0ZWUyY2I4ZjYzYzQxOTczM2V8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA=='; var domain='mega.ng'; var scriptPath=''; var adtest='off';if(top.location!==location) { top.location.href=location.protocol + '//' + location.host + location.pathname + (location.search ? location.search + '&' : '?') + '_xafvr=YzM0ZDBkYTVkNTkzMzJkNTg3ZTk0MTZjZmI3YTYwNWQ3MzMxNTRiZCw2NjU0ODRkNTZiNjA2'; }var pageLoadedCallbackTriggered = false;var fallbackTriggered = false;var formerCalledArguments = false;var pageOptions = {'pubId': 'dp-teaminternet01','resultsPageBaseUrl': '//' + location.host + '/?ts=','fontFamily': 'arial','optimizeTerms': true,'maxTermLength': 40,'adtest': true,'clicktrackUrl': '//' + location.host + '/track.php?','attributionText': 'Ads','colorAttribution': '#b7b7b7','fontSizeAttribution': 16,'attributionBold': false,'rolloverLinkBold': false,'fontFamilyAttribution': 'arial','adLoadedCallback': function(containerName, adsLoaded, isExperimentVariant, callbackOptions) {if (!adsLoaded) {try {var ele = document.getElementById(container).getElementsByTagName('iframe')[0];var vars = JSON.parse(ele.name.substr(ele.id.length + 1));if (typeof vars[ele.id].type == "string" && vars[ele.id].type == "relatedsearch") {relatedFallback((function () {relatedCallback(vars[ele.id]);}));}} catch (err) {if (!(err instanceof SyntaxError)) {throw err;}}} else if (containerName in containerNames) {var data = {containerName: containerName,adsLoaded: adsLoaded,isExperimentVariant: isExperimentVariant,callbackOptions: callbackOptions,terms: pageOptions.terms};ajaxQuery(scriptPath + "/track.php"+ "?toggle=adloaded"+ "&uid=" + encodeURIComponent(uniqueTrackingID)+ "&domain=" + encodeURIComponent(domain)+ "&data=" + encodeURIComponent(JSON.stringify(data)));}},'pageLoadedCallback': function (requestAccepted, status) {document.body.style.visibility = 'visible';pageLoadedCallbackTriggered = true;if ((status.faillisted === true \|\| status.faillisted == "true" \|\| status.blocked === true \|\| status.blocked == "true" ) && status.error_code != 25) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=block&reason=other&uid=" + encodeURIComponent(uniqueTrackingID));}if (status.errorcode && !status.error_code) {status.error_code = status.errorcode;}if (status.error_code) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURICompon
URL: https://www.adsensecustomsearchads.com/afs/ads/i/iframe.html Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code primarily deals with loading advertisement scripts and managing iframe communication. The code does not exhibit typical malicious behaviors such as data exfiltration, credential stealing, or unauthorized access to sensitive information. However, it does manipulate the DOM and interacts with parent frames, which could potentially be exploited if combined with other malicious scripts. The risk is minimal but not entirely absent." }
if (window.name.match(/^{"name":"master-\d+"/)) {var script = document.createElement('script');script.src = "/adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.IS_GOOGLE_AFS_IFRAME_ = true;}function populate(el) {var adBlock = document.getElementById('adBlock');adBlock.innerHTML += el;}function getMaster() {var m = null;var pIndex = window.name.indexOf('\|');if (pIndex > -1 && window.name.charAt(0) != '{') {try {m = window.parent.frames[window.name.substring(pIndex + 1)];} catch (e) {}if (m) {return m;}var nameInfo = window.name.match(/^(slave-\d+)-(\d+)/);var masterNum = (nameInfo && nameInfo[2]) ? nameInfo[2] : null;if (masterNum) {try {m = window.parent.frames['master-' + masterNum];} catch (e) {}}}return m;}window.onresize = function() {var resizeMaster = getMaster();try {resizeMaster && resizeMaster.sPH && resizeMaster.sPH();} catch(e) {}};var masterFrame = getMaster();try {masterFrame && masterFrame.mPAASH && masterFrame.mPAASH();} catch(e) {}
URL: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzE Model: gpt-4o	```json { "riskscore": 3, "reasons": "The code makes an HTTP GET request to a dynamically constructed URL with a token parameter. While this behavior is not inherently malicious, it could potentially be used for data exfiltration or unauthorized access if the token is sensitive. However, without further context or evidence of malicious intent, the risk is considered low to moderate." }
var ls = function(xhr, path, token) { xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE) { if (xhr.status >= 200 && xhr.status <= 400) { if (xhr.responseText.trim() === '') { return; } console.log(JSON.parse(xhr.responseText)) } else { console.log('There was a problem with the request.'); } } } xhr.open('GET', path + '/ls.p' + 'hp?t=665484da&token=' + encodeURI(token), true); xhr.send(); }; ls(new XMLHttpRequest(), scriptPath, '91ff62818ca72b04617b2cf85cb642a9b5afb0c3');
URL: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to advertisement functionality and does not exhibit any malicious behavior. It includes ad-related variables and functions, and there are no signs of phishing or harmful actions." }
window.AFS_AD_REQUEST_RETURN_TIME_ = Date.now();window.IS_GOOGLE_AFS_IFRAME_ = true;function populate(el) { var adBlock = document.getElementById("adBlock"); adBlock.innerHTML += el;} var IS_GOOGLE_AFS_IFRAME_ = true; var ad_json = {"caps":[{"n":"queryId","v":"24RUZuPLJYnIjuwPst33kAg"},{"n":"popstripeRs","v":"#1F8A70,#BEDB39,#FFE11A,#FD7400,#004358"}],"rs_attr":{"t":"Related Links","u":""},"gd":{"ff":{"fd":"swap","icelae":true,"ctclt":"","eiell":true,"epcui":true,"pcsbs":"44","pcsbp":"8","pcsd":"1"},"cd":{"wftl":["Mate SC","Mate","Roboto","Roboto Light"],"pid":"dp-teaminternet09_3ph","eawp":"partner-dp-teaminternet09_3ph","qi":"24RUZuPLJYnIjuwPst33kAg"},"pc":{"cucai":true,"cgab":true,"ct":true},"dc":{"d":true}}};
URL: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwy Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the login form is present in the text.", "The text appears to be promoting a video streaming service, not a login form." ] }
uy s oman. mega.ng WATCH FROM ANY DEVICE - httpe//awx_tubitv.m' Stop Pfing To Watch - Tubi Hu M And TV You of Monthly Start Watching . Best -To stream TV Nosign-cp orcc watch F ! watch Full Mwl On Demand Strea mine Staming_ Monthly. popular TV Sh Visit Website PARABIOUNT+ http App - apli the vsion Andmid or
URL: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_statu Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the login form is present in the text.", "The text appears to be promoting a video streaming service and does not contain any elements of a login form." ] }
uy s oman. mega.ng WATCH FROM ANY DEVICE - httpe//awx_tubitv.m' Stop Pfing To Watch - Tubi Hu M And TV You of Monthly Start Watching . Best -To stream TV Nosign-cp orcc watch F ! watch Full Mwl On Demand Strea mine Staming_ Monthly. popular TV Sh Visit Website PARABIOUNT+ http App - apli the vsion Andmid or
URL: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzE Model: gpt-4o	```json { "riskscore": 3, "reasons": "The code contains a mechanism to redirect the top-level window to the current location, which can be used for clickjacking or to prevent framing by other sites. Additionally, it includes AJAX requests to track user interactions and errors, which could potentially be used for malicious purposes if the server-side handling of these requests is not secure. However, there are no clear signs of phishing or other high-risk malicious activities." }
var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ=='; var search='Setting Up Payroll'; var themedata='fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2Ni4zMTJ8ZWIzNmY0MzI2OWMyOTNhMWY4OGY0ZTlmNWFlMTM3Y2ZhNGUxOTZiZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIxNmRhY2Y5NGJkYTlmMzZlZDg5YjYyOThjNzMwZTdmZDY1M2Q5M2N8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfDc4NDAzOTYwMzd8'; var domain='mega.ng'; var scriptPath=''; var adtest='off';if(top.location!==location) { top.location.href=location.protocol + '//' + location.host + location.pathname + (location.search ? location.search + '&' : '?') + '_xafvr=ZGZlZDQwNDE4NGMzMDY4MzFlNTlmNWNmOGNiNjRhZTFkYTMzMTQ1ZCw2NjU0ODRkYTRjMmE4'; }var pageLoadedCallbackTriggered = false;var fallbackTriggered = false;var formerCalledArguments = false;var pageOptions = {'pubId': 'dp-teaminternet01','resultsPageBaseUrl': '//' + location.host + '/?ts=','fontFamily': 'arial','optimizeTerms': true,'maxTermLength': 40,'adtest': true,'clicktrackUrl': '//' + location.host + '/track.php?','attributionText': 'Ads','colorAttribution': '#b7b7b7','fontSizeAttribution': 16,'attributionBold': false,'rolloverLinkBold': false,'fontFamilyAttribution': 'arial','adLoadedCallback': function(containerName, adsLoaded, isExperimentVariant, callbackOptions) {if (!adsLoaded) {try {var ele = document.getElementById(container).getElementsByTagName('iframe')[0];var vars = JSON.parse(ele.name.substr(ele.id.length + 1));if (typeof vars[ele.id].type == "string" && vars[ele.id].type == "relatedsearch") {relatedFallback((function () {relatedCallback(vars[ele.id]);}));}} catch (err) {if (!(err instanceof SyntaxError)) {throw err;}}} else if (containerName in containerNames) {var data = {containerName: containerName,adsLoaded: adsLoaded,isExperimentVariant: isExperimentVariant,callbackOptions: callbackOptions,terms: pageOptions.terms};ajaxQuery(scriptPath + "/track.php"+ "?toggle=adloaded"+ "&uid=" + encodeURIComponent(uniqueTrackingID)+ "&domain=" + encodeURIComponent(domain)+ "&data=" + encodeURIComponent(JSON.stringify(data)));}},'pageLoadedCallback': function (requestAccepted, status) {document.body.style.visibility = 'visible';pageLoadedCallbackTriggered = true;if ((status.faillisted === true \|\| status.faillisted == "true" \|\| status.blocked === true \|\| status.blocked == "true" ) && status.error_code != 25) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=block&reason=other&uid=" + encodeURIComponent(uniqueTrackingID));}if (status.errorcode && !status.error_code) {status.error_code = status.errorcode;}if (status.error_code) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(sta
URL: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_statu Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password were found in the text.", "No submit button or indication of form submission was found in the text.", "The text appears to be unformatted and does not resemble a typical login form." ] }
uy s oman. mega.ng WATCH FROM ANY DEVICE - httpe//awx_tubitv.m' Stop Pfing To Watch - Tubi Hu M And TV You of Monthly Start Watching . Best -To stream TV Nosign-cp orcc watch F & TV iOS s App. watch Full On Demand Strea mine Staming_ Monthly. popular TV Sh Visit Website PARABIOUNT+ http App - apli the vsion Andmid or
URL: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_statu Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password were found in the text.", "No submit button or indication of form submission was found in the text.", "The text appears to be an advertisement for a streaming service, not a login form." ] }
uy s oman. mega.ng WATCH FROM ANY DEVICE - httpe//awx_tubitv.m' Stop Pfing To Watch - Tubi Hu M And TV You of Monthly Start Watching . Best -To stream TV Nosign-cp orcc watch F & TV iOS s App. watch Full On Demand Strea mine Staming_ Monthly. popular TV Sh Visit Website PARABIOUNT+ http App - apli the vsion Andmid or
URL: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzE Model: gpt-4o	```json { "riskscore": 7, "reasons": "The code contains a mechanism to redirect the top-level window to the current location, which is a common technique used in phishing attacks to prevent users from navigating away from the malicious page. Additionally, the code includes functionality to track user interactions and send data to a server, which could be used for malicious purposes if the server is controlled by an attacker. The presence of unique tracking IDs and encoded data further raises suspicion." }
var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw=='; var search='Stream Paramount Plus'; var themedata='fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA3MC40NzMyfDA3MjEyOGIzNjQ1MTk3YTRhMTdmMDI0ZWI4MDlhNmI5NTdlN2Q3NDN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA=='; var domain='mega.ng'; var scriptPath=''; var adtest='off';if(top.location!==location) { top.location.href=location.protocol + '//' + location.host + location.pathname + (location.search ? location.search + '&' : '?') + '_xafvr=MDJiMjRhZTk5ZmFmYTQzM2I4Mjc3NTUxNThmNGM5ZjQxNzcyZWNkYyw2NjU0ODRkZTczODQ4'; }var pageLoadedCallbackTriggered = false;var fallbackTriggered = false;var formerCalledArguments = false;var pageOptions = {'pubId': 'dp-teaminternet01','resultsPageBaseUrl': '//' + location.host + '/?ts=','fontFamily': 'arial','optimizeTerms': true,'maxTermLength': 40,'adtest': true,'clicktrackUrl': '//' + location.host + '/track.php?','attributionText': 'Ads','colorAttribution': '#b7b7b7','fontSizeAttribution': 16,'attributionBold': false,'rolloverLinkBold': false,'fontFamilyAttribution': 'arial','adLoadedCallback': function(containerName, adsLoaded, isExperimentVariant, callbackOptions) {if (!adsLoaded) {try {var ele = document.getElementById(container).getElementsByTagName('iframe')[0];var vars = JSON.parse(ele.name.substr(ele.id.length + 1));if (typeof vars[ele.id].type == "string" && vars[ele.id].type == "relatedsearch") {relatedFallback((function () {relatedCallback(vars[ele.id]);}));}} catch (err) {if (!(err instanceof SyntaxError)) {throw err;}}} else if (containerName in containerNames) {var data = {containerName: containerName,adsLoaded: adsLoaded,isExperimentVariant: isExperimentVariant,callbackOptions: callbackOptions,terms: pageOptions.terms};ajaxQuery(scriptPath + "/track.php"+ "?toggle=adloaded"+ "&uid=" + encodeURIComponent(uniqueTrackingID)+ "&domain=" + encodeURIComponent(domain)+ "&data=" + encodeURIComponent(JSON.stringify(data)));}},'pageLoadedCallback': function (requestAccepted, status) {document.body.style.visibility = 'visible';pageLoadedCallbackTriggered = true;if ((status.faillisted === true \|\| status.faillisted == "true" \|\| status.blocked === true \|\| status.blocked == "true" ) && status.error_code != 25) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=block&reason=other&uid=" + encodeURIComponent(uniqueTrackingID));}if (status.errorcode && !status.error_code) {status.error_code = status.errorcode;}if (status.error_code) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURICompon
URL: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzE Model: gpt-4o	```json { "riskscore": 3, "reasons": "The code makes an HTTP GET request to a path that includes a token, which could potentially be used for unauthorized access or data exfiltration. However, without more context, it is difficult to determine the exact nature of the request. The code does not exhibit any overtly malicious behavior such as obfuscation, data exfiltration, or manipulation of the DOM." }
var ls = function(xhr, path, token) { xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE) { if (xhr.status >= 200 && xhr.status <= 400) { if (xhr.responseText.trim() === '') { return; } console.log(JSON.parse(xhr.responseText)) } else { console.log('There was a problem with the request.'); } } } xhr.open('GET', path + '/ls.p' + 'hp?t=665484de&token=' + encodeURI(token), true); xhr.send(); }; ls(new XMLHttpRequest(), scriptPath, '56ccf0f7c641883fea08f010718c772a3b9ed95f');
URL: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to advertisement functionality and does not exhibit any malicious behavior. It includes setting up ad-related variables and populating an ad block element. There are no signs of phishing or harmful actions." }
window.AFS_AD_REQUEST_RETURN_TIME_ = Date.now();window.IS_GOOGLE_AFS_IFRAME_ = true;function populate(el) { var adBlock = document.getElementById("adBlock"); adBlock.innerHTML += el;} var IS_GOOGLE_AFS_IFRAME_ = true; var ad_json = {"caps":[{"n":"queryId","v":"34RUZuj-OOygiM0P6tGHwAg"},{"n":"popstripeRs","v":"#1F8A70,#BEDB39,#FFE11A,#FD7400,#004358"}],"rs_attr":{"t":"Related Links","u":""},"gd":{"ff":{"fd":"swap","icelae":true,"ctclt":"","eiell":true,"epcui":true,"pcsbs":"44","pcsbp":"8","pcsd":"1"},"cd":{"wftl":["Mate SC","Mate","Roboto","Roboto Light"],"pid":"dp-teaminternet09_3ph","eawp":"partner-dp-teaminternet09_3ph","qi":"34RUZuj-OOygiM0P6tGHwAg"},"pc":{"cucai":true,"cgab":true,"ct":true},"dc":{"d":true}}};

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 19627
Category:	downloaded
Size (bytes):	6776
Entropy (8bit):	7.97440608280109
Encrypted:	false
SSDEEP:	192:7mkLGY4TJUvtGT5SNR3k8KoHEae4PwC8WmizNX:7p8JUvnn0TOXPwh9il
MD5:	FFFC56893B2F79CDCC668ACE35C0FD88
SHA1:	A33B5302953828BBCDA7BBF817284BE4A051EE4C
SHA-256:	81A50DCB9E1363AFB1918B69DAD85C9328A00F8CF2568A50216203FF2906D2CC
SHA-512:	AD1571154E3BB8A073A4C97726CC20ED45569C174FE4F608C26AFB0D0B636ED3C798DDEF0A918F9614191837907CF3AF03E3D9469512778519958E0608E6FEB4
Malicious:	false
Reputation:	low
URL:	http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0
Preview:	...........\{s...;......b..<...!.......PlJ..bY2...7.}.=3.F~p.....MHb.....=.....'.0.;.....2B.`X=.3G#.hf.f....z..;..:?9::o....f.[o.Z.M._.t?.pKo.R...~..mwoo~....M...h..+..;.L....:oM...g..............x....g....5;i...I.uz.\O.Q.c.....E.U.{9{c\....i.S....Ok..Y......v{]{..5.2yY......`lY...Q.7..k5..m>v.....Q,.f3}V.=.P,.....D.....an.(.......gc.. \8).oS...y.!s.Bw1a...O.L..a. .j.....6.a...)..\c..;..&...g.......MV..y.v..6.B`..k..Z0.mwT..B.........a..l`...YQ<r.i...,.......f&0}.w.8....P.....X...x3.....9....A/W..{.7....c.\..a(.. PC+.&s.....p.B.\|./F...nh..d.Z&.e.......:..].4.........%....u_.]........3.X.-Cn...b........@\|.....6N;,..=..L/.I...[\|.Ln.(,...U5.1...,.\...WNY=.r...?8.m..7=./T.0!!...=.u..3...\.g..... ....U...k..zw.n:.... ......E.Y..&......w...\|6aFX..E'...y...+....j=.bD..(x>........i.........-..`)l....$.R.v7...v.r...>..R$y...}...T..o.A.j......4V..."i..`.....M...9.h.r.z."~T&N.w..Bl..0fa..P...q..z...O.{..2.b.9.....c...T}(z.).5.r.....

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20199
Entropy (8bit):	3.70382459042729
Encrypted:	false
SSDEEP:	384:jDjzWdNWunWE3JcL3R2G//ttrIHGOesh6UK5gK5KU:jDnu024d
MD5:	A096EECE85B9F9EB151647D759FFBA89
SHA1:	B8349BE8DCCD1BF51ECD157AC9E4FB85EAF72B94
SHA-256:	81FBC2D1C4FD135BD8367182A98AE01F40B7DA6A0279185A177841EB7D8C823F
SHA-512:	5DD48140CD98833F0DD030D827F384D0C5846CBAC6824CD6767E6867A11533CC4549DF57915FDEF8741ABCAF12F258F39F71B20D65AA7F7EA45CE9A7FAED470C
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/images/trust.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">...st0{fill:#b0bec5;}.</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.5 0-0.9 0.2-1 0.5s-0.2 0.9-0.2 1.5v2.2c0 0.3-0.1 0.6-0.2 0.8s-0.3 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8V9.8c0-0.3 0.1-0.5 0.2-0.7s0.3-0.2 0.5-0.2c0.2 0 0.4 0.1 0.5 0.2s0.2 0.3 0.2 0.6v0.2c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1.1-0.2c0.4 0 0.7 0.1 1 0.2s0.5 0.4 0.7 0.7c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1-0.2c0.4 0 0.8 0.1 1.1 0.3s0.6 0.4 0.7 0.7c0.1 0.3 0.2 0.7 0.2 1.4v3.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.7c0-0.3 0-0.6 0-0.8s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.2 0-0.4 0.1-0.6 0.2s-0.3 0.3-0.4 0.5C244.8 11 244.7 11.5 244.7 12.2z"/><path class="st0" d="M254 14.4c-0.4 0.3-0.8 0.5-1.1 0.7s-0.8 0.2-1.2 0.2c-0.4 0-0.8-0.1-1.1-0.2s-0.5-0.4-0.7-0.7 -0.3-

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21528, version 1.0
Category:	downloaded
Size (bytes):	21528
Entropy (8bit):	7.988581564927641
Encrypted:	false
SSDEEP:	384:47KwKbMXQq5EvJxCscVSq5aR3lYjLW9Sh0G64JKxH8emqhgvdnKa/HyrTX:46bMgqGRYscWR3CjLWiBHQ8lcgvdnKaG
MD5:	780E2060AB7A6A4FA797405755B62441
SHA1:	A99F5EA68F7A617ACCE6F3FD49411142E3B54CF7
SHA-256:	CC308BE27791DC58E7CE19F0D245EF66B8EB6975B8C7AE22D97C09927C84DC48
SHA-512:	C6635045E38101A8975C6885882BA5FF7093444F6679480EFF8B8F935CCD124A38204EEC7CB27C4B48B08D7191BCCEB3F6E66AFC1880C27036A7467B06F4F2C3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2
Preview:	wOF2......T........ ..S...........................4...L..0.`..J.....`..-.....6.$.... .............~.Y=..N....r.@jk...l.......!.....!R..m.;Dl.e....kv.U......;...(.;<G.."F^.MV.0 ....a1e2k2on:.q.x...Me&\|.NlR+.,,2\|..u>.!.P:..z.}F....e.........(.EEA.I.L.GT.-..Bc..N....(Z{...{..BL.I}..D.T...... .......1..U..\|jl..6X.c...,@...<....>+.<.V........x.w.=..{.%H.P3.L7..61....J..k.f...e."...9.v.\|@..._..A.....rO..,.......NB..x..R...........x.A.y.PD.g...-.h7s...1..y2.K.,E..2._.......ip.%...T..E.p...Y.5.u..N....{...I...Q.h..ntWX..(].OM....=.s=.Z._.........%.3_.0.!... ....E....c.!.@..k......=.k.....c.D".H..P.L..\|.._..%,..4.....Pe.x0..Ip...........j.\|....Y.+T#).m@.\..].X.;.e..h..5....U\..T9Q.....E(.(.J.....6Wf.......ep......y.)s..hw.....=...........[.#@.......6.".b.i.I.Co"gRf.".......D...w.........M...R.B~.h.a..4..]}n...QY..#\\.m...2.TY]..P&...,.n..5c.T0Q3..:....Y...v{.X........!...\......K.n...Z......cD......{..t.,.$b.G....l. ..x.q.3..U...",..qR...A.2b .IH4 .'

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://mega.ng/ls.php?t=665484da&token=91ff62818ca72b04617b2cf85cb642a9b5afb0c3
Preview:	{"success":true}

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32041)
Category:	downloaded
Size (bytes):	41867
Entropy (8bit):	5.139963739750686
Encrypted:	false
SSDEEP:	768:7JgANQPl//TgGMg4/+gqQWXAnpCZEQbE1WRdZfnKMuVevvr:7J01Tg+xhwsZEsE1W3ZfRuVevT
MD5:	F4B4F7EC0C9C4D1401993B2CF8C1DC88
SHA1:	A1B00107E47786E175117AD1654389B48DEC3059
SHA-256:	6B6C6918ABBFF3B44705AB10617401964194CAA770DE984A087FFB85588FE13E
SHA-512:	D93964ED3A6EDB822DF6858470D058BEF7087B3DBBDBCFAA48E8124FD9B69E1FBA9E6C05A05E2B900B706FE284CA2099046B47C5719C60FC659AE808E9224F0A
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.min.js
Preview:	/.Copyright 2012 Igor Vaynberg..Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013..This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNU.General Public License version 2 (the "GPL License"). You may choose either license to govern your.use of this software only upon the condition that you accept all of the terms of either the Apache.License or the GPL License...You may obtain a copy of the Apache License and the GPL License at:..http://www.apache.org/licenses/LICENSE-2.0.http://www.gnu.org/licenses/gpl-2.0.html..Unless required by applicable law or agreed to in writing, software distributed under the Apache License.or the GPL Licesnse is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,.either express or implied. See the Apache License and the GPL License for the specific language governing.permissions and limitations under the Apache License and the GPL License../.(function(a){a.fn.each2===void 0&&a.fn.ext

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 19609
Category:	downloaded
Size (bytes):	6891
Entropy (8bit):	7.970868427284666
Encrypted:	false
SSDEEP:	192:H5deqbsU1JpncUy5+n8miADPt+wbdXbrgotgNxCX2:H5dbgU1jct5+Dp3dXXLtQF
MD5:	E4545502ED9B07BD6B9B17643C085CD5
SHA1:	7F0CA515521EF4B1A5DD86DA93DA7867B956F104
SHA-256:	A8C4681E58FC575AC998205E8058C019EAF2077919ADD516A4E591BE8E4B5E54
SHA-512:	CC6CEEE4893B2A324073E741141869CD9F0FFB2ED9463AF113FEFEFA88B8C99179A74631D7E35FD3400300F7DFC7CE3BF785CBC3E46C59E127DADDBEEB851F4E
Malicious:	false
Reputation:	low
URL:	http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Payroll&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&pcsa=false&nb=0
Preview:	...........\kw.:.........;.^.IJ.&..Ki...d.[...9.......gK.-s.i.j..0I..miK...-.....V..T..#...k...z..t.k..p..T.l:../.t;..G.y\|szrrs\.8=.~<.<9...~v..u...N.....ekoo.v.G..qc^}.....;.....q.....w.7..s.g...^........?K;.....7..u........N....=.9.+6.Y...d~0iw...n?\|.n....>=+.ju..{.C.\|\i.w..ui.<<.......ZJ..l...A0>,...i~Z.^.P:88(..)..~-..Q...M._.G,.A.`.c.M..Z.....r....4C\|...6....H3...6.z..TAE..#VK=Zl:v.@.>..`P3.e.....,..,....n.Z)....r............l.f..z.....\|....z..s.i#fZz-....;}.............f....T..Gi....j^..)f.}...9...`V......t....{..v.;~.g...=..z.j..x&Z.iZN.......-@.4..A1.<...9..>.\..)g9&....geg..b[..............x ..X.l.v..'&.....R..6x...,QX`...j...}d^r..r5.....\|.b1+.p...9.._.......{.....0...s9GW7.}...Aj......?.=..u.g..a.....y...`.F./..._..5..,?v..m.cc..9.Px.rJ...g.bR....-.._...._.n..#0...wm.."U....,....N...nw..`G....s.+....).H.OU..,..Tm...A....;n(m..m}~.q..f..d..Z...N.,~T&N.....d#f......I...:J@../Ow...%.".8.....#...T}( ....r.....:

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	172
Entropy (8bit):	5.212204664713075
Encrypted:	false
SSDEEP:	3:lwZ4cndk1szKYo0B47GAOxvi3xaIYQ1pxoLJm/tgaGa1r/MDo/:ItYsmfa1viha/SpxoLJIzdQDy
MD5:	32081FF2D7AF11D9922150075AD68B96
SHA1:	C799211B03A271EAB532AFC4FE8D4C34A37DF1E4
SHA-256:	51FA91230C27FCB21E78E4A301736E7CE2F5568D50B495519AC234F4F459A8DC
SHA-512:	9E306DB2F439CA25475EB82449960FEC32FA5E83BCBBBB4A4CCB508819BC0713F7119B75649A1F7180E4B45FD6DC258350BD362C305E8B69371A951304B5147B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISVgn41mTv-y3JjxIFDZRU-s8SBQ14bxIZEgUNrgUHKxIFDVPydWESBQ2SBVTOEgUNd7DIgxIFDTVnGxESBQ3eP5O-EgUNkWGVThIFDa5eyPYSBQ0xPZQw?alt=proto
Preview:	Cn8KCw2UVPrPGgQIBxgBCgsNeG8SGRoECAkYAQoLDa4FBysaBAgJGAEKCw1T8nVhGgQIDRgBCgsNkgVUzhoECDwYAQoLDXewyIMaBAgfGAEKBw01ZxsRGgAKCw3eP5O+GgQIIhgBCgcNkWGVThoACgcNrl7I9hoACgcNMT2UMBoA

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://mega.ng/track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D
Preview:	....................

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://mega.ng/ls.php?t=665484de&token=56ccf0f7c641883fea08f010718c772a3b9ed95f
Preview:	{"success":true}

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2247)
Category:	downloaded
Size (bytes):	190267
Entropy (8bit):	5.672790754304183
Encrypted:	false
SSDEEP:	3072:W7GweXBcXyGqPDq7kX38XqXGR7LGtvJUjXjM:Wz4BG69X07LYvebw
MD5:	7693E1150618F93129051D4F242C1BB3
SHA1:	DBA14A854E15D0530ED745A535D7D7DBBB288D2C
SHA-256:	F5985E201327D8ABB3DC409AACC78C4D088B60C591733CD9B62CE9B6B997494D
SHA-512:	154DC6C7EC12A96D91141B8F73B1CBABB5BDB14ECF3BC5284E919EB6D9F6BED239D8FCFFA98780B7E21B7A40B3170AF76CA8FAC0C7E160E414CAE210955E4ADA
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/adsense/domains/caf.js?pac=0
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.adsensecustomsearchads.com",hash:"5603203904245007042",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:""}};var m;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da="function"==typeof Object.defineProperties?Obj

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1559)
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.35387176318722
Encrypted:	false
SSDEEP:	48:0JhEOnK8lwSb6YS4tyPWp2PXihm0wQR2FgbnYfblV:8hDbL1tzAXr+0P
MD5:	80A5551EDC724C31E879EDDC20714E05
SHA1:	0CB49AA3CB29A1AE7BF9B3617C6CD9FE6DDA1A19
SHA-256:	1601EE2A25DB4FEB7BF80BA0F2825805EFC21722A7F2695919257846D5F32D1F
SHA-512:	B65EA72B44184197754197030817B69B3E746439CB3F5AFA5F2734395A494C3962A3DD8836A71369438CCEAC5D7BA7BA9013D6575E75B3F1E93FDA3B802CD79E
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/afs/ads/i/iframe.html
Preview:	<!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="UdWX6dj1qLe6vctL87MB_w">if (window.name.match(/^{"name":"master-\d+"/)) {var script = document.createElement('script');script.src = "/adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.IS_GOOGLE_AFS_IFRAME_ = true;}function populate(el) {var adBlock = document.getElementById('adBlock');adBlock.innerHTML += el;}function getMaster() {var m = null;var pIndex = window.name.indexOf('\|');if (pIndex > -1 && window.name.charAt(0) != '{') {try {m = window.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	396
Entropy (8bit):	4.993257872070729
Encrypted:	false
SSDEEP:	6:jU0LELWVMroRLLJULlpbKSy1wibxjpwVKRbq9Bi/z2tkywW/GBWlK:jkWlRLLsltTibx6UdqGL2AK9lK
MD5:	D19F13ABB39098BE07569E078047DE48
SHA1:	583C6CB1BFF82BA7FD8FE0F12FDF8DC988EFD4B6
SHA-256:	3D0F73C914640E6ACD493F58A3BBE324F76230010C5B594653D6BD08D4BE9424
SHA-512:	0D3F62B83F43140C91B472A0AEA2F814675009BEDDD216B4C836CD80582545ACE0ED42215C2E660CA2151B12E2433199F45744751E61A285221459DE405359FF
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/script-addon.js
Preview:	// -- additional script for the sale offer version of the form..$(document).ready(function() {. $("#currency").select2({minimumResultsForSearch: -1});.});...function isSalePriceValid() {. $("#priceHolder").removeClass('inputError');. var val = $('#price').val();..var isInt = /^\d+$/.test(val);..if (val && !isInt) {. $("#priceHolder").addClass('inputError');..}..return isInt;.}.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/afs/snowman.png
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14057)
Category:	downloaded
Size (bytes):	14916
Entropy (8bit):	5.489092668083367
Encrypted:	false
SSDEEP:	192:2E12ikpgnLLghzVLWr9w4tiw4AHw4IwphOyE:2ni8vzhLwHOP
MD5:	B6417150BFA8105EB2E1B901E95B11D0
SHA1:	F092A8F1C6C1840B8A0CD260E25CFD0524CEA01A
SHA-256:	CDEDDE0000223AD1ECA7154325BDA803C7171A5A57098747B453D278157DB07D
SHA-512:	4AD72BE4580F8261D97A347E4E09A4A107AC3D4CB5B65CD04C84A6DE256FB9D4D4EDABF8E77299850806D47A48C65A04277045C2BD53E83F2896CDF40FB1DD1B
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3%7Cs&nocache=4531716815039657&num=0&output=afd_ads&domain_name=mega.ng&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716815039659&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fmega.ng%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://mega.ng/track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D
Preview:	....................

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (15789)
Category:	downloaded
Size (bytes):	35014
Entropy (8bit):	5.332223530111891
Encrypted:	false
SSDEEP:	384:2ni8dHrzBmiEiu/uHGDCdA+I7A+IQI2A+I/HKaHKw6R72HKI5hG5huIc25hHdOT:2iAHrzPogU6aIZph56R7u5qExgmT
MD5:	A6B31FC74CE06DD6BED12DDA06063895
SHA1:	7034D8A11B3E66FB82C3C0362051D5FC84AF9940
SHA-256:	DE3BE65D52AB9ABFD90BF53A531847F746F0EA430C556A617CFFCBE101A198B9
SHA-512:	A586E4086E2E51251EB76613B555312E00E617A16925B329DFAB128CD142EDAFA2FFE2D1CC5B0C35CF08D8DA6E1B4A21CCA40E5BEC62521E1E3F12A17661E2D2
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA3MC40NzMyfDA3MjEyOGIzNjQ1MTk3YTRhMTdmMDI0ZWI4MDlhNmI5NTdlN2Q3NDN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Stream%20Paramount%20Plus&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=n3&ad=n3&nocache=631716815070079&num=0&output=afd_ads&domain_name=mega.ng&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716815070080&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D%26query%3DStream%2BParamount%2BPlus%26afdToken%3DChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://mega.ng/ls.php?t=665484be&token=216dacf94bda9f36ed89b6298c730e7fd653d93c
Preview:	{"success":true}

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19600, version 1.0
Category:	downloaded
Size (bytes):	19600
Entropy (8bit):	7.987896864926305
Encrypted:	false
SSDEEP:	384:DO9QOKK1ov0/vS0RMIy5z+s3O4mszugwVSy8ypC+eFfPYDE:q9QRN0/vTRv1t5s9wMyp2dPYDE
MD5:	A97AF381DD8B174164F0BD1D5BF5B123
SHA1:	C8B72AEE9FC4FA425761C2DA454F95D45B42F506
SHA-256:	4A9FA9C4ECB0EAEC0AF1E4949930232604B331CD076CA7EFBA2A4E2EFDBAA367
SHA-512:	A0833DBE283F89503A173F47C4C0C9F61FBE2553E62FD2151786F63AEADDA7FD1DDAF5BBF5B77B74D269D43B140887CA683F11D0DDAE8DC980416D55F09D8261
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-iLT9g.woff2
Preview:	wOF2......L...........L,.............................<..,.`..l...........t........6.$..\|. ..f..i..K.w.5l.....8.K..E.q...z$.`..b......%p"C.4....$%.........D.2.N.T..A.R6+.&.w..#..q.l.t....v5+O..d..w9.>.`.P(........ptJP...>W.......'........h...Q....@.ZL.PQ..b...U.p....s}..v..X.....nf..}....'..(4.<O...../0t/......P...v.F...E.+.....X{.=..(.Rl...c. w...o...j!-..t:.dP....W..]_..o.fZ.W.:... g2.2i7..9s~v.w.!.L....MVYEB.Qg..KXI[e...O0....`..$.re.q....<o.-....K....t. 8T.4e.G.....O....t...$-.~Q..2..fm...p.K8..y.<.H.N.../]v.}...L.:E.6.N..\G.{f.&.rR.Wc.... vk/...v...A......$..m'.{...J..m.I..L..'g....oN........(yC\|...P]y.^...g..?..!...".\|...q.h...'..+.M!..@.z%{C.}9....W.).u{.e5..z. L.{..P.>.M...#V...LF..:....$.V)M.g..4.~...... ..t.O..........{.^..@......h.......8...g..d...`...`.%x.O..........r...wwz....06....z..v..L.....4....+....(d...."....d.hA...x..L+Q.8Rb..A8 .F3..1.d...9=..vW....Nv..i..A$.{...,..,.<..4..27..wFF...4}.JQ.%,~.\|@..N ..............{...^..v

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://mega.ng/track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D
Preview:	....................

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (16899)
Category:	downloaded
Size (bytes):	35846
Entropy (8bit):	5.367252539920299
Encrypted:	false
SSDEEP:	384:2ni8dHrzBmiEiu/uHGDC7prn6CRxouiKAHpX1+IZOJ:2iAHrzPoglprn6ExtV012J
MD5:	9F25F21627EDC9AF69486C09F9003C79
SHA1:	4B6A84037D920CF5B00E962694B03B9C85D99053
SHA-256:	7CEC6C99234643A68D15A6678E19D2E4054F729A1D9916589B9B0848AEB8612E
SHA-512:	1CBD79AD17F6DE275971E0ACF399F6D4994C15EFD3746E1C1397796CE58C2783FC5B875EA02689C7B5153F3CE8004A3580DE6CA27D14CD8EB750683A6393A366
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2Ni4zMTIxfDhhODI3YmRmMzhhZjA4NjhjZmM5MWEyMzA3NWE3OGFhMzg1MjZmYTh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Setting%20Up%20Payroll&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=n3&ad=n3&nocache=4961716815065783&num=0&output=afd_ads&domain_name=mega.ng&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716815065784&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D%26query%3DSetting%2BUp%2BPayroll%26afdToken%3DChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://mega.ng/track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D
Preview:	....................

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65168)
Category:	downloaded
Size (bytes):	85260
Entropy (8bit):	5.370957781359195
Encrypted:	false
SSDEEP:	1536:pKgIKzw+DiSMW4QQtIyY/UFHVsBm8r7e7dyIClTwYA17jaO8lfBBcXq+X4mhEEw7:9j3MIoF1kLHfTEI8zvvM
MD5:	B04A3BCCD23DDEB7982143707A63CCF9
SHA1:	4A5DC1389AAD050A44EE5E81408238A317AB3413
SHA-256:	764B9E9F3AD386AAA5CDEAE9368353994DE61C0BEDE087C8F7E3579CB443DE3B
SHA-512:	3F844A06577168DE05B187E727DD07B9A20CF0453CD00E28AEFDEEFCF783DC680EBD941ECD79A53AB26510AF1F855984C2DDC77565EF0DB11D4BA6E46F59D748
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/jquery.js
Preview:	/!. jQuery JavaScript Library v1.5.1. * http://jquery.com/. . Copyright 2011, John Resig. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . Includes Sizzle.js. * http://sizzlejs.com/. * Copyright 2011, The Dojo Foundation. * Released under the MIT, BSD, and GPL Licenses.. . Date: Wed Feb 23 13:55:29 2011 -0500. */.(function(a,b){function cg(a){return d.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cd(a){if(!bZ[a]){var b=d("<"+a+">").appendTo("body"),c=b.css("display");b.remove();if(c==="none"\|\|c==="")c="block";bZ[a]=c}return bZ[a]}function cc(a,b){var c={};d.each(cb.concat.apply([],cb.slice(0,b)),function(){c[this]=a});return c}function bY(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function bX(){try{return new a.XMLHttpRequest}catch(b){}}function bW(){d(a).unload(function(){for(var a in bU)bU[a](0,1)})}function bQ(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var e=a.dataTypes,f={},g,h

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	613
Entropy (8bit):	7.624191679264559
Encrypted:	false
SSDEEP:	12:6v/7svvOiEe0IOQEjoZzIAOLhymOh+T+qFYKRacX3Y0OJxAG0f7:FvOC0I/EjizPOlZ3HFYMR3T
MD5:	2CA61B76E22053571DD8611E5AAC4900
SHA1:	2D350341A645AD33AB5604ACA16C05F22A83FF51
SHA-256:	D6B5D8D83DBC18FB8D77C8761D331CD9E5123C9684950BAB0406E98A24AC5AE8
SHA-512:	89B2BCBCE382E8B7C4D27BAA07ABED6F1D8D0F5A8F29B62A98F05FB1DE46D5E40F4C8146047614E92EFDCD235B80B842F8B08E9DA36A5FDB376E83F9EE2B09EA
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.png
Preview:	.PNG........IHDR...<...(............,IDATx....K.a....J....b](...v.d...<....P....!R.q.T..H.#..G..y.R......Ht0L.>....9.,m)..y.u..}.;....)I.J..,...Q(...X....V..&...Oh.F.!.{.n.{....,...%]...Gc..5x.>@.3...&....2.....%..C..,b.E...u.9=T6.7..)...E......".....lo.y[.e..C....&... D....m.#.......Q..j.......v@..Te.M.......;.....G9...b...}.1.....T...: .hC.f <t.;LT..A........N+....^@...no-../..F.e0aG.3X.....1.(....J.B..[..lgp...?..$8.N....Z4....5......d^..e0aw!..2nA.`.r.."...o.F...A...kW .<..`..R..~...~..J<....Sp..)..:tB...}.2E\|.L.........`.W.W.1....{!s....-..s.Z..[....P.o\|.}.q.......IEND.B`.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://mega.ng/track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D
Preview:	....................

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://mega.ng/track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D
Preview:	....................

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (368), with no line terminators
Category:	downloaded
Size (bytes):	368
Entropy (8bit):	5.435655718663297
Encrypted:	false
SSDEEP:	6:xWzPjRy0gLy05hv9BRf2HkM6PBNG7M+dysQmLD0gLy05YcI02cV2HkM6PBNGAen:xWI0gu05t9ZG7HkmLD0gu05Yc5pZG7n
MD5:	19E0182845CA3C7988F3E7A5C6CAF926
SHA1:	1ED2754C152C339BCEA28DA10E3B509A779BA7F3
SHA-256:	C027C92BB59CB4A17E0F2D9D9B87E3732D65CAB521951F7949FF5B2662CD67C2
SHA-512:	534052EE450612564C82F6E7E031DC05B17E5BBC35E28ECE0794B4254365A14EE3F7497078C9227C30DCDE61C5D91A46B9ED7DF45F60B789A780A8EAC1B023F6
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=mega.ng&client=dp-teaminternet09_3ph&product=SAS&callback=__sasCookie
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA","_expires_":1750511041,"_path_":"/","_domain_":"mega.ng","_version_":1},{"_value_":"UID=00000e2f7f0e0c89:T=1716815041:RT=1716815041:S=ALNI_MbPDt0rGUyOnXw_73DGwOT9-gmUfQ","_expires_":1750511041,"_path_":"/","_domain_":"mega.ng","_version_":2}]});

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2247)
Category:	downloaded
Size (bytes):	190251
Entropy (8bit):	5.672846589390887
Encrypted:	false
SSDEEP:	3072:N7GweXBcXyGqPDq7kX38XqXGR7LGtvJUjXjM:Nz4BG69X07LYvebw
MD5:	CAAC113297EE3817E28FB680CEE3E572
SHA1:	0D29B1D28C8885A2FEEC7E28985D119DB2275CEE
SHA-256:	F8E7AD43D3103137CA8B760560C2FDD9D61578786664D7FB1A27F6E88EEA29B9
SHA-512:	BB960ED9115FB665949EBD0F1E1B5C9E7425B946A103BE869B58A39BE506D1833C83359552FA2F370CFE68E99121DE193B247B47E9FAF74C7995153F6FB629FC
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"5603203904245007042",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:""}};var m;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da="function"==typeof Object.defineProperties?Object.defineProper

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19226
Entropy (8bit):	4.874083143056483
Encrypted:	false
SSDEEP:	192:Gui2TWIjfVST5V889hD+qS76Pq/oio1+44e8ePYFCcWlbTh+DQ7Fpr:tplC5Vh93S7NQwFCwQ7b
MD5:	2F85AD713B0814F8FB08A8ED985341F6
SHA1:	4107AD786D6453B57F4E8EBFE5FBB1CAE4E4E883
SHA-256:	C3AAA5487A549B0A206ABADE1658C0C39C17E32E637930FE49F9E1D04104C306
SHA-512:	9517BFC0C1AB5EF5C3C3A339C352758047661FB4AC9CB121B4298B3FB4EB87731ECE953B6134FF0286C12DCEBE3D6E230E1A8C40C50781DAED4DFCC9BCB16BEA
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.css
Preview:	/.Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013./..select2-container {. position: relative;. display: inline-block;. /* inline-block for ie7 /. zoom: 1;. display: inline;. vertical-align: middle;.}...select2-container,..select2-drop,..select2-search,..select2-search input{. /. Force border-box so that % widths fit the parent. container without overlap because of margin/padding... More Info : http://www.quirksmode.org/css/box.html. /. -webkit-box-sizing: border-box; /* webkit /. -khtml-box-sizing: border-box; / konqueror /. -moz-box-sizing: border-box; / firefox /. -ms-box-sizing: border-box; / ie /. box-sizing: border-box; / css3 */.}...select2-container .select2-choice {. display: block;. height: 26px;. padding: 0 0 0 8px;. overflow: hidden;. position: relative;.. border: 1px solid #aaa;. white-space: nowrap;. line-height: 26px;. color: #444;. text-decoration: none;.. -webkit-bord

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19684, version 1.0
Category:	downloaded
Size (bytes):	19684
Entropy (8bit):	7.988639555000283
Encrypted:	false
SSDEEP:	384:ONwiXfXdhL8GpPfyGjRzz40RK4dqy5n393AFCdIXSXxk+ukfD+EPzDF7z9XkZfYz:+f3AGpPrRzz4h4dqy393AFuXx+EbD1xJ
MD5:	29F5BA8FC1F2AC21FA0ED86EC404BCDE
SHA1:	ADDA13FABCBFE7C004AA99A5642012A927B20F3F
SHA-256:	251342FF1E3A31CD968101F7492ECD6B59E0058190A38B77E15A64928FC44593
SHA-512:	5149122690C7BE981EBA0018B751DD9615EBF24839912BA377ABE252E026AC441F14DC68BCF5A80E3733644107F971F107DAC0E0D322FD8ECA0222E74E9AB34E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2
Preview:	wOF2......L...........L..............................8....`..d.l........X.....l..6.$..T. ..R..w..=....6.'.....[.Q..Y...6.`..S.......X.V.C..Pi.....]..DJ.....\..%N.P..]..S..[^fCh.x..........X,.......rv..ms............cq.h.y.O...J2..IE.[.{...3.m.kr....O{.>t.{O..M.=&.p.P~.?$.W.8.Q.J/.<E..RtD.O..&..=<?......f.1j.m..l#V.......>Q.;..N.>O...<O......kx.g?.}3....P.x.....5...!B(..)......$.H.........J..{...Z-...B.%..........!.......-........;.....f...7..PX...>.tM."k".N.+<._..7..2....#....hW?.......j.....r.B.Y./..2...OD.S.~.@`.no......\.6...l.0...G!.............6@.(.!....=...Z]5.c.i..\|+....t~m.......)...N...l.>t.3y5gV!...T...AR..`<...Q..A.O.$<.>......!f!9`.n....w...n...nSZl7q9._..o".d..dI?u....ZV.$..>Vf...T.!............,0....Q.2._+...C..Z}Y#...c...k...R...c.* ...W..._..... D.\q.u7.r...<...0..A0.M.A@..6-...>..q)SaO.N..-.N*.......c..P..;........U..mM.......d......2.`-..fD5"...D.hD.....i..$.'......b7.9....a .z6.....\..Y[[...!....-..s ...6.>.......-..q

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2421
Entropy (8bit):	4.370448549978702
Encrypted:	false
SSDEEP:	48:NTKG+zF59LHXeccv25U4g5dtFfMqvypShod4bVwPJ/B:UGQF5xXeO5Ng5b9MqvypShowOB/B
MD5:	A0FE7E3DDFD6C99FAA882D3E34249AFC
SHA1:	F075F7DFD190D85C6B90170F55A790700E0D958D
SHA-256:	33C4474DD73BF42D1BEA3A5B81EB2F784A251FF43031FE89FF729E98EBC1867C
SHA-512:	E3BFB96B37F4E9D54E38F7D81A7A1136A835069A0C5EF237BEA9EA373257EA7AA0190C32F37601764FF6DF6B37D201AD53FE74034CE89712EF0116699884DE2C
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/script.js
Preview:	$(document).ready(function() {. $('input.inputtext:first').focus();....// -- initiate sale or send offer..$("input.submit").click(function(e) {...e.preventDefault();...$(this).addClass("spinner");...$(".inputError").removeClass("inputError");.. // -- check required fields. $("input.required, textarea.required").each(function() {. if (!$(this).val()) {. errorOnField($(this));. } else if ($(this).hasClass("textarea") && $(this).val().length < 10) {. errorOnField($(this));. } else if ($(this).is(':checkbox') && !$(this).is(':checked')) {. errorOnField($(this));. }. });.. // -- check recaptcha. if ($("div.g-recaptcha").length == 1 && !grecaptcha.getResponse()) {. errorOnField($("div.captcha"));. }.. if ($(".inputError").length > 0) {. $(this).removeClass("spinner");. } else {. var domain = $("input[name='domain'

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14892, version 1.0
Category:	downloaded
Size (bytes):	14892
Entropy (8bit):	7.98489201092774
Encrypted:	false
SSDEEP:	384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE
MD5:	9EC6DEAF6BADA919E20B98F9F7B718B1
SHA1:	501D36403AD8205E4644532600019ECB10F5CB0A
SHA-256:	7B348B30EA1FE43857E68FC462C29E5C6E63C97666AF75135C4396A272E54762
SHA-512:	03849431CEF204A1584FFE6F23DBE86730AFD076146AB3D1855B9C3402168A97FAA8A529E69FAE45EA24CFF7110C2930CB4744162BA0ED95D95600F6E777B322
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
Preview:	wOF2......:,.......\|..9..........................n..B....`..b...L.4..d..6.$..D. ..f..4..v%..........D..dd.do......:d..M....E.&..J..G....3.Mxp....i....V..u$.[O.;MU.:j.?..{+/<....s....^[..d.d.....t A....`..z....IN^.......2......mY.kF...\...UYU..........$.O=5..2q..L.2.1.c.....`x~n=.'Ur.66V.f]./..L1..P..<.0.<.8.....Z/.+.H....y..F....h5....V.j.....l..O#.:-Q....9g....:..?..8v];u,O..'....c.\r......].&w.....%@..Z.^....$.,dJ....W.{.....h8}4..S/.sZ...f."$..`a.$Mb.....;.W.."..y.H.<.g.......oNS..MO....X.%.8..y.\...ly..w..?-.~.o.ZZ~G.....B.....@...._....g.fF_...d-...aA_..#k.I.....x...P.}z..JQ&E........).P\|."g.#.)Q.T...}.PD.T+<}c+.\|\|0...2.F..hD.X.J.O.eJ:.%ZW.m.K.Jd..c.7.....T.cr.2....DD.........2..y..?/g...... ={..c /.....X.0.F.F.PX.P..!..K..K.....i.%....B.."...A....F.........4..........S........z$`.T..h...E..........._%=..).)......x)...A.J..K...?.V.......w.Y}..N.....}..>.......%.f.O..o.{..=wz.e_&.O\..*..Q..c.'...X&.1wS.R..AY...G.....Q.f...z..E..u8&V

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	5265
Entropy (8bit):	4.5613591611778
Encrypted:	false
SSDEEP:	96:DV5XTZ55pfyZbdmO9Z+B4eBlsrZXeUN1yHS6B+dSSD:R5XTZ5bqHd9DSSD
MD5:	A0B03C239D466DA33DA55EA34C0CBE8E
SHA1:	885B30D10414D4A58AC0510B1C6737E17413BD10
SHA-256:	9208700D722454BF62B97E610CB02D5CB887885D75EF8210F2044A29B115B88D
SHA-512:	0EBCC9D9EFAC10BDA64C1CF20A492CD9F7B1E3CAEEE20B916D8D6242C8D4245D1497F8B46293BECE27716337535419D8E8E5BBFAD616FA332F08AA44CE024B8F
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/index.php?domain_name=mega.ng
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="UTF-8">. <title>Sale offer for: mega.ng</title>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,400i\|Source+Serif+Pro:600&subset=latin-ext" rel="stylesheet" />. <link rel="stylesheet" href="/scripts/select2/select2.css" />..<script type="text/javascript" src="/scripts/jquery.js"></script>..<script type="text/javascript" src="/scripts/select2/select2.min.js"></script>. <link rel="stylesheet" href="/forms/style.css" />.</head>.<body>.<div class="wrapper">..<h1>mega.ng</h1>.. <p>If you want to buy this domain, please fill out this form.</p>.. <form method="post" id="contactform" name="contactform">. <input type="hidden" name="domain" value="mega.ng" />...<div class="formElements">.. ..<div class="formElement">. ...<label for="name">Name</label>. ...<input name="name" class="inputtext required"

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (16425)
Category:	downloaded
Size (bytes):	34925
Entropy (8bit):	5.339413419226323
Encrypted:	false
SSDEEP:	384:2ni8dHrzBmiEiu/uHGDCDR4d6R1Q90x378M2vQJZOD:2iAHrzPogkd6De0x3tMDD
MD5:	EE020CBC3FC7613ABE231984E1386C47
SHA1:	C76F7D0EAE9B2C41C43E65FA9EECB194D30E3669
SHA-256:	64337298C0F40568606B71F03A45E0447EDB13E4D289999B7A258E869236A278
SHA-512:	5AE8C8047A2725498A53DE5DAD7EE3B088D6C7F6B0083C665D5BD72416FBC1BB302B668A261B1A1FE7089F627057730AC4F2CEB66EF3DD9251B93A58CFFC36D0
Malicious:	false
Reputation:	low
URL:	https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2MS40Mzk5fDI5MmE5ZGYyYTZiNDQyY2UxMmE4YTEzMWQ2MjQxOWRkZDU5NGY4MWV8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Setting%20Up%20Llc%20Online&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=n3&ad=n3&nocache=7621716815061021&num=0&output=afd_ads&domain_name=mega.ng&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716815061023&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D%26query%3DSetting%2BUp%2BLlc%2BOnline%26afdToken%3DChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6884
Entropy (8bit):	5.51529394758214
Encrypted:	false
SSDEEP:	192:mkv2kHkOki3tkyk2YkbS0lQB3JGSCNWAP333RaOZ:mk2YlJtz8fzha1
MD5:	6CFE913CB732DFF779F3B703AE6B0C55
SHA1:	B43734FB769B83074AF46E4DCA2177832E09AB36
SHA-256:	B8E3079C72BE18C5A86E197CB4E5E39EA40770EA43A47EBB2B31A60F54FFAFB5
SHA-512:	AB4290A4C932D57042AFC7AE9A41F46FEA3B48E5D5658492639E3F8777EBD241475B0886742C0B61154F930929F48930573DF99D88179B104BEE6998A2E3A743
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,400i\|Source+Serif+Pro:600&subset=latin-ext"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://mega.ng/ls.php?t=665484d5&token=ed099a39dbc815b7899d90f9bc760f14662da555
Preview:	{"success":true}

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://mega.ng/track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D
Preview:	....................

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	555
Entropy (8bit):	4.73524642638354
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5rruNGlTF5TF5TF5TF5TF5TFK:neRH68e5TPTPTPTPTPTc
MD5:	565C1EAE816296EB5A8240C33F015484
SHA1:	99A9E36394DAD3E08C38DB95E33469C0B31F2753
SHA-256:	922A7A005A299DAAB272EF3B0C7106716572ECE666C54C187CE6836B32474973
SHA-512:	67E5710ADA9F43699CFBCA159A089B84F85EB1B08E779753481BF19F2AA0F57655F7D82B2AF7C4C7DE14A5523FF6AC7D56FCBAF7831786E9A7C949AEF308BD0A
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.20.1</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 19627
Category:	downloaded
Size (bytes):	6729
Entropy (8bit):	7.972262982975492
Encrypted:	false
SSDEEP:	192:kmw+4WEgKltJLnaXn5IlbdLQ3MrD1g5e+02:/w+4/t5aX50z5g5e+02
MD5:	4C32CA0EE4D16308DD072250C78EAA87
SHA1:	9CA69559EC225051E525382C22F276C15B4611B8
SHA-256:	8911D64394C673130647C195C2BDD3A0C20E3869302A6DE4CA45B56B440E8CAF
SHA-512:	2C6864F1CD45345AB7B2C4F57C3F65633D4525AB59704F168CC6D1CE8ED0946EB694473F980FEA21491F8E05451EEECC9890CD6AB960E4F6BA7CC376388C122A
Malicious:	false
Reputation:	low
URL:	http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&pcsa=false&nb=0
Preview:	...........\.W.J....EJ..\|..T..>Xl.-.-.........'........I2....>.G.....g......_u./N.a0._l?.?...zN7{.k.Fl.H._.f...w......4/O../......c.....i..I......+.....N....k.b..7i/....k.3.L...7;g.....xwy.):_...?...Y..t.~yW..j.N...F..8{..W.2......y..3..........k..\|}~Z.......{w.n.................s^.,.}...=m...).....v.Fj...z.0...J.......aaN.Hi....).BL7_lk.z>f.......sj.7R.\'`N...&,.....<(..#.....4..j..........l.z.2}f...a.{.`9...,..,....n.F)..C.rF...........l.b..z..</.G.?.....f....H....N...}k.jv;.\|.sm3..lw...A...zu...2.,.w.x3. ....A.5.......Ru2.t....t.....b...V.N.e.....0.MZQ..........c..XX........r.c.9.<.~Tv..k.......p==.\......0.u..i.9.z`b...9)5Za..............=...;...)..\*....G..........$.y\|t8..;..n....k.tc4.\P....L.P0+...9V.w?.....}...;,(.C6f~.x.......f..3H.j..0=.....K.<......H...m1..Z.\.\|..A...4.n.-..T..?R...[.\Gt.w)v...n.;r9....e..J^$.h_!1?U=.<?P.Ir...y.+.....?..E].&j......J...lY..L......d+f......I...:J.........K.W..C.......-..S...Y.L.`.J.B.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	3575
Entropy (8bit):	5.203314832627559
Encrypted:	false
SSDEEP:	48:bvDuWsSjVmvr6jOu3I080ZUQzauCqbw76n6ka1AV09s5pIrKa675xN1t81n:LDuhwaz0ZzvJKV1Eyrf69VMn
MD5:	4DE1BD402918C1508D23952003CAF622
SHA1:	3B313A0E761AFD4028CBBC78E0E96AF18F84F615
SHA-256:	D2E64AB640BF751C2AEE576081ABB6CD73F1528B660E5A1A9CDD95BF1EE75E12
SHA-512:	0396EF5EB88AAEEFF285738E9621AC8765716A200E3488BCCD2E6CA539D0E32D349D78F6279EF72BFE2205B94D5ECDE0975EB2CFE8D332C1EF02F1AF860FA1FB
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/style.css
Preview:	*{margin:0;padding:0}..body {..background:#eceff1;..color: #263238;..font-family: 'Source Sans Pro', sans-serif;..text-rendering: optimizeLegibility;..font-size:1.2rem;..line-height:1.5rem;.}..h1,h2,h3,h3,h4,h5,h6 {font-family:'Source Serif Pro',serif}...wrapper {..width:95%;..max-width:600px;..margin:2rem auto;..text-align:center;.}...priceHolder {..text-align:left;.}..h1 {..color:#E64A19;..text-transform:uppercase;..font-size:1.2rem;..letter-spacing: 1px;..max-width:100%;..overflow-x:hidden;..word-wrap: break-word;.}..p {..margin:1.5rem auto;.}...error {..border:1px solid #e64a19;..color:#e64a19;..background:#fefefe;..padding:1rem .5rem;.}...correct {..color:#8bc34a;.}..a:link,.a:visited {..color:#455A64;.}..a:hover,.a:active {..color:#8BC34A;.}...formElement {..margin:.5rem 0;.}..label {..font-family:'Source Sans Pro',sans-serif;..display:block;..font-size:1rem;..text-align: left;..height:2rem;..line-height:2rem;..padding-left:1px;.}...inputtext,..inputprice {..font-family: 'Source

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	20199
Entropy (8bit):	3.70382459042729
Encrypted:	false
SSDEEP:	384:jDjzWdNWunWE3JcL3R2G//ttrIHGOesh6UK5gK5KU:jDnu024d
MD5:	A096EECE85B9F9EB151647D759FFBA89
SHA1:	B8349BE8DCCD1BF51ECD157AC9E4FB85EAF72B94
SHA-256:	81FBC2D1C4FD135BD8367182A98AE01F40B7DA6A0279185A177841EB7D8C823F
SHA-512:	5DD48140CD98833F0DD030D827F384D0C5846CBAC6824CD6767E6867A11533CC4549DF57915FDEF8741ABCAF12F258F39F71B20D65AA7F7EA45CE9A7FAED470C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">...st0{fill:#b0bec5;}.</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.5 0-0.9 0.2-1 0.5s-0.2 0.9-0.2 1.5v2.2c0 0.3-0.1 0.6-0.2 0.8s-0.3 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8V9.8c0-0.3 0.1-0.5 0.2-0.7s0.3-0.2 0.5-0.2c0.2 0 0.4 0.1 0.5 0.2s0.2 0.3 0.2 0.6v0.2c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1.1-0.2c0.4 0 0.7 0.1 1 0.2s0.5 0.4 0.7 0.7c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1-0.2c0.4 0 0.8 0.1 1.1 0.3s0.6 0.4 0.7 0.7c0.1 0.3 0.2 0.7 0.2 1.4v3.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.7c0-0.3 0-0.6 0-0.8s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.2 0-0.4 0.1-0.6 0.2s-0.3 0.3-0.4 0.5C244.8 11 244.7 11.5 244.7 12.2z"/><path class="st0" d="M254 14.4c-0.4 0.3-0.8 0.5-1.1 0.7s-0.8 0.2-1.2 0.2c-0.4 0-0.8-0.1-1.1-0.2s-0.5-0.4-0.7-0.7 -0.3-

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	613
Entropy (8bit):	7.624191679264559
Encrypted:	false
SSDEEP:	12:6v/7svvOiEe0IOQEjoZzIAOLhymOh+T+qFYKRacX3Y0OJxAG0f7:FvOC0I/EjizPOlZ3HFYMR3T
MD5:	2CA61B76E22053571DD8611E5AAC4900
SHA1:	2D350341A645AD33AB5604ACA16C05F22A83FF51
SHA-256:	D6B5D8D83DBC18FB8D77C8761D331CD9E5123C9684950BAB0406E98A24AC5AE8
SHA-512:	89B2BCBCE382E8B7C4D27BAA07ABED6F1D8D0F5A8F29B62A98F05FB1DE46D5E40F4C8146047614E92EFDCD235B80B842F8B08E9DA36A5FDB376E83F9EE2B09EA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...(............,IDATx....K.a....J....b](...v.d...<....P....!R.q.T..H.#..G..y.R......Ht0L.>....9.,m)..y.u..}.;....)I.J..,...Q(...X....V..&...Oh.F.!.{.n.{....,...%]...Gc..5x.>@.3...&....2.....%..C..,b.E...u.9=T6.7..)...E......".....lo.y[.e..C....&... D....m.#.......Q..j.......v@..Te.M.......;.....G9...b...}.1.....T...: .hC.f <t.;LT..A........N+....^@...no-../..F.e0aG.3X.....1.(....J.B..[..lgp...?..$8.N....Z4....5......d^..e0aw!..2nA.`.r.."...o.F...A...kW .<..`..R..~...~..J<....Sp..)..:tB...}.2E\|.L.........`.W.W.1....{!s....-..s.Z..[....P.o\|.}.q.......IEND.B`.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://mega.ng/track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D
Preview:	....................

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 16314
Category:	downloaded
Size (bytes):	6188
Entropy (8bit):	7.967273431096215
Encrypted:	false
SSDEEP:	96:blsQV+kA5+id7Unl1aZVZMCNj/ZCwHbXBSA8eUQqR0jBiJaUT6WFT5fZhh:bCEcBCMbRNdtCvvqIaUTHNhh
MD5:	F0E3640BD6C3EEAE5460BCD5BAF549E1
SHA1:	B46B5E0DA3ECFD0335829D0EF35DC2A8358DDA87
SHA-256:	C882A807E02CE366ECE9DE99EC1F6712C62F850E57BA848574D7F36AE20FD567
SHA-512:	E5420CAC22A06B7D8B262D27C03E7CC0EDF143CA072D1DB5A7A09406A81586BA0B8C55360DF85548EBE133126F5CC48146AB0C36CFD3D4F1BE85D212E686F24D
Malicious:	false
Reputation:	low
URL:	http://mega.ng/
Preview:	...........[yw.......9...El^.J.6^;..'69..!. ..-.....>.[U.bqw.N.3..H..u..8\|S.:n=^.(.`d..>./...=....5.C6.....~.x....?.......M.~7.M.j.G.O.M.'..[G=..r..z...7{t.G..qc^z....h.;.....4......eSu.~m_~.k..e}..?../...'...}.,.......?..nM7Z...o..'kd6..^.....3..w.....{..s.........W..?...g...b.\|<...sWSMK(....Z....J.7.N..b..z....AnF.H(.....s.D!........X..p.8.~.XOZ..u.....\|...!.D.fA. U...{>..I...'rq@.>bZ..b.....S.....,.e.KZ..+.t;....\|Z.....3...Z......l.a.zz.........6SF.t-....;..>0......ooutc...cV..g....Y....c..:O.I.......\.g#..8.?..d{V7..8n.cc....21.....SQ....o}f...^.......+.m9,.9......C2.7!...H..MH...H.V.@.!a8.M.rz.O.......g..[=@......^o~.......>1oC.n.....IJ2&3\...N...0..1.\|.(...L..^.r...#..Fh.....<ZE.........g...>.g..c.bF...B.-.8..,+_.....b....e./..7.%&y ...ESf.:C+.t\.(d<.&~E..eF...M._.!y...\Sm....A.;$_5.T.3..\..m.m^.......g...!......y..LP.y...Q..N.\|.o=.J.c#q..T......V.. ..umwZ.[...>.O.O......./..1..J...Z......Z.G.O2.Z..UIT.w4.X~f.{Cf.q..t..9....

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3856
Entropy (8bit):	5.407283795672243
Encrypted:	false
SSDEEP:	96:6OEaM7Vc+uuOEaMzNKOEaF9Vc+uGOEaiN1OEaNFlOEaNTFZKOEaNZOEaNW3yOEai:dMDEMn3GXNF6NBNWNW3FN/NGYN+n
MD5:	81F8D4FDAF59E77BA1BE4B559563E14E
SHA1:	F4FD5DB3F93C2AC2C2E2C23EE9ADFD359476175E
SHA-256:	DFE34A8A58E64CF5EC1CF3E65A82A0F565335E33CA043CCBD5BBCDA12D596AF2
SHA-512:	FF512D6C4651F126A09E07AC532D10B136CACA01C636977396E88BAD35D93D5D20504E8927775911F5FF53C2A025C6D016C9ABDF5AB65D3B5B965A5B06DBC464
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Mate%20SC%7CMate%7CRoboto%7CRoboto%20Light&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Mate';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zS2W7XS.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Mate';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Mate SC';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-izT9qOk.woff2) format('woff2');. unicode-range: U+01

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 27, 2024 15:03:07.432379007 CEST	49675	443	192.168.2.4	173.222.162.32
May 27, 2024 15:03:17.041704893 CEST	49675	443	192.168.2.4	173.222.162.32
May 27, 2024 15:03:27.429371119 CEST	49735	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:27.429930925 CEST	49736	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:27.437403917 CEST	80	49735	185.53.177.53	192.168.2.4
May 27, 2024 15:03:27.437442064 CEST	80	49736	185.53.177.53	192.168.2.4
May 27, 2024 15:03:27.437490940 CEST	49735	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:27.437541962 CEST	49736	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:27.477730989 CEST	49735	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:27.482697964 CEST	80	49735	185.53.177.53	192.168.2.4
May 27, 2024 15:03:29.748508930 CEST	49672	443	192.168.2.4	173.222.162.32
May 27, 2024 15:03:29.748578072 CEST	443	49672	173.222.162.32	192.168.2.4
May 27, 2024 15:03:29.831485987 CEST	49739	443	192.168.2.4	142.250.184.196
May 27, 2024 15:03:29.831518888 CEST	443	49739	142.250.184.196	192.168.2.4
May 27, 2024 15:03:29.831597090 CEST	49739	443	192.168.2.4	142.250.184.196
May 27, 2024 15:03:29.831799984 CEST	49739	443	192.168.2.4	142.250.184.196
May 27, 2024 15:03:29.831809044 CEST	443	49739	142.250.184.196	192.168.2.4
May 27, 2024 15:03:30.519289970 CEST	443	49739	142.250.184.196	192.168.2.4
May 27, 2024 15:03:30.532423019 CEST	49739	443	192.168.2.4	142.250.184.196
May 27, 2024 15:03:30.532453060 CEST	443	49739	142.250.184.196	192.168.2.4
May 27, 2024 15:03:30.535850048 CEST	443	49739	142.250.184.196	192.168.2.4
May 27, 2024 15:03:30.535936117 CEST	49739	443	192.168.2.4	142.250.184.196
May 27, 2024 15:03:30.547771931 CEST	49739	443	192.168.2.4	142.250.184.196
May 27, 2024 15:03:30.548017025 CEST	443	49739	142.250.184.196	192.168.2.4
May 27, 2024 15:03:30.588469982 CEST	49739	443	192.168.2.4	142.250.184.196
May 27, 2024 15:03:30.588538885 CEST	443	49739	142.250.184.196	192.168.2.4
May 27, 2024 15:03:30.634767056 CEST	49739	443	192.168.2.4	142.250.184.196
May 27, 2024 15:03:30.772712946 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:30.772754908 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:30.772944927 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:30.774744034 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:30.774766922 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:30.775749922 CEST	49741	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:30.775834084 CEST	443	49741	184.28.90.27	192.168.2.4
May 27, 2024 15:03:30.775917053 CEST	49741	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:30.777123928 CEST	49741	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:30.777152061 CEST	443	49741	184.28.90.27	192.168.2.4
May 27, 2024 15:03:31.428406954 CEST	443	49741	184.28.90.27	192.168.2.4
May 27, 2024 15:03:31.428520918 CEST	49741	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:31.478792906 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:31.478902102 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:31.703181028 CEST	49741	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:31.703223944 CEST	443	49741	184.28.90.27	192.168.2.4
May 27, 2024 15:03:31.703588963 CEST	443	49741	184.28.90.27	192.168.2.4
May 27, 2024 15:03:31.714056969 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:31.714087009 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:31.714437008 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:31.746260881 CEST	49741	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:31.827649117 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:32.997474909 CEST	80	49736	185.53.177.53	192.168.2.4
May 27, 2024 15:03:32.997623920 CEST	49736	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:34.087378979 CEST	49741	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:34.130501986 CEST	443	49741	184.28.90.27	192.168.2.4
May 27, 2024 15:03:34.274996996 CEST	443	49741	184.28.90.27	192.168.2.4
May 27, 2024 15:03:34.275069952 CEST	443	49741	184.28.90.27	192.168.2.4
May 27, 2024 15:03:34.275163889 CEST	49741	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:34.276123047 CEST	49741	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:34.276138067 CEST	443	49741	184.28.90.27	192.168.2.4
May 27, 2024 15:03:34.276153088 CEST	49741	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:34.276159048 CEST	443	49741	184.28.90.27	192.168.2.4
May 27, 2024 15:03:34.332370043 CEST	49743	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:34.332407951 CEST	443	49743	184.28.90.27	192.168.2.4
May 27, 2024 15:03:34.332477093 CEST	49743	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:34.332813025 CEST	49743	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:34.332824945 CEST	443	49743	184.28.90.27	192.168.2.4
May 27, 2024 15:03:34.802449942 CEST	49736	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:34.807385921 CEST	80	49736	185.53.177.53	192.168.2.4
May 27, 2024 15:03:34.910473108 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:34.950535059 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:34.996273041 CEST	443	49743	184.28.90.27	192.168.2.4
May 27, 2024 15:03:34.996356964 CEST	49743	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:35.005966902 CEST	49743	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:35.005986929 CEST	443	49743	184.28.90.27	192.168.2.4
May 27, 2024 15:03:35.006391048 CEST	443	49743	184.28.90.27	192.168.2.4
May 27, 2024 15:03:35.007582903 CEST	49743	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:35.050534010 CEST	443	49743	184.28.90.27	192.168.2.4
May 27, 2024 15:03:35.141274929 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.141344070 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.141365051 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.141386032 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.141397953 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:35.141410112 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.141427994 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.141446114 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:35.141452074 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.141472101 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.141499043 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:35.141505003 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.141551971 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:35.141783953 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.141803026 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.141845942 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:35.141896009 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:35.141900063 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.142102957 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:35.142107964 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.142173052 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:35.142225027 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:35.278853893 CEST	443	49743	184.28.90.27	192.168.2.4
May 27, 2024 15:03:35.278932095 CEST	443	49743	184.28.90.27	192.168.2.4
May 27, 2024 15:03:35.279139042 CEST	49743	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:35.332962036 CEST	49743	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:35.332993984 CEST	443	49743	184.28.90.27	192.168.2.4
May 27, 2024 15:03:35.333008051 CEST	49743	443	192.168.2.4	184.28.90.27
May 27, 2024 15:03:35.333014965 CEST	443	49743	184.28.90.27	192.168.2.4
May 27, 2024 15:03:35.801305056 CEST	49740	443	192.168.2.4	13.85.23.86
May 27, 2024 15:03:35.801336050 CEST	443	49740	13.85.23.86	192.168.2.4
May 27, 2024 15:03:36.060856104 CEST	49723	80	192.168.2.4	93.184.221.240
May 27, 2024 15:03:36.066391945 CEST	80	49723	93.184.221.240	192.168.2.4
May 27, 2024 15:03:36.066451073 CEST	49723	80	192.168.2.4	93.184.221.240
May 27, 2024 15:03:40.413117886 CEST	443	49739	142.250.184.196	192.168.2.4
May 27, 2024 15:03:40.413182974 CEST	443	49739	142.250.184.196	192.168.2.4
May 27, 2024 15:03:40.413234949 CEST	49739	443	192.168.2.4	142.250.184.196
May 27, 2024 15:03:40.437181950 CEST	49739	443	192.168.2.4	142.250.184.196
May 27, 2024 15:03:40.437201023 CEST	443	49739	142.250.184.196	192.168.2.4
May 27, 2024 15:03:57.443489075 CEST	80	49735	185.53.177.53	192.168.2.4
May 27, 2024 15:03:57.443588972 CEST	49735	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:57.444000006 CEST	49735	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:57.445174932 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:57.455348015 CEST	80	49735	185.53.177.53	192.168.2.4
May 27, 2024 15:03:57.456345081 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:57.456448078 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:57.456865072 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:57.463892937 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.162501097 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.162528992 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.162548065 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.162561893 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.162579060 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.162622929 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.162638903 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.162643909 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:58.162645102 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:58.162667990 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.162730932 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:58.162730932 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:58.435408115 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:58.441080093 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.635096073 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.683485031 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:58.850738049 CEST	49749	80	192.168.2.4	18.66.121.135
May 27, 2024 15:03:58.852153063 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:58.855736971 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:58.855827093 CEST	49749	80	192.168.2.4	18.66.121.135
May 27, 2024 15:03:58.856175900 CEST	49749	80	192.168.2.4	18.66.121.135
May 27, 2024 15:03:58.857202053 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:58.861077070 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:58.863591909 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:58.863629103 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:58.863917112 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:58.864547014 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:58.864563942 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.027487040 CEST	49751	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:59.032526016 CEST	80	49751	185.53.177.53	192.168.2.4
May 27, 2024 15:03:59.032614946 CEST	49751	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:59.053435087 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:03:59.103773117 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:59.177464962 CEST	49752	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:59.182635069 CEST	80	49752	185.53.177.53	192.168.2.4
May 27, 2024 15:03:59.186577082 CEST	49752	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:59.281337976 CEST	49752	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:59.286462069 CEST	80	49752	185.53.177.53	192.168.2.4
May 27, 2024 15:03:59.477983952 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:59.478260040 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:59.478322983 CEST	49749	80	192.168.2.4	18.66.121.135
May 27, 2024 15:03:59.478379011 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:59.478440046 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:59.478476048 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:59.478499889 CEST	49749	80	192.168.2.4	18.66.121.135
May 27, 2024 15:03:59.478537083 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:59.478575945 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:59.478581905 CEST	49749	80	192.168.2.4	18.66.121.135
May 27, 2024 15:03:59.478609085 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:59.478643894 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:59.478655100 CEST	49749	80	192.168.2.4	18.66.121.135
May 27, 2024 15:03:59.478681087 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:59.478727102 CEST	49749	80	192.168.2.4	18.66.121.135
May 27, 2024 15:03:59.483906984 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:03:59.514233112 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.524981976 CEST	49749	80	192.168.2.4	18.66.121.135
May 27, 2024 15:03:59.559628010 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.591063976 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.591100931 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.592765093 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.592842102 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.596095085 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.596189022 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.596609116 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.596617937 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.613594055 CEST	49753	80	192.168.2.4	18.239.102.108
May 27, 2024 15:03:59.618498087 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:03:59.618557930 CEST	49753	80	192.168.2.4	18.239.102.108
May 27, 2024 15:03:59.619102955 CEST	49753	80	192.168.2.4	18.239.102.108
May 27, 2024 15:03:59.623987913 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:03:59.649841070 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.800441980 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.800498009 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.800530910 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.800535917 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.800554991 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.800584078 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.800592899 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.800600052 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.800637960 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.808769941 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.808830023 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.808877945 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.808885098 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.812102079 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.812146902 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.812158108 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.819866896 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:03:59.819900036 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:03:59.819961071 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:03:59.820857048 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:03:59.820884943 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:03:59.822501898 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.822561979 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.822568893 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.860811949 CEST	80	49752	185.53.177.53	192.168.2.4
May 27, 2024 15:03:59.869155884 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.893459082 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.893534899 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.893579006 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.893579006 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.893596888 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.893635035 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.894965887 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.900908947 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.900954008 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.900959969 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.900971889 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.901015043 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.901129961 CEST	49752	80	192.168.2.4	185.53.177.53
May 27, 2024 15:03:59.907032967 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.916399002 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.916435003 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.919183016 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.919210911 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.920625925 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.920635939 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.920681000 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.925008059 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.930572987 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.930603981 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.930640936 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.930648088 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.930690050 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.942178965 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.946058035 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.946094036 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.946100950 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.946108103 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.946150064 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.952069998 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.952125072 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.952173948 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.952183008 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.989056110 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.989104033 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.989125967 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.989276886 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.989311934 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.989312887 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.989327908 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.989367008 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.989372969 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.989406109 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.989440918 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.989444017 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.989453077 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.989492893 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.989499092 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.994787931 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.994833946 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.994841099 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.999012947 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:03:59.999059916 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:03:59.999068022 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.004312038 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.004364014 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.004369974 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.010240078 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.010278940 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.010286093 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.012497902 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.012546062 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.012552023 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.016854048 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.016901970 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.016908884 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.021605968 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.021647930 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.021653891 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.025304079 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.025351048 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.025357008 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.030617952 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.030663967 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.030669928 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.034790993 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.034836054 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.034843922 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.039388895 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.039432049 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.039438009 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.043529987 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.043576002 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.043581009 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.047624111 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.047666073 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.047672033 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.050210953 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.050261974 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.050266981 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.055001020 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.055047035 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.055052996 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.058595896 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.058634043 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.058640003 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.061579943 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.061619043 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.061625004 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.065490961 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.065520048 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.065540075 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.065547943 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.065579891 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.079102993 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.079169989 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.079200029 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.079210043 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.079220057 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.079246998 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.079252005 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.079257965 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.079293966 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.079991102 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.080703020 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.080725908 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.080744982 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.080750942 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.080785990 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.082075119 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.084933996 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.084961891 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.084980965 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.084989071 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.085028887 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.085886955 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.089025974 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.089052916 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.089071035 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.089078903 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.089123964 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.091402054 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.094449997 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.094474077 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.094492912 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.094499111 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.094532967 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.095443010 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.098947048 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.098997116 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.099001884 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.099014044 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.099054098 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.099061966 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.102982998 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.103038073 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.103157997 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.103188992 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.103234053 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.103277922 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.106822968 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.106851101 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.106868982 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.106875896 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.106925964 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.106931925 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.112296104 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.112322092 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.112344027 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.112350941 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.112395048 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.112404108 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.118100882 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.118153095 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.118160009 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.118464947 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.118515015 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.118520975 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.121866941 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.121928930 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.121929884 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.121942043 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.121989965 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.121995926 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.130718946 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.130762100 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.130769968 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.130788088 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.130831957 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.130839109 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.133723974 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.133763075 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.133768082 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.133783102 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.133816957 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.133853912 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.133908987 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.133946896 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.133954048 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.134100914 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.134145975 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.134224892 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.134244919 CEST	443	49750	142.250.185.68	192.168.2.4
May 27, 2024 15:04:00.134255886 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.134299040 CEST	49750	443	192.168.2.4	142.250.185.68
May 27, 2024 15:04:00.249511957 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.249598980 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.249641895 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.249670029 CEST	49753	80	192.168.2.4	18.239.102.108
May 27, 2024 15:04:00.249906063 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.249953032 CEST	49753	80	192.168.2.4	18.239.102.108
May 27, 2024 15:04:00.250008106 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.250025988 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.250037909 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.250049114 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.250063896 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.250065088 CEST	49753	80	192.168.2.4	18.239.102.108
May 27, 2024 15:04:00.250076056 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.250148058 CEST	49753	80	192.168.2.4	18.239.102.108
May 27, 2024 15:04:00.254923105 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.254945040 CEST	80	49753	18.239.102.108	192.168.2.4
May 27, 2024 15:04:00.255091906 CEST	49753	80	192.168.2.4	18.239.102.108
May 27, 2024 15:04:00.463861942 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:00.464196920 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:00.464219093 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:00.464867115 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:00.464891911 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:00.464943886 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:00.464952946 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:00.464998007 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:00.465609074 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:00.505362034 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:00.515809059 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:00.515914917 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:00.560878038 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:00.560908079 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:00.606631994 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:00.622613907 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:00.622638941 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:00.623003960 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:00.623558998 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:00.623570919 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.275576115 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.291670084 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.291733027 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.292896032 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.292922020 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.292970896 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.292993069 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.293025017 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.293046951 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.295099974 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.301729918 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.301932096 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.302376032 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.302392006 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.345654011 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.595644951 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.600436926 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.600486994 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.600497007 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.600531101 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.600594044 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.600610018 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.606503010 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.606614113 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.606667995 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.612468004 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.612555027 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.612600088 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.618654013 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.618738890 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.618765116 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.624706030 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.624772072 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.624794006 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.624989033 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.625056982 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.644398928 CEST	49756	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.644463062 CEST	443	49756	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.703001976 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.703051090 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:01.703174114 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.703561068 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:01.703582048 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.572122097 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.577768087 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.577828884 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.578605890 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.579032898 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.579137087 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.579171896 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.621515989 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.621530056 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.856585026 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.857388973 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.857417107 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.857448101 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.857515097 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.857579947 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.857614994 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.863312960 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.866554022 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.866564989 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.868804932 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.868875027 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.868885994 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.874834061 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.878546953 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.878559113 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.881169081 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.881246090 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.881261110 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.886905909 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.886984110 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.887000084 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.893258095 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.893342972 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.893377066 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.939531088 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.939548969 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.940462112 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.941134930 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.941149950 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.946079969 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.946162939 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.946177959 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.947335958 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.947433949 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.947448969 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.953465939 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.953525066 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.953541994 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.959408045 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.959471941 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.959486008 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.965487003 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.965565920 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.965580940 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.971577883 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.971851110 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.971865892 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.977519989 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.977597952 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.977612019 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.983575106 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.983598948 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.983692884 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.983707905 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.983793020 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.989681005 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.995466948 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.995503902 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.995541096 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:02.995563030 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:02.995657921 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.000617027 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.005986929 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.006007910 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.006064892 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.006082058 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.006134987 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.011164904 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.016577005 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.016661882 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.016663074 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.016690016 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.016748905 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.022527933 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.026873112 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.026943922 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.026959896 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.032017946 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.032051086 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.032125950 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.032141924 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.032551050 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.037303925 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.042157888 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.042186022 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.042217970 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.042229891 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.042238951 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.042260885 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.045223951 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.045334101 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.045341015 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.048737049 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.048852921 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.048858881 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.051662922 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.051717997 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.051723957 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.054795027 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.054969072 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.054975033 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.057841063 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.058106899 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.058115959 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.060880899 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.062556028 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.062562943 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.064271927 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.066548109 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.066554070 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.067029953 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.067183971 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.067190886 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.070403099 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.070518017 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.070524931 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.073398113 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.073844910 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.073853016 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.077034950 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.077429056 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.077435970 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.079837084 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.079891920 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.079953909 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.079961061 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.080044031 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.082766056 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.086662054 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.086719036 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.086724997 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.089452028 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.089526892 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.089592934 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.089600086 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.089643955 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.092175961 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.095266104 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.095339060 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.095377922 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.095385075 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.095525026 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.099725008 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.102721930 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.102781057 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.103874922 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.103882074 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.105134010 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.105673075 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.105679035 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.106050014 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.107351065 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.109766960 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.109873056 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.109879017 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.112539053 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.112607956 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.112653017 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.112659931 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.113132954 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.115237951 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.117889881 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.117943048 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.117947102 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.117954016 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.118005991 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.120472908 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.123039961 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.123152971 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.123307943 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.123315096 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.124885082 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.125883102 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.128484964 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.128537893 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.128562927 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.128570080 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.128607035 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.130867958 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.132994890 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.133058071 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.133061886 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.133068085 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.133121014 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.134686947 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.136580944 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.136658907 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.136923075 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.136929989 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.137137890 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.138586044 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.140281916 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.140352011 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.140357971 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.142020941 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.142088890 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.142168045 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.142174006 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.142261028 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.143786907 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.145787001 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.145854950 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.145919085 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.145950079 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.146018982 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.147651911 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.149013996 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.149092913 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.149151087 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.149158955 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.149255991 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.149262905 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.149389029 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.149441004 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.151603937 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.151617050 CEST	443	49757	142.250.186.78	192.168.2.4
May 27, 2024 15:04:03.151627064 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.151654959 CEST	49757	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:03.172194004 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:03.177138090 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:04:03.378366947 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:04:03.390316010 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:03.396250010 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:04:03.399806976 CEST	49752	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:03.404805899 CEST	80	49752	185.53.177.53	192.168.2.4
May 27, 2024 15:04:03.405793905 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:03.405849934 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:03.405924082 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:03.406104088 CEST	49759	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:03.406122923 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:03.406186104 CEST	49759	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:03.406408072 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:03.406435013 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:03.406625032 CEST	49759	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:03.406650066 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:03.587833881 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:04:03.591938019 CEST	49751	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:03.595206976 CEST	80	49752	185.53.177.53	192.168.2.4
May 27, 2024 15:04:03.597002029 CEST	80	49751	185.53.177.53	192.168.2.4
May 27, 2024 15:04:03.635049105 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:03.635129929 CEST	49752	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:03.785109997 CEST	80	49751	185.53.177.53	192.168.2.4
May 27, 2024 15:04:03.834007025 CEST	49751	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:04.148411989 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.149749994 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.149777889 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.150476933 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.150686979 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.151494026 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.151559114 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.151586056 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.153255939 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.153397083 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.153409958 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.153429985 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.158358097 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.158658981 CEST	49759	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.158679962 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.159055948 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.159130096 CEST	49759	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.159748077 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.159806967 CEST	49759	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.159818888 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.160355091 CEST	49759	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.160427094 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.160588980 CEST	49759	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.160604000 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.195785046 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.195843935 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.210999012 CEST	49759	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.241492033 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.411377907 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.411593914 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.411668062 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.413160086 CEST	49758	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.413181067 CEST	443	49758	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.428924084 CEST	49761	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:04.428971052 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:04.429040909 CEST	49761	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:04.429236889 CEST	49761	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:04.429255962 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:04.438112974 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.438215971 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.438261986 CEST	49759	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.439122915 CEST	49759	443	192.168.2.4	172.217.16.193
May 27, 2024 15:04:04.439135075 CEST	443	49759	172.217.16.193	192.168.2.4
May 27, 2024 15:04:04.447669983 CEST	49762	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:04.447684050 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:04.447731972 CEST	49762	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:04.447937965 CEST	49762	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:04.447949886 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:04.885786057 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:04.930502892 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:05.087198973 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:05.087743044 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:05.087809086 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:05.087938070 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:05.087984085 CEST	443	49754	142.250.185.110	192.168.2.4
May 27, 2024 15:04:05.088012934 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:05.088046074 CEST	49754	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:05.161205053 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.161623001 CEST	49761	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.161653996 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.162957907 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.163038969 CEST	49761	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.164108038 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.164169073 CEST	49761	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.164176941 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.164628029 CEST	49761	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.164712906 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.164783955 CEST	49761	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.164789915 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.208173037 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.208416939 CEST	49762	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.208432913 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.209630966 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.209700108 CEST	49762	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.210917950 CEST	49761	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.212121010 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.212181091 CEST	49762	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.212187052 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.212416887 CEST	49762	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.212594986 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.212657928 CEST	49762	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.212670088 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.256700039 CEST	49762	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.390101910 CEST	49763	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:05.390151978 CEST	443	49763	142.250.185.110	192.168.2.4
May 27, 2024 15:04:05.390300035 CEST	49763	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:05.390566111 CEST	49763	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:05.390587091 CEST	443	49763	142.250.185.110	192.168.2.4
May 27, 2024 15:04:05.432205915 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.432414055 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.432475090 CEST	49761	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.433367968 CEST	49761	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.433389902 CEST	443	49761	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.491873980 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.491950035 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:05.492013931 CEST	49762	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.515621901 CEST	49762	443	192.168.2.4	172.217.23.97
May 27, 2024 15:04:05.515650988 CEST	443	49762	172.217.23.97	192.168.2.4
May 27, 2024 15:04:06.062810898 CEST	443	49763	142.250.185.110	192.168.2.4
May 27, 2024 15:04:06.063142061 CEST	49763	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:06.063163996 CEST	443	49763	142.250.185.110	192.168.2.4
May 27, 2024 15:04:06.063606977 CEST	443	49763	142.250.185.110	192.168.2.4
May 27, 2024 15:04:06.064002037 CEST	49763	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:06.064198017 CEST	443	49763	142.250.185.110	192.168.2.4
May 27, 2024 15:04:06.064424992 CEST	49763	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:06.110519886 CEST	443	49763	142.250.185.110	192.168.2.4
May 27, 2024 15:04:06.352986097 CEST	443	49763	142.250.185.110	192.168.2.4
May 27, 2024 15:04:06.353457928 CEST	443	49763	142.250.185.110	192.168.2.4
May 27, 2024 15:04:06.353513956 CEST	49763	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:06.353987932 CEST	49763	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:06.354012012 CEST	443	49763	142.250.185.110	192.168.2.4
May 27, 2024 15:04:06.354052067 CEST	49763	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:06.354052067 CEST	49763	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:08.190566063 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.190593004 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.190665007 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.190895081 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.190903902 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.190985918 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.191627979 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.191648960 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.192148924 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.192161083 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.925590038 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.929074049 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.947165966 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.947179079 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.947640896 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.947649002 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.948755026 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.948790073 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.948829889 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.948868036 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.956608057 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.956679106 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.957735062 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.957859039 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:08.958151102 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:08.958159924 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.011703968 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.011778116 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.011791945 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.056221962 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.198143005 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.198216915 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.198235989 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.198272943 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.198292971 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.198309898 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.198510885 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.198612928 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.316376925 CEST	49766	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.316416979 CEST	443	49766	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.369081020 CEST	49767	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.369126081 CEST	443	49767	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.369240999 CEST	49767	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.369767904 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.369810104 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.370012045 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.370815039 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.370824099 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.371046066 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.371068001 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.371407986 CEST	49767	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.371424913 CEST	443	49767	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.373003006 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.373013973 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.373181105 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.373188019 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.414506912 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.631691933 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.631757975 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.631782055 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.631800890 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.631819963 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.631841898 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.631855965 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.631860018 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.631880999 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.631899118 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.631905079 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.631925106 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.631930113 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.631941080 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.632039070 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.632101059 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.632107973 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.632148027 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.632206917 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:09.632257938 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.635356903 CEST	49765	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:09.635370970 CEST	443	49765	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.079680920 CEST	443	49767	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.080955982 CEST	49767	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.080971003 CEST	443	49767	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.081304073 CEST	443	49767	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.082463026 CEST	49767	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.082530975 CEST	443	49767	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.082680941 CEST	49767	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.107188940 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.107405901 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.107413054 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.107847929 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.108249903 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.108311892 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.108402967 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.130501986 CEST	443	49767	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.135974884 CEST	49767	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.139194965 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.139605045 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.139619112 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.141815901 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.141877890 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.142338991 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.142405033 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.142472982 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.150486946 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.164922953 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.182498932 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.194775105 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.194789886 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.245769978 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.339163065 CEST	443	49767	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.339185953 CEST	443	49767	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.339236975 CEST	49767	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.339246035 CEST	443	49767	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.339289904 CEST	49767	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.340332985 CEST	49767	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.340349913 CEST	443	49767	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.453264952 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.453299046 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.453309059 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.453377008 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.453383923 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.453427076 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.453449011 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.453505993 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.453545094 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.453545094 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.453545094 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.453581095 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.462213993 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.462269068 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.462301016 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.462316990 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.462352991 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.490526915 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.490555048 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.490562916 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.490580082 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.490593910 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.490601063 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.490614891 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.490685940 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.490720034 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.490722895 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.490750074 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.502588987 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.502609015 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.502633095 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.502645016 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.502654076 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.502687931 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.504012108 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.504035950 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.504075050 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.504080057 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.504125118 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.504369974 CEST	49769	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.504400015 CEST	443	49769	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.509124041 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.536459923 CEST	49771	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.536487103 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.536550045 CEST	49771	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.536910057 CEST	49771	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.536921978 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.536947966 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.536967039 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.537017107 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.537036896 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.537086010 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.537096977 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.537123919 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.552391052 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.552453041 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.552479982 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.552489996 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.552531958 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.552545071 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.553761959 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.553807020 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.553837061 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.553842068 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.553884029 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.553905010 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.553952932 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.553960085 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.553994894 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.554065943 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.554114103 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.559783936 CEST	49768	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.559793949 CEST	443	49768	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.642318010 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.642349958 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.642410040 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.780653954 CEST	49774	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.780694962 CEST	443	49774	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.780756950 CEST	49774	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.784302950 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.784318924 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:10.787697077 CEST	49774	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:10.787708044 CEST	443	49774	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.281409025 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.281707048 CEST	49771	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.281740904 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.282216072 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.283309937 CEST	49771	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.283389091 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.284305096 CEST	49771	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.326499939 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.506525040 CEST	443	49774	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.506798983 CEST	49774	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.506809950 CEST	443	49774	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.507895947 CEST	443	49774	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.507997990 CEST	49774	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.508667946 CEST	49774	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.508730888 CEST	443	49774	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.509074926 CEST	49774	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.509082079 CEST	443	49774	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.535892010 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.537317038 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.537327051 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.537837982 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.538623095 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.538712978 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.539187908 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.550105095 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.550129890 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.550194025 CEST	49771	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.550220966 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.550239086 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.550292015 CEST	49771	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.557323933 CEST	49774	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.566454887 CEST	49771	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.566477060 CEST	443	49771	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.586492062 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.768894911 CEST	443	49774	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.768990040 CEST	443	49774	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.769042969 CEST	49774	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.770777941 CEST	49774	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.770803928 CEST	443	49774	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.838689089 CEST	49776	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.838737011 CEST	443	49776	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.839173079 CEST	49776	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.840634108 CEST	49776	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.840653896 CEST	443	49776	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.883091927 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.883121014 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.883140087 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.883219957 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.883233070 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.883250952 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.883307934 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.895459890 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.895550966 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.895559072 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.895672083 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:11.895745039 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.895868063 CEST	49773	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:11.895879984 CEST	443	49773	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.597939968 CEST	443	49776	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.624627113 CEST	49776	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.624665022 CEST	443	49776	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.625895977 CEST	443	49776	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.627374887 CEST	49776	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.627578974 CEST	443	49776	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.627787113 CEST	49776	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.674493074 CEST	443	49776	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.692352057 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.692390919 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.692459106 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.692655087 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.692673922 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.726578951 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:12.726639032 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:12.726721048 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:12.727097034 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:12.727113008 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:12.862360001 CEST	443	49776	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.862488031 CEST	443	49776	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.862544060 CEST	49776	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.869277000 CEST	49776	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.869297981 CEST	443	49776	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.884224892 CEST	49780	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.884263992 CEST	443	49780	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.884380102 CEST	49780	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.884639978 CEST	49780	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.884655952 CEST	443	49780	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.888700008 CEST	49781	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.888719082 CEST	443	49781	34.255.128.23	192.168.2.4
May 27, 2024 15:04:12.888766050 CEST	49781	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.889370918 CEST	49781	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:12.889391899 CEST	443	49781	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.413691044 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.413784027 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:13.417530060 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:13.417537928 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.417779922 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.430404902 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:13.435585022 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.456484079 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.456509113 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.459698915 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.459779024 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.461083889 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.461257935 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.461704969 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.461710930 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.474505901 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.510308027 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.635315895 CEST	443	49781	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.636090994 CEST	443	49780	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.682212114 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.682240009 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.682316065 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.682395935 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:13.682415962 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.682451010 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:13.682452917 CEST	49781	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.682472944 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:13.683114052 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.683167934 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.683176041 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:13.683193922 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.683250904 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:13.683258057 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.683270931 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.683320999 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:13.685503006 CEST	49780	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.721190929 CEST	49780	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.721191883 CEST	49781	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.721225023 CEST	443	49780	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.721265078 CEST	443	49781	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.721997976 CEST	443	49780	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.722565889 CEST	443	49781	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.722626925 CEST	49781	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.724041939 CEST	49780	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.724140882 CEST	443	49780	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.725418091 CEST	49781	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.725507021 CEST	443	49781	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.725512981 CEST	49780	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.725625038 CEST	49781	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.725640059 CEST	443	49781	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.735845089 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:13.735881090 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.735901117 CEST	49779	443	192.168.2.4	13.85.23.86
May 27, 2024 15:04:13.735909939 CEST	443	49779	13.85.23.86	192.168.2.4
May 27, 2024 15:04:13.766499996 CEST	443	49780	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.777779102 CEST	49781	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.783185005 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.783252954 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.783272982 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.783299923 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.783314943 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.783341885 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.783355951 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.783360004 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.783399105 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.783406973 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.783426046 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.783440113 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.792980909 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.793042898 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.793061018 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.793143988 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.793198109 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.809717894 CEST	49778	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.809753895 CEST	443	49778	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.908159018 CEST	443	49781	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.908241987 CEST	443	49781	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.908406019 CEST	49781	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:13.909651041 CEST	443	49780	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.909760952 CEST	443	49780	34.255.128.23	192.168.2.4
May 27, 2024 15:04:13.910593033 CEST	49780	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:14.089191914 CEST	49780	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:14.089227915 CEST	443	49780	34.255.128.23	192.168.2.4
May 27, 2024 15:04:14.089242935 CEST	49781	443	192.168.2.4	34.255.128.23
May 27, 2024 15:04:14.089248896 CEST	443	49781	34.255.128.23	192.168.2.4
May 27, 2024 15:04:18.589873075 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:04:18.590176105 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:18.595875025 CEST	80	49752	185.53.177.53	192.168.2.4
May 27, 2024 15:04:18.596112967 CEST	49752	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:18.785414934 CEST	80	49751	185.53.177.53	192.168.2.4
May 27, 2024 15:04:18.785525084 CEST	49751	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:20.798316956 CEST	49752	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:20.798382044 CEST	49751	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:20.798418999 CEST	49748	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:20.803483009 CEST	80	49752	185.53.177.53	192.168.2.4
May 27, 2024 15:04:20.803504944 CEST	80	49751	185.53.177.53	192.168.2.4
May 27, 2024 15:04:20.803519011 CEST	80	49748	185.53.177.53	192.168.2.4
May 27, 2024 15:04:20.842818975 CEST	49782	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:20.843188047 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:20.847708941 CEST	80	49782	185.53.177.53	192.168.2.4
May 27, 2024 15:04:20.847790003 CEST	49782	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:20.847946882 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:20.847990036 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:20.869841099 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:20.874735117 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:21.535075903 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:21.535140038 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:21.535176992 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:21.535203934 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:21.535212040 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:21.535248995 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:21.535270929 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:21.535284996 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:21.535322905 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:21.535414934 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:21.585138083 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:21.626003027 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:21.631109953 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:21.821137905 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:21.847608089 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:21.852761984 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:21.853041887 CEST	49784	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:21.853082895 CEST	443	49784	142.250.185.110	192.168.2.4
May 27, 2024 15:04:21.853135109 CEST	49784	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:21.853722095 CEST	49784	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:21.853735924 CEST	443	49784	142.250.185.110	192.168.2.4
May 27, 2024 15:04:21.981726885 CEST	49785	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:21.981771946 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:21.981836081 CEST	49785	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:21.982326031 CEST	49785	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:21.982361078 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.055181026 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:22.096122026 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:22.103863001 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.103899002 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.103957891 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.104768038 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.104777098 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.124546051 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:22.131393909 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:22.131474972 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:22.151864052 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:22.159193993 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:22.494229078 CEST	443	49784	142.250.185.110	192.168.2.4
May 27, 2024 15:04:22.494517088 CEST	49784	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:22.494529963 CEST	443	49784	142.250.185.110	192.168.2.4
May 27, 2024 15:04:22.495527983 CEST	443	49784	142.250.185.110	192.168.2.4
May 27, 2024 15:04:22.495863914 CEST	49784	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:22.496103048 CEST	443	49784	142.250.185.110	192.168.2.4
May 27, 2024 15:04:22.543124914 CEST	49784	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:22.619457006 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.619749069 CEST	49785	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.619772911 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.620196104 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.620513916 CEST	49785	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.620563030 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.620652914 CEST	49785	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.666492939 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.744865894 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.745147943 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.745210886 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.745816946 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.746232033 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.746305943 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.746398926 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.746464014 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.784041882 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:22.831136942 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:22.909796953 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.914216042 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.914287090 CEST	49785	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.914309978 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.914467096 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.914510012 CEST	49785	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.950123072 CEST	49785	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.950149059 CEST	443	49785	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.950159073 CEST	49785	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.950193882 CEST	49785	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.951076031 CEST	49788	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.951111078 CEST	443	49788	142.250.186.78	192.168.2.4
May 27, 2024 15:04:22.951442957 CEST	49788	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.951781034 CEST	49788	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:22.951792002 CEST	443	49788	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.229571104 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.234137058 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.234231949 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.234291077 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.234323025 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.234395981 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.234431028 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.240145922 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.242588997 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.242607117 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.246088028 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.246602058 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.246614933 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.252266884 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.254169941 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.254184008 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.258774996 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.262586117 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.262598991 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.264219999 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.266587019 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.266602039 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.270456076 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.270590067 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.270602942 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.311178923 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.315586090 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.315773010 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.315829039 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.315845966 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.320811033 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.320867062 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.320883989 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.324538946 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.324588060 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.324594021 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.330468893 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.330513954 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.330519915 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.336600065 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.336663961 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.336677074 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.336924076 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.336981058 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.337215900 CEST	49786	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.337249041 CEST	443	49786	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.402369022 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:23.407349110 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:23.598589897 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:23.603216887 CEST	443	49788	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.646137953 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:23.647860050 CEST	49788	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.740529060 CEST	49788	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.740546942 CEST	443	49788	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.742377996 CEST	443	49788	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.746910095 CEST	49788	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.747199059 CEST	443	49788	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.747338057 CEST	49788	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:23.790528059 CEST	443	49788	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.948549032 CEST	443	49788	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.949461937 CEST	443	49788	142.250.186.78	192.168.2.4
May 27, 2024 15:04:23.949512005 CEST	49788	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:24.020395041 CEST	49788	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:24.020427942 CEST	443	49788	142.250.186.78	192.168.2.4
May 27, 2024 15:04:24.020437956 CEST	49788	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:24.020474911 CEST	49788	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:24.160362959 CEST	49790	443	192.168.2.4	142.250.186.100
May 27, 2024 15:04:24.160388947 CEST	443	49790	142.250.186.100	192.168.2.4
May 27, 2024 15:04:24.160440922 CEST	49790	443	192.168.2.4	142.250.186.100
May 27, 2024 15:04:24.162236929 CEST	49790	443	192.168.2.4	142.250.186.100
May 27, 2024 15:04:24.162247896 CEST	443	49790	142.250.186.100	192.168.2.4
May 27, 2024 15:04:24.175242901 CEST	49724	80	192.168.2.4	93.184.221.240
May 27, 2024 15:04:24.180588961 CEST	80	49724	93.184.221.240	192.168.2.4
May 27, 2024 15:04:24.180653095 CEST	49724	80	192.168.2.4	93.184.221.240
May 27, 2024 15:04:24.216155052 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:24.221216917 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:24.409519911 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:24.459145069 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:24.817779064 CEST	443	49790	142.250.186.100	192.168.2.4
May 27, 2024 15:04:24.828682899 CEST	49790	443	192.168.2.4	142.250.186.100
May 27, 2024 15:04:24.828696966 CEST	443	49790	142.250.186.100	192.168.2.4
May 27, 2024 15:04:24.830168962 CEST	443	49790	142.250.186.100	192.168.2.4
May 27, 2024 15:04:24.830240011 CEST	49790	443	192.168.2.4	142.250.186.100
May 27, 2024 15:04:24.831392050 CEST	49790	443	192.168.2.4	142.250.186.100
May 27, 2024 15:04:24.831473112 CEST	443	49790	142.250.186.100	192.168.2.4
May 27, 2024 15:04:24.831501007 CEST	49790	443	192.168.2.4	142.250.186.100
May 27, 2024 15:04:24.874191999 CEST	49790	443	192.168.2.4	142.250.186.100
May 27, 2024 15:04:24.874205112 CEST	443	49790	142.250.186.100	192.168.2.4
May 27, 2024 15:04:24.921139002 CEST	49790	443	192.168.2.4	142.250.186.100
May 27, 2024 15:04:25.103091002 CEST	443	49790	142.250.186.100	192.168.2.4
May 27, 2024 15:04:25.103199959 CEST	443	49790	142.250.186.100	192.168.2.4
May 27, 2024 15:04:25.103553057 CEST	49790	443	192.168.2.4	142.250.186.100
May 27, 2024 15:04:25.104449987 CEST	49790	443	192.168.2.4	142.250.186.100
May 27, 2024 15:04:25.104470015 CEST	443	49790	142.250.186.100	192.168.2.4
May 27, 2024 15:04:25.119748116 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:25.119790077 CEST	443	49794	216.58.206.68	192.168.2.4
May 27, 2024 15:04:25.119847059 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:25.120421886 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:25.120434046 CEST	443	49794	216.58.206.68	192.168.2.4
May 27, 2024 15:04:25.476264000 CEST	49784	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:25.518507004 CEST	443	49784	142.250.185.110	192.168.2.4
May 27, 2024 15:04:25.676791906 CEST	443	49784	142.250.185.110	192.168.2.4
May 27, 2024 15:04:25.677011013 CEST	443	49784	142.250.185.110	192.168.2.4
May 27, 2024 15:04:25.677232027 CEST	49784	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:25.677558899 CEST	49784	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:25.677558899 CEST	49784	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:25.677577972 CEST	443	49784	142.250.185.110	192.168.2.4
May 27, 2024 15:04:25.678905010 CEST	49784	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:25.773962975 CEST	443	49794	216.58.206.68	192.168.2.4
May 27, 2024 15:04:25.774384022 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:25.774411917 CEST	443	49794	216.58.206.68	192.168.2.4
May 27, 2024 15:04:25.776021004 CEST	443	49794	216.58.206.68	192.168.2.4
May 27, 2024 15:04:25.776184082 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:25.780247927 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:25.780343056 CEST	443	49794	216.58.206.68	192.168.2.4
May 27, 2024 15:04:25.780553102 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:25.822503090 CEST	443	49794	216.58.206.68	192.168.2.4
May 27, 2024 15:04:25.823158026 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:25.823172092 CEST	443	49794	216.58.206.68	192.168.2.4
May 27, 2024 15:04:25.870558977 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:25.992288113 CEST	49796	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:25.992353916 CEST	443	49796	142.250.185.110	192.168.2.4
May 27, 2024 15:04:25.992680073 CEST	49796	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:25.992680073 CEST	49796	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:25.992727995 CEST	443	49796	142.250.185.110	192.168.2.4
May 27, 2024 15:04:26.056154966 CEST	443	49794	216.58.206.68	192.168.2.4
May 27, 2024 15:04:26.056250095 CEST	443	49794	216.58.206.68	192.168.2.4
May 27, 2024 15:04:26.057245016 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:26.057245016 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:26.186758041 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.191736937 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.355137110 CEST	49794	443	192.168.2.4	216.58.206.68
May 27, 2024 15:04:26.355160952 CEST	443	49794	216.58.206.68	192.168.2.4
May 27, 2024 15:04:26.404895067 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.404937029 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.404980898 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.405126095 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.405155897 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.405215979 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.405246973 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.405297995 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.405333042 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.405344963 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.405368090 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.405410051 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.415801048 CEST	80	49782	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.415862083 CEST	49782	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.426470995 CEST	49782	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.426634073 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.431426048 CEST	80	49782	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.431559086 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.621386051 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.630434990 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.635790110 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.637049913 CEST	443	49796	142.250.185.110	192.168.2.4
May 27, 2024 15:04:26.640482903 CEST	49796	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:26.640513897 CEST	443	49796	142.250.185.110	192.168.2.4
May 27, 2024 15:04:26.640970945 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.641032934 CEST	443	49796	142.250.185.110	192.168.2.4
May 27, 2024 15:04:26.641710043 CEST	49796	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:26.641796112 CEST	443	49796	142.250.185.110	192.168.2.4
May 27, 2024 15:04:26.642304897 CEST	49796	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:26.647061110 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.682502985 CEST	443	49796	142.250.185.110	192.168.2.4
May 27, 2024 15:04:26.690979958 CEST	49797	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:26.691024065 CEST	443	49797	142.250.186.78	192.168.2.4
May 27, 2024 15:04:26.691095114 CEST	49797	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:26.691299915 CEST	49797	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:26.691310883 CEST	443	49797	142.250.186.78	192.168.2.4
May 27, 2024 15:04:26.692132950 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:26.692142010 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:26.692198038 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:26.692492962 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:26.692502022 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:26.824215889 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.854362011 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:26.868379116 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.895175934 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:26.934717894 CEST	443	49796	142.250.185.110	192.168.2.4
May 27, 2024 15:04:26.934839010 CEST	443	49796	142.250.185.110	192.168.2.4
May 27, 2024 15:04:26.934885025 CEST	49796	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:26.935583115 CEST	49796	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:26.935609102 CEST	443	49796	142.250.185.110	192.168.2.4
May 27, 2024 15:04:27.349244118 CEST	443	49797	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.349607944 CEST	49797	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.349627018 CEST	443	49797	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.351500034 CEST	443	49797	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.351846933 CEST	49797	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.351975918 CEST	49797	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.351980925 CEST	443	49797	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.352032900 CEST	443	49797	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.362595081 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.362801075 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.362811089 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.363264084 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.363569975 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.363645077 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.363892078 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.363923073 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.402270079 CEST	49797	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.634516954 CEST	443	49797	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.634701014 CEST	443	49797	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.634764910 CEST	49797	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.635436058 CEST	49797	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.635462046 CEST	443	49797	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.648046017 CEST	49799	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.648077965 CEST	443	49799	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.648310900 CEST	49799	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.649297953 CEST	49799	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.649316072 CEST	443	49799	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.902488947 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.906469107 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.906533003 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.906563044 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.906579971 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.906598091 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.906629086 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.912275076 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.912343979 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.912353992 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.917581081 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.918610096 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.918617010 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.923547029 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.923599958 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.923605919 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.929610968 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.929661989 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.929666996 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.941560030 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.941596031 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.941611052 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.941618919 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.941788912 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.986546993 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.994600058 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.994657993 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.994666100 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.994676113 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:27.994723082 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:27.994726896 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.002471924 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.002540112 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.002543926 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.004067898 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.004113913 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.004118919 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.010232925 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.010253906 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.010312080 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.010317087 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.010363102 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.010411978 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.010469913 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.010519981 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.011053085 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.011064053 CEST	443	49798	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.011075020 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.011111021 CEST	49798	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.022624016 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:28.030339956 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:28.218700886 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:28.262707949 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:28.354053020 CEST	443	49799	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.373975992 CEST	49799	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.374000072 CEST	443	49799	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.374639988 CEST	443	49799	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.375703096 CEST	49799	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.375794888 CEST	443	49799	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.376241922 CEST	49799	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.418497086 CEST	443	49799	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.658160925 CEST	443	49799	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.658241987 CEST	443	49799	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.658396959 CEST	49799	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.667526007 CEST	49799	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:28.667540073 CEST	443	49799	142.250.186.78	192.168.2.4
May 27, 2024 15:04:28.724911928 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:28.732273102 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:28.922059059 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:28.971581936 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:29.912182093 CEST	49801	443	192.168.2.4	142.250.184.196
May 27, 2024 15:04:29.912228107 CEST	443	49801	142.250.184.196	192.168.2.4
May 27, 2024 15:04:29.912292957 CEST	49801	443	192.168.2.4	142.250.184.196
May 27, 2024 15:04:29.913023949 CEST	49801	443	192.168.2.4	142.250.184.196
May 27, 2024 15:04:29.913041115 CEST	443	49801	142.250.184.196	192.168.2.4
May 27, 2024 15:04:29.989101887 CEST	49802	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:29.989140987 CEST	443	49802	142.250.185.110	192.168.2.4
May 27, 2024 15:04:29.989200115 CEST	49802	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:29.989852905 CEST	49802	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:29.989864111 CEST	443	49802	142.250.185.110	192.168.2.4
May 27, 2024 15:04:30.314105034 CEST	49803	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:30.319278002 CEST	80	49803	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.319386005 CEST	49803	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:30.349814892 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:30.354968071 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.566627026 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.566689014 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.566723108 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.566756964 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.566792011 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.566829920 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.566847086 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:30.566848040 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:30.566864014 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.566941977 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:30.577979088 CEST	443	49801	142.250.184.196	192.168.2.4
May 27, 2024 15:04:30.606789112 CEST	49801	443	192.168.2.4	142.250.184.196
May 27, 2024 15:04:30.606827974 CEST	443	49801	142.250.184.196	192.168.2.4
May 27, 2024 15:04:30.608232021 CEST	443	49801	142.250.184.196	192.168.2.4
May 27, 2024 15:04:30.609319925 CEST	49801	443	192.168.2.4	142.250.184.196
May 27, 2024 15:04:30.609591961 CEST	443	49801	142.250.184.196	192.168.2.4
May 27, 2024 15:04:30.643047094 CEST	443	49802	142.250.185.110	192.168.2.4
May 27, 2024 15:04:30.653713942 CEST	49801	443	192.168.2.4	142.250.184.196
May 27, 2024 15:04:30.666539907 CEST	49802	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:30.666553020 CEST	443	49802	142.250.185.110	192.168.2.4
May 27, 2024 15:04:30.667221069 CEST	443	49802	142.250.185.110	192.168.2.4
May 27, 2024 15:04:30.667870045 CEST	49802	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:30.667946100 CEST	443	49802	142.250.185.110	192.168.2.4
May 27, 2024 15:04:30.668262959 CEST	49802	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:30.674460888 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:30.679490089 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.710530043 CEST	443	49802	142.250.185.110	192.168.2.4
May 27, 2024 15:04:30.711786985 CEST	49802	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:30.869662046 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.905595064 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:30.910938025 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:30.943407059 CEST	443	49802	142.250.185.110	192.168.2.4
May 27, 2024 15:04:30.943499088 CEST	443	49802	142.250.185.110	192.168.2.4
May 27, 2024 15:04:30.944026947 CEST	49802	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:31.018685102 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.018743992 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.018935919 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.019862890 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.019876957 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.020659924 CEST	49802	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:31.020684004 CEST	443	49802	142.250.185.110	192.168.2.4
May 27, 2024 15:04:31.023802042 CEST	49805	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.023833036 CEST	443	49805	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.023952007 CEST	49805	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.025202990 CEST	49805	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.025214911 CEST	443	49805	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.043483019 CEST	49806	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:31.043536901 CEST	443	49806	142.250.185.110	192.168.2.4
May 27, 2024 15:04:31.043605089 CEST	49806	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:31.043796062 CEST	49806	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:31.043814898 CEST	443	49806	142.250.185.110	192.168.2.4
May 27, 2024 15:04:31.047004938 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:31.052037001 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:31.102818966 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:31.158297062 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:31.239976883 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:31.285409927 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:31.663175106 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.663557053 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.663578033 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.664000034 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.664832115 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.664885998 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.665405035 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.665427923 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.668826103 CEST	443	49805	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.669322968 CEST	49805	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.669331074 CEST	443	49805	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.669768095 CEST	443	49805	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.670525074 CEST	49805	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.670598030 CEST	443	49805	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.671101093 CEST	49805	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.677370071 CEST	443	49806	142.250.185.110	192.168.2.4
May 27, 2024 15:04:31.677762032 CEST	49806	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:31.677793026 CEST	443	49806	142.250.185.110	192.168.2.4
May 27, 2024 15:04:31.679769993 CEST	443	49806	142.250.185.110	192.168.2.4
May 27, 2024 15:04:31.680598974 CEST	49806	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:31.680790901 CEST	443	49806	142.250.185.110	192.168.2.4
May 27, 2024 15:04:31.681124926 CEST	49806	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:31.714492083 CEST	443	49805	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.722491980 CEST	443	49806	142.250.185.110	192.168.2.4
May 27, 2024 15:04:31.967283010 CEST	443	49805	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.967459917 CEST	443	49805	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.967511892 CEST	49805	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.968627930 CEST	49805	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:31.968648911 CEST	443	49805	142.250.186.78	192.168.2.4
May 27, 2024 15:04:31.969667912 CEST	443	49806	142.250.185.110	192.168.2.4
May 27, 2024 15:04:31.969932079 CEST	443	49806	142.250.185.110	192.168.2.4
May 27, 2024 15:04:31.969994068 CEST	49806	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:32.066447973 CEST	49807	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.066493988 CEST	443	49807	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.066551924 CEST	49807	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.067944050 CEST	49807	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.067954063 CEST	443	49807	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.069319963 CEST	49806	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:32.069390059 CEST	443	49806	142.250.185.110	192.168.2.4
May 27, 2024 15:04:32.202877045 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.207701921 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.207762003 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.207775116 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.207855940 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.207909107 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.207916021 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.213644028 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.213695049 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.213702917 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.219638109 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.219691992 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.219700098 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.225805998 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.225857019 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.225863934 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.232083082 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.232125998 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.232131958 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.237850904 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.237894058 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.237900972 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.244174004 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.244226933 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.244234085 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.291218996 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.291254044 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.291275978 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.291284084 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.291327953 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.292152882 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.311476946 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.311568022 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.311851025 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.311888933 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.312031984 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.318669081 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.319364071 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.319439888 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.319623947 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.319650888 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.319863081 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.319883108 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.319942951 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.350136995 CEST	49804	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.350209951 CEST	443	49804	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.411581039 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:32.416668892 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:32.610687971 CEST	80	49783	185.53.177.53	192.168.2.4
May 27, 2024 15:04:32.652591944 CEST	49783	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:32.699511051 CEST	443	49807	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.741555929 CEST	49807	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.876934052 CEST	49807	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.876969099 CEST	443	49807	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.877825975 CEST	443	49807	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.885550976 CEST	49807	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.885705948 CEST	443	49807	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.886065006 CEST	49807	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:32.926522970 CEST	443	49807	142.250.186.78	192.168.2.4
May 27, 2024 15:04:32.926525116 CEST	49807	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:33.075126886 CEST	443	49807	142.250.186.78	192.168.2.4
May 27, 2024 15:04:33.075212955 CEST	443	49807	142.250.186.78	192.168.2.4
May 27, 2024 15:04:33.076653004 CEST	49807	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:33.076664925 CEST	443	49807	142.250.186.78	192.168.2.4
May 27, 2024 15:04:33.076746941 CEST	49807	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:33.076781988 CEST	49807	443	192.168.2.4	142.250.186.78
May 27, 2024 15:04:33.478885889 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:33.483994007 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:33.672509909 CEST	80	49787	185.53.177.53	192.168.2.4
May 27, 2024 15:04:33.713681936 CEST	49787	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:34.354060888 CEST	49809	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:34.354100943 CEST	443	49809	142.250.185.110	192.168.2.4
May 27, 2024 15:04:34.354274988 CEST	49809	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:34.360954046 CEST	49809	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:34.360972881 CEST	443	49809	142.250.185.110	192.168.2.4
May 27, 2024 15:04:35.005844116 CEST	443	49809	142.250.185.110	192.168.2.4
May 27, 2024 15:04:35.052752018 CEST	49809	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:35.141529083 CEST	49809	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:35.141545057 CEST	443	49809	142.250.185.110	192.168.2.4
May 27, 2024 15:04:35.142321110 CEST	443	49809	142.250.185.110	192.168.2.4
May 27, 2024 15:04:35.194724083 CEST	49809	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:35.269150972 CEST	49809	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:35.269294024 CEST	49809	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:35.269304037 CEST	443	49809	142.250.185.110	192.168.2.4
May 27, 2024 15:04:35.269330025 CEST	443	49809	142.250.185.110	192.168.2.4
May 27, 2024 15:04:35.322720051 CEST	49809	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:35.420671940 CEST	49810	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:35.420707941 CEST	443	49810	142.250.185.110	192.168.2.4
May 27, 2024 15:04:35.420788050 CEST	49810	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:35.421153069 CEST	49810	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:35.421164036 CEST	443	49810	142.250.185.110	192.168.2.4
May 27, 2024 15:04:35.471543074 CEST	443	49809	142.250.185.110	192.168.2.4
May 27, 2024 15:04:35.471833944 CEST	443	49809	142.250.185.110	192.168.2.4
May 27, 2024 15:04:35.471896887 CEST	49809	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:35.473150015 CEST	49809	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:35.473181009 CEST	443	49809	142.250.185.110	192.168.2.4
May 27, 2024 15:04:35.897140026 CEST	80	49803	185.53.177.53	192.168.2.4
May 27, 2024 15:04:35.897208929 CEST	49803	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:36.053390980 CEST	443	49810	142.250.185.110	192.168.2.4
May 27, 2024 15:04:36.053761005 CEST	49810	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:36.053776026 CEST	443	49810	142.250.185.110	192.168.2.4
May 27, 2024 15:04:36.054157972 CEST	443	49810	142.250.185.110	192.168.2.4
May 27, 2024 15:04:36.054745913 CEST	49810	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:36.054805994 CEST	443	49810	142.250.185.110	192.168.2.4
May 27, 2024 15:04:36.055121899 CEST	49810	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:36.098509073 CEST	443	49810	142.250.185.110	192.168.2.4
May 27, 2024 15:04:36.168755054 CEST	49803	80	192.168.2.4	185.53.177.53
May 27, 2024 15:04:36.173744917 CEST	80	49803	185.53.177.53	192.168.2.4
May 27, 2024 15:04:36.345926046 CEST	443	49810	142.250.185.110	192.168.2.4
May 27, 2024 15:04:36.346000910 CEST	443	49810	142.250.185.110	192.168.2.4
May 27, 2024 15:04:36.346061945 CEST	49810	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:36.346800089 CEST	49810	443	192.168.2.4	142.250.185.110
May 27, 2024 15:04:36.346817970 CEST	443	49810	142.250.185.110	192.168.2.4
May 27, 2024 15:04:40.477648973 CEST	443	49801	142.250.184.196	192.168.2.4
May 27, 2024 15:04:40.477803946 CEST	443	49801	142.250.184.196	192.168.2.4
May 27, 2024 15:04:40.477865934 CEST	49801	443	192.168.2.4	142.250.184.196
May 27, 2024 15:04:42.118474960 CEST	49801	443	192.168.2.4	142.250.184.196
May 27, 2024 15:04:42.118573904 CEST	443	49801	142.250.184.196	192.168.2.4
May 27, 2024 15:04:44.485006094 CEST	49749	80	192.168.2.4	18.66.121.135
May 27, 2024 15:04:44.490123034 CEST	80	49749	18.66.121.135	192.168.2.4
May 27, 2024 15:04:45.267168999 CEST	49753	80	192.168.2.4	18.239.102.108
May 27, 2024 15:04:45.273176908 CEST	80	49753	18.239.102.108	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 27, 2024 15:03:25.717868090 CEST	53	51602	1.1.1.1	192.168.2.4
May 27, 2024 15:03:25.718909025 CEST	53	64972	1.1.1.1	192.168.2.4
May 27, 2024 15:03:26.914226055 CEST	53	53168	1.1.1.1	192.168.2.4
May 27, 2024 15:03:27.349426031 CEST	52605	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:27.350128889 CEST	51098	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:27.365715981 CEST	53	52605	1.1.1.1	192.168.2.4
May 27, 2024 15:03:27.368412018 CEST	53	51098	1.1.1.1	192.168.2.4
May 27, 2024 15:03:29.792968035 CEST	52230	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:29.800709009 CEST	53	52230	1.1.1.1	192.168.2.4
May 27, 2024 15:03:29.813388109 CEST	50264	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:29.825035095 CEST	53	50264	1.1.1.1	192.168.2.4
May 27, 2024 15:03:35.658512115 CEST	138	138	192.168.2.4	192.168.2.255
May 27, 2024 15:03:45.752566099 CEST	53	65499	1.1.1.1	192.168.2.4
May 27, 2024 15:03:58.831304073 CEST	62358	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:58.831677914 CEST	59805	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:58.842395067 CEST	53	62358	1.1.1.1	192.168.2.4
May 27, 2024 15:03:58.842466116 CEST	53	59805	1.1.1.1	192.168.2.4
May 27, 2024 15:03:58.852597952 CEST	54199	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:58.854460955 CEST	56674	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:58.859549999 CEST	53	54199	1.1.1.1	192.168.2.4
May 27, 2024 15:03:58.861602068 CEST	53	56674	1.1.1.1	192.168.2.4
May 27, 2024 15:03:58.862616062 CEST	49531	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:58.863063097 CEST	62265	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:58.990042925 CEST	53	49531	1.1.1.1	192.168.2.4
May 27, 2024 15:03:59.047266006 CEST	53	62265	1.1.1.1	192.168.2.4
May 27, 2024 15:03:59.602694035 CEST	49157	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:59.605410099 CEST	57748	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:59.612027884 CEST	53	49157	1.1.1.1	192.168.2.4
May 27, 2024 15:03:59.612854958 CEST	53	57748	1.1.1.1	192.168.2.4
May 27, 2024 15:03:59.807060957 CEST	56073	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:59.808059931 CEST	62580	53	192.168.2.4	1.1.1.1
May 27, 2024 15:03:59.814250946 CEST	53	56073	1.1.1.1	192.168.2.4
May 27, 2024 15:03:59.817466021 CEST	53	62580	1.1.1.1	192.168.2.4
May 27, 2024 15:04:00.613250971 CEST	63458	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:00.613429070 CEST	54090	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:00.620558023 CEST	53	63458	1.1.1.1	192.168.2.4
May 27, 2024 15:04:00.621114969 CEST	53	54090	1.1.1.1	192.168.2.4
May 27, 2024 15:04:03.396028996 CEST	55299	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:03.396197081 CEST	62782	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:03.403629065 CEST	53	62782	1.1.1.1	192.168.2.4
May 27, 2024 15:04:03.405170918 CEST	53	55299	1.1.1.1	192.168.2.4
May 27, 2024 15:04:04.419878006 CEST	49174	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:04.420023918 CEST	62166	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:04.427576065 CEST	53	62166	1.1.1.1	192.168.2.4
May 27, 2024 15:04:04.428529024 CEST	53	49174	1.1.1.1	192.168.2.4
May 27, 2024 15:04:04.984491110 CEST	53	54864	1.1.1.1	192.168.2.4
May 27, 2024 15:04:08.163657904 CEST	58100	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:08.164431095 CEST	56459	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:08.182585001 CEST	53	58100	1.1.1.1	192.168.2.4
May 27, 2024 15:04:08.185106039 CEST	53	56459	1.1.1.1	192.168.2.4
May 27, 2024 15:04:09.376305103 CEST	53	49830	1.1.1.1	192.168.2.4
May 27, 2024 15:04:10.543507099 CEST	53	49914	1.1.1.1	192.168.2.4
May 27, 2024 15:04:11.850115061 CEST	53	55919	1.1.1.1	192.168.2.4
May 27, 2024 15:04:12.669447899 CEST	53751	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:12.669931889 CEST	59003	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:12.688525915 CEST	53	59003	1.1.1.1	192.168.2.4
May 27, 2024 15:04:12.691693068 CEST	53	53751	1.1.1.1	192.168.2.4
May 27, 2024 15:04:23.410289049 CEST	53	58517	1.1.1.1	192.168.2.4
May 27, 2024 15:04:24.021409035 CEST	58214	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:24.021672010 CEST	64092	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:24.028522015 CEST	53	58214	1.1.1.1	192.168.2.4
May 27, 2024 15:04:24.028961897 CEST	53	64092	1.1.1.1	192.168.2.4
May 27, 2024 15:04:24.380358934 CEST	53	57123	1.1.1.1	192.168.2.4
May 27, 2024 15:04:25.111541986 CEST	55753	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:25.111862898 CEST	64343	53	192.168.2.4	1.1.1.1
May 27, 2024 15:04:25.118664026 CEST	53	55753	1.1.1.1	192.168.2.4
May 27, 2024 15:04:25.119214058 CEST	53	64343	1.1.1.1	192.168.2.4
May 27, 2024 15:04:25.481137037 CEST	53	65316	1.1.1.1	192.168.2.4
May 27, 2024 15:04:27.656419039 CEST	53	58185	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 27, 2024 15:03:59.050570011 CEST	192.168.2.4	1.1.1.1	c1dd	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 27, 2024 15:03:27.349426031 CEST	192.168.2.4	1.1.1.1	0x5c8d	Standard query (0)	mega.ng	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:27.350128889 CEST	192.168.2.4	1.1.1.1	0x3593	Standard query (0)	mega.ng	65	IN (0x0001)	false
May 27, 2024 15:03:29.792968035 CEST	192.168.2.4	1.1.1.1	0xd6be	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:29.813388109 CEST	192.168.2.4	1.1.1.1	0x9152	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 27, 2024 15:03:58.831304073 CEST	192.168.2.4	1.1.1.1	0xc44d	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:58.831677914 CEST	192.168.2.4	1.1.1.1	0xd4da	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
May 27, 2024 15:03:58.852597952 CEST	192.168.2.4	1.1.1.1	0x8583	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:58.854460955 CEST	192.168.2.4	1.1.1.1	0x4fe8	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 27, 2024 15:03:58.862616062 CEST	192.168.2.4	1.1.1.1	0x2279	Standard query (0)	mega.ng	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:58.863063097 CEST	192.168.2.4	1.1.1.1	0x6de0	Standard query (0)	mega.ng	65	IN (0x0001)	false
May 27, 2024 15:03:59.602694035 CEST	192.168.2.4	1.1.1.1	0x82ab	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:59.605410099 CEST	192.168.2.4	1.1.1.1	0x27ce	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
May 27, 2024 15:03:59.807060957 CEST	192.168.2.4	1.1.1.1	0x529e	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:59.808059931 CEST	192.168.2.4	1.1.1.1	0xeb28	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
May 27, 2024 15:04:00.613250971 CEST	192.168.2.4	1.1.1.1	0x35d3	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:00.613429070 CEST	192.168.2.4	1.1.1.1	0xe487	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
May 27, 2024 15:04:03.396028996 CEST	192.168.2.4	1.1.1.1	0xd6ff	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:03.396197081 CEST	192.168.2.4	1.1.1.1	0xb297	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
May 27, 2024 15:04:04.419878006 CEST	192.168.2.4	1.1.1.1	0x1fcd	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:04.420023918 CEST	192.168.2.4	1.1.1.1	0x5a0	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
May 27, 2024 15:04:08.163657904 CEST	192.168.2.4	1.1.1.1	0xe218	Standard query (0)	www.mydomaincontact.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:08.164431095 CEST	192.168.2.4	1.1.1.1	0xf7c	Standard query (0)	www.mydomaincontact.com	65	IN (0x0001)	false
May 27, 2024 15:04:12.669447899 CEST	192.168.2.4	1.1.1.1	0xcc0f	Standard query (0)	www.mydomaincontact.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:12.669931889 CEST	192.168.2.4	1.1.1.1	0x4b72	Standard query (0)	www.mydomaincontact.com	65	IN (0x0001)	false
May 27, 2024 15:04:24.021409035 CEST	192.168.2.4	1.1.1.1	0x823f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:24.021672010 CEST	192.168.2.4	1.1.1.1	0x450b	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 27, 2024 15:04:25.111541986 CEST	192.168.2.4	1.1.1.1	0x8f8f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:25.111862898 CEST	192.168.2.4	1.1.1.1	0x9f0b	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 27, 2024 15:03:27.365715981 CEST	1.1.1.1	192.168.2.4	0x5c8d	No error (0)	mega.ng		185.53.177.53	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:29.800709009 CEST	1.1.1.1	192.168.2.4	0xd6be	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:29.825035095 CEST	1.1.1.1	192.168.2.4	0x9152	No error (0)	www.google.com			65	IN (0x0001)	false
May 27, 2024 15:03:34.242783070 CEST	1.1.1.1	192.168.2.4	0x1e44	No error (0)	windowsupdatebg.s.llnwi.net		41.63.96.128	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:34.959753036 CEST	1.1.1.1	192.168.2.4	0x5f64	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:03:34.959753036 CEST	1.1.1.1	192.168.2.4	0x5f64	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:48.140464067 CEST	1.1.1.1	192.168.2.4	0x695c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:03:48.140464067 CEST	1.1.1.1	192.168.2.4	0x695c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:58.842395067 CEST	1.1.1.1	192.168.2.4	0xc44d	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:58.842395067 CEST	1.1.1.1	192.168.2.4	0xc44d	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:58.842395067 CEST	1.1.1.1	192.168.2.4	0xc44d	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:58.842395067 CEST	1.1.1.1	192.168.2.4	0xc44d	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:58.859549999 CEST	1.1.1.1	192.168.2.4	0x8583	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:58.861602068 CEST	1.1.1.1	192.168.2.4	0x4fe8	No error (0)	www.google.com			65	IN (0x0001)	false
May 27, 2024 15:03:58.990042925 CEST	1.1.1.1	192.168.2.4	0x2279	No error (0)	mega.ng		185.53.177.53	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:59.612027884 CEST	1.1.1.1	192.168.2.4	0x82ab	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.102.108	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:59.612027884 CEST	1.1.1.1	192.168.2.4	0x82ab	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.102.95	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:59.612027884 CEST	1.1.1.1	192.168.2.4	0x82ab	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.102.57	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:59.612027884 CEST	1.1.1.1	192.168.2.4	0x82ab	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.102.197	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:59.814250946 CEST	1.1.1.1	192.168.2.4	0x529e	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:03:59.814250946 CEST	1.1.1.1	192.168.2.4	0x529e	No error (0)	www3.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
May 27, 2024 15:03:59.817466021 CEST	1.1.1.1	192.168.2.4	0xeb28	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:04:00.620558023 CEST	1.1.1.1	192.168.2.4	0x35d3	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:04:00.620558023 CEST	1.1.1.1	192.168.2.4	0x35d3	No error (0)	www3.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:00.621114969 CEST	1.1.1.1	192.168.2.4	0xe487	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:04:01.011077881 CEST	1.1.1.1	192.168.2.4	0x7858	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:04:01.011077881 CEST	1.1.1.1	192.168.2.4	0x7858	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:03.403629065 CEST	1.1.1.1	192.168.2.4	0xb297	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:04:03.405170918 CEST	1.1.1.1	192.168.2.4	0xd6ff	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:04:03.405170918 CEST	1.1.1.1	192.168.2.4	0xd6ff	No error (0)	googlehosted.l.googleusercontent.com		172.217.16.193	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:04.427576065 CEST	1.1.1.1	192.168.2.4	0x5a0	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:04:04.428529024 CEST	1.1.1.1	192.168.2.4	0x1fcd	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:04:04.428529024 CEST	1.1.1.1	192.168.2.4	0x1fcd	No error (0)	googlehosted.l.googleusercontent.com		172.217.23.97	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:08.182585001 CEST	1.1.1.1	192.168.2.4	0xe218	No error (0)	www.mydomaincontact.com		34.255.128.23	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:08.182585001 CEST	1.1.1.1	192.168.2.4	0xe218	No error (0)	www.mydomaincontact.com		52.215.238.75	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:08.182585001 CEST	1.1.1.1	192.168.2.4	0xe218	No error (0)	www.mydomaincontact.com		52.19.55.142	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:12.691693068 CEST	1.1.1.1	192.168.2.4	0xcc0f	No error (0)	www.mydomaincontact.com		34.255.128.23	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:12.691693068 CEST	1.1.1.1	192.168.2.4	0xcc0f	No error (0)	www.mydomaincontact.com		52.19.55.142	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:12.691693068 CEST	1.1.1.1	192.168.2.4	0xcc0f	No error (0)	www.mydomaincontact.com		52.215.238.75	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:20.139893055 CEST	1.1.1.1	192.168.2.4	0x64	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:04:20.139893055 CEST	1.1.1.1	192.168.2.4	0x64	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:24.028522015 CEST	1.1.1.1	192.168.2.4	0x823f	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:24.028961897 CEST	1.1.1.1	192.168.2.4	0x450b	No error (0)	www.google.com			65	IN (0x0001)	false
May 27, 2024 15:04:25.118664026 CEST	1.1.1.1	192.168.2.4	0x8f8f	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
May 27, 2024 15:04:25.119214058 CEST	1.1.1.1	192.168.2.4	0x9f0b	No error (0)	www.google.com			65	IN (0x0001)	false
May 27, 2024 15:04:38.796992064 CEST	1.1.1.1	192.168.2.4	0x534	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:04:38.796992064 CEST	1.1.1.1	192.168.2.4	0x534	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

slscr.update.microsoft.com

fs.microsoft.com

mega.ng

www.google.com

www.adsensecustomsearchads.com

d38psrni17bvxu.cloudfront.net

https:

afs.googleusercontent.com

www.mydomaincontact.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	185.53.177.53	80	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 27, 2024 15:03:27.477730989 CEST	422	OUT	GET / HTTP/1.1 Host: mega.ng Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49748	185.53.177.53	80	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 27, 2024 15:03:57.456865072 CEST	422	OUT	GET / HTTP/1.1 Host: mega.ng Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2024 15:03:58.162501097 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:03:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket064 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Y2ofp6iXtFZV0pfAacTZy9qAxLimdNiJgfO5Vg/d5+65iVzj+lRbFWFG+jBvSRgDQ1Xhz5G1+x315Cw66xy/Ow== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: mega.ng X-Subdomain: Content-Encoding: gzip Data Raw: 32 33 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b 79 77 da c8 96 ff db fe 14 0a 39 1d f0 84 45 6c 5e c0 4a 1e 36 5e 3b e0 0d 27 36 39 99 1c 21 15 20 10 12 2d 09 03 ee e7 ef 3e bf 5b 55 12 62 71 77 e7 9d 4e cf 99 33 ee 0e 48 b5 dc ba 75 eb ee b7 38 7c 53 bf 3a 6e 3d 5e 9f 28 fd 60 64 7f d8 3e a4 2f c5 d4 03 3d a3 9b 1d db 35 86 43 36 d7 12 8d d3 e9 b4 7e f3 78 f9 ab db be e8 3f 19 cd da cd c9 d1 d1 4d ad 7e 37 ad 4d ef 6a 97 47 b5 4f bf 4d ea a7 27 ad 87 5b 47 3d f7 d4 72 f7 fe 7a ef e4 b2 b5 b7 37 7b 74 ae 47 b7 9d 71 63 5e 7a 1a ee ff fa 68 9d 3b c3 e6 98 99 ce e0 aa d6 bc 34 f4 87 fa 83 f1 eb cd 65 53 75 1e 7e 6d 5f 7e da 6b 19 d6 65 7d bf e6 9e 3f fc 9a 2f ef 1f d7 a6 27 b5 da 8d a6 7d 7f 2c b8 dd f1 ae f5 10 9c b6 3f ab e3 6e 4d 37 5a ed f9 c1 6f b5 d9 27 6b 64 36 ad cb 5e f7 aa fc b9 97 33 cb ef 77 cb d6 e7 e7 c1 7b fb b6 73 fa e5 f4 ec fd e0 e8 e9 ee b6 57 bf c9 3f f4 9f cb 67 f9 f7 b3 62 be 7c 3c dd dd 9d cd 73 57 53 4d 4b 28 b3 91 ed f8 5a a2 1f 04 e3 4a 2e 37 9d 4e b3 d3 62 d6 f5 7a b9 fc [TRUNCATED] Data Ascii: 23b[yw9El^J6^;'69! ->[UbqwN3Hu8\|S:n=^(`d>/=5C6~x?M~7MjGOM'[G=rz7{tGqc^zh;4eSu~m_~ke}?/'},?nM7Zo'kd6^3w{sW?gb\|<sWSMK(ZJ.7NbzAnFH(sD!
May 27, 2024 15:03:58.162528992 CEST	218	IN	Data Raw: fc 1d 8e 58 a0 83 70 c1 38 c3 7e 9b 58 4f 5a e2 d8 75 02 e6 04 99 d6 7c cc 12 8a 21 de b4 44 c0 66 41 8e 20 55 15 a3 af 7b 3e 0b b4 49 d0 cd ec 27 72 71 40 8e 3e 62 5a e2 c9 62 d3 b1 eb 05 b1 e9 53 cb 0c fa 9a c9 9e 2c 83 65 f8 4b 5a b1 1c 2b b0 Data Ascii: Xp8~XOZu\|!DfA U{>I'rq@>bZbS,eKZ+t;\|Z3Zlazz6SFt-;>0*ooutccVgYc:OI\g#8?d{V78ncc21
May 27, 2024 15:03:58.162548065 CEST	1236	IN	Data Raw: 31 30 30 30 0d 0a af ba bd c5 f7 53 51 f2 c5 f1 0c 6f 7d 66 f5 fa 01 5e 0b fc d5 b4 fc b1 ad cf 2b d8 ae 6d 39 2c c3 39 b2 ba fd b2 bd 1d 43 32 ff 37 21 99 ff 99 48 9e ff 4d 48 9e ff fd 48 fa 56 c0 40 dd 21 61 38 d6 4d d3 72 7a 19 4f 1e c3 2e 1d Data Ascii: 1000SQo}f^+m9,9C27!HMHHV@!a8MrzO.g[=@^o~>1oCnIJ2&3\N01\|(L^r*#Fh<ZEg>gcbFB-8,+_be/7%&y ESf:C+t\
May 27, 2024 15:03:58.162561893 CEST	224	IN	Data Raw: 3b c5 de c1 c5 a0 d6 6b 1c d7 e6 4d fe ef a2 67 16 ec a1 79 46 ed 17 ea c5 a0 b4 6f 9c 9d aa fa f1 d1 f0 fa ee b2 89 71 53 bd 7e a1 9a e8 bb ab 1f ed 02 0f 89 f7 e5 a4 53 28 db 17 d6 fe fb eb f3 a3 3e e6 f7 da 58 ab d5 ba 9f 5c d5 7b bd e6 71 69 Data Ascii: ;kMgyFoqS~S(>X\{qiNgVmMT:?z4~UxLbiZy(EP.biA[c&btot_xp_m&!yNL-wM6[-jc1o{{K
May 27, 2024 15:03:58.162579060 CEST	1236	IN	Data Raw: ee 38 cc fb 8e 80 c6 e9 f1 10 27 1e 4b bf ed 16 ca 1d 62 ca ad 78 ab c2 bd 7c 62 6f dd cb f4 28 00 40 a0 9c 82 a4 a7 21 4c a5 03 f8 3c 8a fa 0b 3d f3 c9 4a 1e 4a 01 24 58 01 21 a3 88 3f 83 f2 87 40 d6 27 4b 27 6e 09 91 35 10 5d cb 86 ee ab 28 63 Data Ascii: 8'Kbx\|bo(@!L<=JJ$X!?@'K'n5](cYfpA\|ymXn7FS(C%>i9fo9>T$*bB'qHT?Q%5V}:hJ\#&8WRe0G62y?[[QC-_hq%@_ZBRhD
May 27, 2024 15:03:58.162622929 CEST	1236	IN	Data Raw: 31 6f 8e 2e 69 53 33 6c 5a 6d 3c d7 e6 8d d1 67 fb aa 75 32 6b d4 2f ed ab 2f a7 62 9d 3a be eb 47 fb 0d b1 26 5f 03 6b 4f a9 4d e0 41 b8 60 5d 6a e3 ff e4 f3 a9 01 38 79 cc 3d dd ff fc 7c 32 bd 7e 98 ce 1b ad f6 10 fb 1a 5d b5 80 f3 d9 49 19 c4 Data Ascii: 1o.iS3lZm<gu2k//b:G&_kOMA`]j8y=\|2~]I,\`gqvoVsxjhy-0>9mFjnw#W6-^a>z]?hI?kUtUKAWLhZ\r'/;\^A5/A},B[*$H&[]R
May 27, 2024 15:03:58.162638903 CEST	1236	IN	Data Raw: 0d 13 78 c5 4e df 2f a9 51 3e 81 1a 43 fd 26 f2 8b af 68 af b8 14 b9 93 00 11 ae 46 49 aa 77 26 4a 69 af e1 17 47 4f cc bf 65 3d e8 14 a4 55 02 ae f9 62 b4 74 70 34 be 87 0b 77 6c ba 49 e1 2c 77 4b d5 01 7a ff 3c b1 88 ad f8 9f a8 85 90 9b 75 0a Data Ascii: xN/Q>C&hFIw&JiGOe=Ubtp4wlI,wKz<ul7(BzC?uc\|uXw4c3!mpbs3k$u@fS!5f1;Y\5,'BjGO}q614Jp)*2X
May 27, 2024 15:03:58.162667990 CEST	469	IN	Data Raw: 67 c3 0f a1 df f2 a0 6a 37 0b b2 28 c8 8c c0 8a 94 ae 4e c2 29 5e 9f 45 b3 05 e1 c5 95 90 10 1a 7d bf f0 35 d6 16 42 ad 03 17 1b 19 0a be bd 54 ac 82 24 f6 bc 58 7b 67 67 69 66 18 de 2d 35 d2 2a 71 70 c9 16 32 ce 4c 99 ea b8 1d 44 97 37 91 17 1c Data Ascii: gj7(N)^E}5BT$X{ggif-5qp2LD7y><yY"\`G:m]ndaumwkulFQmb0\x]O.qS^ntJS?w-lkA^$-.%?pLTKj`W-
May 27, 2024 15:03:58.435408115 CEST	464	OUT	GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2024 15:03:58.635096073 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:03:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:03:58.852153063 CEST	350	OUT	GET /ls.php?t=665484be&token=216dacf94bda9f36ed89b6298c730e7fd653d93c HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2024 15:03:59.053435087 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Mon, 27 May 2024 13:03:58 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 665484beafc47c107c0c1632 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_PaOpJp16J1t1csp1vCcNIwICVxWSIiPfguvbZHzeltnq9EaGrjBfNX102rm10G79zAb846M73VbbmFbRj/MVbA== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
May 27, 2024 15:04:03.172194004 CEST	583	OUT	GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:03.378366947 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:03.390316010 CEST	458	OUT	GET /favicon.ico HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mega.ng/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:03.587833881 CEST	230	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:03 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Last-Modified: Thu, 23 May 2024 09:17:22 GMT ETag: "664f09a2-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49749	18.66.121.135	80	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 27, 2024 15:03:58.856175900 CEST	420	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mega.ng/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2024 15:03:59.477983952 CEST	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Sun, 26 May 2024 17:27:10 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 3fd7afcdda21f0b562dfcbf7920c44a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: 6b7X7E8eVGOXSSiHip3D6aFFdIr2UK_ZruV_JVJbCmRSolxFGKxliw== Age: 70609
May 27, 2024 15:03:59.478260040 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
May 27, 2024 15:03:59.478379011 CEST	1236	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;
May 27, 2024 15:03:59.478440046 CEST	1236	IN	Data Raw: 3d 32 ee c9 79 07 77 74 27 af 58 35 e9 71 8f 4b 7b 74 dc 3b bc 7f 09 dc d1 9d b0 1d dc d3 d2 9e 00 f7 f9 f9 53 bb c0 1d dd 49 70 3f 67 c5 a4 c6 3d 3e ed 49 70 4f c8 3b b8 5f e9 4e c4 22 8e c9 48 c5 3d 05 ed 89 70 4f c6 3b b8 5f 8d eb 4c 54 b3 cf Data Ascii: =2ywt'X5qK{t;SIp?g=>IpO;_N"H=pO;_LTZd'W;.T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#
May 27, 2024 15:03:59.478476048 CEST	1236	IN	Data Raw: 7b 5e dc 77 ec b8 e5 05 b5 b4 07 c0 3d db 5b da fd b4 1b c3 7d f2 f7 80 83 a4 f7 9d 49 d3 b8 e7 e2 3d 00 ed 61 70 cf c1 7b 15 ed d6 70 9f bc 80 1d 24 bb cf 4f 5a c7 3d 07 ef 41 68 0f 85 7b 6a de ab 69 37 87 3b d7 99 48 76 b7 4f 16 80 fb 8e 1d a7 Data Ascii: {^w=[}I=ap{p$OZ=Ah{ji7;HvO+=)yD=9I{gS}@pOA{W;Ij&K=Ai{d/$$Y\k}{`Eo?GVqGwvq{-$OO
May 27, 2024 15:03:59.478537083 CEST	1236	IN	Data Raw: cc 5b 42 69 af c7 fb 04 b6 13 a1 7b 34 dc 23 d1 1e 86 f7 f5 b4 6f c4 bd c3 7b cb a3 33 f1 68 af c3 bb 45 dc 19 39 40 e8 2e 03 f7 be f7 f3 24 f1 be 91 f6 7e dc db 9d 8c 8c 4b fb 68 de 27 b0 9d 28 51 af 16 86 fb 2d b3 d1 79 f3 e7 fd be ef 2d f5 49 Data Ascii: [Bi{4#o{3hE9@.$~Kh'(Q-y-I^7<a}6MIx;h/^\| ^~^M@\|OG0Te}NF}sMNAqOL{yCp{znw Y=y? SK&=2\K
May 27, 2024 15:03:59.478575945 CEST	1236	IN	Data Raw: 5f da f5 e2 8e ee 84 ed 7a 71 6f c0 7b 3a da 93 e2 5e 93 77 7f da 15 e3 8e ee 64 a7 87 4f 16 87 7b 4d de 53 d2 9e 18 f7 1a bc b7 a1 5d 33 ee f0 4e 7c b6 6b c6 bd 06 ef 69 69 4f 8e fb 70 de b7 3e d7 8a 76 dd b8 73 68 86 f8 6e d7 8c fb 70 de 9f 7d Data Ascii: _zqo{:^wdO{MS]3N\|kiiOp>vshnp}\|jk>ow]7y@{y@v]7g=]=N~3]?Fo<vN\|[i2i;}g75}m
May 27, 2024 15:03:59.478609085 CEST	1236	IN	Data Raw: 4f 8f 3b ba 13 59 b1 7d 71 e1 fc f9 71 a9 b4 37 e7 bd 11 ee 4b 6b 13 c6 7b 87 f6 2c b8 a3 3b 51 94 32 2c e6 85 ae 22 e3 52 69 6f ca bb f3 a4 5d 18 ef 3d da f3 e0 8e ee 44 36 6c 5f c6 5d 12 ef 1b 68 6f c6 bb f3 a6 5d 10 ef 2b b4 67 c2 1d dd 89 4c Data Ascii: O;Y}qq7Kk{,;Q2,"Rio]=D6l_]ho]+gL~w)}/JWi;Y}w>x_C{6kqZu}^#Q]{Nng}V$QnX{.k^wLIX{k/5ig
May 27, 2024 15:03:59.478643894 CEST	1236	IN	Data Raw: 4e 84 ee 29 70 6f 45 7b 12 de 9d 6c da 1b f2 be 80 ed 44 0a 7b 53 1b ee ad 69 4f c0 bb 93 4e 7b 23 de 17 b0 9d 08 dd 63 e3 1e 84 f6 e8 bc 3b f9 b4 37 e0 7d 01 db 89 d0 3d 2e ee c1 68 8f cc 7b 2c dc 2f 86 a4 bd 36 ef 12 70 67 9c 0c 91 47 07 94 e0 Data Ascii: N)poE{lD{SiON{#c;7}=.h{,/6pgG;]*%IiB{-8"~+(Gq+OdH;M=7 RB.t>l'BG=Ns"qgiM$IhSG0;}=$Ii
May 27, 2024 15:03:59.478681087 CEST	1236	IN	Data Raw: 3b b6 13 99 d3 3d 1a ee 59 78 77 c9 69 9f 8a d8 11 6c 27 42 77 81 b8 67 e0 3d 2d ee 33 51 69 4f 88 3b eb 8d 28 5d 26 70 4f ce 7b 4a dc 67 22 ff 74 bc c4 44 84 ee 72 71 4f cc bb 33 44 7b 2a dc af 65 ad 11 a5 ed 5a 1b b8 27 e5 dd 19 a2 3d 11 ee d8 Data Ascii: ;=Yxwil'Bwg=-3QiO;(]&pO{Jg"tDrqO3D{*eZ'=Nd=R3pOC{"YgD6uOSwVQI5ct%FdV%w]jwg3N(k<>5ewe1KG==2Nd[#{$~;HwVqq+
May 27, 2024 15:03:59.483906984 CEST	251	IN	Data Raw: 44 59 3a 1d 11 77 46 c8 10 11 e9 e0 dd 41 3b 11 91 3d de 1d 37 96 88 88 ec f1 ee a0 9d 88 48 51 fb 02 e2 0e ed 44 44 ba 78 77 d0 4e 44 a4 ac 10 b8 ff 1d 3f 23 11 91 3a de 1d d3 c1 88 88 ec f1 ee b8 b1 44 44 64 8f 77 07 ed 44 44 5a 79 3f dd 18 77 Data Ascii: DY:wFA;=7HQDDxwND?#:DDdwDDZy?wh'"Rv"";)1BKDDxwNDdwDD6W;)wh'"2c=;oADdw%""{;~""{;;;;;;4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49752	185.53.177.53	80	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 27, 2024 15:03:59.281337976 CEST	438	OUT	GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2024 15:03:59.860811949 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:03:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:03.399806976 CEST	557	OUT	GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTAzOC4wNDUzOjJlZjU1NDQ2MjMwY2FmYTYxZDQwMTIwM2Y1ZjM5ZTFlNDIyY2E1Yjc2YTNhMjEwMDEyZjBiZTMwZjMwMGE1NDE6NjY1NDg0YmUwYjBjOA%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:03.595206976 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49753	18.239.102.108	80	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 27, 2024 15:03:59.619102955 CEST	333	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2024 15:04:00.249511957 CEST	441	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Sun, 26 May 2024 17:27:10 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 8e8e0fdfe938f4dbcfa8bb4284454f5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: SqAkV9rFjpV8E4eivuYgKs32FU1Hhm6y8KKbvqiabzrsy_4zBJa7Dw== Age: 70610
May 27, 2024 15:04:00.249598980 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
May 27, 2024 15:04:00.249641895 CEST	224	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q
May 27, 2024 15:04:00.249906063 CEST	1236	IN	Data Raw: 7e b2 47 16 ee f0 4e 44 24 86 f6 90 b8 c3 3b 11 91 10 da c3 e2 0e ef 44 44 22 68 0f 8d 3b bc 13 11 09 a0 3d 3c ee f0 4e 44 94 9d f6 18 b8 c3 3b 11 51 a3 22 38 1c 05 77 78 27 22 ca 4a 7b 2c dc e1 9d 88 28 23 ed f1 70 87 77 22 a2 6c b4 c7 c4 1d de Data Ascii: ~GND$;DD"h;=<ND;Q"8wx'"J{,(#pw"l2wx'"B{l(qw"wx'"JJ{*(!pw"d NDnwx'"h7;MD&qw"2+;MD&qw"v;A
May 27, 2024 15:04:00.250008106 CEST	1236	IN	Data Raw: d9 70 8f c4 3b b8 57 c4 db 7b c4 31 99 7c b8 e7 a2 3d 23 ee 51 78 07 f7 aa b8 ac 4a 7d 71 2d 35 09 ee bb bf b8 2d 9f b0 19 71 8f c0 3b b8 57 c6 81 77 e2 bb 3d 03 ee bb 77 9e c8 e9 6b 56 dc 83 f3 0e ee 95 bd 0b 66 b4 be 77 59 15 d1 71 cf 4c 7b 76 Data Ascii: p;W{1\|=#QxJ}q-5-q;Ww=wkVfwYqL{vU)~{v}7Gw=-h{{1F,E.`{_s1W&Bh{ s.vA=hn5wQS;}mwbNI(.v;S
May 27, 2024 15:04:00.250025988 CEST	1236	IN	Data Raw: ab d7 99 71 8f c0 7b 2d da cd e2 ce fb 1d 24 ab 4f 4f 16 8b 7b 97 f7 4b 1a 68 8f 85 7b 60 de 6b d2 6e 17 77 0e bc 93 a4 6e 9f 2c 19 f7 d0 bc 47 a2 3d 1e ee 1d de 7f 95 9a 76 c3 b8 73 24 92 e4 f4 ce 64 e1 b8 ef 08 f8 1a 5f 34 da 63 e2 7e f0 e0 37 Data Ascii: q{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoGLpo{d#?+l19G=oipq=ipv~;$!;wP>?xApo7
May 27, 2024 15:04:00.250037909 CEST	1236	IN	Data Raw: 20 53 1f f7 0e ef df 7f 4b 26 ed 3d de ff c4 32 ee 5c 4b 25 15 5d b0 8c 7b 26 da 6b bd c6 37 82 f6 91 b8 8f 3c f8 9e 8f f6 aa 91 91 13 d8 4e 84 ee 81 70 cf 48 fb c8 cd f7 91 b4 d7 c0 7d d8 c9 c8 c3 79 69 ef e7 dd 0e ee 5c 4b 25 35 5d 67 13 f7 dc Data Ascii: SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{k5'#7aikg#6pg)v}dZcR;
May 27, 2024 15:04:00.250049114 CEST	1236	IN	Data Raw: 05 f7 35 7d 84 11 a4 b3 6d e0 be ae 7f fd c6 d7 f2 ea 9a 15 f7 f1 b3 fb f7 7f ed fe 87 c0 9d 0f 77 e2 d3 dd 16 ee cf df 3f be 7f ff d9 f1 42 71 ef d2 de 2d 20 ef da 71 7f 11 1f 48 73 2f 82 fb 1a da 7b 8d 17 88 fb 15 da 7b dd fb 10 b8 63 3b a1 bb Data Ascii: 5}mw?Bq- qHs/{{c;Wi@{8uv;#p_O{F=sNq=Naxv"t{5xwbhb}w=q?DxW;&n,aGw^b"}4ywhoVo'Sm+z'sNq
May 27, 2024 15:04:00.250063896 CEST	1236	IN	Data Raw: de 6b d2 de e9 a9 16 b8 2f 35 69 ec ee dc b4 67 c5 9d 8d 77 a2 10 bd b9 28 0a f7 d4 bc d7 a7 7d 24 ef ae ce 75 54 79 bc 57 d2 9e 19 77 74 27 52 6d 7b 35 ee 29 79 6f 46 fb 08 de 5d 30 da 13 f2 3e 80 f6 dc b8 a3 3b 91 66 db 07 e1 9e 8a f7 e6 b4 0f Data Ascii: k/5igw(}$uTyWwt'Rm{5)yoF]0>;f{FD2.!'}qGw"=6=2Ci;}81yoG]p#>v;VGW">(R!=5h;w>RA=0h
May 27, 2024 15:04:00.250076056 CEST	776	IN	Data Raw: c0 bc 3b 85 b4 0f e6 7d 01 db 89 d0 3d 24 ee 49 69 ef d9 76 51 14 ee a9 69 1f c4 fb 02 b6 13 69 ef 4d 41 b8 27 a7 3d 20 ef 4e 29 ed d5 bc 2f 60 3b 11 ba 87 c2 3d 0b ed c1 78 77 6a 69 af e2 7d 01 db 89 d0 3d 0c ee d9 68 0f c4 bb 53 4c 7b 3f ef 99 Data Ascii: ;}=$IivQiiMA'= N)/`;=xwji}=hSL{?pgw/`;d=;xwi_{'C]ywi_7pC{KWy;#IEwg+/`;.^O&]"v"tBmk,+"Mf?1T<xwh
May 27, 2024 15:04:00.254923105 CEST	1236	IN	Data Raw: 43 b4 27 c3 1d dd 89 52 f6 da b4 7c dc e5 f1 ee 0c d1 9e 0e 77 b6 66 88 8c 6d c9 b4 c7 5d 1a ef ce 10 ed 29 71 e7 3a 13 91 b1 ef f6 f6 b8 cb 1a 19 e9 0c d1 9e 12 77 74 27 b2 66 fb 74 08 84 e4 f0 ee 0c d1 9e 14 77 74 27 32 66 fb 74 18 86 a4 f0 2e Data Ascii: C'R\|wfm])q:wt'ftwt'2ft.;Q.O]q/qGw]GQ$7(wt'2d{@%wt'c{PD.9CNp3D{b9Iq3D;]FF:C'1VQS{&hO;=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49751	185.53.177.53	80	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 27, 2024 15:04:03.591938019 CEST	371	OUT	GET /favicon.ico HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:03.785109997 CEST	230	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:03 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Last-Modified: Thu, 23 May 2024 09:17:22 GMT ETag: "664f09a2-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49783	185.53.177.53	80	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 27, 2024 15:04:20.869841099 CEST	1119	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0 HTTP/1.1 Host: mega.ng Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:21.535075903 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket064 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_p0AIYsZpnkMNcOcAB5UTFt6WwHaZqXq+2N3geCSI4s+wAq9WLuEy4jZ4Lsa4c2pC0kJua6bsmdd63gB2ragneA== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: mega.ng X-Subdomain: Content-Encoding: gzip Data Raw: 32 32 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5c 7b 73 d3 ca 92 ff 3b f9 14 c2 d4 c1 ce 62 cb ef 3c 1c 0c d7 21 01 c2 c1 0e 01 87 90 50 6c 4a 96 c6 b6 62 59 32 92 1c db b9 37 df 7d 7f 3d 33 92 46 7e 70 e0 14 9c ad ad 4d 48 62 cd a3 a7 a7 a7 df 3d e2 d9 a3 e3 b3 97 dd ab f7 27 da 30 1c 3b cf b7 9f d1 1f cd 32 42 a3 60 58 3d c7 33 47 23 b6 68 66 da af 66 b3 e3 f3 ab b7 7f 7a d7 a7 c3 3b b3 d3 3a 3f 39 3a 3a 6f 1d 7f 9c b5 66 1f 5b 6f 8f 5a ef be 4d 8f 5f 9d 74 3f 7f 70 4b 6f fc 52 bd 7f f1 7e ef e4 6d 77 6f 6f 7e e5 be 1f 7f e8 4d da 8b da dd 68 ff cf 2b fb 8d 3b ea 4c 98 e5 de 9e b5 3a 6f 4d e3 f3 f1 67 f3 cf f3 b7 9d 92 fb f9 cf eb b7 ef f6 ba a6 fd f6 78 bf e5 bd f9 fc 67 b9 be ff b2 35 3b 69 b5 ce 9b cd 9b 49 a9 75 7a 15 5c 4f dc 51 bb 63 9e 99 ad a3 fa 45 f7 55 b8 7b 39 7b 63 5c 7f fb fc ed 69 a5 53 1d b0 97 1f 4f 6b c1 d3 59 eb db c1 e5 bb e9 c9 a2 76 7b 5d 7b 17 18 35 b3 32 79 59 1a bd 9d 1a bb bd 60 6c 59 bb d5 c1 51 c5 37 06 2e 6b 35 9b 19 6d 3e 76 dc a0 99 19 86 e1 a4 51 2c ce 66 33 7d 56 [TRUNCATED] Data Ascii: 22b\{s;b<!PlJbY27}=3F~pMHb='0;2B`X=3G#hffz;:?9::of[oZM_t?pKoR~mwoo~Mh+;L:oMgxg5;iIuz\OQcEU{9{c\iSOkYv{]{52yY`lYQ7.k5m>vQ,f3}V=P,Dan(
May 27, 2024 15:04:21.535140038 CEST	1236	IN	Data Raw: c4 0c eb f9 b6 86 af 67 63 16 1a 20 5c 38 29 b0 6f 53 fb ae 99 79 e9 b9 21 73 c3 42 77 31 61 19 cd 14 4f cd 4c c8 e6 61 91 20 1d 6a e6 d0 f0 03 16 36 a7 61 bf b0 9f 29 aa 80 5c 63 cc 9a 99 3b 9b cd 26 9e 1f 2a d3 67 b6 15 0e 9b 16 bb b3 4d 56 e0 Data Ascii: gc \8)oSy!sBw1aOLa j6a)\c;&*gMVyv6B`kZ0mwTBal`YQ<ri,f&0}w8PXx39A/W{7c\a(1000 PC+&spB\|/Fnhd.Z&e
May 27, 2024 15:04:21.535176992 CEST	1236	IN	Data Raw: 1a 5a 6d 1f da 71 87 a6 8b 40 70 59 92 d1 b1 25 a3 af 9a 50 a4 5b 91 20 ef 71 bd ba b5 15 3b 4b 7d 7b ce 10 de 6c 6d 71 f5 dd 28 94 85 1a dd da 82 7c 34 6a dc 5a 6c a5 d5 98 80 b0 a2 57 b6 80 fc 06 7c b8 66 d9 8a a4 34 d1 7d 9a ef 85 46 c8 72 b5 Data Ascii: Zmq@pY%P[ q;K}{lmq(\|4jZlW\|f4}Fr$M[\5\|wWn7x{ZgwCgs-A?iP<9~~Vs"_7$(nKH&`}`^AbZd,")s>xF+6A)/B;\|\|D@]"
May 27, 2024 15:04:21.535212040 CEST	1236	IN	Data Raw: e7 08 0f 48 4d 16 79 c9 56 9f 0c 27 2f 44 df 0d 17 3e 59 d4 ce 68 88 31 07 28 aa 67 6e 7a a8 d4 8f 04 ec a3 e9 42 0b 13 31 d4 b7 b7 9e 15 0d d4 ef 8b 90 20 59 76 5f 95 a5 8a 94 25 92 27 75 63 91 6b a2 74 2f 0f 11 2e 62 46 23 31 16 48 12 8e ca 84 Data Ascii: HMyV'/D>Yh1(gnzB1 Yv_%'uckt/.bF#1HgrRg.:ucgB#Fq\iXA:@V9qi0KUJ,58Jzt13lyrM/A\MsM_V>jZj'C'3w
May 27, 2024 15:04:21.535248995 CEST	1236	IN	Data Raw: 54 c3 85 b1 2c fe c4 5d 43 2f 08 d5 e7 09 b0 20 07 0d 6d b9 78 90 60 2e ed 45 32 4d b6 00 de 93 2c 0a 61 d9 17 28 63 e0 e1 66 6e f4 ef fc e6 d5 7d 1b bc 7a 34 ba ea 7e 1a 75 ba a3 fb f6 fd 5b fc 1d 54 af bb a3 12 4e e1 f6 7a 7c 0a f9 b8 9a 75 2e Data Ascii: T,]C/ mx`.E2M,a(cfn}z4~u[TNz\|u.!mNeQ{mwn[s m,~SCzC/'s?uxJNSlYk'R9,.c\\OlE41)mNzXsLyD2\fwCvxI"j
May 27, 2024 15:04:21.535284996 CEST	1236	IN	Data Raw: 36 31 32 9b 5a ce eb dd e2 d5 4e fc a6 d4 3b 89 8a 0c 96 a8 9d ac 76 06 1f b0 5a 66 87 37 20 88 78 38 a4 32 33 85 35 1a 5e dc a5 98 83 4f a6 ee 2f 68 f8 0a e8 d4 c0 3f 1f fa 2c 9c fa 7c 44 f9 10 13 a3 9c 3f 42 c1 cf ed 77 f4 5a 6b 0e ab 12 28 bc Data Ascii: 612ZN;vZf7 x8235^O/h?,\|D?BwZk(#NJ&*ODQ`>qsvxt3\|xkaLX~9pDk04>Ca}\z$#N;9n&Oo9Eg':&]+G]R(-
May 27, 2024 15:04:21.535322905 CEST	263	IN	Data Raw: 56 2c a3 5e af 63 7b 1b b8 98 5f 14 2b 26 37 d6 b2 cf 57 cc 00 8a 73 b8 a7 7c 6a 65 1a 7b fb b5 52 f5 60 b7 54 dd 7b 58 03 50 5c 74 8c d5 15 74 f6 3b 99 25 8e 8b d3 a4 c2 62 3a 93 c2 8f 55 1e 78 ff 4b dc 43 74 57 d2 9d 71 fb d7 43 71 a3 9e fa 69 Data Ascii: V,^c{_+&7Ws\|je{R`T{XP\tt;%b:UxKCtWqCqi65iJAu}x(R#r<a8bc!<[EKjc>}Rhn~YW mpb`;oK*0,o'8yMluk@#)taR
May 27, 2024 15:04:21.626003027 CEST	1161	OUT	GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:21.821137905 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:21.847608089 CEST	1047	OUT	GET /ls.php?t=665484d5&token=ed099a39dbc815b7899d90f9bc760f14662da555 HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:22.055181026 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Mon, 27 May 2024 13:04:21 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 665484d5e1bc03a32a01ad90 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_hNJUvoGsTRSEYJ2Bb9sty5eh9oRPEv0jf0cOur7+eleTOeJD0b/LTwJJ2F80N9ia1sXvKJsgMm1Hbo++Y0mwaQ== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
May 27, 2024 15:04:23.402369022 CEST	1180	OUT	GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Llc+Online&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:23.598589897 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:26.186758041 CEST	1117	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Payroll&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&pcsa=false&nb=0 HTTP/1.1 Host: mega.ng Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:26.404895067 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket064 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_iOtgiEGQTmrrBKJm0rcenc+ekfiY1Quy9uYZdTojeRLSrQPbnXuDwF1+TZdIl7LZF2A3TlXyO1P1wnjz0zIMUw== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: mega.ng X-Subdomain: Content-Encoding: gzip Data Raw: 32 32 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5c 6b 77 da 3a 97 fe 9c fc 0a 97 ae 13 c8 94 3b e4 5e da 49 4a 92 26 a7 90 4b 69 1b e8 ea 64 19 5b 80 83 b1 39 b6 09 90 f7 cd 7f 9f 67 4b b2 2d 73 e9 69 cf 6a df f9 30 49 93 18 6d 69 4b da da f7 2d f7 f5 8b fa d5 bb 56 fb fa 54 1b 04 23 fb cd e6 6b fa a3 99 7a a0 e7 74 b3 6b bb c6 70 c8 e6 b5 54 e3 6c 3a ad df b4 2f ff 74 3b 17 83 47 a3 79 7c 73 7a 72 72 73 5c ff 38 3d 9e 7e 3c be 3c 39 fe f0 d7 a4 7e 76 da ba bb 75 8a ef bd e2 4e ef d3 f5 de e9 65 6b 6f 6f d6 76 ae 47 b7 dd 71 63 5e 7d 1c ee ff d9 b6 de 3b c3 e6 98 99 ce c3 d5 71 f3 d2 d0 ef ea 77 c6 9f 37 97 cd a2 73 f7 67 e7 f2 c3 5e cb b0 2e eb fb c7 ee fb bb 3f 4b 3b fb ef 8e a7 a7 c7 c7 37 b5 da bd 75 15 f4 ad d3 f3 9b d6 c8 f3 4e fe bc 1c 15 3d 83 39 c6 2b 36 ec 59 ed d2 cd 64 7e 30 69 77 cc 96 fb c0 6e 3f 7c f4 6e ae bb ce dd a4 3e 3d 2b bd 6a 75 cc 0b 7b ef 43 e7 ac 7c 5c 69 d9 77 f3 ab d2 75 69 ea 3c 3c 15 9f 2e 1a 9f a6 b5 5a 4a 9b 8d 6c c7 af a5 06 41 30 3e 2c 14 a6 d3 69 7e 5a c9 bb 5e bf [TRUNCATED] Data Ascii: 22b\kw:;^IJ&Kid[9gK-sij0ImiK-VT#kztkpTl:/t;Gy\|szrrs\8=~<<9~vuNekoovGqc^};qw7sg^.?K;7uN=9+6Yd~0iwn?\|n>=+ju{C\|\iwui<<.ZJlA0>,i~Z^P:88()~-Q
May 27, 2024 15:04:26.404937029 CEST	202	IN	Data Raw: 4d 0d 5f af 47 2c d0 41 b8 60 9c 63 7f 4d ac c7 5a ea 9d eb 04 cc 09 72 ad f9 98 a5 34 43 7c aa a5 02 36 0b 0a 84 e9 48 33 06 ba e7 b3 a0 36 09 7a b9 fd 54 41 45 e4 e8 23 56 4b 3d 5a 6c 3a 76 bd 40 19 3e b5 cc 60 50 33 d9 a3 65 b0 1c ff 90 d5 2c Data Ascii: M_G,A`cMZr4C\|6H36zTAE#VK=Zl:v@>`P3e,,nZ)rlfz.\|zsi#fZz-;}fTGij^)f}9`Vt
May 27, 2024 15:04:26.405126095 CEST	1236	IN	Data Raw: 31 30 30 30 0d 0a 95 aa e3 99 a6 7b d8 0d 76 a1 3b 7e ce 67 9e d5 13 3d 06 8c 7a 1f 6a e5 e2 78 26 5a c6 ba 69 5a 4e 1f c3 d0 a4 15 b5 1d fa 2d 40 9c 34 87 da 41 31 ea 3c d2 bd be 85 39 8b 9a 3e 09 5c d1 eb 29 67 39 26 9b 11 ce a3 cd 67 65 67 9a Data Ascii: 1000{v;~g=zjx&ZiZN-@4A1<9>\)g9&gegb[x Xlv'&R6x,QX`j}d^rr5\|b1+p9_{0s9GW7}Aj?=*ugay`F/_5,?
May 27, 2024 15:04:26.405155897 CEST	224	IN	Data Raw: 49 b0 41 c8 dc c8 76 a8 dc 0d 4a 29 8b 2c fd a2 45 96 7e e7 22 df ff a2 45 be ff f5 8b 44 0c c3 40 5d ae 1c 42 a6 12 a2 a9 95 10 22 72 15 96 f7 99 6d 33 ef 16 b9 0f a7 ef 23 51 40 03 b2 9b 4b cd 8f 16 61 43 7a 68 09 22 53 0e 4b ed ba 11 58 8f 3c Data Ascii: IAvJ),E~"ED@]B"rm3#Q@KaCzh"SKX<Z6oW-,i;d${7Gg TKAWDxDn.GUZ`Glr=\OcT/LdCZY_ )\|GJd"xY*H
May 27, 2024 15:04:26.405246973 CEST	1236	IN	Data Raw: 4f 71 3f 75 55 a8 4a 58 d5 c8 21 14 77 6a 8f 9d db 92 c7 46 e2 44 29 a7 ca cf 87 3a 84 ab 20 b0 c6 7f c9 fc 1e 65 ad e0 ca 4f 0f 07 96 69 32 87 0f 1d 90 f8 d3 28 a1 4c 5f ee 57 e9 5b 59 1e 8f 97 4b f9 9d 85 b9 72 7c 79 62 50 cc b5 62 1d 2a 4c 32 Data Ascii: Oq?uUJX!wjFD): eOi2(L_W[YKr\|ybPb*L2`s;,?7!#]u[[T+xd'p SO'>SVr{.7l;f[R@ ZQ~D90X4T2rI#}&C84P44r:#LZQx;
May 27, 2024 15:04:26.426634073 CEST	1159	OUT	GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Payroll&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:26.621386051 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:26.640970945 CEST	1045	OUT	GET /ls.php?t=665484da&token=91ff62818ca72b04617b2cf85cb642a9b5afb0c3 HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Payroll&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:26.854362011 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Mon, 27 May 2024 13:04:26 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 665484da6922b0a6120472c5 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_F3pMUIzqQanKPzFvUR/D1I83XwKAD3csfZai8cZzYAjdhe90qiR+vWzxScLmtNtRZh4Tri07xoG0ner5IGSQIw== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
May 27, 2024 15:04:28.022624016 CEST	1178	OUT	GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Setting+Up+Payroll&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:28.218700886 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:30.349814892 CEST	1119	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&pcsa=false&nb=0 HTTP/1.1 Host: mega.ng Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:30.566627026 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket064 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_cJ+VWr1Uc70xfm9A9qVJeVFVZIYRCO8IKsaxI/6gmOfianKKJK6+9mU9Zv+jSgKIWsxNO03ynawKQ8TIDhcvuQ== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: mega.ng X-Subdomain: Content-Encoding: gzip Data Raw: 32 32 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5c eb 57 da 4a d7 ff ac 7f 45 4a d7 11 7c cb 1d 54 c4 d2 3e 58 6c ab 2d a8 2d b6 d5 ae be ae 90 0c 10 09 09 27 09 02 9e c7 ff fd fd ed 99 49 32 e1 d2 d3 9e d5 3e ef 97 47 ab 92 b9 ec d9 b3 67 df f7 a4 cf 9f b4 ce 5f 75 af 2f 4e b4 61 30 b6 5f 6c 3f a7 3f 9a a9 07 7a 4e 37 7b b6 6b 8c 46 6c d1 48 b5 5f cf 66 ad cb eb b3 77 ee cd e9 f0 de e8 34 2f 4f 8e 8f 2f 9b ad 8f b3 e6 ec 63 f3 ec b8 f9 fe cf 69 eb f5 49 f7 cb 07 a7 f8 d6 2b ee f5 af 2e 0e 4e ce ba 07 07 f3 6b e7 62 fc a1 37 69 2f aa f7 a3 da bb 6b eb ad 33 ea 4c 98 e9 dc 9d 37 3b 67 86 fe a5 f5 c5 78 77 79 d6 29 3a 5f de dd 9c bd 3f e8 1a d6 59 ab d6 74 df 7e 79 57 da ab bd 6a ce 4e 9a cd cb 46 e3 d6 38 7b f6 e9 b3 57 ba 32 0e 8a f3 fe f8 b0 79 f8 e7 a7 33 f6 e9 f5 a7 9b d3 eb 0f af ce 6b a7 ef 7c 7d 7e 5a d8 1f 8c cf fb 96 ee bc 7b 77 f6 6e ff d9 e1 f8 ea f0 e6 fe d9 dd c7 c1 bb d3 cf fe bc 73 5e ac 2c 1c 7d f6 ee b2 d6 3d 6d 0d 8d fb 29 00 a7 b4 f9 d8 76 fc 46 6a 18 04 93 7a a1 30 9b cd f2 b3 4a [TRUNCATED] Data Ascii: 22b\WJEJ\|T>Xl--'I2>Gg_u/Na0_l??zN7{kFlH_fw4/O/ciI+.Nkb7i/k3L7;gxwy):_?Yt~yWjNF8{W2y3k\|}~Z{wns^,}=m)vFjz0JaaNHi)B
May 27, 2024 15:04:30.674460888 CEST	1161	OUT	GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:30.869662046 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:30.905595064 CEST	1047	OUT	GET /ls.php?t=665484de&token=56ccf0f7c641883fea08f010718c772a3b9ed95f HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:31.102818966 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Mon, 27 May 2024 13:04:31 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 665484df0c2129fd6d02592a Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_EOkNpSu5s0SCUGCJoZkRJOFKN8vvcjmv8ELGp6/iZwwi0w7WjFqIdd1nX0Hc/hIFA4G+/O3SAFO/1O8dgdDzzw== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
May 27, 2024 15:04:32.411581039 CEST	1180	OUT	GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:32.610687971 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49787	185.53.177.53	80	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 27, 2024 15:04:22.151864052 CEST	538	OUT	GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:22.784041882 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:24.216155052 CEST	557	OUT	GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2MS40MjMzOjQ4NjU3ZmQ3YThlNjkzYTU3MzU0MDBhMTFhNWY2ZjM2YmE1N2RhOTdiMmYzNThiMTc1ZTQ2NjNmMWE4ZmNiZGQ6NjY1NDg0ZDU2NzViMA%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:24.409519911 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:26.630434990 CEST	538	OUT	GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:26.824215889 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:28.724911928 CEST	557	OUT	GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA2Ni4yOTYyOmFlNDBkYjVmNTMyNDg3MzdjNzcwMTRiMGYyMGU1NDE3NDJiNTNkMDNmNzYyY2IwYzkzNDE0NmI5NGQyNmIwMTY6NjY1NDg0ZGE0ODUwOQ%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:28.922059059 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:31.047004938 CEST	538	OUT	GET /track.php?domain=mega.ng&toggle=browserjs&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:31.239976883 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
May 27, 2024 15:04:33.478885889 CEST	557	OUT	GET /track.php?domain=mega.ng&caf=1&toggle=answercheck&answer=yes&uid=MTcxNjgxNTA3MC40NTk5OjQ3NjgwYTlmYWM0OTAzNjI2YzAwZTRkODI3MTgwNWMxNDZiNmU1NjkwOThmZTRhMDdiYTMzNzQwYTZiNDQ2YTA6NjY1NDg0ZGU3MDQ5Mw%3D%3D HTTP/1.1 Host: mega.ng Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=5110e244d5df23cb:T=1716815041:RT=1716815041:S=ALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA
May 27, 2024 15:04:33.672509909 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 27 May 2024 13:04:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:03:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-27 13:03:34 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=183940 Date: Mon, 27 May 2024 13:03:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:03:34 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WGDM49GBshaLudy&MD=yYT8EUnK HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-27 13:03:35 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d1822235-0e57-46c4-b719-de7a3d75a34f MS-RequestId: fdd77bcb-63ef-48d4-b10a-b74980438b25 MS-CV: UgpstfucEEyDeVra.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:03:34 GMT Connection: close Content-Length: 24490
2024-05-27 13:03:35 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-27 13:03:35 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:03:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-27 13:03:35 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=184022 Date: Mon, 27 May 2024 13:03:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-27 13:03:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	142.250.185.68	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:03:59 UTC	415	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:03:59 UTC	854	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 190251 Date: Mon, 27 May 2024 13:03:59 GMT Expires: Mon, 27 May 2024 13:03:59 GMT Cache-Control: private, max-age=3600 ETag: "10200586956776441240" X-Content-Type-Options: nosniff Link: <https://www.adsensecustomsearchads.com>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 13:03:59 UTC	536	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 35 36 30 33 32 30 33 39 30 34 32 34 35 30 30 37 30 34 32 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 34 33 39 2c 31 37 33 30 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"5603203904245007042",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,1730
2024-05-27 13:03:59 UTC	1390	IN	Data Raw: 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 Data Ascii: nConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29t
2024-05-27 13:03:59 UTC	1390	IN	Data Raw: 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 6e 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 Data Ascii: e=0;return b});n("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d
2024-05-27 13:03:59 UTC	1390	IN	Data Raw: 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 68 67 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 29 7b 74 68 69 73 2e 4e 61 3d 21 31 3b 74 68 69 73 2e 66 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 68 64 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 6b 61 3d 31 3b 74 68 69 73 2e 77 64 3d 74 68 69 73 2e 6c 62 3d 30 3b 74 68 69 73 2e 6c 61 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 29 7b 69 66 28 61 2e 4e 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 Data Ascii: ties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.hg=b.prototype}function sa(){this.Na=!1;this.fa=null;this.hd=void 0;this.ka=1;this.wd=this.lb=0;this.la=null}function ua(a){if(a.Na)throw new TypeError("Gene
2024-05-27 13:03:59 UTC	1390	IN	Data Raw: 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 53 61 28 62 29 7d 3b 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 58 61 28 62 29 7d 3b 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 79 61 28 61 2c 62 29 7d 3b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b Data Ascii: b.return,done:!0}}return{value:void 0,done:!0}}function za(a){this.next=function(b){return a.Sa(b)};this.throw=function(b){return a.Xa(b)};this.return=function(b){return ya(a,b)};this[Symbol.iterator]=function(){return this}}function Aa(a){function b(d){
2024-05-27 13:03:59 UTC	1390	IN	Data Raw: 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 58 66 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 6e 75 6c 6c 21 3d 67 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4e 66 28 67 29 3a 74 68 69 73 2e 7a 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 Data Ascii: mise cannot resolve to itself"));else if(g instanceof b)this.Xf(g);else{a:switch(typeof g){case "object":var h=null!=g;break a;case "function":h=!0;break a;default:h=!1}h?this.Nf(g):this.zd(g)}};b.prototype.Nf=function(g){var h=void 0;try{h=g.then}catch(
2024-05-27 13:03:59 UTC	1390	IN	Data Raw: 65 6a 65 63 74 28 6c 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6c 28 72 28 75 29 29 7d 63 61 74 63 68 28 76 29 7b 70 28 76 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 70 2c 71 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 70 3d 74 7d 29 3b 74 68 69 73 2e 6b 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 70 29 29 3b 72 65 74 75 72 6e 20 71 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 Data Ascii: eject(l)}};b.prototype.then=function(g,h){function k(r,t){return"function"==typeof r?function(u){try{l(r(u))}catch(v){p(v)}}:t}var l,p,q=new b(function(r,t){l=r;p=t});this.kb(k(g,l),k(h,p));return q};b.prototype.catch=function(g){return this.then(void 0,g
2024-05-27 13:03:59 UTC	1390	IN	Data Raw: 65 74 75 72 6e 20 61 2b 22 22 7d 6e 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 44 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 30 3c 65 26 26 30 3c 63 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 30 3e 3d 65 7d 7d 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 Data Ascii: eturn a+""}n("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=Da(this,b,"endsWith");b+="";void 0===c&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;0<e&&0<c;)if(d[--c]!=b[--e])return!1;return 0>=e}});function
2024-05-27 13:03:59 UTC	1390	IN	Data Raw: 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6e 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 21 3d 3d 62 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 29 3b 6e 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 Data Ascii: rn a?a:function(b){var c=[],d;for(d in b)Object.prototype.hasOwnProperty.call(b,d)&&c.push(b[d]);return c}});n("Object.is",function(a){return a?a:function(b,c){return b===c?0!==b\|\|1/b===1/c:b!==b&&c!==c}});n("Array.prototype.includes",function(a){return a
2024-05-27 13:03:59 UTC	1390	IN	Data Raw: 22 3b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 62 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 7d 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 6e 75 6c 6c 21 3d 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 68 67 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 50 67 3d 66 75 6e Data Ascii: ";return"array"==b\|\|"object"==b&&"number"==typeof a.length}function Ha(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function Ia(a,b){function c(){}c.prototype=b.prototype;a.hg=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.Pg=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49756	142.250.186.78	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:01 UTC	1600	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjljNTg5YjFlOGR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3%7Cs&nocache=4531716815039657&num=0&output=afd_ads&domain_name=mega.ng&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1716815039659&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fmega.ng%2F HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:01 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 27 May 2024 13:04:01 GMT Expires: Mon, 27 May 2024 13:04:01 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-5g432wfPUGaq42pW_I3j_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 13:04:01 UTC	583	IN	Data Raw: 33 61 34 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 3a44<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-05-27 13:04:01 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-05-27 13:04:01 UTC	1390	IN	Data Raw: 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c Data Ascii: {overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-fl
2024-05-27 13:04:01 UTC	1390	IN	Data Raw: 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b Data Ascii: tart; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;
2024-05-27 13:04:01 UTC	1390	IN	Data Raw: 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 31 30 32 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 64 69 76 3e 64 69 76 2e 73 69 31 32 38 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 30 31 63 33 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ex-shrink:1;}.si102{border-radius:15px;height:30px;width:1px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}div>div.si128:last-child{display:none;}.si133{background-color:#101c36;border-radiu
2024-05-27 13:04:01 UTC	1390	IN	Data Raw: 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 20 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 31 33 33 20 73 70 61 6e 22 3e 52 65 6c 61 74 65 64 20 73 65 61 72 63 68 65 73 3c 2f 73 70 61 6e 3e 3c 2f 64 Data Ascii: ex-wrap:wrap; flex-wrap:wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si133 span">Related searches</span></d
2024-05-27 13:04:01 UTC	1390	IN	Data Raw: 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 36 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 Data Ascii: align-items:center;"><div class="i_ div si69" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:center; -webkit-justify-content:center; justify-content:cente
2024-05-27 13:04:01 UTC	1390	IN	Data Raw: 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6d 65 67 61 2e 6e 67 2f 3f 74 73 3d 66 45 4e 73 5a 57 46 75 55 47 56 77 63 47 56 79 62 57 6c 75 64 45 4a 73 59 57 4e 72 66 48 77 31 59 32 55 34 4e 48 78 69 64 57 4e 72 5a 58 51 77 4e 6a 52 38 66 48 78 38 66 48 77 32 4e 6a 55 30 4f 44 52 69 5a 54 42 69 4d 44 67 78 66 48 78 38 4d 54 63 78 4e 6a 67 78 4e 54 41 7a 4f 43 34 77 4e 6a 59 79 66 44 42 68 4d 44 49 78 59 6a 42 6a 5a 6a 67 35 4e 6a 67 35 4e 54 55 35 4e 47 5a 6c 4e 57 4d 77 4f 47 45 7a 4e 6d 4a 68 4d 6a 6c Data Ascii: ow; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="http://mega.ng/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTAzOC4wNjYyfDBhMDIxYjBjZjg5Njg5NTU5NGZlNWMwOGEzNmJhMjl
2024-05-27 13:04:01 UTC	1390	IN	Data Raw: 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 30 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 64 5f 69 63 Data Ascii: -items:center;"><div class="i_ div" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-hidden="true" tabindex="-1" class="div q_ si102"><img src="https://afs.googleusercontent.com/ad_ic
2024-05-27 13:04:01 UTC	1390	IN	Data Raw: 45 77 50 58 77 79 4d 54 5a 6b 59 57 4e 6d 4f 54 52 69 5a 47 45 35 5a 6a 4d 32 5a 57 51 34 4f 57 49 32 4d 6a 6b 34 59 7a 63 7a 4d 47 55 33 5a 6d 51 32 4e 54 4e 6b 4f 54 4e 6a 66 44 42 38 5a 48 41 74 64 47 56 68 62 57 6c 75 64 47 56 79 62 6d 56 30 4d 44 6c 66 4d 33 42 6f 66 44 42 38 4d 48 77 33 4f 44 51 77 4d 7a 6b 32 4d 44 4d 33 66 41 25 33 44 25 33 44 26 61 6d 70 3b 71 75 65 72 79 3d 53 74 72 65 61 6d 2b 50 61 72 61 6d 6f 75 6e 74 2b 50 6c 75 73 26 61 6d 70 3b 61 66 64 54 6f 6b 65 6e 3d 43 68 4d 49 70 2d 54 41 74 66 4b 74 68 67 4d 56 78 6f 48 39 42 78 32 37 6f 77 6c 42 45 6e 67 42 6c 4c 71 70 6a 77 46 61 6b 6c 6d 5a 4b 44 55 68 4d 62 59 6f 75 5f 45 76 66 79 76 45 4b 6f 34 68 43 53 4c 47 35 4d 62 62 6f 6a 4b 55 6e 47 41 71 39 6d 54 49 61 61 55 58 70 73 4d Data Ascii: EwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%3D%3D&query=Stream+Paramount+Plus&afdToken=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49757	142.250.186.78	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:02 UTC	573	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.adsensecustomsearchads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:02 UTC	854	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 190267 Date: Mon, 27 May 2024 13:04:02 GMT Expires: Mon, 27 May 2024 13:04:02 GMT Cache-Control: private, max-age=3600 ETag: "14769399461035053466" X-Content-Type-Options: nosniff Link: <https://www.adsensecustomsearchads.com>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 13:04:02 UTC	536	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 61 64 73 65 6e 73 65 63 75 73 74 6f 6d 73 65 61 72 63 68 61 64 73 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 35 36 30 33 32 30 33 39 30 34 32 34 35 30 30 37 30 34 32 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.adsensecustomsearchads.com",hash:"5603203904245007042",packages:"domains",module:"ads",version:"1",m:{cei:"173014
2024-05-27 13:04:02 UTC	1390	IN	Data Raw: 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c Data Ascii: in":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRl
2024-05-27 13:04:02 UTC	1390	IN	Data Raw: 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 6e 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c Data Ascii: ndom()>>>0)+"_",e=0;return b});n("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.l
2024-05-27 13:04:02 UTC	1390	IN	Data Raw: 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 68 67 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 29 7b 74 68 69 73 2e 4e 61 3d 21 31 3b 74 68 69 73 2e 66 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 68 64 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 6b 61 3d 31 3b 74 68 69 73 2e 77 64 3d 74 68 69 73 2e 6c 62 3d 30 3b 74 68 69 73 2e 6c 61 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 29 7b 69 66 28 61 2e 4e 61 29 74 68 72 6f 77 20 6e 65 77 Data Ascii: ect.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.hg=b.prototype}function sa(){this.Na=!1;this.fa=null;this.hd=void 0;this.ka=1;this.wd=this.lb=0;this.la=null}function ua(a){if(a.Na)throw new
2024-05-27 13:04:02 UTC	1390	IN	Data Raw: 57 65 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 53 61 28 62 29 7d 3b 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 58 61 28 62 29 7d 3b 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 79 61 28 61 2c 62 29 7d 3b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 Data Ascii: We;return{value:b.return,done:!0}}return{value:void 0,done:!0}}function za(a){this.next=function(b){return a.Sa(b)};this.throw=function(b){return a.Xa(b)};this.return=function(b){return ya(a,b)};this[Symbol.iterator]=function(){return this}}function Aa(a
2024-05-27 13:04:02 UTC	1390	IN	Data Raw: 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 58 66 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 6e 75 6c 6c 21 3d 67 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4e 66 28 67 29 3a 74 68 69 73 2e 7a 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 Data Ascii: TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.Xf(g);else{a:switch(typeof g){case "object":var h=null!=g;break a;case "function":h=!0;break a;default:h=!1}h?this.Nf(g):this.zd(g)}};b.prototype.Nf=function(g){var h=void 0;try
2024-05-27 13:04:02 UTC	1390	IN	Data Raw: 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6c 28 72 28 75 29 29 7d 63 61 74 63 68 28 76 29 7b 70 28 76 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 70 2c 71 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 70 3d 74 7d 29 3b 74 68 69 73 2e 6b 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 70 29 29 3b 72 65 74 75 72 6e 20 71 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: ct)}catch(l){k.reject(l)}};b.prototype.then=function(g,h){function k(r,t){return"function"==typeof r?function(u){try{l(r(u))}catch(v){p(v)}}:t}var l,p,q=new b(function(r,t){l=r;p=t});this.kb(k(g,l),k(h,p));return q};b.prototype.catch=function(g){return th
2024-05-27 13:04:02 UTC	1390	IN	Data Raw: 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 6e 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 44 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 30 3c 65 26 26 30 3c 63 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 30 3e Data Ascii: r expression");return a+""}n("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=Da(this,b,"endsWith");b+="";void 0===c&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;0<e&&0<c;)if(d[--c]!=b[--e])return!1;return 0>
2024-05-27 13:04:02 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6e 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 21 3d 3d 62 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 29 3b 6e 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 Data Ascii: function(a){return a?a:function(b){var c=[],d;for(d in b)Object.prototype.hasOwnProperty.call(b,d)&&c.push(b[d]);return c}});n("Object.is",function(a){return a?a:function(b,c){return b===c?0!==b\|\|1/b===1/c:b!==b&&c!==c}});n("Array.prototype.includes",func
2024-05-27 13:04:02 UTC	1390	IN	Data Raw: 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 62 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 7d 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 6e 75 6c 6c 21 3d 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 68 67 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 Data Ascii: ?"array":b:"null";return"array"==b\|\|"object"==b&&"number"==typeof a.length}function Ha(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function Ia(a,b){function c(){}c.prototype=b.prototype;a.hg=b.prototype;a.prototype=new c;a.prototype.constr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49758	172.217.16.193	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:04 UTC	757	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.adsensecustomsearchads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:04 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 10:04:30 GMT Expires: Tue, 28 May 2024 09:04:30 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 10774 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 13:04:04 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49759	172.217.16.193	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:04 UTC	758	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.adsensecustomsearchads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:04 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 10:04:30 GMT Expires: Tue, 28 May 2024 09:04:30 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 10774 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 13:04:04 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49754	142.250.185.110	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:04 UTC	891	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=5qri4xfhz9pa&aqid=wYRUZvG4G4PWjuwP6Y6EqAc&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=12%7C0%7C1153%7C1467%7C214&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:05 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-RDJUinonoK_QCqO1tm4m-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 27 May 2024 13:04:04 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49761	172.217.23.97	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:05 UTC	507	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:05 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 10:04:30 GMT Expires: Tue, 28 May 2024 09:04:30 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 10775 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 13:04:05 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49762	172.217.23.97	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:05 UTC	508	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:05 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 10:04:30 GMT Expires: Tue, 28 May 2024 09:04:30 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 10775 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 13:04:05 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49763	142.250.185.110	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:06 UTC	891	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=l5qxxx2w1rps&aqid=wYRUZvG4G4PWjuwP6Y6EqAc&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=12%7C0%7C1153%7C1467%7C214&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:06 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-aVvU7_jcvJ-6HySQ0NbPzA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 27 May 2024 13:04:06 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49766	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:08 UTC	675	OUT	GET /index.php?domain_name=mega.ng HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:09 UTC	296	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:04:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx/1.20.1 X-Powered-By: PHP/7.3.33 Set-Cookie: pct-35d245f72f47807786fdc78ab047108d=1; expires=Mon, 27-May-2024 14:04:09 GMT; Max-Age=3600
2024-05-27 13:04:09 UTC	5273	IN	Data Raw: 31 34 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 6c 65 20 6f 66 66 65 72 20 66 6f 72 3a 20 6d 65 67 61 2e 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 53 6f Data Ascii: 1491<!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>Sale offer for: mega.ng</title> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <link href="https://fonts.googleapis.com/css?family=So
2024-05-27 13:04:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49765	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:09 UTC	649	OUT	GET /scripts/select2/select2.css HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mydomaincontact.com/index.php?domain_name=mega.ng Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-35d245f72f47807786fdc78ab047108d=1
2024-05-27 13:04:09 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:04:09 GMT Content-Type: text/css Content-Length: 19226 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-4b1a" Accept-Ranges: bytes
2024-05-27 13:04:09 UTC	16149	IN	Data Raw: 2f 2a 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 33 2e 32 20 54 69 6d 65 73 74 61 6d 70 3a 20 4d 6f 6e 20 4d 61 72 20 32 35 20 31 32 3a 31 34 3a 31 38 20 50 44 54 20 32 30 31 33 0a 2a 2f 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 2f 2a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 66 6f 72 20 69 65 37 20 2a 2f 0a 20 20 20 20 7a 6f 6f 6d 3a 20 31 3b 0a 20 20 20 20 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2c 0a 2e 73 65 6c 65 Data Ascii: /Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013/.select2-container { position: relative; display: inline-block; /* inline-block for ie7 / zoom: 1; display: inline; vertical-align: middle;}.select2-container,.sele
2024-05-27 13:04:09 UTC	3077	IN	Data Raw: 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 34 65 34 65 34 3b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 20 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 65 65 65 65 65 65 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 66 34 66 34 66 34 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 20 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 Data Ascii: -ms-user-select: none; user-select: none; background-color: #e4e4e4; filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#eeeeee', endColorstr='#f4f4f4', GradientType=0 ); background-image: -webkit-gradie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49767	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:10 UTC	637	OUT	GET /forms/style.css HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mydomaincontact.com/index.php?domain_name=mega.ng Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-35d245f72f47807786fdc78ab047108d=1
2024-05-27 13:04:10 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:04:10 GMT Content-Type: text/css Content-Length: 3575 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-df7" Accept-Ranges: bytes
2024-05-27 13:04:10 UTC	3575	IN	Data Raw: 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 0a 0a 62 6f 64 79 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 63 65 66 66 31 3b 0a 09 63 6f 6c 6f 72 3a 20 23 32 36 33 32 33 38 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 20 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 72 65 6d 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 0a 7d 0a 0a 68 31 2c 68 32 2c 68 33 2c 68 33 2c 68 34 2c 68 35 2c 68 36 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 6f 75 72 63 65 20 53 65 72 69 66 20 50 72 6f 27 2c 73 65 72 69 66 7d 0a 0a 2e Data Ascii: *{margin:0;padding:0}body {background:#eceff1;color: #263238;font-family: 'Source Sans Pro', sans-serif;text-rendering: optimizeLegibility;font-size:1.2rem;line-height:1.5rem;}h1,h2,h3,h3,h4,h5,h6 {font-family:'Source Serif Pro',serif}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49768	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:10 UTC	625	OUT	GET /scripts/jquery.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=mega.ng Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-35d245f72f47807786fdc78ab047108d=1
2024-05-27 13:04:10 UTC	250	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:04:10 GMT Content-Type: application/javascript Content-Length: 85260 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-14d0c" Accept-Ranges: bytes
2024-05-27 13:04:10 UTC	16134	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 35 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 4a 6f 68 6e 20 52 65 73 69 67 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 54 68 65 20 44 Data Ascii: /! jQuery JavaScript Library v1.5.1 * http://jquery.com/ * * Copyright 2011, John Resig * Dual licensed under the MIT or GPL Version 2 licenses. * http://jquery.org/license * * Includes Sizzle.js * http://sizzlejs.com/ * Copyright 2011, The D
2024-05-27 13:04:10 UTC	16379	IN	Data Raw: 65 73 74 28 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 29 2c 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 3a 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3d 3d 3d 22 2f 61 22 2c 6f 70 61 63 69 74 79 3a 2f 5e 30 2e 35 35 24 2f 2e 74 65 73 74 28 66 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 29 2c 63 73 73 46 6c 6f 61 74 3a 21 21 66 2e 73 74 79 6c 65 2e 63 73 73 46 6c 6f 61 74 2c 63 68 65 63 6b 4f 6e 3a 69 2e 76 61 6c 75 65 3d 3d 3d 22 6f 6e 22 2c 6f 70 74 53 65 6c 65 63 74 65 64 3a 68 2e 73 65 6c 65 63 74 65 64 2c 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 3a 21 30 2c 6f 70 74 44 69 73 61 62 6c 65 64 3a 21 31 2c 63 68 65 63 6b 43 6c 6f 6e 65 3a 21 31 2c 6e 6f 43 6c 6f 6e 65 45 76 65 6e 74 3a 21 30 2c 6e 6f 43 6c 6f 6e Data Ascii: est(f.getAttribute("style")),hrefNormalized:f.getAttribute("href")==="/a",opacity:/^0.55$/.test(f.style.opacity),cssFloat:!!f.style.cssFloat,checkOn:i.value==="on",optSelected:h.selected,deleteExpando:!0,optDisabled:!1,checkClone:!1,noCloneEvent:!0,noClon
2024-05-27 13:04:10 UTC	16384	IN	Data Raw: 6c 5b 61 5d 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 64 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 62 2c 63 26 26 63 2e 73 65 6c 65 63 74 6f 72 3f 79 3a 78 2c 61 29 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 62 2c 61 26 26 61 2e 73 65 6c 65 63 74 6f 72 3f 79 3a 78 29 7d 7d 7d 29 2c 64 2e 73 75 70 70 6f 72 74 2e 73 75 62 6d 69 74 42 75 62 62 6c 65 73 7c 7c 28 64 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 73 75 62 6d 69 74 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 26 26 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 3d 22 66 6f 72 6d 22 Data Ascii: l[a]={setup:function(c){d.event.add(this,b,c&&c.selector?y:x,a)},teardown:function(a){d.event.remove(this,b,a&&a.selector?y:x)}}}),d.support.submitBubbles\|\|(d.event.special.submit={setup:function(a,b){if(this.nodeName&&this.nodeName.toLowerCase()!=="form"
2024-05-27 13:04:10 UTC	16384	IN	Data Raw: 65 7c 7c 63 3b 69 66 28 21 67 26 26 21 6b 2e 69 73 58 4d 4c 28 65 29 29 7b 76 61 72 20 68 3d 2f 5e 28 5c 77 2b 24 29 7c 5e 5c 2e 28 5b 5c 77 5c 2d 5d 2b 24 29 7c 5e 23 28 5b 5c 77 5c 2d 5d 2b 24 29 2f 2e 65 78 65 63 28 62 29 3b 69 66 28 68 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 7c 7c 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 29 29 7b 69 66 28 68 5b 31 5d 29 72 65 74 75 72 6e 20 70 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 29 2c 66 29 3b 69 66 28 68 5b 32 5d 26 26 6c 2e 66 69 6e 64 2e 43 4c 41 53 53 26 26 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 70 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 68 5b 32 5d 29 2c 66 29 7d 69 66 Data Ascii: e\|\|c;if(!g&&!k.isXML(e)){var h=/^(\w+$)\|^\.([\w\-]+$)\|^#([\w\-]+$)/.exec(b);if(h&&(e.nodeType===1\|\|e.nodeType===9)){if(h[1])return p(e.getElementsByTagName(b),f);if(h[2]&&l.find.CLASS&&e.getElementsByClassName)return p(e.getElementsByClassName(h[2]),f)}if
2024-05-27 13:04:10 UTC	16384	IN	Data Raw: 2c 62 48 3d 7b 7d 2c 62 49 3d 7b 7d 2c 62 4a 2c 62 4b 3b 74 72 79 7b 62 4a 3d 63 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 62 4c 29 7b 62 4a 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 62 4a 2e 68 72 65 66 3d 22 22 2c 62 4a 3d 62 4a 2e 68 72 65 66 7d 62 4b 3d 62 46 2e 65 78 65 63 28 62 4a 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 64 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 65 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 47 29 72 65 74 75 72 6e 20 62 47 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 21 74 68 69 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 66 3d 61 Data Ascii: ,bH={},bI={},bJ,bK;try{bJ=c.location.href}catch(bL){bJ=c.createElement("a"),bJ.href="",bJ=bJ.href}bK=bF.exec(bJ.toLowerCase()),d.fn.extend({load:function(a,c,e){if(typeof a!=="string"&&bG)return bG.apply(this,arguments);if(!this.length)return this;var f=a
2024-05-27 13:04:10 UTC	3595	IN	Data Raw: 74 2c 69 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 29 3b 72 65 74 75 72 6e 7b 74 6f 70 3a 6c 2c 6c 65 66 74 3a 6d 7d 7d 2c 64 2e 6f 66 66 73 65 74 3d 7b 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 63 2e 62 6f 64 79 2c 62 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 65 2c 66 2c 67 2c 68 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 64 2e 63 73 73 28 61 2c 22 6d 61 72 67 69 6e 54 6f 70 22 29 29 7c 7c 30 2c 6a 3d 22 3c 64 69 76 20 73 74 79 6c 65 3d 27 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 35 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 Data Ascii: t,i.scrollLeft));return{top:l,left:m}},d.offset={initialize:function(){var a=c.body,b=c.createElement("div"),e,f,g,h,i=parseFloat(d.css(a,"marginTop"))\|\|0,j="<div style='position:absolute;top:0;left:0;margin:0;border:5px solid #000;padding:0;width:1px;hei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49769	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:10 UTC	638	OUT	GET /scripts/select2/select2.min.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=mega.ng Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-35d245f72f47807786fdc78ab047108d=1
2024-05-27 13:04:10 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:04:10 GMT Content-Type: application/javascript Content-Length: 41867 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-a38b" Accept-Ranges: bytes
2024-05-27 13:04:10 UTC	16135	IN	Data Raw: 2f 2a 0a 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 49 67 6f 72 20 56 61 79 6e 62 65 72 67 0a 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 33 2e 32 20 54 69 6d 65 73 74 61 6d 70 3a 20 4d 6f 6e 20 4d 61 72 20 32 35 20 31 32 3a 31 34 3a 31 38 20 50 44 54 20 32 30 31 33 0a 0a 54 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 22 29 20 6f 72 20 74 68 65 20 47 4e 55 0a 47 65 6e 65 72 61 6c 20 50 75 62 6c 69 63 20 4c 69 63 65 6e 73 65 20 76 65 72 73 69 6f 6e 20 32 20 28 74 68 65 20 22 47 50 4c 20 4c 69 63 65 6e 73 65 22 29 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 Data Ascii: /*Copyright 2012 Igor VaynbergVersion: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNUGeneral Public License version 2 (the "GPL License"). You may choose
2024-05-27 13:04:10 UTC	16379	IN	Data Raw: 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 49 64 2c 63 3d 22 73 63 72 6f 6c 6c 2e 22 2b 62 2c 64 3d 22 72 65 73 69 7a 65 2e 22 2b 62 2c 65 3d 22 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 2e 22 2b 62 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 61 72 65 6e 74 73 28 29 2e 61 64 64 28 77 69 6e 64 6f 77 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 75 6e 62 69 6e 64 28 63 29 2e 75 6e 62 69 6e 64 28 64 29 2e 75 6e 62 69 6e 64 28 65 29 7d 29 2c 74 68 69 73 2e 63 6c 65 61 72 44 72 6f 70 64 6f 77 6e 41 6c 69 67 6e 6d 65 6e 74 50 72 65 66 65 72 65 6e 63 65 28 29 2c 61 28 22 23 73 65 6c 65 63 74 32 2d 64 72 6f 70 2d 6d 61 73 6b 22 Data Ascii: ion(){if(this.opened()){var b=this.containerId,c="scroll."+b,d="resize."+b,e="orientationchange."+b;this.container.parents().add(window).each(function(){a(this).unbind(c).unbind(d).unbind(e)}),this.clearDropdownAlignmentPreference(),a("#select2-drop-mask"
2024-05-27 13:04:10 UTC	9353	IN	Data Raw: 52 26 26 75 28 61 29 7d 7d 7d 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 6b 65 79 75 70 22 2c 74 68 69 73 2e 62 69 6e 64 28 74 68 69 73 2e 72 65 73 69 7a 65 53 65 61 72 63 68 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 62 6c 75 72 22 2c 74 68 69 73 2e 62 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 66 6f 63 75 73 65 64 22 29 2c 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 7c 7c 74 68 69 73 2e 63 6c 65 61 72 53 65 61 72 63 68 28 29 2c 61 2e 73 74 6f 70 49 6d 6d Data Ascii: R&&u(a)}}})),this.search.bind("keyup",this.bind(this.resizeSearch)),this.search.bind("blur",this.bind(function(a){this.container.removeClass("select2-container-active"),this.search.removeClass("select2-focused"),this.opened()\|\|this.clearSearch(),a.stopImm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49771	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:11 UTC	623	OUT	GET /forms/script.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=mega.ng Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-35d245f72f47807786fdc78ab047108d=1
2024-05-27 13:04:11 UTC	247	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:04:11 GMT Content-Type: application/javascript Content-Length: 2421 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-975" Accept-Ranges: bytes
2024-05-27 13:04:11 UTC	2421	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 27 69 6e 70 75 74 2e 69 6e 70 75 74 74 65 78 74 3a 66 69 72 73 74 27 29 2e 66 6f 63 75 73 28 29 3b 0a 0a 0a 09 2f 2f 20 2d 2d 20 69 6e 69 74 69 61 74 65 20 73 61 6c 65 20 6f 72 20 73 65 6e 64 20 6f 66 66 65 72 0a 09 24 28 22 69 6e 70 75 74 2e 73 75 62 6d 69 74 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 73 70 69 6e 6e 65 72 22 29 3b 0a 09 09 24 28 22 2e 69 6e 70 75 74 45 72 72 6f 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 70 75 74 45 72 72 6f 72 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 Data Ascii: $(document).ready(function() { $('input.inputtext:first').focus();// -- initiate sale or send offer$("input.submit").click(function(e) {e.preventDefault();$(this).addClass("spinner");$(".inputError").removeClass("inputError");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49774	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:11 UTC	629	OUT	GET /forms/script-addon.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=mega.ng Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-35d245f72f47807786fdc78ab047108d=1
2024-05-27 13:04:11 UTC	246	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:04:11 GMT Content-Type: application/javascript Content-Length: 396 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-18c" Accept-Ranges: bytes
2024-05-27 13:04:11 UTC	396	IN	Data Raw: 2f 2f 20 2d 2d 20 61 64 64 69 74 69 6f 6e 61 6c 20 73 63 72 69 70 74 20 66 6f 72 20 74 68 65 20 73 61 6c 65 20 6f 66 66 65 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 66 6f 72 6d 0a 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 22 23 63 75 72 72 65 6e 63 79 22 29 2e 73 65 6c 65 63 74 32 28 7b 6d 69 6e 69 6d 75 6d 52 65 73 75 6c 74 73 46 6f 72 53 65 61 72 63 68 3a 20 2d 31 7d 29 3b 0a 7d 29 3b 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 53 61 6c 65 50 72 69 63 65 56 61 6c 69 64 28 29 20 7b 0a 20 20 20 20 24 28 22 23 70 72 69 63 65 48 6f 6c 64 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 69 6e 70 75 74 45 72 72 6f 72 27 29 3b 0a 20 20 20 20 76 61 72 20 76 61 6c 20 3d 20 24 28 Data Ascii: // -- additional script for the sale offer version of the form$(document).ready(function() { $("#currency").select2({minimumResultsForSearch: -1});});function isSalePriceValid() { $("#priceHolder").removeClass('inputError'); var val = $(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49773	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:11 UTC	684	OUT	GET /images/trust.svg HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/index.php?domain_name=mega.ng Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-35d245f72f47807786fdc78ab047108d=1
2024-05-27 13:04:11 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:04:11 GMT Content-Type: image/svg+xml Content-Length: 20199 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-4ee7" Accept-Ranges: bytes
2024-05-27 13:04:11 UTC	16144	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 38 20 33 38 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 30 62 65 63 35 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 34 34 2e 37 20 31 32 2e 32 76 32 2e 31 63 30 20 30 2e 33 2d 30 2e 31 20 30 2e 36 2d 30 2e 32 20 30 2e 38 73 2d 30 2e 34 20 30 2e 33 2d 30 2e 36 20 30 2e 33 63 2d 30 2e 32 20 30 2d 30 2e 34 2d 30 2e 31 2d 30 2e 36 2d 30 2e 33 73 2d 30 2e 32 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 76 2d 32 2e 35 63 30 2d 30 2e 34 20 30 2d 30 2e 37 20 30 2d 30 2e 39 73 2d 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">.st0{fill:#b0bec5;}</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0
2024-05-27 13:04:11 UTC	4055	IN	Data Raw: 2d 30 2e 32 20 30 2e 33 2d 30 2e 32 20 30 2e 32 2d 30 2e 31 20 30 2e 34 2d 30 2e 31 63 30 2e 31 20 30 20 30 2e 33 20 30 20 30 2e 34 20 30 2e 31 73 30 2e 32 20 30 2e 31 20 30 2e 33 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 33 20 30 2e 31 20 30 2e 32 20 30 2e 31 20 30 2e 34 20 30 20 30 2e 33 2d 30 2e 31 20 30 2e 34 20 2d 30 2e 31 20 30 2e 32 2d 30 2e 32 20 30 2e 33 20 2d 30 2e 32 20 30 2e 32 2d 30 2e 33 20 30 2e 32 20 2d 30 2e 33 20 30 2e 31 2d 30 2e 34 20 30 2e 31 63 2d 30 2e 31 20 30 2d 30 2e 33 20 30 2d 30 2e 34 2d 30 2e 31 73 2d 30 2e 32 2d 30 2e 31 2d 30 2e 33 2d 30 2e 32 20 2d 30 2e 32 2d 30 2e 32 2d 30 2e 32 2d 30 2e 33 53 31 35 37 2e 33 20 31 30 2e 35 20 31 35 37 2e 33 20 31 30 2e 34 7a 4d 31 35 37 2e 34 20 31 32 2e 37 68 31 2e 38 76 Data Ascii: -0.2 0.3-0.2 0.2-0.1 0.4-0.1c0.1 0 0.3 0 0.4 0.1s0.2 0.1 0.3 0.2 0.2 0.2 0.2 0.3 0.1 0.2 0.1 0.4 0 0.3-0.1 0.4 -0.1 0.2-0.2 0.3 -0.2 0.2-0.3 0.2 -0.3 0.1-0.4 0.1c-0.1 0-0.3 0-0.4-0.1s-0.2-0.1-0.3-0.2 -0.2-0.2-0.2-0.3S157.3 10.5 157.3 10.4zM157.4 12.7h1.8v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49776	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:12 UTC	693	OUT	GET /scripts/select2/select2.png HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/scripts/select2/select2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-35d245f72f47807786fdc78ab047108d=1
2024-05-27 13:04:12 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:04:12 GMT Content-Type: image/png Content-Length: 613 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-265" Accept-Ranges: bytes
2024-05-27 13:04:12 UTC	613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 28 08 06 00 00 00 a2 bb 99 ff 00 00 02 2c 49 44 41 54 78 da ed d9 cf 4b 14 61 1c c7 f1 b5 08 4a 8c 85 d6 2e 62 5d 2a 28 c9 88 0e 11 76 a9 64 d6 0d a2 3c 14 fd a0 1f 50 04 fd 03 86 21 52 07 71 b7 54 e8 d0 a1 48 04 23 08 bc 47 14 11 79 ed 52 d8 af a5 8b 94 85 81 48 74 30 4c 98 3e bd 85 ef e1 39 b8 2c 6d 29 db d7 79 e0 75 98 d9 85 7d de 3b cf cc 0e b3 29 49 cb 4a 12 bc 2c 83 ff c7 51 28 14 ee e3 58 b0 1d e1 1e 56 b8 0b 26 ea 12 84 4f 68 c2 46 14 21 0c 7b 0c 6e c6 7b 08 93 98 80 2c fa a0 d7 25 5d 8f d7 90 19 47 63 8a e1 35 78 0b 3e 40 e6 33 b6 bb 0c 26 ac 05 93 c1 32 1e 0b 96 f7 99 25 0f e6 43 d3 c8 2c 62 f0 45 08 13 d8 80 75 c1 39 3d 54 36 98 37 9d c4 29 9c 08 9c 45 ba c2 09 0d e3 f1 22 1f Data Ascii: PNGIHDR<(,IDATxKaJ.b]*(vd<P!RqTH#GyRHt0L>9,m)yu};)IJ,Q(XV&OhF!{n{,%]Gc5x>@3&2%C,bEu9=T67)E"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49779	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:13 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WGDM49GBshaLudy&MD=yYT8EUnK HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-27 13:04:13 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_1440" MS-CorrelationId: baddce1a-f6f7-4e84-aa0b-bb09cb5f0177 MS-RequestId: 52d0123d-493e-4dc5-91d9-b96a9dc5dd31 MS-CV: //3dKG+7J0yY9jt3.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:04:13 GMT Connection: close Content-Length: 25457
2024-05-27 13:04:13 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-05-27 13:04:13 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49778	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:13 UTC	411	OUT	GET /images/trust.svg HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-35d245f72f47807786fdc78ab047108d=1
2024-05-27 13:04:13 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:04:13 GMT Content-Type: image/svg+xml Content-Length: 20199 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-4ee7" Accept-Ranges: bytes
2024-05-27 13:04:13 UTC	16144	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 38 20 33 38 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 30 62 65 63 35 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 34 34 2e 37 20 31 32 2e 32 76 32 2e 31 63 30 20 30 2e 33 2d 30 2e 31 20 30 2e 36 2d 30 2e 32 20 30 2e 38 73 2d 30 2e 34 20 30 2e 33 2d 30 2e 36 20 30 2e 33 63 2d 30 2e 32 20 30 2d 30 2e 34 2d 30 2e 31 2d 30 2e 36 2d 30 2e 33 73 2d 30 2e 32 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 76 2d 32 2e 35 63 30 2d 30 2e 34 20 30 2d 30 2e 37 20 30 2d 30 2e 39 73 2d 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">.st0{fill:#b0bec5;}</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0
2024-05-27 13:04:13 UTC	4055	IN	Data Raw: 2d 30 2e 32 20 30 2e 33 2d 30 2e 32 20 30 2e 32 2d 30 2e 31 20 30 2e 34 2d 30 2e 31 63 30 2e 31 20 30 20 30 2e 33 20 30 20 30 2e 34 20 30 2e 31 73 30 2e 32 20 30 2e 31 20 30 2e 33 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 33 20 30 2e 31 20 30 2e 32 20 30 2e 31 20 30 2e 34 20 30 20 30 2e 33 2d 30 2e 31 20 30 2e 34 20 2d 30 2e 31 20 30 2e 32 2d 30 2e 32 20 30 2e 33 20 2d 30 2e 32 20 30 2e 32 2d 30 2e 33 20 30 2e 32 20 2d 30 2e 33 20 30 2e 31 2d 30 2e 34 20 30 2e 31 63 2d 30 2e 31 20 30 2d 30 2e 33 20 30 2d 30 2e 34 2d 30 2e 31 73 2d 30 2e 32 2d 30 2e 31 2d 30 2e 33 2d 30 2e 32 20 2d 30 2e 32 2d 30 2e 32 2d 30 2e 32 2d 30 2e 33 53 31 35 37 2e 33 20 31 30 2e 35 20 31 35 37 2e 33 20 31 30 2e 34 7a 4d 31 35 37 2e 34 20 31 32 2e 37 68 31 2e 38 76 Data Ascii: -0.2 0.3-0.2 0.2-0.1 0.4-0.1c0.1 0 0.3 0 0.4 0.1s0.2 0.1 0.3 0.2 0.2 0.2 0.2 0.3 0.1 0.2 0.1 0.4 0 0.3-0.1 0.4 -0.1 0.2-0.2 0.3 -0.2 0.2-0.3 0.2 -0.3 0.1-0.4 0.1c-0.1 0-0.3 0-0.4-0.1s-0.2-0.1-0.3-0.2 -0.2-0.2-0.2-0.3S157.3 10.5 157.3 10.4zM157.4 12.7h1.8v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49780	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:13 UTC	679	OUT	GET /favicon.ico HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/index.php?domain_name=mega.ng Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-35d245f72f47807786fdc78ab047108d=1
2024-05-27 13:04:13 UTC	150	IN	HTTP/1.1 404 Not Found Date: Mon, 27 May 2024 13:04:13 GMT Content-Type: text/html Content-Length: 555 Connection: close Server: nginx/1.20.1
2024-05-27 13:04:13 UTC	555	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49781	34.255.128.23	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:13 UTC	422	OUT	GET /scripts/select2/select2.png HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-35d245f72f47807786fdc78ab047108d=1
2024-05-27 13:04:13 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:04:13 GMT Content-Type: image/png Content-Length: 613 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-265" Accept-Ranges: bytes
2024-05-27 13:04:13 UTC	613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 28 08 06 00 00 00 a2 bb 99 ff 00 00 02 2c 49 44 41 54 78 da ed d9 cf 4b 14 61 1c c7 f1 b5 08 4a 8c 85 d6 2e 62 5d 2a 28 c9 88 0e 11 76 a9 64 d6 0d a2 3c 14 fd a0 1f 50 04 fd 03 86 21 52 07 71 b7 54 e8 d0 a1 48 04 23 08 bc 47 14 11 79 ed 52 d8 af a5 8b 94 85 81 48 74 30 4c 98 3e bd 85 ef e1 39 b8 2c 6d 29 db d7 79 e0 75 98 d9 85 7d de 3b cf cc 0e b3 29 49 cb 4a 12 bc 2c 83 ff c7 51 28 14 ee e3 58 b0 1d e1 1e 56 b8 0b 26 ea 12 84 4f 68 c2 46 14 21 0c 7b 0c 6e c6 7b 08 93 98 80 2c fa a0 d7 25 5d 8f d7 90 19 47 63 8a e1 35 78 0b 3e 40 e6 33 b6 bb 0c 26 ac 05 93 c1 32 1e 0b 96 f7 99 25 0f e6 43 d3 c8 2c 62 f0 45 08 13 d8 80 75 c1 39 3d 54 36 98 37 9d c4 29 9c 08 9c 45 ba c2 09 0d e3 f1 22 1f Data Ascii: PNGIHDR<(,IDATxKaJ.b]*(vd<P!RqTH#GyRHt0L>9,m)yu};)IJ,Q(XV&OhF!{n{,%]Gc5x>@3&2%C,bEu9=T67)E"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49785	142.250.186.78	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:22 UTC	704	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:22 UTC	1037	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Security-Policy: script-src 'nonce-UdWX6dj1qLe6vctL87MB_w' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none' Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 1560 Date: Mon, 27 May 2024 13:04:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Tue, 12 Mar 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 13:04:22 UTC	353	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 64 57 58 36 64 6a 31 71 4c 65 36 76 63 74 4c 38 37 4d 42 5f 77 22 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6e Data Ascii: <!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="UdWX6dj1qLe6vctL87MB_w">if (window.n
2024-05-27 13:04:22 UTC	1207	IN	Data Raw: 61 64 73 65 6e 73 65 2f 73 65 61 72 63 68 2f 61 64 73 2e 6a 73 22 3b 76 61 72 20 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 69 66 20 28 21 21 68 72 65 66 20 26 26 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 27 29 20 3e 20 30 29 29 20 7b 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 31 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 31 27 29 20 3e 20 30 29 20 7b 73 63 72 69 70 74 2e 73 72 63 20 2b 3d 20 27 3f 70 61 63 3d 31 27 3b 7d 20 65 6c 73 65 20 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 32 27 29 20 3e 20 30 20 7c 7c 20 Data Ascii: adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49786	142.250.186.78	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:22 UTC	2570	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2MS40Mzk5fDI5MmE5ZGYyYTZiNDQyY2UxMmE4YTEzMWQ2MjQxOWRkZDU5NGY4MWV8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Setting%20Up%20Llc%20Online&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpj0uUodzEMa2L0sQo5WiA-7ogqIr6BytO7SVDukhiWofpbym_IUEPH0C-MffgJp1FpEjF-Muc9hAloOlywGczF_Zd3XR1owoMuaD5Ck5YLF37WU16rCz5EZrJlG06NKxu2qLR6BcmTwTEogvyRfzl_xDSVfk&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=n3&ad=n3&nocache=7621 [TRUNCATED] Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:23 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 27 May 2024 13:04:22 GMT Expires: Mon, 27 May 2024 13:04:22 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Ghwheh7ob5Qp63-GHzRBsw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 13:04:23 UTC	583	IN	Data Raw: 36 62 33 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 6b30<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-05-27 13:04:23 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-05-27 13:04:23 UTC	1390	IN	Data Raw: 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c Data Ascii: {overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-fl
2024-05-27 13:04:23 UTC	1390	IN	Data Raw: 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b Data Ascii: tart; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;
2024-05-27 13:04:23 UTC	1390	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d Data Ascii: -bottom:10px;padding-top:50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-
2024-05-27 13:04:23 UTC	1390	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 32 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 33 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: in-bottom:2px;padding-bottom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:10px;line-height:33px;color:#dddddd;}.si21{font-weight:700;background-co
2024-05-27 13:04:23 UTC	1390	IN	Data Raw: 73 69 7a 65 3a 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 33 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 Data Ascii: size:10px;line-height:15px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:33px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font
2024-05-27 13:04:23 UTC	1390	IN	Data Raw: 67 68 74 3a 37 30 30 3b 7d 2e 70 72 6f 6d 6f 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e Data Ascii: ght:700;}.promotionExtensionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock">
2024-05-27 13:04:23 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f Data Ascii: -pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:ro
2024-05-27 13:04:23 UTC	1390	IN	Data Raw: 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 36 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 Data Ascii: l; -webkit-flex-direction:row; flex-direction:row;"><div class="i_ div si36 v_" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49788	142.250.186.78	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:23 UTC	754	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 12 Mar 2024 06:00:00 GMT
2024-05-27 13:04:23 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 13:04:23 GMT Expires: Mon, 27 May 2024 13:04:23 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 12 Mar 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49790	142.250.186.100	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:24 UTC	707	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.adsensecustomsearchads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:25 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Mon, 27 May 2024 13:04:25 GMT Expires: Mon, 27 May 2024 13:04:25 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 13:04:25 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49784	142.250.185.110	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:25 UTC	892	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=2cerzp402018&aqid=1oRUZpbYOdmwjuwPmbS4yAw&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1432&adbw=530&adbah=530%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=65%7C0%7C1374%7C13%7C607&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:25 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-n8r5bjOaRkK8Fg1HET1BAA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 27 May 2024 13:04:25 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49794	216.58.206.68	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:25 UTC	457	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:26 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Mon, 27 May 2024 13:04:25 GMT Expires: Mon, 27 May 2024 13:04:25 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 13:04:26 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49796	142.250.185.110	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:26 UTC	892	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=x934h4x269kd&aqid=1oRUZpbYOdmwjuwPmbS4yAw&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1432&adbw=530&adbah=530%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=65%7C0%7C1374%7C13%7C607&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:26 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-hcbFT8BaQVSmeDr9nqo01Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 27 May 2024 13:04:26 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49797	142.250.186.78	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:27 UTC	754	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 12 Mar 2024 06:00:00 GMT
2024-05-27 13:04:27 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 13:04:27 GMT Expires: Mon, 27 May 2024 13:04:27 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 12 Mar 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49798	142.250.186.78	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:27 UTC	2562	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA2Ni4zMTIxfDhhODI3YmRmMzhhZjA4NjhjZmM5MWEyMzA3NWE3OGFhMzg1MjZmYTh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Setting%20Up%20Payroll&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEnkBlLqpjxT-mT0fqBm-ct5YtsWD00S74_XqETmUNZyS_KSIK-f98xpESA7xJqLhqbT44HjOxohtoduWI3ZDxpQ_bLsuSSQD6NiDOF16eS1tmQZynlWqvLqerxIKXGOeTZUWEHEbVFGVENrvNXiXYuPwe0acqC9vatWB&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=n3&ad=n3&nocache=49617168 [TRUNCATED] Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:27 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 27 May 2024 13:04:27 GMT Expires: Mon, 27 May 2024 13:04:27 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Dm3kQwLgd9V3lBnckUXNzQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 13:04:27 UTC	583	IN	Data Raw: 34 33 37 64 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 437d<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-05-27 13:04:27 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-05-27 13:04:27 UTC	1390	IN	Data Raw: 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c Data Ascii: {overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-fl
2024-05-27 13:04:27 UTC	1390	IN	Data Raw: 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b Data Ascii: tart; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;
2024-05-27 13:04:27 UTC	1390	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d Data Ascii: -bottom:10px;padding-top:50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-
2024-05-27 13:04:27 UTC	1390	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 32 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 33 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: in-bottom:2px;padding-bottom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:10px;line-height:33px;color:#dddddd;}.si21{font-weight:700;background-co
2024-05-27 13:04:27 UTC	1390	IN	Data Raw: 73 69 7a 65 3a 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 33 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 Data Ascii: size:10px;line-height:15px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:33px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font
2024-05-27 13:04:27 UTC	1390	IN	Data Raw: 67 68 74 3a 37 30 30 3b 7d 2e 70 72 6f 6d 6f 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e Data Ascii: ght:700;}.promotionExtensionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock">
2024-05-27 13:04:27 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f Data Ascii: -pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:ro
2024-05-27 13:04:27 UTC	1390	IN	Data Raw: 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e Data Ascii: -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49799	142.250.186.78	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:28 UTC	754	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 12 Mar 2024 06:00:00 GMT
2024-05-27 13:04:28 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 13:04:28 GMT Expires: Mon, 27 May 2024 13:04:28 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 12 Mar 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49802	142.250.185.110	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:30 UTC	891	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=2n7rdei8p4j9&aqid=24RUZuPLJYnIjuwPst33kAg&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1416&adbw=530&adbah=530%2C434%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=16%7C0%7C1334%7C2%7C382&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:30 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-i7iwddJx-mfAMnW9cLJQ0g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 27 May 2024 13:04:30 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49804	142.250.186.78	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:31 UTC	2565	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket064&client=dp-teaminternet09_3ph&r=m&sct=ID%3D5110e244d5df23cb%3AT%3D1716815041%3ART%3D1716815041%3AS%3DALNI_MYMj8Aywe8KBRBd2KYbUp5rjbSKAA&sc_status=6&hl=en&rpbu=http%3A%2F%2Fmega.ng%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NjU0ODRiZTBiMDgxfHx8MTcxNjgxNTA3MC40NzMyfDA3MjEyOGIzNjQ1MTk3YTRhMTdmMDI0ZWI4MDlhNmI5NTdlN2Q3NDN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyMTZkYWNmOTRiZGE5ZjM2ZWQ4OWI2Mjk4YzczMGU3ZmQ2NTNkOTNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MHw3ODQwMzk2MDM3fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Stream%20Paramount%20Plus&afdt=ChMIp-TAtfKthgMVxoH9Bx27owlBEngBlLqpjwFaklmZKDUhMbYou_EvfyvEKo4hCSLG5MbbojKUnGAq9mTIaaUXpsMqPD1V-PN2Dkk9JJRiv2zxYYqo0ojn5Tb99x_ujBHxzAO-7PNREPUCWRCpEp4Qyg5wQQz0gB_emL3GTQEQKOF1v0yPoZjmKCE1meo&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=n3&ad=n3&nocache=631716 [TRUNCATED] Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:32 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 27 May 2024 13:04:31 GMT Expires: Mon, 27 May 2024 13:04:31 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-EIMJPwL4ca3iaOKiPCrGsw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 13:04:32 UTC	583	IN	Data Raw: 33 65 36 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 3e6c<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-05-27 13:04:32 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-05-27 13:04:32 UTC	1390	IN	Data Raw: 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c Data Ascii: {overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-fl
2024-05-27 13:04:32 UTC	1390	IN	Data Raw: 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b Data Ascii: tart; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;
2024-05-27 13:04:32 UTC	1390	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d Data Ascii: -bottom:10px;padding-top:50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-
2024-05-27 13:04:32 UTC	1390	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 32 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 33 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: in-bottom:2px;padding-bottom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:10px;line-height:33px;color:#dddddd;}.si21{font-weight:700;background-co
2024-05-27 13:04:32 UTC	1390	IN	Data Raw: 73 69 7a 65 3a 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 33 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 Data Ascii: size:10px;line-height:15px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:33px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font
2024-05-27 13:04:32 UTC	1390	IN	Data Raw: 67 68 74 3a 37 30 30 3b 7d 2e 70 72 6f 6d 6f 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e Data Ascii: ght:700;}.promotionExtensionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock">
2024-05-27 13:04:32 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f Data Ascii: -pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:ro
2024-05-27 13:04:32 UTC	1390	IN	Data Raw: 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 34 22 20 73 74 79 6c 65 3d 22 2d Data Ascii: tion:column;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si34" style="-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49805	142.250.186.78	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:31 UTC	754	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 12 Mar 2024 06:00:00 GMT
2024-05-27 13:04:31 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 13:04:31 GMT Expires: Mon, 27 May 2024 13:04:31 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 12 Mar 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49806	142.250.185.110	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:31 UTC	891	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=j74h3lcfom76&aqid=24RUZuPLJYnIjuwPst33kAg&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1416&adbw=530&adbah=530%2C434%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=16%7C0%7C1334%7C2%7C382&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:31 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-3kDWhL0zRKxqRRyDMTrIvQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 27 May 2024 13:04:31 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49807	142.250.186.78	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:32 UTC	754	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 12 Mar 2024 06:00:00 GMT
2024-05-27 13:04:33 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 13:04:32 GMT Expires: Mon, 27 May 2024 13:04:32 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 12 Mar 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49809	142.250.185.110	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:35 UTC	891	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=5oyjbyxkxmfn&aqid=34RUZuj-OOygiM0P6tGHwAg&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1384&adbw=530&adbah=482%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=24%7C0%7C1355%7C3%7C421&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:35 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-myTU_DviqifQy0igBgTxYg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 27 May 2024 13:04:35 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49810	142.250.185.110	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:04:36 UTC	891	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ylkjvt9dnoqt&aqid=34RUZuj-OOygiM0P6tGHwAg&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1384&adbw=530&adbah=482%2C450%2C450&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=635538657&csala=24%7C0%7C1355%7C3%7C421&lle=0&ifv=1&hpt=1&wbd=false HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mega.ng/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:04:36 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-sdyIXqIjqYKM0f6WLL90Ow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 27 May 2024 13:04:36 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2124, Parent PID: 3244

General

Target ID:	0
Start time:	09:03:16
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1900, Parent PID: 2124

General

Target ID:	2
Start time:	09:03:23
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1572,i,5734391981659422172,3887567143893048300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6380, Parent PID: 3244

General

Target ID:	3
Start time:	09:03:26
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mega.ng"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://mega.ng

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Windows Analysis Report
http://mega.ng